This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.mft File: mHq6b3RFXE-jq-I6qCMGfs_DPEg.mft (raw, json) Hash identifier: q3X38mxMCDuTtGZthIndz5qBOVNx3Llmv3Vy3YhH2P0= Subject key identifier: 17:37:1B:81:B1:10:82:EE:3D:B6:CD:CA:59:A8:F5:FC:DE:A4:03:3E Authority key identifier: 98:7A:BA:6F:74:45:5C:4F:A3:AB:E2:3A:A8:23:06:7E:CF:C3:3C:48 Certificate issuer: /CN=987aba6f74455c4fa3abe23aa823067ecfc33c48 Certificate serial: 019C41D8B97415A2A456E5081133ADE70105 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHq6b3RFXE-jq-I6qCMGfs_DPEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.mft Manifest number: 03C0 Signing time: Mon 09 Feb 2026 10:00:48 +0000 Manifest this update: Mon 09 Feb 2026 10:00:48 +0000 Manifest next update: Tue 10 Feb 2026 10:00:48 +0000 Files and hashes: 1: mHq6b3RFXE-jq-I6qCMGfs_DPEg.crl (hash: MI2IPrCZexr4TPULBuNTHIFMKMHbSlHwI+RT+SfbzcQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.crl rsync://rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.mft rsync://rpki.ripe.net/repository/DEFAULT/mHq6b3RFXE-jq-I6qCMGfs_DPEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:b9:74:15:a2:a4:56:e5:08:11:33:ad:e7:01:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=987aba6f74455c4fa3abe23aa823067ecfc33c48 Validity Not Before: Feb 9 10:00:48 2026 GMT Not After : Feb 10 10:00:48 2026 GMT Subject: CN=17371b81b11082ee3db6cdca59a8f5fcdea4033e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b7:d4:0a:44:53:71:6b:d3:8b:fd:2d:1e:b0: f9:e5:32:3d:f6:ed:4c:1f:e0:df:cd:92:88:e7:9f: 3f:68:bc:2e:b1:69:1b:1d:c6:6b:62:09:12:50:01: 65:7a:0f:da:ae:34:3d:bd:95:55:c6:c5:ff:2a:3f: 51:c7:8f:46:cd:ac:38:c4:c3:19:b7:8b:06:b7:60: 87:35:7e:7a:d6:d5:4a:9f:a2:b8:3f:3c:f8:9a:c1: 8d:ce:57:21:f3:1a:0b:3c:90:4c:66:40:ff:b8:eb: 46:1d:92:79:f6:f9:c7:7a:c4:15:1d:e8:51:27:fd: 4e:97:09:c9:96:1e:bf:bc:92:34:4b:a1:b6:17:88: 11:39:a1:39:54:a7:55:2f:24:6f:d7:26:86:9c:da: 91:66:a1:f6:69:4e:5d:cc:1c:65:5a:cd:d9:bb:5c: 39:75:c2:21:b2:fa:e0:9e:d7:7e:e9:57:d4:75:fd: 37:aa:0b:85:18:f5:22:64:63:63:b9:20:45:f9:20: d4:ca:dc:ff:74:16:8e:18:c3:89:ab:44:92:f5:c4: 9c:8e:f4:bb:e4:9f:86:a5:07:f0:1d:43:f7:da:79: 30:96:d1:9b:5f:66:a5:5f:df:d9:77:24:53:ec:86: 73:d8:41:3b:fc:1e:0d:2b:3d:7e:ec:3a:d4:74:8c: 20:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:37:1B:81:B1:10:82:EE:3D:B6:CD:CA:59:A8:F5:FC:DE:A4:03:3E X509v3 Authority Key Identifier: keyid:98:7A:BA:6F:74:45:5C:4F:A3:AB:E2:3A:A8:23:06:7E:CF:C3:3C:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHq6b3RFXE-jq-I6qCMGfs_DPEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:4f:fb:cc:e4:65:05:04:7e:b8:8d:33:cd:31:14:b6:91:d9: 95:cf:12:14:87:25:f2:55:ac:b1:48:08:79:c4:15:50:00:f4: 7d:7b:a4:f9:ba:10:42:cc:67:b0:c7:d3:4f:92:59:13:8a:b7: 99:a9:c6:6c:10:5b:3f:3d:a8:74:ef:2c:8a:9f:fd:51:65:0e: 9b:ba:50:d7:70:63:0c:f4:98:7a:13:db:09:66:d3:6b:ad:bd: c5:8b:00:37:fe:b0:82:2b:3c:be:aa:3a:2a:56:31:07:13:cd: 52:3b:cf:8d:9e:ce:3b:04:11:c0:33:86:e7:cb:f7:99:38:49: 48:4c:93:44:ff:9a:34:ea:23:e8:e0:cc:27:61:40:d4:bb:ce: eb:e0:8a:7f:06:9c:3c:9f:ae:a8:60:84:a9:6e:17:b1:22:2d: 72:64:c6:04:fd:95:a2:f2:bb:c0:65:3f:3a:f9:a5:17:cb:10: 7f:8b:62:16:ce:c2:2d:be:d6:5c:54:0b:a1:e4:41:d0:3e:09: 98:e9:1f:0b:26:05:21:09:cc:40:4c:6a:f5:64:93:f9:ed:ed: 1b:bf:8f:8c:cd:9d:bd:63:23:c3:f7:0e:ff:d5:11:ba:d7:a3: 09:20:00:4b:b1:d2:a6:dd:73:87:7c:ef:c0:42:14:b7:8f:c2: f5:84:2e:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2Ll0FaKkVuUIETOt5wEFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4N2FiYTZmNzQ0NTVjNGZhM2FiZTIzYWE4MjMwNjdlY2Zj MzNjNDgwHhcNMjYwMjA5MTAwMDQ4WhcNMjYwMjEwMTAwMDQ4WjAzMTEwLwYDVQQD EygxNzM3MWI4MWIxMTA4MmVlM2RiNmNkY2E1OWE4ZjVmY2RlYTQwMzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbfUCkRTcWvTi/0tHrD55TI99u1M H+DfzZKI558/aLwusWkbHcZrYgkSUAFleg/arjQ9vZVVxsX/Kj9Rx49Gzaw4xMMZ t4sGt2CHNX561tVKn6K4Pzz4msGNzlch8xoLPJBMZkD/uOtGHZJ59vnHesQVHehR J/1OlwnJlh6/vJI0S6G2F4gROaE5VKdVLyRv1yaGnNqRZqH2aU5dzBxlWs3Zu1w5 dcIhsvrgntd+6VfUdf03qguFGPUiZGNjuSBF+SDUytz/dBaOGMOJq0SS9cScjvS7 5J+GpQfwHUP32nkwltGbX2alX9/ZdyRT7IZz2EE7/B4NKz1+7DrUdIwg8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBc3G4GxEILuPbbNylmo9fzepAM+MB8GA1UdIwQY MBaAFJh6um90RVxPo6viOqgjBn7PwzxIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUhxNmIzUkZYRS1qcS1JNnFDTUdmc19EUEVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9lYTU5ZWMtM2U1OC00NDM3LWFkZjIt NmYwMjJhMGU1YWQ5LzEvbUhxNmIzUkZYRS1qcS1JNnFDTUdmc19EUEVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9lYTU5ZWMtM2U1OC00NDM3LWFkZjItNmYwMjJhMGU1YWQ5 LzEvbUhxNmIzUkZYRS1qcS1JNnFDTUdmc19EUEVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfE/7zORl BQR+uI0zzTEUtpHZlc8SFIcl8lWssUgIecQVUAD0fXuk+boQQsxnsMfTT5JZE4q3 manGbBBbPz2odO8sip/9UWUOm7pQ13BjDPSYehPbCWbTa629xYsAN/6wgis8vqo6 KlYxBxPNUjvPjZ7OOwQRwDOG58v3mThJSEyTRP+aNOoj6ODMJ2FA1LvO6+CKfwac PJ+uqGCEqW4XsSItcmTGBP2VovK7wGU/OvmlF8sQf4tiFs7CLb7WXFQLoeRB0D4J mOkfCyYFIQnMQExq9WST+e3tG7+PjM2dvWMjw/cO/9URutejCSAAS7HSpt1zh3zv wEIUt4/C9YQugg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:10 2026 by rpki-client