This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b199bd-03fe-4734-b799-9879d68728c9/1/MvacygDXMkCpbJMio-lzeQ8vYcQ.mft File: MvacygDXMkCpbJMio-lzeQ8vYcQ.mft (raw, json) Hash identifier: lWSZnL6rGyFolDIVZVs718uDSvTJGzvIuC0NB/Tx4Uw= Subject key identifier: F5:95:4E:D8:EC:E6:43:17:17:B7:EB:81:51:BE:08:7E:4E:64:91:0E Authority key identifier: 32:F6:9C:CA:00:D7:32:40:A9:6C:93:22:A3:E9:73:79:0F:2F:61:C4 Certificate issuer: /CN=32f69cca00d73240a96c9322a3e973790f2f61c4 Certificate serial: 019C42EB072D6C55F835813463B6219F41B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvacygDXMkCpbJMio-lzeQ8vYcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b199bd-03fe-4734-b799-9879d68728c9/1/MvacygDXMkCpbJMio-lzeQ8vYcQ.mft Manifest number: 02C4 Signing time: Mon 09 Feb 2026 15:00:24 +0000 Manifest this update: Mon 09 Feb 2026 15:00:24 +0000 Manifest next update: Tue 10 Feb 2026 15:00:24 +0000 Files and hashes: 1: MvacygDXMkCpbJMio-lzeQ8vYcQ.crl (hash: nacqzTrGNwEi2R6kNB0YQrgRpsYhdByeIC/iE74EqGA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b199bd-03fe-4734-b799-9879d68728c9/1/MvacygDXMkCpbJMio-lzeQ8vYcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/08/b199bd-03fe-4734-b799-9879d68728c9/1/MvacygDXMkCpbJMio-lzeQ8vYcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/MvacygDXMkCpbJMio-lzeQ8vYcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:07:2d:6c:55:f8:35:81:34:63:b6:21:9f:41:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f69cca00d73240a96c9322a3e973790f2f61c4 Validity Not Before: Feb 9 15:00:24 2026 GMT Not After : Feb 10 15:00:24 2026 GMT Subject: CN=f5954ed8ece6431717b7eb8151be087e4e64910e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f6:c9:44:8b:d8:d4:71:21:c7:bc:d7:36:2c: ac:ec:89:01:bf:1a:e4:59:45:6d:de:43:fe:e4:cb: d8:65:88:e7:51:4a:8f:f8:d0:b8:a3:80:94:61:17: 25:b8:a6:22:d1:0e:91:f1:d8:b7:d8:9e:5b:45:f3: 80:63:59:1a:bb:4f:f6:c3:0d:7f:94:ba:52:61:d0: 20:70:23:e8:9c:81:b3:5e:fe:74:ed:c8:75:11:ee: 22:91:b9:d3:a3:28:89:0a:42:66:19:0e:8f:6f:cd: 53:2f:a6:3e:c6:80:87:b4:61:9c:3c:d2:2d:95:2f: 41:a5:e2:16:af:e7:3d:09:ff:df:12:97:f2:8a:a9: 22:0b:06:e6:b5:9b:bd:14:dc:b3:d7:40:a8:4c:ae: 47:d2:48:55:54:45:f0:3a:d5:c9:39:e1:f0:3b:e1: 09:d8:19:4a:83:9f:6e:37:e2:7f:7a:c4:6f:0a:75: 0d:cb:e6:71:39:84:52:39:f9:fc:16:3b:7a:8a:f9: f0:d4:67:e3:32:6e:c8:68:d3:1f:26:1c:2c:65:74: 39:03:36:28:ab:1d:16:b6:4b:1c:46:78:e6:67:bf: a9:c3:3c:5b:30:08:b7:a7:b5:a1:53:ea:a7:a4:6e: f5:9b:56:65:f8:2e:f6:77:fa:40:95:e6:49:e1:92: 58:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:95:4E:D8:EC:E6:43:17:17:B7:EB:81:51:BE:08:7E:4E:64:91:0E X509v3 Authority Key Identifier: keyid:32:F6:9C:CA:00:D7:32:40:A9:6C:93:22:A3:E9:73:79:0F:2F:61:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvacygDXMkCpbJMio-lzeQ8vYcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b199bd-03fe-4734-b799-9879d68728c9/1/MvacygDXMkCpbJMio-lzeQ8vYcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b199bd-03fe-4734-b799-9879d68728c9/1/MvacygDXMkCpbJMio-lzeQ8vYcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:3d:7c:e0:2b:8a:04:58:7f:aa:0f:2d:bf:62:0d:9c:b5:b3: e2:96:f0:0b:48:74:96:93:d2:ec:a0:ad:bd:c1:d0:55:9b:60: 3a:47:12:ef:71:f5:58:c1:ce:50:9a:75:5d:10:03:86:95:6a: 39:97:09:60:66:1a:53:89:a4:34:c9:43:97:ca:26:52:6e:84: 8c:8f:b6:47:c8:b0:e5:e4:bd:f8:a1:c3:4e:7b:0f:40:ac:e2: f1:8d:0a:21:00:3e:bb:45:76:ed:28:49:7a:48:82:96:8b:1c: 61:55:80:04:f4:00:35:13:f2:0a:0a:f6:b6:1a:30:1f:fe:8a: e6:64:0c:e8:d9:70:1f:ca:68:9f:3b:70:3d:d1:60:b6:75:df: 87:04:62:65:26:ab:59:e0:6b:85:8d:fc:30:df:c6:fc:9d:7b: c1:6f:20:4b:7e:d5:cd:58:63:81:7c:f4:36:6e:13:3e:e3:c9: 9e:06:a8:8b:be:54:ff:bb:30:8a:26:df:5a:54:09:cd:07:37: 4e:52:fa:91:87:9d:c0:7c:17:20:75:da:fe:09:6d:c2:a3:50: 7e:27:ed:47:0f:b1:c7:8e:0b:42:84:f3:8b:5e:85:a3:e1:29: 9b:64:94:ad:44:1e:d4:bb:a0:7d:91:4d:2f:69:a0:0e:a5:e5: b6:8c:35:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6wctbFX4NYE0Y7Yhn0GyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyZjY5Y2NhMDBkNzMyNDBhOTZjOTMyMmEzZTk3Mzc5MGYy ZjYxYzQwHhcNMjYwMjA5MTUwMDI0WhcNMjYwMjEwMTUwMDI0WjAzMTEwLwYDVQQD EyhmNTk1NGVkOGVjZTY0MzE3MTdiN2ViODE1MWJlMDg3ZTRlNjQ5MTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPbJRIvY1HEhx7zXNiys7IkBvxrk WUVt3kP+5MvYZYjnUUqP+NC4o4CUYRcluKYi0Q6R8di32J5bRfOAY1kau0/2ww1/ lLpSYdAgcCPonIGzXv507ch1Ee4ikbnToyiJCkJmGQ6Pb81TL6Y+xoCHtGGcPNIt lS9BpeIWr+c9Cf/fEpfyiqkiCwbmtZu9FNyz10CoTK5H0khVVEXwOtXJOeHwO+EJ 2BlKg59uN+J/esRvCnUNy+ZxOYRSOfn8Fjt6ivnw1GfjMm7IaNMfJhwsZXQ5AzYo qx0WtkscRnjmZ7+pwzxbMAi3p7WhU+qnpG71m1Zl+C72d/pAleZJ4ZJYzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPWVTtjs5kMXF7frgVG+CH5OZJEOMB8GA1UdIwQY MBaAFDL2nMoA1zJAqWyTIqPpc3kPL2HEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXZhY3lnRFhNa0NwYkpNaW8tbHplUTh2WWNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9iMTk5YmQtMDNmZS00NzM0LWI3OTkt OTg3OWQ2ODcyOGM5LzEvTXZhY3lnRFhNa0NwYkpNaW8tbHplUTh2WWNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9iMTk5YmQtMDNmZS00NzM0LWI3OTktOTg3OWQ2ODcyOGM5 LzEvTXZhY3lnRFhNa0NwYkpNaW8tbHplUTh2WWNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgD184CuK BFh/qg8tv2INnLWz4pbwC0h0lpPS7KCtvcHQVZtgOkcS73H1WMHOUJp1XRADhpVq OZcJYGYaU4mkNMlDl8omUm6EjI+2R8iw5eS9+KHDTnsPQKzi8Y0KIQA+u0V27ShJ ekiCloscYVWABPQANRPyCgr2thowH/6K5mQM6NlwH8ponztwPdFgtnXfhwRiZSar WeBrhY38MN/G/J17wW8gS37VzVhjgXz0Nm4TPuPJngaoi75U/7swiibfWlQJzQc3 TlL6kYedwHwXIHXa/gltwqNQfiftRw+xx44LQoTzi16Fo+Epm2SUrUQe1LugfZFN L2mgDqXltow1Ug== -----END CERTIFICATE-----Generated at Mon Feb 9 21:09:04 2026 by rpki-client