This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/d5e350-c9a0-4634-8c9b-b8d9e9b4074e/1/RMrauRpreaMhYYgHxnibKxyYI3g.mft File: RMrauRpreaMhYYgHxnibKxyYI3g.mft (raw, json) Hash identifier: nbHm86f/fOsGpIEn6u/TJVjJWHhN+/ruWYjHMWYNVdQ= Subject key identifier: 0E:10:D0:4E:A2:14:28:AB:3B:87:EF:D7:01:10:51:1A:45:7B:13:4F Authority key identifier: 44:CA:DA:B9:1A:6B:79:A3:21:61:88:07:C6:78:9B:2B:1C:98:23:78 Certificate issuer: /CN=44cadab91a6b79a321618807c6789b2b1c982378 Certificate serial: 019C41D890FC4383ED456A3A03FDBED88BCD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMrauRpreaMhYYgHxnibKxyYI3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/d5e350-c9a0-4634-8c9b-b8d9e9b4074e/1/RMrauRpreaMhYYgHxnibKxyYI3g.mft Manifest number: 12BF Signing time: Mon 09 Feb 2026 10:00:37 +0000 Manifest this update: Mon 09 Feb 2026 10:00:37 +0000 Manifest next update: Tue 10 Feb 2026 10:00:37 +0000 Files and hashes: 1: RMrauRpreaMhYYgHxnibKxyYI3g.crl (hash: jWcFIEZ3szr+AgBKoGfe77kIQwXvsJaeN+14HkcaCLo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/d5e350-c9a0-4634-8c9b-b8d9e9b4074e/1/RMrauRpreaMhYYgHxnibKxyYI3g.crl rsync://rpki.ripe.net/repository/DEFAULT/09/d5e350-c9a0-4634-8c9b-b8d9e9b4074e/1/RMrauRpreaMhYYgHxnibKxyYI3g.mft rsync://rpki.ripe.net/repository/DEFAULT/RMrauRpreaMhYYgHxnibKxyYI3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:90:fc:43:83:ed:45:6a:3a:03:fd:be:d8:8b:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44cadab91a6b79a321618807c6789b2b1c982378 Validity Not Before: Feb 9 10:00:37 2026 GMT Not After : Feb 10 10:00:37 2026 GMT Subject: CN=0e10d04ea21428ab3b87efd70110511a457b134f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f6:b9:bb:a1:7f:d3:31:38:73:c7:7e:2d:73: 56:a1:cb:ed:b4:3f:9f:9f:71:b9:5e:95:b5:3c:1c: 37:2b:7d:04:d2:73:a5:0e:6a:aa:d7:78:2e:c4:b1: 92:88:65:9d:9e:18:8f:3b:91:14:8e:ea:f2:6d:38: 44:c2:54:42:fd:82:b3:27:46:cb:93:58:c0:31:95: fe:f1:6b:8c:6f:cc:51:c9:7b:f3:5f:ea:a8:85:c5: 6c:26:ec:80:53:02:43:13:e0:ff:b4:6b:f6:18:7e: b6:56:9c:88:3b:c3:61:21:bd:55:05:20:c0:b6:4a: 74:0f:0d:68:24:ef:d1:4e:db:7d:b1:bb:0b:5a:41: ba:87:65:56:d5:82:9a:86:fc:c1:76:06:7c:9a:2b: a1:a4:f3:8a:fa:44:9f:d6:da:fd:74:c3:f5:1b:42: b4:d2:05:eb:28:03:d7:79:a1:5b:89:08:25:3e:3b: 9b:1c:68:f8:7e:1c:9b:30:60:0c:2a:00:14:c2:c9: bd:c7:61:b3:83:d9:89:56:a6:80:27:39:c8:ff:17: 56:99:06:9b:69:84:a3:b2:ca:0f:d0:a9:30:19:fa: 31:18:a1:aa:e0:97:91:de:57:e7:c1:ec:c7:a9:a5: c8:bd:a7:9c:40:76:f2:a5:25:9b:b9:77:6c:04:42: f4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:10:D0:4E:A2:14:28:AB:3B:87:EF:D7:01:10:51:1A:45:7B:13:4F X509v3 Authority Key Identifier: keyid:44:CA:DA:B9:1A:6B:79:A3:21:61:88:07:C6:78:9B:2B:1C:98:23:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMrauRpreaMhYYgHxnibKxyYI3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/d5e350-c9a0-4634-8c9b-b8d9e9b4074e/1/RMrauRpreaMhYYgHxnibKxyYI3g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/d5e350-c9a0-4634-8c9b-b8d9e9b4074e/1/RMrauRpreaMhYYgHxnibKxyYI3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:2c:45:56:da:ee:12:1a:b6:5e:8d:04:b0:e2:b8:52:aa:b8: 99:3f:2b:ac:53:81:85:4c:65:99:00:b6:f3:b1:73:4b:59:b2: 83:86:2f:37:09:52:fa:0d:4a:d7:6a:ac:3e:b4:33:18:31:20: 41:fd:b4:f2:a9:2b:1d:63:a1:c3:0c:db:53:c7:60:09:da:5b: 57:43:26:91:42:cb:a9:39:ce:48:8d:4a:e3:52:9c:de:2c:db: 12:4c:91:e3:bd:cc:85:e0:5b:2c:a5:4a:b1:28:c5:07:84:40: 68:24:e7:b7:60:bf:63:ba:3c:bb:6d:c3:5a:8a:db:01:ef:1a: c0:eb:a0:8d:6f:07:d4:2b:53:d6:2c:c3:71:47:e3:67:bd:d8: 94:2e:4d:ed:ab:96:15:1c:27:5f:95:f1:94:23:d7:98:66:de: d1:44:db:46:40:2f:4f:cc:33:6a:52:85:a4:0e:65:29:e3:da: c2:0c:c7:d0:08:5d:62:9f:4b:31:10:f6:23:c3:9d:12:d8:e5: c2:de:8a:9a:9b:bc:31:a7:0b:15:5d:72:77:57:86:ac:05:62: b4:c9:9c:8b:ee:05:b5:18:d1:34:e0:c1:f9:ba:4a:4c:59:9c: 64:5e:05:81:b3:12:77:cf:c1:b6:18:d8:f2:0d:cb:c6:75:85: f2:50:8d:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2JD8Q4PtRWo6A/2+2IvNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0Y2FkYWI5MWE2Yjc5YTMyMTYxODgwN2M2Nzg5YjJiMWM5 ODIzNzgwHhcNMjYwMjA5MTAwMDM3WhcNMjYwMjEwMTAwMDM3WjAzMTEwLwYDVQQD EygwZTEwZDA0ZWEyMTQyOGFiM2I4N2VmZDcwMTEwNTExYTQ1N2IxMzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArva5u6F/0zE4c8d+LXNWocvttD+f n3G5XpW1PBw3K30E0nOlDmqq13guxLGSiGWdnhiPO5EUjurybThEwlRC/YKzJ0bL k1jAMZX+8WuMb8xRyXvzX+qohcVsJuyAUwJDE+D/tGv2GH62VpyIO8NhIb1VBSDA tkp0Dw1oJO/RTtt9sbsLWkG6h2VW1YKahvzBdgZ8miuhpPOK+kSf1tr9dMP1G0K0 0gXrKAPXeaFbiQglPjubHGj4fhybMGAMKgAUwsm9x2Gzg9mJVqaAJznI/xdWmQab aYSjssoP0KkwGfoxGKGq4JeR3lfnwezHqaXIvaecQHbypSWbuXdsBEL0pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA4Q0E6iFCirO4fv1wEQURpFexNPMB8GA1UdIwQY MBaAFETK2rkaa3mjIWGIB8Z4myscmCN4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUk1yYXVScHJlYU1oWVlnSHhuaWJLeHlZSTNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kNWUzNTAtYzlhMC00NjM0LThjOWIt YjhkOWU5YjQwNzRlLzEvUk1yYXVScHJlYU1oWVlnSHhuaWJLeHlZSTNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9kNWUzNTAtYzlhMC00NjM0LThjOWItYjhkOWU5YjQwNzRl LzEvUk1yYXVScHJlYU1oWVlnSHhuaWJLeHlZSTNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqyxFVtru Ehq2Xo0EsOK4Uqq4mT8rrFOBhUxlmQC287FzS1myg4YvNwlS+g1K12qsPrQzGDEg Qf208qkrHWOhwwzbU8dgCdpbV0MmkULLqTnOSI1K41Kc3izbEkyR473MheBbLKVK sSjFB4RAaCTnt2C/Y7o8u23DWorbAe8awOugjW8H1CtT1izDcUfjZ73YlC5N7auW FRwnX5XxlCPXmGbe0UTbRkAvT8wzalKFpA5lKePawgzH0AhdYp9LMRD2I8OdEtjl wt6Kmpu8MacLFV1yd1eGrAVitMmci+4FtRjRNODB+bpKTFmcZF4FgbMSd8/BthjY 8g3LxnWF8lCNwg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:35 2026 by rpki-client