This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft File: MH-1ujHWxAxPLiMjPmB17q8tUwc.mft (raw, json) Hash identifier: XuO8pxTgBIK8ewxzs94EKkP7ChR2TSYTFqca0gpUZbo= Subject key identifier: E9:94:A1:20:19:5E:57:6A:DF:17:94:D5:ED:68:56:9D:29:C8:4B:D2 Authority key identifier: 30:7F:B5:BA:31:D6:C4:0C:4F:2E:23:23:3E:60:75:EE:AF:2D:53:07 Certificate issuer: /CN=307fb5ba31d6c40c4f2e23233e6075eeaf2d5307 Certificate serial: 019C4322690E188809A186FF5231006D2540 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH-1ujHWxAxPLiMjPmB17q8tUwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 16:00:54 +0000 Manifest this update: Mon 09 Feb 2026 16:00:54 +0000 Manifest next update: Tue 10 Feb 2026 16:00:54 +0000 Files and hashes: 1: MH-1ujHWxAxPLiMjPmB17q8tUwc.crl (hash: cWfIKMro7AIkljCA/dNwOrXha5/y3PojqQ9Z23LHPgE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft rsync://rpki.ripe.net/repository/DEFAULT/MH-1ujHWxAxPLiMjPmB17q8tUwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:69:0e:18:88:09:a1:86:ff:52:31:00:6d:25:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307fb5ba31d6c40c4f2e23233e6075eeaf2d5307 Validity Not Before: Feb 9 16:00:54 2026 GMT Not After : Feb 10 16:00:54 2026 GMT Subject: CN=e994a120195e576adf1794d5ed68569d29c84bd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:62:55:bc:2e:21:86:0b:69:6f:ca:89:3b:81: 72:82:aa:cd:21:85:47:11:d8:e7:47:2a:38:02:92: 44:56:b2:86:35:c1:a3:d4:bf:1d:07:04:f1:6c:ad: e2:a6:e6:c3:b8:27:aa:55:43:1e:d9:7b:bc:42:ac: 14:fa:29:71:93:31:e0:ce:e5:38:16:72:13:5e:e7: ba:72:e2:90:0d:b0:b5:38:d2:b0:5b:a0:cb:f0:10: 48:c2:88:b1:aa:0e:25:66:8e:98:f0:7a:a7:16:d3: 1c:22:28:05:07:65:3e:7e:ef:6f:75:98:7f:79:cd: da:00:e8:1c:3c:d1:3d:2d:7c:b0:63:3e:6f:16:aa: 90:4d:b9:00:18:c1:24:91:15:b0:9c:14:2f:91:9c: 4f:4d:0f:d2:69:af:72:fd:09:5e:74:8e:87:c9:f7: 05:9f:7b:d8:00:90:b5:71:0f:88:a9:14:ac:41:2d: 37:a1:a1:dc:6f:c2:63:35:8e:69:31:67:a8:a1:8d: d1:35:44:2f:c9:ba:f0:24:ed:83:e1:43:67:a8:cb: f4:69:9c:3b:69:34:05:cb:9c:d2:eb:c6:a3:76:43: 77:23:7a:59:cb:ca:b4:58:cd:fd:5b:7e:3f:30:23: e2:78:ab:6f:80:84:59:3d:dd:39:9c:54:4c:03:76: f4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:94:A1:20:19:5E:57:6A:DF:17:94:D5:ED:68:56:9D:29:C8:4B:D2 X509v3 Authority Key Identifier: keyid:30:7F:B5:BA:31:D6:C4:0C:4F:2E:23:23:3E:60:75:EE:AF:2D:53:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH-1ujHWxAxPLiMjPmB17q8tUwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:14:a1:98:a9:06:02:87:78:7b:ce:b7:c7:37:34:ac:50:fd: e0:0e:41:87:4d:dc:52:8e:8b:ae:76:b5:ee:77:e4:25:a7:74: 72:c3:0c:91:25:0b:11:c2:ce:81:15:1d:79:b5:d1:61:5e:9c: a6:ea:9f:72:be:f9:05:67:f2:6a:4b:0b:de:6b:ec:f8:25:59: 82:32:a9:67:3e:9c:76:18:7a:a9:bf:31:e4:72:46:1b:5f:49: 4a:74:23:6a:35:60:2c:1c:ed:bb:17:0d:c8:89:43:3a:5f:bd: ae:89:3a:9c:b1:74:37:a7:93:e9:11:40:1d:35:47:1a:e9:14: 84:88:e7:aa:73:56:61:b8:ba:e6:e7:ea:6b:66:94:af:22:e3: b0:df:15:c1:e2:9e:36:04:11:a6:3d:6b:89:a7:52:af:44:28: 51:42:44:1d:c6:fd:de:c0:c8:89:67:ec:01:91:ed:7d:65:35: 51:a1:a0:4c:47:96:e6:a8:4b:a9:20:55:04:fe:ac:87:8e:f5: c8:9d:45:63:a8:7a:0c:dd:ad:64:a9:1a:41:ac:ef:ea:43:73: 1a:af:3b:25:93:db:6d:95:d8:eb:e2:eb:d8:f3:dc:e4:d8:8f: 36:21:ab:82:78:a4:d8:d0:d4:bd:f6:c3:67:98:22:36:1f:88: bd:ae:a4:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDImkOGIgJoYb/UjEAbSVAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2ZiNWJhMzFkNmM0MGM0ZjJlMjMyMzNlNjA3NWVlYWYy ZDUzMDcwHhcNMjYwMjA5MTYwMDU0WhcNMjYwMjEwMTYwMDU0WjAzMTEwLwYDVQQD EyhlOTk0YTEyMDE5NWU1NzZhZGYxNzk0ZDVlZDY4NTY5ZDI5Yzg0YmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2JVvC4hhgtpb8qJO4FygqrNIYVH EdjnRyo4ApJEVrKGNcGj1L8dBwTxbK3ipubDuCeqVUMe2Xu8QqwU+ilxkzHgzuU4 FnITXue6cuKQDbC1ONKwW6DL8BBIwoixqg4lZo6Y8HqnFtMcIigFB2U+fu9vdZh/ ec3aAOgcPNE9LXywYz5vFqqQTbkAGMEkkRWwnBQvkZxPTQ/Saa9y/QledI6HyfcF n3vYAJC1cQ+IqRSsQS03oaHcb8JjNY5pMWeooY3RNUQvybrwJO2D4UNnqMv0aZw7 aTQFy5zS68ajdkN3I3pZy8q0WM39W34/MCPieKtvgIRZPd05nFRMA3b0EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOmUoSAZXldq3xeU1e1oVp0pyEvSMB8GA1UdIwQY MBaAFDB/tbox1sQMTy4jIz5gde6vLVMHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUgtMXVqSFd4QXhQTGlNalBtQjE3cTh0VXdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC81NWQ3YzUtMzc0YS00ODc2LTk5MzQt YWUzZjA1MmZmYWFkLzEvTUgtMXVqSFd4QXhQTGlNalBtQjE3cTh0VXdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC81NWQ3YzUtMzc0YS00ODc2LTk5MzQtYWUzZjA1MmZmYWFk LzEvTUgtMXVqSFd4QXhQTGlNalBtQjE3cTh0VXdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAChShmKkG Aod4e863xzc0rFD94A5Bh03cUo6Lrna17nfkJad0csMMkSULEcLOgRUdebXRYV6c puqfcr75BWfyaksL3mvs+CVZgjKpZz6cdhh6qb8x5HJGG19JSnQjajVgLBztuxcN yIlDOl+9rok6nLF0N6eT6RFAHTVHGukUhIjnqnNWYbi65ufqa2aUryLjsN8VweKe NgQRpj1riadSr0QoUUJEHcb93sDIiWfsAZHtfWU1UaGgTEeW5qhLqSBVBP6sh471 yJ1FY6h6DN2tZKkaQazv6kNzGq87JZPbbZXY6+Lr2PPc5NiPNiGrgnik2NDUvfbD Z5giNh+Iva6k8A== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:40 2026 by rpki-client