This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.mft File: Mt2KF_xnKHG58gOVre24XQNeqkM.mft (raw, json) Hash identifier: ouqfAHh9r16pbXVsOhR9t5hRQ/Vpja592608bKUvgjk= Subject key identifier: AA:32:E1:D5:B7:D4:B7:8F:42:C7:1C:25:26:A9:A1:90:73:BB:CC:FF Authority key identifier: 32:DD:8A:17:FC:67:28:71:B9:F2:03:95:AD:ED:B8:5D:03:5E:AA:43 Certificate issuer: /CN=32dd8a17fc672871b9f20395adedb85d035eaa43 Certificate serial: 019C41D8FC39CBBF35473B49BC38E8D3B343 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mt2KF_xnKHG58gOVre24XQNeqkM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.mft Manifest number: 0D Signing time: Mon 09 Feb 2026 10:01:05 +0000 Manifest this update: Mon 09 Feb 2026 10:01:05 +0000 Manifest next update: Tue 10 Feb 2026 10:01:05 +0000 Files and hashes: 1: Mt2KF_xnKHG58gOVre24XQNeqkM.crl (hash: BTPk8oX1hSNezFUGAwostAb2s6jQpdKy/eOzewRXyPc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.crl rsync://rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.mft rsync://rpki.ripe.net/repository/DEFAULT/Mt2KF_xnKHG58gOVre24XQNeqkM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:fc:39:cb:bf:35:47:3b:49:bc:38:e8:d3:b3:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32dd8a17fc672871b9f20395adedb85d035eaa43 Validity Not Before: Feb 9 10:01:05 2026 GMT Not After : Feb 10 10:01:05 2026 GMT Subject: CN=aa32e1d5b7d4b78f42c71c2526a9a19073bbccff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:77:2e:c1:bf:58:e5:2d:2f:25:b0:cd:f8:b5: 1b:49:13:5e:03:3f:be:e5:d2:43:4f:e7:a1:f0:85: 94:41:12:92:98:c0:ad:85:0b:59:61:8d:fa:d8:77: 68:36:8c:79:82:9d:a3:d1:67:7b:94:ea:66:b6:9a: 46:2a:2d:8a:b9:2f:b8:df:9c:cd:3a:09:e5:ee:b3: 79:82:b7:be:f3:64:3e:a0:6f:cb:0f:e4:0c:1b:95: 29:01:11:a4:f5:5f:ab:e4:37:8c:b2:bd:df:e4:2b: 97:ac:6a:1a:14:eb:e6:8b:fd:26:da:51:d3:33:f9: f3:91:3d:5a:f9:8f:32:86:1a:69:be:e2:97:80:5c: f2:d6:dd:43:e0:3a:f6:8b:89:77:12:3b:53:4b:7b: 35:ae:ec:9a:49:3a:1f:1f:2b:68:8b:39:5c:7c:7a: 6c:e5:57:e3:91:70:66:08:2f:1e:af:87:d2:bf:6a: e8:d4:c4:b4:95:9b:c2:c5:35:ab:1d:61:8d:a7:2c: d0:48:fd:32:3c:05:1b:81:73:18:bc:15:00:5c:e4: da:85:97:71:48:ce:aa:dd:e6:e5:51:a4:75:23:79: d9:a1:75:88:19:b0:3e:51:cb:aa:35:d2:67:f6:17: 07:23:41:44:22:38:2f:29:09:fb:0e:fb:a3:9d:d6: d7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:32:E1:D5:B7:D4:B7:8F:42:C7:1C:25:26:A9:A1:90:73:BB:CC:FF X509v3 Authority Key Identifier: keyid:32:DD:8A:17:FC:67:28:71:B9:F2:03:95:AD:ED:B8:5D:03:5E:AA:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mt2KF_xnKHG58gOVre24XQNeqkM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:de:0a:f4:26:07:5d:f7:9a:86:77:af:25:f1:da:0a:60:69: 55:b3:25:34:36:c4:b8:95:33:40:10:d7:a0:40:c5:af:32:8d: 59:15:e1:75:3e:4f:3e:36:05:7b:74:c7:a4:56:ce:3a:26:a1: 92:7f:6e:f2:ea:e5:10:ab:48:76:e1:1c:ce:99:e5:76:ca:d9: 93:4f:58:ff:70:8a:00:71:a2:a0:99:95:ce:36:aa:ef:97:fe: b6:db:c1:73:13:e6:14:0b:b2:7c:e6:d0:53:b2:3a:04:2e:ed: c1:1c:90:cf:59:7c:2a:75:ed:be:a6:34:64:49:10:20:2d:3b: 07:38:cf:06:81:fc:1e:a0:d7:59:88:d0:04:c7:a5:22:29:9d: 97:bf:50:c7:20:04:b2:92:9e:3e:ad:11:47:dc:d0:63:ca:97: 4e:93:3c:e8:4f:bc:e2:00:bc:ef:1b:ed:59:79:97:57:50:a4: 5e:21:dd:3f:39:5c:dc:25:37:59:f5:cb:19:88:6a:95:3f:25: ef:50:c2:96:08:ff:9b:2b:f5:9c:eb:9c:e9:35:ec:a4:ea:dd: 19:8d:7b:58:f5:c9:74:84:88:0d:73:cd:e4:3f:97:fc:73:24: 5a:de:be:96:fa:d9:65:60:b4:ff:cc:ff:0c:d4:1f:0c:30:0c: 0b:0f:eb:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2Pw5y781RztJvDjo07NDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyZGQ4YTE3ZmM2NzI4NzFiOWYyMDM5NWFkZWRiODVkMDM1 ZWFhNDMwHhcNMjYwMjA5MTAwMTA1WhcNMjYwMjEwMTAwMTA1WjAzMTEwLwYDVQQD EyhhYTMyZTFkNWI3ZDRiNzhmNDJjNzFjMjUyNmE5YTE5MDczYmJjY2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmncuwb9Y5S0vJbDN+LUbSRNeAz++ 5dJDT+eh8IWUQRKSmMCthQtZYY362HdoNox5gp2j0Wd7lOpmtppGKi2KuS+435zN Ognl7rN5gre+82Q+oG/LD+QMG5UpARGk9V+r5DeMsr3f5CuXrGoaFOvmi/0m2lHT M/nzkT1a+Y8yhhppvuKXgFzy1t1D4Dr2i4l3EjtTS3s1ruyaSTofHytoizlcfHps 5VfjkXBmCC8er4fSv2ro1MS0lZvCxTWrHWGNpyzQSP0yPAUbgXMYvBUAXOTahZdx SM6q3eblUaR1I3nZoXWIGbA+UcuqNdJn9hcHI0FEIjgvKQn7DvujndbXKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKoy4dW31LePQsccJSapoZBzu8z/MB8GA1UdIwQY MBaAFDLdihf8ZyhxufIDla3tuF0DXqpDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXQyS0ZfeG5LSEc1OGdPVnJlMjRYUU5lcWtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy82MzViMWEtNTExOC00ZDljLTgxMzMt YzE3ODc0OTllZjMzLzEvTXQyS0ZfeG5LSEc1OGdPVnJlMjRYUU5lcWtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy82MzViMWEtNTExOC00ZDljLTgxMzMtYzE3ODc0OTllZjMz LzEvTXQyS0ZfeG5LSEc1OGdPVnJlMjRYUU5lcWtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIt4K9CYH XfeahnevJfHaCmBpVbMlNDbEuJUzQBDXoEDFrzKNWRXhdT5PPjYFe3THpFbOOiah kn9u8urlEKtIduEczpnldsrZk09Y/3CKAHGioJmVzjaq75f+ttvBcxPmFAuyfObQ U7I6BC7twRyQz1l8KnXtvqY0ZEkQIC07BzjPBoH8HqDXWYjQBMelIimdl79QxyAE spKePq0RR9zQY8qXTpM86E+84gC87xvtWXmXV1CkXiHdPzlc3CU3WfXLGYhqlT8l 71DClgj/myv1nOuc6TXspOrdGY17WPXJdISIDXPN5D+X/HMkWt6+lvrZZWC0/8z/ DNQfDDAMCw/rJw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:47:57 2026 by rpki-client