This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/a400b2-bab4-4119-a3d1-89981c8f9e7b/1/MHXYfBl6D6BNqPIlNY0_r3hvfQs.mft File: MHXYfBl6D6BNqPIlNY0_r3hvfQs.mft (raw, json) Hash identifier: Oyi7041CRekZGjaUJZzOg7kX3y+YwSgy0vSEMUiYPSw= Subject key identifier: 92:D5:B3:FA:CA:C7:A5:D3:CC:22:5D:9C:C0:38:85:9E:6A:62:7F:E6 Authority key identifier: 30:75:D8:7C:19:7A:0F:A0:4D:A8:F2:25:35:8D:3F:AF:78:6F:7D:0B Certificate issuer: /CN=3075d87c197a0fa04da8f225358d3faf786f7d0b Certificate serial: 019C435921B8EDBF879ACAD68D14FEC1CF5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHXYfBl6D6BNqPIlNY0_r3hvfQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/a400b2-bab4-4119-a3d1-89981c8f9e7b/1/MHXYfBl6D6BNqPIlNY0_r3hvfQs.mft Manifest number: 05FB Signing time: Mon 09 Feb 2026 17:00:40 +0000 Manifest this update: Mon 09 Feb 2026 17:00:40 +0000 Manifest next update: Tue 10 Feb 2026 17:00:40 +0000 Files and hashes: 1: MHXYfBl6D6BNqPIlNY0_r3hvfQs.crl (hash: 25K36oJ4GfzoAigzuaMw9ZT4ROY/P2t4yVoATf/5bts=) 2: e6hHV9sCUc7s1khP8XoEDf8NVHo.roa (hash: TMmfCLj9EVDBcAPJhOcf7tnYbYq8PeLIXmBm9+66U44=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/a400b2-bab4-4119-a3d1-89981c8f9e7b/1/MHXYfBl6D6BNqPIlNY0_r3hvfQs.crl rsync://rpki.ripe.net/repository/DEFAULT/13/a400b2-bab4-4119-a3d1-89981c8f9e7b/1/MHXYfBl6D6BNqPIlNY0_r3hvfQs.mft rsync://rpki.ripe.net/repository/DEFAULT/MHXYfBl6D6BNqPIlNY0_r3hvfQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:21:b8:ed:bf:87:9a:ca:d6:8d:14:fe:c1:cf:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3075d87c197a0fa04da8f225358d3faf786f7d0b Validity Not Before: Feb 9 17:00:40 2026 GMT Not After : Feb 10 17:00:40 2026 GMT Subject: CN=92d5b3facac7a5d3cc225d9cc038859e6a627fe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:72:18:38:ee:7a:36:0d:ec:1f:68:af:47:23: 43:98:e0:14:32:5c:d9:ab:89:b3:96:fe:54:e9:a2: 7d:37:48:48:4e:92:46:9e:2e:88:e1:60:40:d7:f1: 28:c7:36:34:a8:e0:69:e5:87:c0:42:8d:28:6d:95: df:74:a2:53:dd:fc:79:40:fe:cb:ca:e6:2f:79:74: f9:fe:03:4a:db:40:07:3e:2e:f5:5c:33:bc:38:81: 03:fb:a3:a0:41:ed:61:d6:d7:07:21:56:c1:a4:b6: 9c:dd:65:20:ae:fc:7d:6d:4d:ee:d8:8b:b1:7a:63: 5e:a1:df:36:1f:0f:1a:36:e0:dd:23:d0:2f:33:75: 6a:72:c2:d9:7b:dd:43:d5:7d:53:57:21:89:a6:a4: 4d:d8:53:72:e6:25:31:72:29:97:ea:96:c1:0c:4c: 67:45:cf:3c:0a:79:b9:80:b4:9a:da:bf:35:39:d6: cb:93:c7:25:9a:4f:38:db:db:d8:45:62:b3:40:9f: e7:1f:e8:0d:5a:0a:f0:8c:09:dd:6f:cd:8e:e8:2e: 45:46:6c:56:9e:69:40:45:ee:9e:df:fa:af:c9:85: 91:67:eb:04:88:22:db:dd:05:74:e1:f4:65:ed:0d: d4:1f:d1:63:c9:8b:45:1b:3b:ee:ae:4f:b5:2a:e4: 9f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:D5:B3:FA:CA:C7:A5:D3:CC:22:5D:9C:C0:38:85:9E:6A:62:7F:E6 X509v3 Authority Key Identifier: keyid:30:75:D8:7C:19:7A:0F:A0:4D:A8:F2:25:35:8D:3F:AF:78:6F:7D:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHXYfBl6D6BNqPIlNY0_r3hvfQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a400b2-bab4-4119-a3d1-89981c8f9e7b/1/MHXYfBl6D6BNqPIlNY0_r3hvfQs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a400b2-bab4-4119-a3d1-89981c8f9e7b/1/MHXYfBl6D6BNqPIlNY0_r3hvfQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:b3:b3:0b:3f:57:21:7b:94:e0:8d:8f:47:91:ea:63:7e:90: d2:c8:7d:db:02:c3:be:3b:96:2c:f7:55:52:c5:3e:3c:1c:da: e8:9b:bf:d1:cd:be:01:fa:be:b1:63:41:8b:43:0a:07:13:3f: 94:8a:b0:6d:e1:43:85:c8:6d:65:ae:ce:90:cb:85:ca:13:d2: e9:06:e0:8b:64:26:dc:d5:43:8d:8f:f8:af:fa:7b:31:fd:2e: 89:7e:cf:7a:79:f5:dc:1a:13:4b:9e:29:1a:04:e7:e5:c9:f8: 19:fe:eb:78:3a:c7:27:8c:0f:8a:94:d1:12:1a:bc:12:60:b8: 16:6b:a7:e0:86:d0:14:3f:0d:ec:f4:27:8d:cb:3d:04:78:ff: 47:14:a2:1e:d7:1d:51:9b:cf:7b:23:02:0f:a5:f6:68:20:08: 5b:80:f6:96:c5:c5:b7:1d:02:8a:4b:6a:72:96:79:86:2c:92: c2:26:e9:16:98:62:f1:22:91:a0:b5:97:e8:b9:e9:be:5d:6d: 74:48:bf:79:48:12:26:d6:48:e6:7d:20:58:bc:e3:88:c7:07: 81:2a:90:ef:2d:2c:b6:c4:11:02:c7:de:26:29:b9:0f:2b:02: 50:07:17:f1:c8:6b:1a:a0:1d:f1:69:aa:9a:99:34:ae:8f:65: 38:21:5e:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWSG47b+HmsrWjRT+wc9fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNzVkODdjMTk3YTBmYTA0ZGE4ZjIyNTM1OGQzZmFmNzg2 ZjdkMGIwHhcNMjYwMjA5MTcwMDQwWhcNMjYwMjEwMTcwMDQwWjAzMTEwLwYDVQQD Eyg5MmQ1YjNmYWNhYzdhNWQzY2MyMjVkOWNjMDM4ODU5ZTZhNjI3ZmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03IYOO56Ng3sH2ivRyNDmOAUMlzZ q4mzlv5U6aJ9N0hITpJGni6I4WBA1/EoxzY0qOBp5YfAQo0obZXfdKJT3fx5QP7L yuYveXT5/gNK20AHPi71XDO8OIED+6OgQe1h1tcHIVbBpLac3WUgrvx9bU3u2Iux emNeod82Hw8aNuDdI9AvM3VqcsLZe91D1X1TVyGJpqRN2FNy5iUxcimX6pbBDExn Rc88Cnm5gLSa2r81OdbLk8clmk8429vYRWKzQJ/nH+gNWgrwjAndb82O6C5FRmxW nmlARe6e3/qvyYWRZ+sEiCLb3QV04fRl7Q3UH9FjyYtFGzvurk+1KuSf4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJLVs/rKx6XTzCJdnMA4hZ5qYn/mMB8GA1UdIwQY MBaAFDB12HwZeg+gTajyJTWNP694b30LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUhYWWZCbDZENkJOcVBJbE5ZMF9yM2h2ZlFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9hNDAwYjItYmFiNC00MTE5LWEzZDEt ODk5ODFjOGY5ZTdiLzEvTUhYWWZCbDZENkJOcVBJbE5ZMF9yM2h2ZlFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9hNDAwYjItYmFiNC00MTE5LWEzZDEtODk5ODFjOGY5ZTdi LzEvTUhYWWZCbDZENkJOcVBJbE5ZMF9yM2h2ZlFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADbOzCz9X IXuU4I2PR5HqY36Q0sh92wLDvjuWLPdVUsU+PBza6Ju/0c2+Afq+sWNBi0MKBxM/ lIqwbeFDhchtZa7OkMuFyhPS6Qbgi2Qm3NVDjY/4r/p7Mf0uiX7Penn13BoTS54p GgTn5cn4Gf7reDrHJ4wPipTREhq8EmC4Fmun4IbQFD8N7PQnjcs9BHj/RxSiHtcd UZvPeyMCD6X2aCAIW4D2lsXFtx0CiktqcpZ5hiySwibpFphi8SKRoLWX6Lnpvl1t dEi/eUgSJtZI5n0gWLzjiMcHgSqQ7y0stsQRAsfeJim5DysCUAcX8chrGqAd8Wmq mpk0ro9lOCFecA== -----END CERTIFICATE-----Generated at Tue Feb 10 00:16:13 2026 by rpki-client