This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.mft File: mXFUBuche_wTgSpHBMYq4JnnyP8.mft (raw, json) Hash identifier: 4J+hN7/yURLvBQ+k2W3S8WuYkYdTSrHnwyJcL8sLiyY= Subject key identifier: DC:F6:39:18:08:11:5E:B9:48:A1:0E:ED:E9:46:7D:B7:DA:67:A0:1F Authority key identifier: 99:71:54:06:E7:21:7B:FC:13:81:2A:47:04:C6:2A:E0:99:E7:C8:FF Certificate issuer: /CN=99715406e7217bfc13812a4704c62ae099e7c8ff Certificate serial: 019C427D797E82910522358E8C15865B0CEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXFUBuche_wTgSpHBMYq4JnnyP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.mft Manifest number: 052D Signing time: Mon 09 Feb 2026 13:00:45 +0000 Manifest this update: Mon 09 Feb 2026 13:00:45 +0000 Manifest next update: Tue 10 Feb 2026 13:00:45 +0000 Files and hashes: 1: mXFUBuche_wTgSpHBMYq4JnnyP8.crl (hash: yQrFhtxyqkbVijDCdKEhiCPCWmE0x0EHKnRXMzPpenA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.crl rsync://rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.mft rsync://rpki.ripe.net/repository/DEFAULT/mXFUBuche_wTgSpHBMYq4JnnyP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:79:7e:82:91:05:22:35:8e:8c:15:86:5b:0c:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99715406e7217bfc13812a4704c62ae099e7c8ff Validity Not Before: Feb 9 13:00:45 2026 GMT Not After : Feb 10 13:00:45 2026 GMT Subject: CN=dcf6391808115eb948a10eede9467db7da67a01f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5b:30:90:4e:6d:3f:37:e7:fc:1f:eb:a5:b3: 84:16:cc:a8:7d:9e:ef:1f:44:bd:d9:65:18:a2:99: 0a:e9:48:83:c1:ba:41:4b:c2:bd:3e:6c:2d:ec:e0: 41:af:80:9d:7c:3d:76:ce:bd:1a:8d:2c:8a:bb:58: e5:8d:11:47:91:46:08:1a:62:c9:94:dd:0d:07:c4: 9e:2b:7c:ae:55:72:4f:18:1a:f6:76:1c:af:40:9b: e4:19:1e:25:5c:5a:ae:23:b8:9c:06:b0:82:d1:a6: be:a3:2d:c9:6e:33:70:17:3c:25:0d:23:a4:08:8c: 59:94:99:79:d2:6d:38:41:2a:ba:5a:87:2f:ae:49: bc:66:e1:18:db:23:dc:c3:6f:34:51:a1:a2:cc:e1: 35:52:e1:b3:7c:d9:b9:60:bf:08:02:d7:74:e7:0c: 62:07:0f:d1:83:57:c6:85:96:4e:49:24:52:43:d5: 1c:17:59:68:ea:90:b3:38:d2:9c:8f:6c:86:02:37: 05:64:be:81:61:8d:90:d2:17:d2:d4:38:23:da:d2: c7:f4:aa:91:da:35:5b:82:84:23:0e:fa:31:b4:ee: d0:18:c7:8b:83:32:54:eb:1a:96:dc:71:aa:47:5a: f2:b7:5c:d7:cd:c3:24:1d:40:2b:18:74:12:42:9e: 07:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F6:39:18:08:11:5E:B9:48:A1:0E:ED:E9:46:7D:B7:DA:67:A0:1F X509v3 Authority Key Identifier: keyid:99:71:54:06:E7:21:7B:FC:13:81:2A:47:04:C6:2A:E0:99:E7:C8:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXFUBuche_wTgSpHBMYq4JnnyP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:f6:c3:d3:3b:54:2f:40:5d:a2:5b:bf:f6:1b:88:04:cc:b9: 96:e7:ca:ec:c3:fd:a9:41:85:61:e3:b2:5d:d7:1b:1d:4a:28: 05:5b:0a:21:6a:e6:24:b6:c6:38:fa:09:80:e5:b3:d5:06:1b: d4:4c:c8:fe:83:aa:bd:d3:72:f5:85:8d:71:ba:bc:1e:f9:72: 90:38:fa:3a:71:49:a6:c4:ae:bf:0e:c0:72:e2:17:83:0c:3e: a7:e9:be:86:4a:43:be:3a:6e:06:d6:3e:29:55:c4:75:06:43: 39:c7:27:9d:26:88:ee:14:91:f8:de:49:65:fa:8c:66:99:10: 8f:e7:17:19:e4:b8:e7:21:d2:07:65:17:0e:5f:f1:3c:9f:fb: 7f:6b:02:61:a1:5f:8b:27:1e:85:13:04:18:d8:04:89:e2:c6: ad:4b:9e:a1:66:e9:9a:86:f3:28:5e:9e:d2:83:72:a3:c0:79: fb:6a:43:0c:be:e4:68:81:41:9e:93:49:a0:d0:e7:58:4c:04: bd:df:15:f8:eb:a4:4a:18:3f:74:d2:e1:91:56:18:fa:88:51: f4:8c:99:18:7c:7b:76:ea:99:0c:ca:5f:9e:6c:42:aa:68:4e: d9:78:91:26:84:87:63:92:24:f2:d4:7e:2a:76:59:6f:5e:a9: a8:43:23:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfXl+gpEFIjWOjBWGWwzrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5NzE1NDA2ZTcyMTdiZmMxMzgxMmE0NzA0YzYyYWUwOTll N2M4ZmYwHhcNMjYwMjA5MTMwMDQ1WhcNMjYwMjEwMTMwMDQ1WjAzMTEwLwYDVQQD EyhkY2Y2MzkxODA4MTE1ZWI5NDhhMTBlZWRlOTQ2N2RiN2RhNjdhMDFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1swkE5tPzfn/B/rpbOEFsyofZ7v H0S92WUYopkK6UiDwbpBS8K9Pmwt7OBBr4CdfD12zr0ajSyKu1jljRFHkUYIGmLJ lN0NB8SeK3yuVXJPGBr2dhyvQJvkGR4lXFquI7icBrCC0aa+oy3JbjNwFzwlDSOk CIxZlJl50m04QSq6Wocvrkm8ZuEY2yPcw280UaGizOE1UuGzfNm5YL8IAtd05wxi Bw/Rg1fGhZZOSSRSQ9UcF1lo6pCzONKcj2yGAjcFZL6BYY2Q0hfS1Dgj2tLH9KqR 2jVbgoQjDvoxtO7QGMeLgzJU6xqW3HGqR1ryt1zXzcMkHUArGHQSQp4HswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNz2ORgIEV65SKEO7elGfbfaZ6AfMB8GA1UdIwQY MBaAFJlxVAbnIXv8E4EqRwTGKuCZ58j/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVhGVUJ1Y2hlX3dUZ1NwSEJNWXE0Sm5ueVA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS80ZTllMzctNmU2Ni00MWIxLWFhOTkt MTUxNmI2ZDgyZTJkLzEvbVhGVUJ1Y2hlX3dUZ1NwSEJNWXE0Sm5ueVA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS80ZTllMzctNmU2Ni00MWIxLWFhOTktMTUxNmI2ZDgyZTJk LzEvbVhGVUJ1Y2hlX3dUZ1NwSEJNWXE0Sm5ueVA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa/bD0ztU L0Bdolu/9huIBMy5lufK7MP9qUGFYeOyXdcbHUooBVsKIWrmJLbGOPoJgOWz1QYb 1EzI/oOqvdNy9YWNcbq8HvlykDj6OnFJpsSuvw7AcuIXgww+p+m+hkpDvjpuBtY+ KVXEdQZDOccnnSaI7hSR+N5JZfqMZpkQj+cXGeS45yHSB2UXDl/xPJ/7f2sCYaFf iycehRMEGNgEieLGrUueoWbpmobzKF6e0oNyo8B5+2pDDL7kaIFBnpNJoNDnWEwE vd8V+OukShg/dNLhkVYY+ohR9IyZGHx7duqZDMpfnmxCqmhO2XiRJoSHY5Ik8tR+ KnZZb16pqEMjmQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:41:29 2026 by rpki-client