This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft File: MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft (raw, json) Hash identifier: C5KtpJdFDeEUhtt3Mtrn2zJ4WOR0L6ETOa+enV6jc8o= Subject key identifier: A1:A6:4F:44:36:B6:E2:6B:C4:14:B5:47:81:2D:1B:73:3F:A6:BA:41 Authority key identifier: 31:BB:73:0B:1B:3F:53:E7:3A:25:74:22:E5:BB:EC:E4:3B:67:7F:E3 Certificate issuer: /CN=31bb730b1b3f53e73a257422e5bbece43b677fe3 Certificate serial: 019C42B42DB0EE46CEC3B8FC1FDA28BA4211 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft Manifest number: 022B Signing time: Mon 09 Feb 2026 14:00:30 +0000 Manifest this update: Mon 09 Feb 2026 14:00:30 +0000 Manifest next update: Tue 10 Feb 2026 14:00:30 +0000 Files and hashes: 1: MbtzCxs_U-c6JXQi5bvs5Dtnf-M.crl (hash: OclLNRpt0vC1aTeo72/a4nSy+Za8qrsLDF28B6tpdlE=) 2: x3o94WH-TgOrV8YIjfYebD2ph7I.roa (hash: CyAtLVMGC2bxnLh65hikiQFqfdhP3gxbZnIoqvK7pGA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft rsync://rpki.ripe.net/repository/DEFAULT/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:2d:b0:ee:46:ce:c3:b8:fc:1f:da:28:ba:42:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31bb730b1b3f53e73a257422e5bbece43b677fe3 Validity Not Before: Feb 9 14:00:30 2026 GMT Not After : Feb 10 14:00:30 2026 GMT Subject: CN=a1a64f4436b6e26bc414b547812d1b733fa6ba41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7c:e0:40:56:47:ee:fa:87:fb:2f:40:bd:95: 28:bf:80:52:79:75:ca:b0:89:8c:1e:3e:e4:ac:d0: 34:6f:d8:3a:ba:fa:56:18:4c:5e:b1:a9:70:81:f3: 85:a3:2d:30:2a:20:ab:e8:f5:0a:23:d9:af:e6:79: 5a:52:f7:ab:70:bc:94:bb:91:38:be:72:bc:84:23: 23:0a:a4:37:28:ef:13:0d:f9:ff:12:a7:69:06:64: ce:f5:d1:f8:5d:b3:97:b1:24:73:66:27:c3:94:a3: 30:1d:d6:f3:9d:c6:f3:9a:a8:c8:f3:09:13:b8:e1: 75:a2:83:b1:3e:d1:3d:19:ea:8a:be:45:f9:80:54: 64:57:5b:96:ec:c9:db:47:e7:d9:65:37:ef:f9:51: 54:91:69:ef:5c:1c:3b:b5:72:25:cc:d5:c2:f3:b1: 56:b1:f3:4b:7f:20:c5:51:05:6a:b6:56:17:d5:e1: 82:63:16:f1:ab:b9:71:ca:54:d9:02:bd:3f:32:36: bf:e4:43:1f:57:7a:92:dd:fa:5d:25:98:29:7b:7e: ab:25:9a:c2:74:bf:05:f6:f7:d3:c2:01:7b:db:d3: 9a:cc:b2:f1:e0:d1:23:3d:3c:02:df:bc:2d:58:dc: fa:bb:f3:fa:50:99:dd:11:d2:f7:65:cd:a1:6c:f9: 07:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:A6:4F:44:36:B6:E2:6B:C4:14:B5:47:81:2D:1B:73:3F:A6:BA:41 X509v3 Authority Key Identifier: keyid:31:BB:73:0B:1B:3F:53:E7:3A:25:74:22:E5:BB:EC:E4:3B:67:7F:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:8e:09:71:d2:70:eb:06:af:d8:8c:4a:b5:1b:1c:55:32:8a: cf:f1:cd:91:05:a7:75:02:4d:ff:ba:62:5e:49:73:ee:36:7e: a4:d2:76:0f:48:57:ad:3b:a9:76:fe:46:f8:2b:56:70:c3:d4: 2d:80:3d:a5:40:4a:71:79:21:01:23:a6:95:bd:ac:08:44:7c: f0:73:dc:c5:24:4d:60:74:cb:ef:96:6b:75:c0:f9:16:fb:d5: 39:7f:43:34:d7:7f:99:9d:8d:7a:bb:26:4c:19:a8:a1:9f:e4: b2:1a:d9:17:ca:c7:eb:d8:64:95:30:27:3a:fe:dd:97:fa:6d: 33:1e:28:77:2f:6f:6f:54:1a:c1:77:e1:5d:64:5d:07:ef:55: 2d:ac:ac:07:61:29:f6:d5:d3:66:c6:ac:28:18:1c:10:eb:4f: d8:e1:fb:97:48:64:ba:bf:5c:fc:34:dd:66:b2:8b:c3:a6:26: ad:85:f1:40:26:75:10:39:f0:96:84:de:70:86:2f:02:d1:34: 9a:78:ce:27:39:31:73:b0:6b:50:f8:13:cd:33:a4:b6:aa:70: 25:6d:9b:31:ab:ee:d9:af:21:22:83:60:64:be:72:96:a8:c1: cb:66:a3:f5:01:7a:9c:cd:06:85:bd:1c:e0:40:cd:7e:c4:b1: e7:c4:14:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtC2w7kbOw7j8H9ooukIRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxYmI3MzBiMWIzZjUzZTczYTI1NzQyMmU1YmJlY2U0M2I2 NzdmZTMwHhcNMjYwMjA5MTQwMDMwWhcNMjYwMjEwMTQwMDMwWjAzMTEwLwYDVQQD EyhhMWE2NGY0NDM2YjZlMjZiYzQxNGI1NDc4MTJkMWI3MzNmYTZiYTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXzgQFZH7vqH+y9AvZUov4BSeXXK sImMHj7krNA0b9g6uvpWGExesalwgfOFoy0wKiCr6PUKI9mv5nlaUvercLyUu5E4 vnK8hCMjCqQ3KO8TDfn/EqdpBmTO9dH4XbOXsSRzZifDlKMwHdbzncbzmqjI8wkT uOF1ooOxPtE9GeqKvkX5gFRkV1uW7MnbR+fZZTfv+VFUkWnvXBw7tXIlzNXC87FW sfNLfyDFUQVqtlYX1eGCYxbxq7lxylTZAr0/Mja/5EMfV3qS3fpdJZgpe36rJZrC dL8F9vfTwgF729OazLLx4NEjPTwC37wtWNz6u/P6UJndEdL3Zc2hbPkHqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKGmT0Q2tuJrxBS1R4EtG3M/prpBMB8GA1UdIwQY MBaAFDG7cwsbP1PnOiV0IuW77OQ7Z3/jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWJ0ekN4c19VLWM2SlhRaTVidnM1RHRuZi1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zZDkzYTUtNWZiZC00MDJlLWFkODct ZTk4NjkwNGM4ZDBjLzEvTWJ0ekN4c19VLWM2SlhRaTVidnM1RHRuZi1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zZDkzYTUtNWZiZC00MDJlLWFkODctZTk4NjkwNGM4ZDBj LzEvTWJ0ekN4c19VLWM2SlhRaTVidnM1RHRuZi1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlo4JcdJw 6wav2IxKtRscVTKKz/HNkQWndQJN/7piXklz7jZ+pNJ2D0hXrTupdv5G+CtWcMPU LYA9pUBKcXkhASOmlb2sCER88HPcxSRNYHTL75ZrdcD5FvvVOX9DNNd/mZ2Nersm TBmooZ/kshrZF8rH69hklTAnOv7dl/ptMx4ody9vb1QawXfhXWRdB+9VLaysB2Ep 9tXTZsasKBgcEOtP2OH7l0hkur9c/DTdZrKLw6YmrYXxQCZ1EDnwloTecIYvAtE0 mnjOJzkxc7BrUPgTzTOktqpwJW2bMavu2a8hIoNgZL5ylqjBy2aj9QF6nM0Ghb0c 4EDNfsSx58QUlw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:59:45 2026 by rpki-client