This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.mft File: MU0IhXjsDimwS0PpAUk1hnJjZP0.mft (raw, json) Hash identifier: B9BbY17VTRu/+NkA0BL6wM/mNh8PoGT30fqClTqtP1Q= Subject key identifier: 86:C9:1B:FD:D3:1A:6A:B2:DF:29:F0:40:8E:13:AA:81:0E:79:23:2A Authority key identifier: 31:4D:08:85:78:EC:0E:29:B0:4B:43:E9:01:49:35:86:72:63:64:FD Certificate issuer: /CN=314d088578ec0e29b04b43e901493586726364fd Certificate serial: 019C432242E183D7379BB9E49A6C9802819F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MU0IhXjsDimwS0PpAUk1hnJjZP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.mft Manifest number: 1548 Signing time: Mon 09 Feb 2026 16:00:44 +0000 Manifest this update: Mon 09 Feb 2026 16:00:44 +0000 Manifest next update: Tue 10 Feb 2026 16:00:44 +0000 Files and hashes: 1: MU0IhXjsDimwS0PpAUk1hnJjZP0.crl (hash: fEi3sldYVG3pDVK90GhdtUv+NX5lmas7Ap0lpPXBUBw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.mft rsync://rpki.ripe.net/repository/DEFAULT/MU0IhXjsDimwS0PpAUk1hnJjZP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:42:e1:83:d7:37:9b:b9:e4:9a:6c:98:02:81:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=314d088578ec0e29b04b43e901493586726364fd Validity Not Before: Feb 9 16:00:44 2026 GMT Not After : Feb 10 16:00:44 2026 GMT Subject: CN=86c91bfdd31a6ab2df29f0408e13aa810e79232a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:e4:a5:f4:5e:7f:84:50:86:9f:d2:f8:32:da: 85:5c:df:ee:ab:e6:0c:6d:16:74:94:3e:3c:d3:3a: 2e:c9:dd:b0:51:1c:39:3d:6d:a7:44:d2:31:40:a7: f5:9b:5f:56:8b:a0:02:39:35:c0:10:70:aa:c5:50: 8f:4e:da:8a:db:44:3a:a5:d0:9d:f1:bb:fc:2b:49: 95:87:31:fb:9b:4a:ce:fb:64:63:67:1e:11:9e:d6: 71:56:ba:78:1a:a8:ee:71:cb:ef:8f:57:5d:7b:b5: ff:95:5c:ad:00:fd:c1:63:59:3e:e1:60:04:6f:79: b9:85:e3:bb:49:74:bc:79:30:de:0e:85:07:70:c0: e2:0e:58:30:38:19:a1:f0:8e:14:31:b3:94:56:6c: 26:e2:ba:a0:52:34:58:b5:fc:a4:e6:10:18:ab:1a: 75:50:3c:00:ee:b1:5d:be:13:27:1e:b0:e5:a9:6b: 31:4b:8c:72:8e:85:bb:a8:fa:d3:bf:d5:1e:ec:0e: 05:63:08:81:c6:10:5c:9c:e6:6d:0b:23:92:f8:81: 10:20:7d:78:75:ed:20:f2:24:a7:36:66:fb:4a:93: d6:66:ff:e1:62:ad:98:d1:20:79:ec:3e:c5:a7:9a: 1a:34:f8:85:f2:e7:90:37:8c:24:ce:b0:c1:c3:dc: 52:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C9:1B:FD:D3:1A:6A:B2:DF:29:F0:40:8E:13:AA:81:0E:79:23:2A X509v3 Authority Key Identifier: keyid:31:4D:08:85:78:EC:0E:29:B0:4B:43:E9:01:49:35:86:72:63:64:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MU0IhXjsDimwS0PpAUk1hnJjZP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:e6:b0:76:bc:ee:2a:94:0c:47:54:9b:c8:09:c6:0b:d7:60: e3:8f:d7:3b:48:7d:a1:16:5d:91:0b:02:e0:21:78:54:50:94: e4:29:c6:ab:f6:70:15:11:f8:4c:a8:57:52:27:c1:8d:60:15: 09:61:dc:0c:a5:d8:96:de:b6:8a:04:23:39:65:5d:c8:9a:c7: 5e:62:aa:86:4c:11:2f:4d:5c:37:27:0a:cb:46:39:3a:98:ac: d2:d5:9d:ca:94:6c:e5:39:a4:c6:85:91:51:75:fd:79:52:25: b7:1c:9e:32:65:47:e8:9c:f6:51:92:de:e0:53:2b:b6:7a:8c: bb:4a:bb:be:1a:76:03:d8:19:61:7f:76:9d:46:72:56:f1:d2: 7d:a4:ca:32:08:ce:2d:fe:fb:7e:81:31:de:c0:22:4a:aa:34: b6:fd:c2:5f:2c:c2:25:4a:16:3d:7e:c6:a4:d1:8d:5b:37:bd: 01:dc:7d:b5:07:89:04:3a:b7:27:e1:79:4e:98:e2:02:02:3b: ee:22:6c:47:77:c1:03:33:68:4a:45:54:db:2a:b3:81:b1:ec: 75:e0:02:1d:c7:6e:f4:83:ca:94:00:b4:ce:cb:60:48:84:9f: c6:ce:74:28:ea:44:e0:40:ac:11:ea:96:18:04:8f:69:62:8e: 4b:89:b1:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIkLhg9c3m7nkmmyYAoGfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxNGQwODg1NzhlYzBlMjliMDRiNDNlOTAxNDkzNTg2NzI2 MzY0ZmQwHhcNMjYwMjA5MTYwMDQ0WhcNMjYwMjEwMTYwMDQ0WjAzMTEwLwYDVQQD Eyg4NmM5MWJmZGQzMWE2YWIyZGYyOWYwNDA4ZTEzYWE4MTBlNzkyMzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9eSl9F5/hFCGn9L4MtqFXN/uq+YM bRZ0lD480zouyd2wURw5PW2nRNIxQKf1m19Wi6ACOTXAEHCqxVCPTtqK20Q6pdCd 8bv8K0mVhzH7m0rO+2RjZx4RntZxVrp4Gqjuccvvj1dde7X/lVytAP3BY1k+4WAE b3m5heO7SXS8eTDeDoUHcMDiDlgwOBmh8I4UMbOUVmwm4rqgUjRYtfyk5hAYqxp1 UDwA7rFdvhMnHrDlqWsxS4xyjoW7qPrTv9Ue7A4FYwiBxhBcnOZtCyOS+IEQIH14 de0g8iSnNmb7SpPWZv/hYq2Y0SB57D7Fp5oaNPiF8ueQN4wkzrDBw9xS9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIbJG/3TGmqy3ynwQI4TqoEOeSMqMB8GA1UdIwQY MBaAFDFNCIV47A4psEtD6QFJNYZyY2T9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVUwSWhYanNEaW13UzBQcEFVazFobkpqWlAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8zNzM4NzQtMzRmZC00ZTY0LWI2YTkt MTgwMDZiNjY0M2FmLzEvTVUwSWhYanNEaW13UzBQcEFVazFobkpqWlAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi8zNzM4NzQtMzRmZC00ZTY0LWI2YTktMTgwMDZiNjY0M2Fm LzEvTVUwSWhYanNEaW13UzBQcEFVazFobkpqWlAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApeawdrzu KpQMR1SbyAnGC9dg44/XO0h9oRZdkQsC4CF4VFCU5CnGq/ZwFRH4TKhXUifBjWAV CWHcDKXYlt62igQjOWVdyJrHXmKqhkwRL01cNycKy0Y5Opis0tWdypRs5TmkxoWR UXX9eVIltxyeMmVH6Jz2UZLe4FMrtnqMu0q7vhp2A9gZYX92nUZyVvHSfaTKMgjO Lf77foEx3sAiSqo0tv3CXyzCJUoWPX7GpNGNWze9Adx9tQeJBDq3J+F5TpjiAgI7 7iJsR3fBAzNoSkVU2yqzgbHsdeACHcdu9IPKlAC0zstgSISfxs50KOpE4ECsEeqW GASPaWKOS4mxGg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:48 2026 by rpki-client