This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.mft File: mfseX91w4MDmCIWjBYH-DAJBDX0.mft (raw, json) Hash identifier: 77xBUAkBvD68KWabXox+XFp4mq/EAlw4YO3j2PYDxZI= Subject key identifier: A7:2E:7E:42:F4:FB:0A:52:F9:9B:0A:FF:7C:4D:6C:1C:0D:90:A5:E5 Authority key identifier: 99:FB:1E:5F:DD:70:E0:C0:E6:08:85:A3:05:81:FE:0C:02:41:0D:7D Certificate issuer: /CN=99fb1e5fdd70e0c0e60885a30581fe0c02410d7d Certificate serial: 019C43224BCE1B54781B47D186EE73105B9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfseX91w4MDmCIWjBYH-DAJBDX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.mft Manifest number: 180C Signing time: Mon 09 Feb 2026 16:00:46 +0000 Manifest this update: Mon 09 Feb 2026 16:00:46 +0000 Manifest next update: Tue 10 Feb 2026 16:00:46 +0000 Files and hashes: 1: mfseX91w4MDmCIWjBYH-DAJBDX0.crl (hash: FIxfnatXBbL3fHMzREoI7EPqNh9Y4MCFXu8DPVKGiCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.mft rsync://rpki.ripe.net/repository/DEFAULT/mfseX91w4MDmCIWjBYH-DAJBDX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:4b:ce:1b:54:78:1b:47:d1:86:ee:73:10:5b:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fb1e5fdd70e0c0e60885a30581fe0c02410d7d Validity Not Before: Feb 9 16:00:46 2026 GMT Not After : Feb 10 16:00:46 2026 GMT Subject: CN=a72e7e42f4fb0a52f99b0aff7c4d6c1c0d90a5e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ec:a2:4b:04:17:2a:da:54:fc:f8:8c:b6:dd: 0d:4b:1d:44:ff:fb:6f:9b:eb:6f:61:3a:ce:71:3e: db:80:1d:90:bf:7e:b6:06:e0:3b:0f:06:2f:76:19: ae:1a:53:03:c3:59:99:82:38:be:54:cc:31:43:f0: f0:88:c8:98:b1:1c:6e:22:c9:3d:57:35:1f:12:cc: 5d:a2:c9:7b:36:ad:80:7b:01:2d:4b:e1:2b:59:2a: fb:46:a2:dd:2b:36:b1:cd:5a:b7:c7:23:d5:23:4c: 82:85:e1:ab:48:63:b1:7d:b6:bd:f8:86:79:b6:9d: dc:db:34:28:1d:85:ab:0f:34:7e:b8:ea:7d:d6:4f: d6:4d:1a:c8:13:a2:d0:3c:fe:e4:5e:19:39:f2:51: 05:08:7d:03:2c:9e:51:55:a6:19:7a:c6:75:a5:1c: ea:32:72:2b:92:86:dc:ef:da:96:09:0c:c4:aa:2f: 7c:66:2e:21:da:fa:58:90:ea:1d:03:2b:5f:42:cf: ec:13:43:29:4c:3e:fb:27:c4:db:06:07:ed:8f:df: 48:ef:8b:90:23:ab:39:be:0c:8e:a1:89:0c:0a:6d: 83:03:0e:43:d1:8b:62:1d:91:c1:9d:90:64:19:3b: b3:52:60:a6:5e:2a:cd:80:e8:14:17:e1:b2:b8:42: df:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:2E:7E:42:F4:FB:0A:52:F9:9B:0A:FF:7C:4D:6C:1C:0D:90:A5:E5 X509v3 Authority Key Identifier: keyid:99:FB:1E:5F:DD:70:E0:C0:E6:08:85:A3:05:81:FE:0C:02:41:0D:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfseX91w4MDmCIWjBYH-DAJBDX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:d8:fa:4f:5b:65:b0:b5:15:fa:54:ca:89:d7:4c:d0:10:78: 61:05:aa:0b:46:fc:54:da:ed:cc:fd:86:8c:12:52:aa:59:6a: 61:05:61:ff:cd:cc:9c:e3:c5:78:03:3c:67:9b:79:65:fa:df: 77:20:a2:c7:27:ff:e4:22:13:5e:14:a1:27:e8:2f:c2:fc:c4: 39:6f:16:94:14:51:f9:95:d7:88:e0:9c:a9:a8:bf:86:99:f6: 19:03:3e:44:2d:d9:95:d6:86:8b:e0:8d:2b:cf:2f:d4:c1:f3: 47:7d:f4:34:9c:41:b2:81:ea:3e:05:05:03:12:36:d0:42:50: 54:28:e1:3c:b2:dd:60:30:c3:ca:87:5e:a7:44:79:2e:ae:d9: c7:f8:8f:aa:fa:c4:65:16:fc:84:d9:46:2f:05:60:00:e9:ce: a9:0e:39:8d:13:06:da:64:7a:0b:a5:d8:b0:0c:16:14:41:ea: e7:f6:e2:7d:42:40:53:c8:c2:53:d8:a6:4e:3d:bc:fa:8a:97: 0f:0f:f0:40:b8:ab:20:b5:50:a2:27:a0:0f:41:85:24:88:7c: 93:ec:a2:54:fb:63:22:44:68:4d:07:6e:85:93:26:1c:0e:0f: 15:c0:e1:69:a9:f4:6c:5c:b7:6a:c2:12:b8:80:8c:6e:a3:4e: 76:bf:7a:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIkvOG1R4G0fRhu5zEFuaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZmIxZTVmZGQ3MGUwYzBlNjA4ODVhMzA1ODFmZTBjMDI0 MTBkN2QwHhcNMjYwMjA5MTYwMDQ2WhcNMjYwMjEwMTYwMDQ2WjAzMTEwLwYDVQQD EyhhNzJlN2U0MmY0ZmIwYTUyZjk5YjBhZmY3YzRkNmMxYzBkOTBhNWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuyiSwQXKtpU/PiMtt0NSx1E//tv m+tvYTrOcT7bgB2Qv362BuA7DwYvdhmuGlMDw1mZgji+VMwxQ/DwiMiYsRxuIsk9 VzUfEsxdosl7Nq2AewEtS+ErWSr7RqLdKzaxzVq3xyPVI0yCheGrSGOxfba9+IZ5 tp3c2zQoHYWrDzR+uOp91k/WTRrIE6LQPP7kXhk58lEFCH0DLJ5RVaYZesZ1pRzq MnIrkobc79qWCQzEqi98Zi4h2vpYkOodAytfQs/sE0MpTD77J8TbBgftj99I74uQ I6s5vgyOoYkMCm2DAw5D0YtiHZHBnZBkGTuzUmCmXirNgOgUF+GyuELfVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKcufkL0+wpS+ZsK/3xNbBwNkKXlMB8GA1UdIwQY MBaAFJn7Hl/dcODA5giFowWB/gwCQQ19MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWZzZVg5MXc0TURtQ0lXakJZSC1EQUpCRFgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9kMmEzYjUtOTdkZS00ZDQ3LWIxZGIt NDVlZTU4NDA2ODJjLzEvbWZzZVg5MXc0TURtQ0lXakJZSC1EQUpCRFgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9kMmEzYjUtOTdkZS00ZDQ3LWIxZGItNDVlZTU4NDA2ODJj LzEvbWZzZVg5MXc0TURtQ0lXakJZSC1EQUpCRFgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo9j6T1tl sLUV+lTKiddM0BB4YQWqC0b8VNrtzP2GjBJSqllqYQVh/83MnOPFeAM8Z5t5Zfrf dyCixyf/5CITXhShJ+gvwvzEOW8WlBRR+ZXXiOCcqai/hpn2GQM+RC3ZldaGi+CN K88v1MHzR330NJxBsoHqPgUFAxI20EJQVCjhPLLdYDDDyodep0R5Lq7Zx/iPqvrE ZRb8hNlGLwVgAOnOqQ45jRMG2mR6C6XYsAwWFEHq5/bifUJAU8jCU9imTj28+oqX Dw/wQLirILVQoiegD0GFJIh8k+yiVPtjIkRoTQduhZMmHA4PFcDhaan0bFy3asIS uICMbqNOdr96jg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:31:20 2026 by rpki-client