This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.mft File: 01MMFE9ZLPqJG6vxlagXkAzW2RY.mft (raw, json) Hash identifier: or9oxsnmSt+yutkGjjWNwkgery8nc+EP4MXIRVrjhZU= Subject key identifier: AC:98:38:54:F4:0D:81:29:DA:75:B0:A3:DD:DF:B2:F4:92:79:20:AB Authority key identifier: D3:53:0C:14:4F:59:2C:FA:89:1B:AB:F1:95:A8:17:90:0C:D6:D9:16 Certificate issuer: /CN=d3530c144f592cfa891babf195a817900cd6d916 Certificate serial: 019C427E1527EF8BD712D8B63152B5837F82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01MMFE9ZLPqJG6vxlagXkAzW2RY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.mft Manifest number: 02C5 Signing time: Mon 09 Feb 2026 13:01:24 +0000 Manifest this update: Mon 09 Feb 2026 13:01:24 +0000 Manifest next update: Tue 10 Feb 2026 13:01:24 +0000 Files and hashes: 1: 01MMFE9ZLPqJG6vxlagXkAzW2RY.crl (hash: JDh4foUfI6mtFWZ5wywgCFEpYkgsIAITjGjVK5/woT8=) 2: B6oPSrYFOETzVfi_jkgsVldlvlw.roa (hash: FWuUjlvViSPVZ3tuWXOR6u2UkqfS1LDdyg1epfi2EcI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.mft rsync://rpki.ripe.net/repository/DEFAULT/01MMFE9ZLPqJG6vxlagXkAzW2RY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7e:15:27:ef:8b:d7:12:d8:b6:31:52:b5:83:7f:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3530c144f592cfa891babf195a817900cd6d916 Validity Not Before: Feb 9 13:01:24 2026 GMT Not After : Feb 10 13:01:24 2026 GMT Subject: CN=ac983854f40d8129da75b0a3dddfb2f4927920ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:48:ff:f0:d9:09:79:18:e5:8f:78:55:73:9b: b0:00:a4:27:7f:95:53:8b:fd:28:53:ee:32:cc:ba: dc:34:60:28:37:b7:43:21:e3:68:67:4c:92:49:72: f7:a3:af:69:f6:d6:a9:e4:ec:cb:82:f2:55:f3:e0: ec:54:7b:f0:dc:80:4b:93:f8:ab:f0:10:16:c6:85: 1c:1b:bd:1d:ca:2d:75:2f:34:ee:07:dd:b3:7c:47: b4:ed:13:5e:0a:84:cf:98:9d:3c:e4:22:45:a1:61: f4:72:82:13:93:fe:df:e4:4d:de:5a:d4:fa:2a:7f: 1f:68:25:71:63:8b:35:56:45:b4:12:05:f5:e6:e1: 94:98:e1:17:98:6e:87:2b:66:f5:1a:92:38:34:3e: 4c:5e:ff:34:f9:46:3f:6c:68:a3:f4:fb:a9:18:ad: cf:c7:31:e6:73:9c:61:c6:f5:9f:72:62:57:cc:72: 1c:fa:02:c1:d1:b2:16:76:0b:5e:96:41:95:4d:f2: 32:18:8c:81:13:ec:10:d1:e0:cc:d6:7e:95:09:b6: b6:2d:2b:e7:94:5a:cd:c7:1f:b5:89:05:2c:92:43: b8:45:75:ec:ea:4d:36:fa:a1:4a:44:a5:48:9d:e6: b7:c0:85:3e:4c:4d:07:7b:b7:6b:11:8f:7d:1c:33: 44:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:98:38:54:F4:0D:81:29:DA:75:B0:A3:DD:DF:B2:F4:92:79:20:AB X509v3 Authority Key Identifier: keyid:D3:53:0C:14:4F:59:2C:FA:89:1B:AB:F1:95:A8:17:90:0C:D6:D9:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01MMFE9ZLPqJG6vxlagXkAzW2RY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:53:8c:21:5a:49:f7:90:ea:1c:7f:16:d0:d7:3f:79:a7:10: b1:8a:68:b7:93:51:3c:fb:81:19:51:d9:1b:67:10:78:a4:13: 9f:02:f7:e8:e3:f6:9c:7b:5c:26:8b:3b:d7:ee:71:10:af:d7: e8:a0:ec:66:f9:50:43:a8:4b:44:cf:4c:0b:be:d4:7b:63:57: c6:b0:7c:37:9a:0c:c9:3e:4d:37:61:14:83:1f:46:e4:55:a6: ce:1f:d6:a9:7e:c9:c5:8c:55:22:68:6b:17:95:a7:82:06:d9: a4:68:2f:58:e1:5b:35:05:fa:e6:ea:b7:8d:53:e0:fe:ec:55: 09:c2:54:0e:88:68:74:42:20:25:02:8b:19:51:36:d5:ef:52: 89:ee:64:f1:4e:31:2b:52:85:f8:f2:bf:b9:28:a5:2e:fc:ff: 2d:3c:41:25:76:83:40:cb:54:af:f5:a4:d9:01:b7:c5:34:bb: 93:88:65:c3:0c:d4:0b:27:26:e7:51:ae:ae:dd:5b:55:05:c4: 69:47:8c:f7:1d:8b:70:25:f7:41:a9:84:bf:25:7a:35:8f:5b: ec:a9:8b:94:ab:53:ce:e5:d8:57:0b:80:62:9d:88:a3:35:21: a6:72:ac:ae:14:2c:ff:77:57:e3:ef:f5:96:dd:9e:57:ca:34: f2:a1:42:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfhUn74vXEti2MVK1g3+CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNTMwYzE0NGY1OTJjZmE4OTFiYWJmMTk1YTgxNzkwMGNk NmQ5MTYwHhcNMjYwMjA5MTMwMTI0WhcNMjYwMjEwMTMwMTI0WjAzMTEwLwYDVQQD EyhhYzk4Mzg1NGY0MGQ4MTI5ZGE3NWIwYTNkZGRmYjJmNDkyNzkyMGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEj/8NkJeRjlj3hVc5uwAKQnf5VT i/0oU+4yzLrcNGAoN7dDIeNoZ0ySSXL3o69p9tap5OzLgvJV8+DsVHvw3IBLk/ir 8BAWxoUcG70dyi11LzTuB92zfEe07RNeCoTPmJ085CJFoWH0coITk/7f5E3eWtT6 Kn8faCVxY4s1VkW0EgX15uGUmOEXmG6HK2b1GpI4ND5MXv80+UY/bGij9PupGK3P xzHmc5xhxvWfcmJXzHIc+gLB0bIWdgtelkGVTfIyGIyBE+wQ0eDM1n6VCba2LSvn lFrNxx+1iQUskkO4RXXs6k02+qFKRKVInea3wIU+TE0He7drEY99HDNEIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKyYOFT0DYEp2nWwo93fsvSSeSCrMB8GA1UdIwQY MBaAFNNTDBRPWSz6iRur8ZWoF5AM1tkWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDFNTUZFOVpMUHFKRzZ2eGxhZ1hrQXpXMlJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9kM2NjODAtYzFkZS00OThmLTg4ZWYt NmJhNzk5NTdlODYyLzEvMDFNTUZFOVpMUHFKRzZ2eGxhZ1hrQXpXMlJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9kM2NjODAtYzFkZS00OThmLTg4ZWYtNmJhNzk5NTdlODYy LzEvMDFNTUZFOVpMUHFKRzZ2eGxhZ1hrQXpXMlJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbFOMIVpJ 95DqHH8W0Nc/eacQsYpot5NRPPuBGVHZG2cQeKQTnwL36OP2nHtcJos71+5xEK/X 6KDsZvlQQ6hLRM9MC77Ue2NXxrB8N5oMyT5NN2EUgx9G5FWmzh/WqX7JxYxVImhr F5WnggbZpGgvWOFbNQX65uq3jVPg/uxVCcJUDohodEIgJQKLGVE21e9Sie5k8U4x K1KF+PK/uSilLvz/LTxBJXaDQMtUr/Wk2QG3xTS7k4hlwwzUCycm51Gurt1bVQXE aUeM9x2LcCX3QamEvyV6NY9b7KmLlKtTzuXYVwuAYp2IozUhpnKsrhQs/3dX4+/1 lt2eV8o08qFCOw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:43 2026 by rpki-client