This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft File: rmgsTwopQO6oclQqYhXjVJkd60s.mft (raw, json) Hash identifier: NRxvp3rKJBe58sxgiuAlfpGfVMfjPTO+Rou376m/Yfc= Subject key identifier: E7:1B:29:C4:0F:7C:D0:D7:B3:79:C1:33:8F:CA:90:86:79:D6:36:3D Authority key identifier: AE:68:2C:4F:0A:29:40:EE:A8:72:54:2A:62:15:E3:54:99:1D:EB:4B Certificate issuer: /CN=ae682c4f0a2940eea872542a6215e354991deb4b Certificate serial: 019C438FF2D60ADFF8AAE45F0C2B172B8749 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmgsTwopQO6oclQqYhXjVJkd60s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 18:00:32 +0000 Manifest this update: Mon 09 Feb 2026 18:00:32 +0000 Manifest next update: Tue 10 Feb 2026 18:00:32 +0000 Files and hashes: 1: nQwNTcvcN16kGMcF9EkVK9LTmpA.roa (hash: fbtF0vzhJretPqTSidwr3SzDufK3auj33qZoaGUrKJc=) 2: rmgsTwopQO6oclQqYhXjVJkd60s.crl (hash: RPZ7bsPnDBYoc8oABWY8PaSD0KOQ6pKMpSrUdf5JVtg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft rsync://rpki.ripe.net/repository/DEFAULT/rmgsTwopQO6oclQqYhXjVJkd60s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:f2:d6:0a:df:f8:aa:e4:5f:0c:2b:17:2b:87:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae682c4f0a2940eea872542a6215e354991deb4b Validity Not Before: Feb 9 18:00:32 2026 GMT Not After : Feb 10 18:00:32 2026 GMT Subject: CN=e71b29c40f7cd0d7b379c1338fca908679d6363d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:38:5c:f1:36:ae:4a:ac:46:2b:c1:f7:31:90: 89:f2:eb:f5:e4:b0:2c:3c:72:96:aa:67:dd:53:ab: 86:e0:49:05:8e:58:91:09:7f:5f:7d:2c:7f:cf:e1: f3:e0:27:31:d3:b8:5a:2c:9a:be:72:09:b4:30:4d: dc:49:a7:48:32:4e:71:4e:c1:27:6d:e3:a5:3d:9e: 58:a8:d7:50:e1:f6:fc:a2:3c:1a:cc:82:d9:1e:25: b0:cf:3b:3c:1d:ea:c5:18:e9:02:62:f5:7e:33:d0: 99:ce:49:89:2d:12:90:40:01:a0:4d:76:f4:1a:5f: b4:3b:4f:1d:d4:b5:83:fa:3d:a7:af:76:83:67:e0: 5f:64:39:bb:a5:b4:dd:84:3a:2f:93:63:0b:9f:7a: 0a:ed:00:02:af:92:43:b4:76:00:f0:91:be:51:eb: f4:d7:e3:42:b1:92:06:1f:28:ef:7e:9a:3b:88:67: 73:13:62:94:7f:8d:2a:57:a3:b9:00:9c:62:63:f4: 0c:12:e0:86:09:d3:dc:d9:d3:1c:05:ef:1f:b7:a9: 84:62:e0:ea:7e:cc:81:f0:66:d7:9a:fe:4d:30:2b: c9:1b:46:63:a1:ab:27:1f:96:ed:98:97:61:c6:ca: a0:e8:a1:3b:7a:7e:f7:23:11:44:71:87:1e:1f:89: 1e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:1B:29:C4:0F:7C:D0:D7:B3:79:C1:33:8F:CA:90:86:79:D6:36:3D X509v3 Authority Key Identifier: keyid:AE:68:2C:4F:0A:29:40:EE:A8:72:54:2A:62:15:E3:54:99:1D:EB:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmgsTwopQO6oclQqYhXjVJkd60s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:dc:a8:f1:8a:72:38:c8:df:8b:05:8f:c1:4a:ae:22:bc:68: da:de:4b:d3:cf:7c:19:ae:40:b0:56:dd:f3:c8:38:66:da:d3: b6:59:a6:01:6c:a2:c5:c4:29:7b:11:31:d3:97:cd:90:9e:b0: db:94:98:26:70:e5:15:18:fa:82:a1:17:21:b3:2a:3f:78:70: 84:a7:68:4a:14:5a:d3:72:16:83:7a:61:f1:b5:f9:67:5a:74: 0b:fb:c8:e3:cd:b1:2c:9f:eb:7b:21:6b:99:17:70:13:aa:ad: 0c:93:4a:51:4b:39:ab:3d:d9:73:69:d4:8b:38:75:8e:f3:49: 62:61:f9:23:d3:78:b0:79:d5:7b:78:fb:b9:0a:dc:48:51:40: 96:47:98:6d:62:14:15:33:8c:cb:e9:9b:4c:7c:22:1d:76:ef: 9f:11:ec:72:6b:58:3b:86:86:e2:8a:b0:7f:6a:08:5a:5d:34: b4:af:05:32:1b:ab:1a:59:1a:1e:b8:e2:26:a6:70:52:a9:67: 90:eb:91:3c:d7:e7:a2:21:02:d9:9c:27:51:06:30:fd:a9:73: 8b:9d:1a:b8:d3:7c:ce:a1:03:bf:7b:05:bc:2c:4c:c6:6d:70: 99:44:15:1d:df:e6:f5:51:65:0e:21:8d:6a:16:16:8e:24:81: e5:54:06:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj/LWCt/4quRfDCsXK4dJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNjgyYzRmMGEyOTQwZWVhODcyNTQyYTYyMTVlMzU0OTkx ZGViNGIwHhcNMjYwMjA5MTgwMDMyWhcNMjYwMjEwMTgwMDMyWjAzMTEwLwYDVQQD EyhlNzFiMjljNDBmN2NkMGQ3YjM3OWMxMzM4ZmNhOTA4Njc5ZDYzNjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzhc8TauSqxGK8H3MZCJ8uv15LAs PHKWqmfdU6uG4EkFjliRCX9ffSx/z+Hz4Ccx07haLJq+cgm0ME3cSadIMk5xTsEn beOlPZ5YqNdQ4fb8ojwazILZHiWwzzs8HerFGOkCYvV+M9CZzkmJLRKQQAGgTXb0 Gl+0O08d1LWD+j2nr3aDZ+BfZDm7pbTdhDovk2MLn3oK7QACr5JDtHYA8JG+Uev0 1+NCsZIGHyjvfpo7iGdzE2KUf40qV6O5AJxiY/QMEuCGCdPc2dMcBe8ft6mEYuDq fsyB8GbXmv5NMCvJG0ZjoasnH5btmJdhxsqg6KE7en73IxFEcYceH4kexwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOcbKcQPfNDXs3nBM4/KkIZ51jY9MB8GA1UdIwQY MBaAFK5oLE8KKUDuqHJUKmIV41SZHetLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm1nc1R3b3BRTzZvY2xRcVloWGpWSmtkNjBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9jNjJjN2YtZjQ2Mi00MzQ4LWIwNjgt ZjA0OWM2NmVmODExLzEvcm1nc1R3b3BRTzZvY2xRcVloWGpWSmtkNjBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9jNjJjN2YtZjQ2Mi00MzQ4LWIwNjgtZjA0OWM2NmVmODEx LzEvcm1nc1R3b3BRTzZvY2xRcVloWGpWSmtkNjBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALdyo8Ypy OMjfiwWPwUquIrxo2t5L0898Ga5AsFbd88g4ZtrTtlmmAWyixcQpexEx05fNkJ6w 25SYJnDlFRj6gqEXIbMqP3hwhKdoShRa03IWg3ph8bX5Z1p0C/vI482xLJ/reyFr mRdwE6qtDJNKUUs5qz3Zc2nUizh1jvNJYmH5I9N4sHnVe3j7uQrcSFFAlkeYbWIU FTOMy+mbTHwiHXbvnxHscmtYO4aG4oqwf2oIWl00tK8FMhurGlkaHrjiJqZwUqln kOuRPNfnoiEC2ZwnUQYw/alzi50auNN8zqEDv3sFvCxMxm1wmUQVHd/m9VFlDiGN ahYWjiSB5VQGYA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:01:22 2026 by rpki-client