This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft File: cMySQTZlvWsN3lGpprVl5ywyHlI.mft (raw, json) Hash identifier: 6JjvsL2II93bwUVHMx0LLuShOAEe8lJxvAYkHhgUnMY= Subject key identifier: 1D:D8:D4:E6:67:2F:91:AB:35:0B:8B:01:0B:E7:E0:1C:AA:6D:C3:3E Authority key identifier: 70:CC:92:41:36:65:BD:6B:0D:DE:51:A9:A6:B5:65:E7:2C:32:1E:52 Certificate issuer: /CN=70cc92413665bd6b0dde51a9a6b565e72c321e52 Certificate serial: 019C43227D3B60BAD289DAEB307B743D0241 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft Manifest number: 08EC Signing time: Mon 09 Feb 2026 16:00:59 +0000 Manifest this update: Mon 09 Feb 2026 16:00:59 +0000 Manifest next update: Tue 10 Feb 2026 16:00:59 +0000 Files and hashes: 1: cMySQTZlvWsN3lGpprVl5ywyHlI.crl (hash: II8ys/zD6qKcHZ1Bafdj7n/pSgUg5Jf8pB54mb690CQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.crl rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:7d:3b:60:ba:d2:89:da:eb:30:7b:74:3d:02:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70cc92413665bd6b0dde51a9a6b565e72c321e52 Validity Not Before: Feb 9 16:00:59 2026 GMT Not After : Feb 10 16:00:59 2026 GMT Subject: CN=1dd8d4e6672f91ab350b8b010be7e01caa6dc33e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:79:5a:ee:74:cc:f1:87:97:41:cf:b3:32:17: ea:a6:cf:a5:e5:bc:e6:75:b5:6a:2d:cb:f5:67:8b: e5:5c:15:06:d3:b0:be:6a:75:86:f9:a7:5e:87:35: 85:13:4b:39:4c:53:e8:0d:ad:4a:77:31:80:4f:0b: bd:8c:ea:47:c7:34:bb:bf:86:d9:67:6a:28:0a:96: 5f:fa:ae:4e:6a:15:88:56:28:83:9d:19:07:75:58: 5d:b3:01:2f:db:b0:aa:15:5e:cb:70:03:74:42:4e: 36:09:53:72:9b:f6:8c:54:99:94:96:e4:5e:55:47: 2f:5d:61:13:6a:37:70:5d:04:44:49:4d:59:7c:01: c3:69:b9:e5:97:2f:5e:f7:0c:9e:c0:61:d5:a4:b5: 76:35:ce:58:0a:8e:7f:bb:b1:70:56:28:22:38:b8: 56:fd:a5:1c:d8:17:d4:4a:25:af:b4:bf:fc:72:65: b4:08:e8:5d:c9:69:33:26:5b:5a:a7:b4:19:37:dd: 7b:28:c5:87:79:27:b5:f2:bf:15:74:ea:e0:72:e3: ce:a2:5a:e8:19:bd:c7:f5:e2:ad:cc:64:f8:2b:80: d2:cb:46:a1:86:d7:8b:ba:25:81:55:e2:b4:99:40: 4c:a7:e6:29:82:1b:f6:c4:2a:6a:8d:33:7c:4f:f1: 19:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:D8:D4:E6:67:2F:91:AB:35:0B:8B:01:0B:E7:E0:1C:AA:6D:C3:3E X509v3 Authority Key Identifier: keyid:70:CC:92:41:36:65:BD:6B:0D:DE:51:A9:A6:B5:65:E7:2C:32:1E:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:01:67:21:3e:32:a5:e5:1b:73:32:fd:fb:dc:4b:09:4f:24: 37:57:c4:db:5d:fc:e6:73:6b:82:2b:2a:53:f2:47:67:ab:8a: 12:ae:db:84:91:6f:e4:b0:0a:38:ef:c0:df:01:16:e9:25:15: 4c:7e:0b:13:c5:19:ec:02:02:a4:01:17:38:02:7b:d7:69:43: ed:b5:d8:4d:e3:95:a5:3c:a3:cf:27:b5:3c:9b:8d:ca:2d:b9: 86:2b:f2:a8:ad:9e:5c:99:6e:30:4b:4f:21:4a:ae:9c:3e:d7: 50:55:9d:13:8e:b2:b9:40:ca:d3:71:6e:08:bf:54:7b:95:d4: 63:7f:a1:58:0d:26:6d:ee:68:86:74:0d:1c:d2:d4:af:92:94: 4c:a6:53:9a:7a:8c:b4:ce:f6:06:ff:78:51:fc:ba:5c:d0:a7: 1c:8f:b8:3e:e7:bd:da:6c:bf:7c:41:3f:6f:58:6f:95:f3:4b: 3b:b7:48:48:aa:83:56:0c:57:1c:f2:a0:f0:33:fe:54:27:32: 4d:af:16:3e:f8:e0:bc:f2:bb:ee:3d:88:1e:65:8b:7d:dc:ea: cb:08:b0:cd:65:ea:fd:32:79:27:16:a4:da:0a:b8:5e:66:a0: 0f:20:0e:4a:ba:5f:3b:b7:0e:1f:a7:21:2c:a7:8c:20:f3:0e: 9d:8b:47:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIn07YLrSidrrMHt0PQJBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwY2M5MjQxMzY2NWJkNmIwZGRlNTFhOWE2YjU2NWU3MmMz MjFlNTIwHhcNMjYwMjA5MTYwMDU5WhcNMjYwMjEwMTYwMDU5WjAzMTEwLwYDVQQD EygxZGQ4ZDRlNjY3MmY5MWFiMzUwYjhiMDEwYmU3ZTAxY2FhNmRjMzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nla7nTM8YeXQc+zMhfqps+l5bzm dbVqLcv1Z4vlXBUG07C+anWG+adehzWFE0s5TFPoDa1KdzGATwu9jOpHxzS7v4bZ Z2ooCpZf+q5OahWIViiDnRkHdVhdswEv27CqFV7LcAN0Qk42CVNym/aMVJmUluRe VUcvXWETajdwXQRESU1ZfAHDabnlly9e9wyewGHVpLV2Nc5YCo5/u7FwVigiOLhW /aUc2BfUSiWvtL/8cmW0COhdyWkzJltap7QZN917KMWHeSe18r8VdOrgcuPOolro Gb3H9eKtzGT4K4DSy0ahhteLuiWBVeK0mUBMp+Ypghv2xCpqjTN8T/EZ/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB3Y1OZnL5GrNQuLAQvn4ByqbcM+MB8GA1UdIwQY MBaAFHDMkkE2Zb1rDd5Rqaa1ZecsMh5SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY015U1FUWmx2V3NOM2xHcHByVmw1eXd5SGxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC82ZWY4MzItZDRhMy00NjE0LTgzZWIt YmExNzdjMTk3OTY1LzEvY015U1FUWmx2V3NOM2xHcHByVmw1eXd5SGxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC82ZWY4MzItZDRhMy00NjE0LTgzZWItYmExNzdjMTk3OTY1 LzEvY015U1FUWmx2V3NOM2xHcHByVmw1eXd5SGxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAowFnIT4y peUbczL9+9xLCU8kN1fE21385nNrgisqU/JHZ6uKEq7bhJFv5LAKOO/A3wEW6SUV TH4LE8UZ7AICpAEXOAJ712lD7bXYTeOVpTyjzye1PJuNyi25hivyqK2eXJluMEtP IUqunD7XUFWdE46yuUDK03FuCL9Ue5XUY3+hWA0mbe5ohnQNHNLUr5KUTKZTmnqM tM72Bv94Ufy6XNCnHI+4Pue92my/fEE/b1hvlfNLO7dISKqDVgxXHPKg8DP+VCcy Ta8WPvjgvPK77j2IHmWLfdzqywiwzWXq/TJ5Jxak2gq4XmagDyAOSrpfO7cOH6ch LKeMIPMOnYtHbg== -----END CERTIFICATE-----Generated at Mon Feb 9 21:09:40 2026 by rpki-client