This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft File: MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft (raw, json) Hash identifier: fsuPYeDHfWBFTozncsqddmS1AjV62rq78WnkJkrvBFY= Subject key identifier: 45:B3:CC:0C:3E:BA:D7:98:33:2F:50:3E:9E:9F:32:67:AA:4A:C3:34 Authority key identifier: 31:F1:24:BD:8F:14:BB:98:A4:88:49:C5:20:58:37:32:3B:FC:F8:4C Certificate issuer: /CN=31f124bd8f14bb98a48849c5205837323bfcf84c Certificate serial: 019C43FDD1770F4A6AD8B6ABD4CBDAC9F974 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft Manifest number: 0631 Signing time: Mon 09 Feb 2026 20:00:33 +0000 Manifest this update: Mon 09 Feb 2026 20:00:33 +0000 Manifest next update: Tue 10 Feb 2026 20:00:33 +0000 Files and hashes: 1: MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.crl (hash: Docd5AOFULxGON3iOXyfMzBCVEnfkYJzIPvpneA/GtM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.crl rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft rsync://rpki.ripe.net/repository/DEFAULT/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:d1:77:0f:4a:6a:d8:b6:ab:d4:cb:da:c9:f9:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31f124bd8f14bb98a48849c5205837323bfcf84c Validity Not Before: Feb 9 20:00:33 2026 GMT Not After : Feb 10 20:00:33 2026 GMT Subject: CN=45b3cc0c3ebad798332f503e9e9f3267aa4ac334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d4:2f:b9:7d:ee:a5:a8:e8:0f:1b:4b:95:a4: 16:50:72:01:41:ff:30:1b:7f:44:74:23:34:f7:b1: 2d:5d:73:98:dc:0a:74:72:d4:27:93:27:61:5b:c4: 57:7d:38:fd:b9:ea:d0:27:aa:ac:ef:97:19:7f:e9: 08:c2:07:16:68:3f:5c:7b:c4:e9:2a:33:22:a8:ac: 91:70:d1:55:57:1d:80:df:71:ee:d1:e7:20:17:79: bb:71:59:b2:66:56:d4:f8:ef:b7:a9:2f:b8:b0:89: 56:3b:f2:c5:4a:b0:ed:f0:b5:ab:8e:68:e5:0f:e9: 46:62:4c:90:11:79:e6:74:0f:73:2f:f3:ea:9f:02: 19:ae:1d:f0:91:71:56:7b:97:18:ae:ff:5e:a0:d9: ef:6f:02:28:50:97:aa:3b:53:50:29:5f:77:ed:2e: 59:07:76:f7:d2:02:5f:32:be:59:42:2b:ed:2e:23: d7:4a:03:c8:ee:5d:db:cb:76:41:06:c5:c7:af:e5: 1e:60:7d:d8:00:be:57:ee:39:1a:69:02:8d:6e:cc: af:9b:f4:a1:2b:6f:ca:6d:5e:a9:6f:eb:84:a5:05: 3e:d4:ab:f1:9b:3b:10:5d:06:f6:80:f4:73:0a:11: d1:b3:d9:7f:c5:11:4d:0c:5f:3c:e3:d0:65:e8:83: f5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:B3:CC:0C:3E:BA:D7:98:33:2F:50:3E:9E:9F:32:67:AA:4A:C3:34 X509v3 Authority Key Identifier: keyid:31:F1:24:BD:8F:14:BB:98:A4:88:49:C5:20:58:37:32:3B:FC:F8:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:ed:76:c9:76:bc:82:3d:cc:d8:4a:43:bc:e4:96:96:99:0c: 01:9c:fa:0e:15:df:d1:ef:b2:1f:21:85:f1:18:4d:62:99:c8: e7:e2:0c:8c:94:f2:b3:48:b7:29:f7:c0:6a:0a:50:31:37:8d: 29:41:42:ec:a1:d3:09:77:a8:e4:bb:df:8b:7d:2d:98:d2:83: 0b:c8:ab:35:f5:11:56:79:be:2d:f1:6d:38:8c:66:88:e6:31: ba:e0:97:69:3a:2c:d2:e2:2b:0b:23:16:6f:56:8c:5c:6d:dc: 54:41:22:01:27:27:27:3f:36:19:e4:cc:16:62:66:33:a5:e0: d7:c9:53:a6:d5:b1:4b:6a:bb:33:34:13:94:54:e1:65:40:7a: 06:f8:b3:17:d2:d7:5c:cb:15:ef:bc:ee:a9:11:1a:0e:57:8b: 74:ba:38:9b:51:7f:f1:31:6a:41:30:7f:c2:d3:f8:8e:79:62: 88:b9:5d:1b:c0:db:a5:55:9f:75:70:03:52:9e:fe:c8:9e:7a: c4:2c:45:41:d2:d6:4b:3f:c1:48:15:4d:57:66:79:0d:f3:a7: cb:e2:d2:b9:7b:9f:45:4d:9e:2f:54:eb:85:eb:66:e0:8b:e2: b3:a7:8b:dd:90:c6:3f:68:d1:32:f1:18:76:5d:5d:ef:3c:c1: 12:8e:09:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/dF3D0pq2Lar1Mvayfl0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxZjEyNGJkOGYxNGJiOThhNDg4NDljNTIwNTgzNzMyM2Jm Y2Y4NGMwHhcNMjYwMjA5MjAwMDMzWhcNMjYwMjEwMjAwMDMzWjAzMTEwLwYDVQQD Eyg0NWIzY2MwYzNlYmFkNzk4MzMyZjUwM2U5ZTlmMzI2N2FhNGFjMzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9QvuX3upajoDxtLlaQWUHIBQf8w G39EdCM097EtXXOY3Ap0ctQnkydhW8RXfTj9uerQJ6qs75cZf+kIwgcWaD9ce8Tp KjMiqKyRcNFVVx2A33Hu0ecgF3m7cVmyZlbU+O+3qS+4sIlWO/LFSrDt8LWrjmjl D+lGYkyQEXnmdA9zL/PqnwIZrh3wkXFWe5cYrv9eoNnvbwIoUJeqO1NQKV937S5Z B3b30gJfMr5ZQivtLiPXSgPI7l3by3ZBBsXHr+UeYH3YAL5X7jkaaQKNbsyvm/Sh K2/KbV6pb+uEpQU+1KvxmzsQXQb2gPRzChHRs9l/xRFNDF8849Bl6IP1LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEWzzAw+uteYMy9QPp6fMmeqSsM0MB8GA1UdIwQY MBaAFDHxJL2PFLuYpIhJxSBYNzI7/PhMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWZFa3ZZOFV1NWlraUVuRklGZzNNanY4LUV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8zOGVlZTgtN2I1Yi00MzIzLThmYTUt NGNhYzJjMjA3NTNhLzEvTWZFa3ZZOFV1NWlraUVuRklGZzNNanY4LUV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi8zOGVlZTgtN2I1Yi00MzIzLThmYTUtNGNhYzJjMjA3NTNh LzEvTWZFa3ZZOFV1NWlraUVuRklGZzNNanY4LUV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApu12yXa8 gj3M2EpDvOSWlpkMAZz6DhXf0e+yHyGF8RhNYpnI5+IMjJTys0i3KffAagpQMTeN KUFC7KHTCXeo5Lvfi30tmNKDC8irNfURVnm+LfFtOIxmiOYxuuCXaTos0uIrCyMW b1aMXG3cVEEiAScnJz82GeTMFmJmM6Xg18lTptWxS2q7MzQTlFThZUB6BvizF9LX XMsV77zuqREaDleLdLo4m1F/8TFqQTB/wtP4jnliiLldG8DbpVWfdXADUp7+yJ56 xCxFQdLWSz/BSBVNV2Z5DfOny+LSuXufRU2eL1Trhetm4Ivis6eL3ZDGP2jRMvEY dl1d7zzBEo4J/A== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:41 2026 by rpki-client