This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/mk-ppgpaJP_mFLbftYgT2SWjsxg.mft File: mk-ppgpaJP_mFLbftYgT2SWjsxg.mft (raw, json) Hash identifier: ZqXAakvkAoDSnCtR1V1bgdkKuWwnugi9MyUzluNKxc8= Subject key identifier: 54:42:0A:6D:1A:A8:17:2E:60:4F:F7:D3:8A:49:18:67:D7:49:0B:83 Authority key identifier: 9A:4F:A9:A6:0A:5A:24:FF:E6:14:B6:DF:B5:88:13:D9:25:A3:B3:18 Certificate issuer: /CN=9a4fa9a60a5a24ffe614b6dfb58813d925a3b318 Certificate serial: 019C41D83FED45F7E21B0557E77763FCBE25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mk-ppgpaJP_mFLbftYgT2SWjsxg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/mk-ppgpaJP_mFLbftYgT2SWjsxg.mft Manifest number: 0F25 Signing time: Mon 09 Feb 2026 10:00:16 +0000 Manifest this update: Mon 09 Feb 2026 10:00:16 +0000 Manifest next update: Tue 10 Feb 2026 10:00:16 +0000 Files and hashes: 1: 135bFZLoopnIepwNcNi6B_e5Go8.roa (hash: exHBkaVEfi0kzao9gSKTmFTCSigZ4hNeMaSzc8f+Tpg=) 2: mk-ppgpaJP_mFLbftYgT2SWjsxg.crl (hash: 7lZ0ozC7l20Kq9Rqn2zAhay6poet7a+jupSUlm8OaQE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/mk-ppgpaJP_mFLbftYgT2SWjsxg.crl rsync://rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/mk-ppgpaJP_mFLbftYgT2SWjsxg.mft rsync://rpki.ripe.net/repository/DEFAULT/mk-ppgpaJP_mFLbftYgT2SWjsxg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:3f:ed:45:f7:e2:1b:05:57:e7:77:63:fc:be:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a4fa9a60a5a24ffe614b6dfb58813d925a3b318 Validity Not Before: Feb 9 10:00:16 2026 GMT Not After : Feb 10 10:00:16 2026 GMT Subject: CN=54420a6d1aa8172e604ff7d38a491867d7490b83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:20:fc:6e:09:ab:b7:cb:02:cf:b2:30:9c:a6: c3:e0:a8:b8:5c:76:13:37:67:ff:62:1b:21:d7:32: 92:85:1b:a5:c9:0a:81:03:ad:a1:66:a6:6b:48:89: bb:51:11:d7:7f:1b:4d:0a:ad:93:9b:6f:54:db:fb: 51:41:b5:71:77:db:63:38:2f:81:41:5f:75:5d:24: f6:79:18:40:96:55:e0:eb:5a:d6:2c:79:d4:4b:44: 19:89:fe:df:08:be:76:ed:e2:1c:22:a5:7b:8a:92: de:62:df:4b:3c:e3:08:30:37:a7:14:07:33:77:b5: ea:93:d0:71:ba:86:79:be:0d:77:ed:b8:ba:75:02: ff:17:d4:08:f6:8e:89:29:45:12:95:f1:21:7e:44: a2:7e:7d:d6:2a:4d:94:c7:c5:6f:b9:75:3b:52:2e: b6:d6:ad:05:b0:ce:a0:89:e5:c6:b8:7d:ad:cf:a8: 0e:a3:69:d2:af:c7:24:51:bc:7b:e2:10:8f:2f:3b: 27:9a:1a:50:2b:fc:75:3f:59:60:76:4a:3e:25:2c: 53:dd:5c:d2:67:4a:91:ef:58:ff:a3:7f:dc:6e:32: 84:a5:04:98:10:ff:18:8d:63:a0:ae:c3:bf:7b:6c: fd:9f:7d:07:38:7b:a4:ae:77:6a:af:1d:5e:9a:fb: ec:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:42:0A:6D:1A:A8:17:2E:60:4F:F7:D3:8A:49:18:67:D7:49:0B:83 X509v3 Authority Key Identifier: keyid:9A:4F:A9:A6:0A:5A:24:FF:E6:14:B6:DF:B5:88:13:D9:25:A3:B3:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk-ppgpaJP_mFLbftYgT2SWjsxg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/mk-ppgpaJP_mFLbftYgT2SWjsxg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/mk-ppgpaJP_mFLbftYgT2SWjsxg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:c2:42:2b:4e:7a:57:6b:86:19:a3:30:7e:16:64:90:27:0c: 4e:11:56:1c:13:11:5c:c4:4f:25:18:ae:49:b0:7d:9d:93:84: 22:5e:e2:02:b0:2b:1b:eb:82:00:d3:f1:8c:d6:71:07:fc:05: 37:47:ce:5a:12:a0:ac:94:e0:12:d6:4a:98:dd:f4:ce:0c:b1: 35:dd:d3:35:3a:2d:47:c8:0c:ed:55:89:98:38:98:41:2f:8f: dc:51:c7:23:80:1b:86:c2:5d:e1:1c:3d:cf:ca:9c:b6:95:68: e9:a8:66:79:81:0f:98:1f:77:da:f4:85:17:1d:c0:40:5d:12: 87:a1:e5:28:4f:b0:ae:ac:ee:61:66:0d:1b:28:4e:1b:30:bc: 97:7a:51:74:9a:d9:5c:ae:67:0a:df:6d:f8:b7:78:bc:7c:92: 94:02:d2:36:5d:14:86:76:09:32:fa:20:67:45:8b:2e:b3:70: 07:de:68:51:e8:a2:25:7c:f0:62:3a:26:b2:a4:9f:5f:3a:33: 7e:9e:4e:cd:84:46:69:5a:be:92:fe:e7:39:bb:44:5c:a8:e5: 20:57:5c:1a:dc:de:ed:e8:19:0f:39:b7:f8:30:ad:14:af:8d: 7c:69:30:75:68:44:26:1a:fd:3e:51:34:73:58:8d:e7:a5:c7: 35:99:fd:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2D/tRffiGwVX53dj/L4lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNGZhOWE2MGE1YTI0ZmZlNjE0YjZkZmI1ODgxM2Q5MjVh M2IzMTgwHhcNMjYwMjA5MTAwMDE2WhcNMjYwMjEwMTAwMDE2WjAzMTEwLwYDVQQD Eyg1NDQyMGE2ZDFhYTgxNzJlNjA0ZmY3ZDM4YTQ5MTg2N2Q3NDkwYjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4iD8bgmrt8sCz7IwnKbD4Ki4XHYT N2f/Yhsh1zKShRulyQqBA62hZqZrSIm7URHXfxtNCq2Tm29U2/tRQbVxd9tjOC+B QV91XST2eRhAllXg61rWLHnUS0QZif7fCL527eIcIqV7ipLeYt9LPOMIMDenFAcz d7Xqk9BxuoZ5vg137bi6dQL/F9QI9o6JKUUSlfEhfkSifn3WKk2Ux8VvuXU7Ui62 1q0FsM6gieXGuH2tz6gOo2nSr8ckUbx74hCPLzsnmhpQK/x1P1lgdko+JSxT3VzS Z0qR71j/o3/cbjKEpQSYEP8YjWOgrsO/e2z9n30HOHukrndqrx1emvvszwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFRCCm0aqBcuYE/304pJGGfXSQuDMB8GA1UdIwQY MBaAFJpPqaYKWiT/5hS237WIE9klo7MYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWstcHBncGFKUF9tRkxiZnRZZ1QyU1dqc3hnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC81YjA0OTQtNWFkNi00ZWE0LTk1ZmEt YTgzZDlkOTIwZDMxLzEvbWstcHBncGFKUF9tRkxiZnRZZ1QyU1dqc3hnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC81YjA0OTQtNWFkNi00ZWE0LTk1ZmEtYTgzZDlkOTIwZDMx LzEvbWstcHBncGFKUF9tRkxiZnRZZ1QyU1dqc3hnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbMJCK056 V2uGGaMwfhZkkCcMThFWHBMRXMRPJRiuSbB9nZOEIl7iArArG+uCANPxjNZxB/wF N0fOWhKgrJTgEtZKmN30zgyxNd3TNTotR8gM7VWJmDiYQS+P3FHHI4AbhsJd4Rw9 z8qctpVo6ahmeYEPmB932vSFFx3AQF0Sh6HlKE+wrqzuYWYNGyhOGzC8l3pRdJrZ XK5nCt9t+Ld4vHySlALSNl0UhnYJMvogZ0WLLrNwB95oUeiiJXzwYjomsqSfXzoz fp5OzYRGaVq+kv7nObtEXKjlIFdcGtze7egZDzm3+DCtFK+NfGkwdWhEJhr9PlE0 c1iN56XHNZn9vg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:22 2026 by rpki-client