This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft File: mryiPS4rrR-1eI3bX1pvx6tiyiA.mft (raw, json) Hash identifier: xjtocXWyZLbILg1ArKQ/J49Eb0GT4yoGZhddylKa8Wc= Subject key identifier: 0B:94:9C:25:D2:09:8A:C6:EC:57:5B:80:CB:1D:01:8A:67:02:B6:D1 Authority key identifier: 9A:BC:A2:3D:2E:2B:AD:1F:B5:78:8D:DB:5F:5A:6F:C7:AB:62:CA:20 Certificate issuer: /CN=9abca23d2e2bad1fb5788ddb5f5a6fc7ab62ca20 Certificate serial: 019C420F69736C0FF0CA7BDC4F56E27D6F8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft Manifest number: 01E0 Signing time: Mon 09 Feb 2026 11:00:32 +0000 Manifest this update: Mon 09 Feb 2026 11:00:32 +0000 Manifest next update: Tue 10 Feb 2026 11:00:32 +0000 Files and hashes: 1: cAKVqYBd9IcAL6r2ZvxM_Qj1ndI.roa (hash: XqFaKsdiSRNsnwScS0QPlL53huZcp/xfhEBOIjWXbkk=) 2: mryiPS4rrR-1eI3bX1pvx6tiyiA.crl (hash: V4eQ6k+zzjheik/toYP8HbnNzJex6pdyJVUzYXCHwVA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.crl rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:69:73:6c:0f:f0:ca:7b:dc:4f:56:e2:7d:6f:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9abca23d2e2bad1fb5788ddb5f5a6fc7ab62ca20 Validity Not Before: Feb 9 11:00:32 2026 GMT Not After : Feb 10 11:00:32 2026 GMT Subject: CN=0b949c25d2098ac6ec575b80cb1d018a6702b6d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2e:d1:43:93:58:c7:c4:70:d9:b7:11:3e:ad: 61:cc:a2:a7:66:bd:ea:dd:99:9a:bf:e1:0c:ef:46: 03:c4:40:f1:8e:42:74:88:b4:17:98:dc:7c:19:7f: b2:e0:72:85:31:53:2b:8c:16:21:e6:93:1c:19:2c: 58:98:4b:78:4d:fb:3b:02:44:c7:76:e8:c4:a0:62: 3f:42:55:03:8f:c2:91:58:33:88:38:d4:ca:b4:98: 0d:ea:62:db:e2:28:c3:ac:f5:1f:90:71:45:e6:a5: b7:20:e5:f4:9e:c6:13:8b:5e:ff:2d:bd:e4:95:af: 97:98:0e:4c:b3:14:1e:78:7a:52:1c:dd:6a:87:e9: 3d:23:85:9d:d1:b2:0e:7c:fe:28:f7:e9:d9:63:bd: f3:33:30:83:b8:eb:f7:40:2d:12:a6:b3:5e:cd:4e: 47:1d:ed:e2:4f:5e:d4:8a:8b:56:37:a0:b9:2b:b9: a0:c9:87:a6:86:e9:28:3e:89:6a:99:32:b1:93:96: 7c:8e:33:33:14:92:42:7b:a7:79:2c:04:53:3b:a7: e1:72:fc:a3:d5:ef:ea:13:83:28:cb:c5:da:64:53: 4a:68:61:57:aa:72:fd:49:5a:43:57:af:ac:ee:c5: fe:6a:aa:d3:ca:fb:e7:5c:8b:66:73:19:9d:bc:44: ac:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:94:9C:25:D2:09:8A:C6:EC:57:5B:80:CB:1D:01:8A:67:02:B6:D1 X509v3 Authority Key Identifier: keyid:9A:BC:A2:3D:2E:2B:AD:1F:B5:78:8D:DB:5F:5A:6F:C7:AB:62:CA:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:e2:82:2e:32:69:a9:f3:71:99:9f:c2:85:ce:e1:0d:2a:be: eb:2d:b2:2f:bf:f7:fc:ed:6d:5e:d9:4d:93:4f:d0:aa:e9:9e: f1:94:56:01:0b:16:3f:9d:c3:b1:c4:57:c9:0b:16:a6:7a:b9: af:45:e4:91:ce:86:10:16:a2:36:af:4d:34:bf:0c:7c:bc:d4: a2:5c:54:2f:40:b2:5d:37:a5:36:28:7c:fc:b7:17:6f:db:59: d4:ea:53:4b:6b:7e:26:29:91:30:89:32:3f:fa:81:9e:a9:0f: 35:e5:2e:45:24:43:d0:0b:14:d2:5c:38:5d:e5:70:0c:7f:68: 6d:63:9c:8a:b3:25:af:a0:21:aa:87:9b:32:30:78:4f:9c:c8: b2:bf:95:f3:51:9b:fa:de:37:ef:a6:73:26:2d:e0:27:0f:06: 2c:2a:e4:26:40:09:1d:58:68:c0:75:3e:28:00:f1:a7:24:a9: 59:98:22:c3:53:41:20:10:ee:91:85:4f:4e:78:02:1e:f1:65: c8:d4:a0:4b:b1:60:71:a2:f4:ac:de:26:a6:5f:21:68:7b:5f: 04:f8:50:88:db:87:05:aa:c3:f0:99:f1:c1:bd:25:a9:e2:c9: e6:58:09:f6:29:1c:70:65:b6:45:7e:fc:57:d5:5f:cf:d5:2f: 99:2c:f4:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD2lzbA/wynvcT1bifW+PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhYmNhMjNkMmUyYmFkMWZiNTc4OGRkYjVmNWE2ZmM3YWI2 MmNhMjAwHhcNMjYwMjA5MTEwMDMyWhcNMjYwMjEwMTEwMDMyWjAzMTEwLwYDVQQD EygwYjk0OWMyNWQyMDk4YWM2ZWM1NzViODBjYjFkMDE4YTY3MDJiNmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmy7RQ5NYx8Rw2bcRPq1hzKKnZr3q 3Zmav+EM70YDxEDxjkJ0iLQXmNx8GX+y4HKFMVMrjBYh5pMcGSxYmEt4Tfs7AkTH dujEoGI/QlUDj8KRWDOIONTKtJgN6mLb4ijDrPUfkHFF5qW3IOX0nsYTi17/Lb3k la+XmA5MsxQeeHpSHN1qh+k9I4Wd0bIOfP4o9+nZY73zMzCDuOv3QC0SprNezU5H He3iT17UiotWN6C5K7mgyYemhukoPolqmTKxk5Z8jjMzFJJCe6d5LARTO6fhcvyj 1e/qE4Moy8XaZFNKaGFXqnL9SVpDV6+s7sX+aqrTyvvnXItmcxmdvESsVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAuUnCXSCYrG7FdbgMsdAYpnArbRMB8GA1UdIwQY MBaAFJq8oj0uK60ftXiN219ab8erYsogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXJ5aVBTNHJyUi0xZUkzYlgxcHZ4NnRpeWlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9mNDAwOWYtODI3NS00NzE2LTk5NzEt YmEzOWU3YzJmNmExLzEvbXJ5aVBTNHJyUi0xZUkzYlgxcHZ4NnRpeWlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9mNDAwOWYtODI3NS00NzE2LTk5NzEtYmEzOWU3YzJmNmEx LzEvbXJ5aVBTNHJyUi0xZUkzYlgxcHZ4NnRpeWlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAneKCLjJp qfNxmZ/Chc7hDSq+6y2yL7/3/O1tXtlNk0/Qqume8ZRWAQsWP53DscRXyQsWpnq5 r0Xkkc6GEBaiNq9NNL8MfLzUolxUL0CyXTelNih8/LcXb9tZ1OpTS2t+JimRMIky P/qBnqkPNeUuRSRD0AsU0lw4XeVwDH9obWOcirMlr6AhqoebMjB4T5zIsr+V81Gb +t4376ZzJi3gJw8GLCrkJkAJHVhowHU+KADxpySpWZgiw1NBIBDukYVPTngCHvFl yNSgS7FgcaL0rN4mpl8haHtfBPhQiNuHBarD8Jnxwb0lqeLJ5lgJ9ikccGW2RX78 V9Vfz9UvmSz0EA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:56:14 2026 by rpki-client