This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft File: bMdYWreoPsgLVauVe_N7eR52UBY.mft (raw, json) Hash identifier: TZZZgl4xskh34E54Fr9vgrCE8aHp4d0tb/vnnyvkwFs= Subject key identifier: 2B:66:12:10:13:D2:21:9B:A4:0F:38:FE:72:7F:FC:BC:CA:0C:0C:2E Authority key identifier: 6C:C7:58:5A:B7:A8:3E:C8:0B:55:AB:95:7B:F3:7B:79:1E:76:50:16 Certificate issuer: /CN=6cc7585ab7a83ec80b55ab957bf37b791e765016 Certificate serial: 019C43FE96AC4DE2324CA9DB04000F31CDD5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMdYWreoPsgLVauVe_N7eR52UBY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft Manifest number: 157C Signing time: Mon 09 Feb 2026 20:01:24 +0000 Manifest this update: Mon 09 Feb 2026 20:01:24 +0000 Manifest next update: Tue 10 Feb 2026 20:01:24 +0000 Files and hashes: 1: bMdYWreoPsgLVauVe_N7eR52UBY.crl (hash: X4L4Tklzt/ZXanYTf4FVGvouCWQxfYSpNX9MYZxdQTY=) 2: e51r6d8MY0z0wgESUl_beU3OIIY.roa (hash: NKb+xyyt/CtCVFv1JVTrUrEnFhYCHL7jXn1hVp8rZ4E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft rsync://rpki.ripe.net/repository/DEFAULT/bMdYWreoPsgLVauVe_N7eR52UBY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:96:ac:4d:e2:32:4c:a9:db:04:00:0f:31:cd:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cc7585ab7a83ec80b55ab957bf37b791e765016 Validity Not Before: Feb 9 20:01:24 2026 GMT Not After : Feb 10 20:01:24 2026 GMT Subject: CN=2b66121013d2219ba40f38fe727ffcbcca0c0c2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c9:25:0d:4b:e9:df:a9:3c:0f:eb:18:94:05: 83:a1:3f:a5:d0:2b:69:c7:0b:63:d4:79:bf:cf:1b: 81:de:4c:2a:f4:0a:fd:0b:00:e3:2b:41:9f:a1:d4: 0b:75:c0:9f:4c:56:07:f9:ae:60:6d:d9:39:0f:ba: a1:fd:b6:68:96:f8:5e:21:cd:47:8f:f4:2c:cd:d4: 65:f6:22:07:59:d1:b4:52:f3:3b:79:88:4c:4b:b7: 90:7a:2e:f3:9a:91:6c:c2:8e:2a:db:b9:7f:e6:a3: 0a:db:44:62:c0:70:54:ed:be:9e:54:8e:e0:1d:d9: 4b:9a:68:af:b0:92:bb:0a:b4:22:fb:d3:6a:6a:0b: 85:1d:27:a5:bc:fe:e4:99:7b:82:8b:8a:06:fc:53: 7c:1a:c5:70:99:72:99:cf:71:0d:0b:5b:48:4e:6b: 5f:25:e5:9f:b3:bc:8f:6b:44:a3:55:1c:c7:58:b0: b3:e8:a0:3d:9c:7a:dc:fa:9f:d0:e1:0c:29:55:52: 97:d0:cd:b0:ad:a1:e2:fb:b8:3d:e4:e5:ec:bc:ed: 07:ec:8a:f3:f5:30:9c:e7:f2:ad:10:6d:69:8a:38: 6f:63:b7:fb:7d:37:11:32:c4:3c:dd:df:19:29:b5: 72:73:df:44:92:29:53:0b:ce:43:23:b5:51:5e:49: c8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:66:12:10:13:D2:21:9B:A4:0F:38:FE:72:7F:FC:BC:CA:0C:0C:2E X509v3 Authority Key Identifier: keyid:6C:C7:58:5A:B7:A8:3E:C8:0B:55:AB:95:7B:F3:7B:79:1E:76:50:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMdYWreoPsgLVauVe_N7eR52UBY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:cb:57:62:43:fb:3f:85:01:2b:f6:33:de:2c:bd:46:88:df: da:30:2b:de:2f:ac:16:81:15:4f:f6:6f:06:fe:ec:9e:6d:15: cf:34:7d:ad:dd:b5:10:02:d4:e0:21:25:ac:30:db:60:03:19: 6c:38:3a:5e:ab:99:53:77:be:53:0e:9b:51:21:1d:10:fd:6b: d3:b9:b8:f2:2a:38:45:85:4f:dd:8f:df:ac:66:5f:d1:89:94: f7:2b:eb:82:5b:92:d0:0c:81:50:a1:64:d0:45:63:78:06:7a: f1:f2:95:d6:79:1f:17:e8:7d:f0:2c:7d:e9:6e:e0:81:03:f9: 8f:1c:21:4b:4c:1e:0b:24:86:76:ab:e0:dd:c0:6a:1e:32:3c: ed:9f:e8:48:a5:d7:09:83:23:46:52:7a:b8:18:05:93:49:64: 30:b7:b1:70:46:ba:8d:5b:b7:37:c0:de:44:f7:98:1d:46:e7: d7:b7:7b:d2:c8:28:ed:de:b5:26:d1:55:04:25:f3:a5:6e:de: 1c:3f:8f:47:54:f6:7a:34:30:b5:54:e2:ee:04:71:61:b5:43: 63:1a:13:55:a7:08:50:78:40:58:54:fc:d8:12:0c:e2:c7:54: 1b:e5:65:7b:60:d7:59:a7:87:3e:09:30:c4:17:c5:71:06:64: cf:2c:c7:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/pasTeIyTKnbBAAPMc3VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYzc1ODVhYjdhODNlYzgwYjU1YWI5NTdiZjM3Yjc5MWU3 NjUwMTYwHhcNMjYwMjA5MjAwMTI0WhcNMjYwMjEwMjAwMTI0WjAzMTEwLwYDVQQD EygyYjY2MTIxMDEzZDIyMTliYTQwZjM4ZmU3MjdmZmNiY2NhMGMwYzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMklDUvp36k8D+sYlAWDoT+l0Ctp xwtj1Hm/zxuB3kwq9Ar9CwDjK0GfodQLdcCfTFYH+a5gbdk5D7qh/bZolvheIc1H j/QszdRl9iIHWdG0UvM7eYhMS7eQei7zmpFswo4q27l/5qMK20RiwHBU7b6eVI7g HdlLmmivsJK7CrQi+9NqaguFHSelvP7kmXuCi4oG/FN8GsVwmXKZz3ENC1tITmtf JeWfs7yPa0SjVRzHWLCz6KA9nHrc+p/Q4QwpVVKX0M2wraHi+7g95OXsvO0H7Irz 9TCc5/KtEG1pijhvY7f7fTcRMsQ83d8ZKbVyc99EkilTC85DI7VRXknIkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCtmEhAT0iGbpA84/nJ//LzKDAwuMB8GA1UdIwQY MBaAFGzHWFq3qD7IC1WrlXvze3kedlAWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk1kWVdyZW9Qc2dMVmF1VmVfTjdlUjUyVUJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83MDZmNDEtMDUzMS00M2RmLWIxZTkt NmY4NmQwYjdlM2UwLzEvYk1kWVdyZW9Qc2dMVmF1VmVfTjdlUjUyVUJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS83MDZmNDEtMDUzMS00M2RmLWIxZTktNmY4NmQwYjdlM2Uw LzEvYk1kWVdyZW9Qc2dMVmF1VmVfTjdlUjUyVUJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjctXYkP7 P4UBK/Yz3iy9Rojf2jAr3i+sFoEVT/ZvBv7snm0VzzR9rd21EALU4CElrDDbYAMZ bDg6XquZU3e+Uw6bUSEdEP1r07m48io4RYVP3Y/frGZf0YmU9yvrgluS0AyBUKFk 0EVjeAZ68fKV1nkfF+h98Cx96W7ggQP5jxwhS0weCySGdqvg3cBqHjI87Z/oSKXX CYMjRlJ6uBgFk0lkMLexcEa6jVu3N8DeRPeYHUbn17d70sgo7d61JtFVBCXzpW7e HD+PR1T2ejQwtVTi7gRxYbVDYxoTVacIUHhAWFT82BIM4sdUG+Vle2DXWaeHPgkw xBfFcQZkzyzH0A== -----END CERTIFICATE-----Generated at Tue Feb 10 01:36:58 2026 by rpki-client