This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft File: MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft (raw, json) Hash identifier: /EEwSA5ej3pEpOeiSYiW7ZRAWbPGNwdy4YM3l4oWdxc= Subject key identifier: D0:7D:3E:5D:9D:1C:8F:35:C4:CC:CF:CC:97:6F:1A:A5:5A:18:B7:61 Authority key identifier: 31:DA:92:03:21:C6:C8:2C:EE:69:29:E7:98:FC:93:72:BA:CC:B9:25 Certificate issuer: /CN=31da920321c6c82cee6929e798fc9372baccb925 Certificate serial: 019C4133A62E9FE504E93348C3EC4968280E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft Manifest number: 0A0A Signing time: Mon 09 Feb 2026 07:00:29 +0000 Manifest this update: Mon 09 Feb 2026 07:00:29 +0000 Manifest next update: Tue 10 Feb 2026 07:00:29 +0000 Files and hashes: 1: MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl (hash: RheXrhu6ixM1nGwmLLBfq7t9Jw8LpWXCEhlWXD63Nx4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:33:a6:2e:9f:e5:04:e9:33:48:c3:ec:49:68:28:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31da920321c6c82cee6929e798fc9372baccb925 Validity Not Before: Feb 9 07:00:29 2026 GMT Not After : Feb 10 07:00:29 2026 GMT Subject: CN=d07d3e5d9d1c8f35c4cccfcc976f1aa55a18b761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d4:3e:d9:96:f2:5f:0a:44:7c:a2:29:84:b9: 2e:cc:43:00:61:49:cc:b7:a4:46:6b:fe:95:13:75: f8:2b:00:a1:f1:45:74:a6:3e:39:94:d3:da:ed:d2: 47:b5:a9:42:f5:48:00:e4:37:16:25:40:da:cf:b8: 05:9e:99:0a:54:c6:69:43:2e:02:b7:05:51:cf:23: 24:8a:af:34:2a:54:0e:48:ea:c2:8b:fc:eb:47:e1: 49:cf:d5:5d:92:8e:e3:7e:07:d7:42:4b:ab:07:41: 5c:1b:0d:99:d8:37:af:eb:53:0d:fb:74:ff:c8:b2: f0:7a:ad:0b:28:ab:2c:19:6e:00:8b:b5:96:d5:b9: 2e:7e:dd:cd:59:94:39:cc:09:43:70:22:ab:38:6e: d7:58:fb:c4:72:b7:23:02:52:db:1b:90:d8:4f:d6: bc:87:be:4e:83:65:53:28:9a:50:5d:7f:71:48:a2: fe:fe:fc:5c:7f:2f:bd:14:d8:81:2e:ba:69:44:80: 05:3e:e1:e5:72:a0:64:1a:80:89:4d:92:09:f6:9f: f8:a6:be:95:71:95:46:11:b4:de:dc:cf:ba:c3:b1: b6:c8:9f:96:8f:ef:1a:00:cf:eb:99:d9:83:cf:2b: 5b:2a:14:16:62:71:30:2f:ac:d7:ec:5e:43:ed:84: 21:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:7D:3E:5D:9D:1C:8F:35:C4:CC:CF:CC:97:6F:1A:A5:5A:18:B7:61 X509v3 Authority Key Identifier: keyid:31:DA:92:03:21:C6:C8:2C:EE:69:29:E7:98:FC:93:72:BA:CC:B9:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:f8:0f:4b:f2:75:24:48:5e:08:a2:05:44:e6:8a:77:d0:ae: 10:b8:8b:08:04:7d:4c:a4:34:0f:c4:bb:ef:69:e2:52:5b:a6: 94:0b:b8:01:4f:1a:cc:94:17:06:4a:bc:b8:82:a7:88:3a:5a: 4b:72:2b:2b:d9:13:cd:11:f3:e3:49:00:5e:b2:bf:c4:8b:af: e9:92:fc:5f:60:89:42:dd:55:9b:05:ac:cf:1a:3c:93:46:5a: e6:58:d4:ab:fc:70:ff:31:63:05:29:da:25:67:89:41:52:c4: 8f:f6:c7:b9:28:99:d0:de:36:98:6a:f5:d0:9a:f0:7f:36:e7: 90:f0:92:1e:c2:ae:a1:6c:6b:c8:3b:2b:f7:60:9f:f5:f3:a1: ea:2c:ab:7f:ea:7f:68:f3:7c:1f:bf:a4:e1:a4:a2:af:06:2e: 34:04:8f:2f:8a:32:3a:0e:3c:da:d2:c2:15:f9:c0:ff:d8:53: 36:fb:14:78:b5:11:02:7d:87:eb:26:bd:09:eb:e2:fc:ec:5a: d1:a0:1c:38:79:73:cc:b1:73:89:23:5c:27:52:61:91:24:bf: de:cc:6d:0d:19:fb:2f:e2:47:e6:21:65:34:84:de:df:c4:4f: 43:b7:73:39:79:c5:d4:9d:a1:1b:95:96:bc:87:62:14:12:ed: 4b:1c:88:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBM6Yun+UE6TNIw+xJaCgOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxZGE5MjAzMjFjNmM4MmNlZTY5MjllNzk4ZmM5MzcyYmFj Y2I5MjUwHhcNMjYwMjA5MDcwMDI5WhcNMjYwMjEwMDcwMDI5WjAzMTEwLwYDVQQD EyhkMDdkM2U1ZDlkMWM4ZjM1YzRjY2NmY2M5NzZmMWFhNTVhMThiNzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNQ+2ZbyXwpEfKIphLkuzEMAYUnM t6RGa/6VE3X4KwCh8UV0pj45lNPa7dJHtalC9UgA5DcWJUDaz7gFnpkKVMZpQy4C twVRzyMkiq80KlQOSOrCi/zrR+FJz9Vdko7jfgfXQkurB0FcGw2Z2Dev61MN+3T/ yLLweq0LKKssGW4Ai7WW1bkuft3NWZQ5zAlDcCKrOG7XWPvEcrcjAlLbG5DYT9a8 h75Og2VTKJpQXX9xSKL+/vxcfy+9FNiBLrppRIAFPuHlcqBkGoCJTZIJ9p/4pr6V cZVGEbTe3M+6w7G2yJ+Wj+8aAM/rmdmDzytbKhQWYnEwL6zX7F5D7YQhuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNB9Pl2dHI81xMzPzJdvGqVaGLdhMB8GA1UdIwQY MBaAFDHakgMhxsgs7mkp55j8k3K6zLklMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWRxU0F5SEd5Q3p1YVNubm1QeVRjcnJNdVNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC80OTFjOTItODk2Ny00NzNlLTllYTct YTU4OTc4N2JmZjkwLzEvTWRxU0F5SEd5Q3p1YVNubm1QeVRjcnJNdVNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC80OTFjOTItODk2Ny00NzNlLTllYTctYTU4OTc4N2JmZjkw LzEvTWRxU0F5SEd5Q3p1YVNubm1QeVRjcnJNdVNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoPgPS/J1 JEheCKIFROaKd9CuELiLCAR9TKQ0D8S772niUlumlAu4AU8azJQXBkq8uIKniDpa S3IrK9kTzRHz40kAXrK/xIuv6ZL8X2CJQt1VmwWszxo8k0Za5ljUq/xw/zFjBSna JWeJQVLEj/bHuSiZ0N42mGr10JrwfzbnkPCSHsKuoWxryDsr92Cf9fOh6iyrf+p/ aPN8H7+k4aSirwYuNASPL4oyOg482tLCFfnA/9hTNvsUeLURAn2H6ya9Cevi/Oxa 0aAcOHlzzLFziSNcJ1JhkSS/3sxtDRn7L+JH5iFlNITe38RPQ7dzOXnF1J2hG5WW vIdiFBLtSxyI5g== -----END CERTIFICATE-----Generated at Mon Feb 9 16:55:45 2026 by rpki-client