This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft File: muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft (raw, json) Hash identifier: ABL6OgRcmhQDoYoK8DvDCPY2ujNu5aEZ1qase8QErjA= Subject key identifier: 54:90:60:2F:C9:F1:B4:02:B5:66:03:C8:B0:07:3D:FA:79:EB:9C:3B Authority key identifier: 9A:E0:08:15:D2:BD:04:1D:CC:0E:CE:06:76:56:BE:5E:6E:B1:2B:62 Certificate issuer: /CN=9ae00815d2bd041dcc0ece067656be5e6eb12b62 Certificate serial: 019C42EB9F5EDC11E88C27D11702D29BFB79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muAIFdK9BB3MDs4Gdla-Xm6xK2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft Manifest number: 02C4 Signing time: Mon 09 Feb 2026 15:01:03 +0000 Manifest this update: Mon 09 Feb 2026 15:01:03 +0000 Manifest next update: Tue 10 Feb 2026 15:01:03 +0000 Files and hashes: 1: muAIFdK9BB3MDs4Gdla-Xm6xK2I.crl (hash: O2wGzyTQSo2jo3iXizoqOVNdTvvRuKs4Be+SOYJ5CrE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.crl rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft rsync://rpki.ripe.net/repository/DEFAULT/muAIFdK9BB3MDs4Gdla-Xm6xK2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:9f:5e:dc:11:e8:8c:27:d1:17:02:d2:9b:fb:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ae00815d2bd041dcc0ece067656be5e6eb12b62 Validity Not Before: Feb 9 15:01:03 2026 GMT Not After : Feb 10 15:01:03 2026 GMT Subject: CN=5490602fc9f1b402b56603c8b0073dfa79eb9c3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:9c:42:d3:2f:7c:e4:a3:bb:08:8f:6c:5c:56: 40:e5:4d:89:d1:9b:4c:91:44:7b:c6:ca:f1:af:cb: d8:30:78:a0:33:4a:57:63:9a:5f:55:71:41:cf:a4: a3:15:7d:ff:2b:89:f9:50:54:e1:93:ca:ef:ea:c3: 02:49:ec:dc:f6:bb:ad:d4:36:45:15:e2:2e:0c:40: e5:04:fd:49:96:b4:5e:b3:83:d3:96:13:57:ec:c3: c7:b1:c4:e9:4c:85:cc:5d:33:2e:d5:c9:ed:6b:1e: 25:9e:80:3f:2d:d5:90:13:33:3c:ae:89:5c:f4:38: 57:0c:96:73:b3:c8:e4:12:84:20:07:74:9a:72:8a: 5a:4f:be:7a:d5:de:8c:5f:5e:67:75:f4:8a:43:e1: e4:ec:aa:5a:8b:b1:7b:e5:6d:34:69:4b:54:37:db: de:19:4c:2b:79:32:88:d6:96:0b:e0:9d:bf:ec:b1: e2:59:67:e5:c6:4d:79:b3:90:9a:9f:59:87:4e:67: e3:27:69:09:fa:e9:b7:03:f5:1d:71:45:c8:7a:2a: 23:55:19:ae:15:1d:7a:3a:52:8e:f9:2e:0e:a0:42: 67:e7:9f:08:56:a9:fe:06:21:b2:60:e9:a4:d4:ba: ec:a9:8d:52:de:29:4f:42:cf:dc:56:0b:73:fe:61: 3d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:90:60:2F:C9:F1:B4:02:B5:66:03:C8:B0:07:3D:FA:79:EB:9C:3B X509v3 Authority Key Identifier: keyid:9A:E0:08:15:D2:BD:04:1D:CC:0E:CE:06:76:56:BE:5E:6E:B1:2B:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muAIFdK9BB3MDs4Gdla-Xm6xK2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:b9:c0:6d:ee:62:7f:d1:df:b4:a0:11:0a:77:fc:72:ec:7c: 16:c7:1e:9f:da:ef:22:c5:bd:d2:ab:90:33:21:6f:45:bd:e5: 3b:86:06:db:aa:8f:f1:db:d9:cb:db:fd:f8:26:26:60:55:f1: 04:d3:75:da:a7:f4:32:a1:5c:e3:50:ac:c6:17:f4:f5:36:02: 2e:9d:10:0c:19:08:58:d5:3d:ae:7c:31:ea:d4:31:51:f8:60: 85:90:12:8f:9d:e9:9d:98:9a:49:32:f9:77:76:8c:17:0e:e3: c5:40:b2:b9:00:4c:92:62:51:11:93:61:11:62:80:54:ad:4d: 85:ad:c9:45:ad:b1:3a:1e:17:4d:fa:e3:4d:39:77:ea:8f:a9: fa:3f:94:58:bc:1f:b2:a6:4a:98:9d:c1:80:d0:05:3c:01:63: 14:be:58:e7:51:9a:4c:50:9d:5b:36:fc:22:aa:59:0b:a6:22: 71:2c:b2:22:c9:53:7c:79:f6:e5:c8:00:3a:df:c2:49:3e:45: 75:2e:60:30:12:88:ac:5f:96:c1:34:d1:87:f5:9b:3b:29:e2: fb:f4:3b:86:a1:81:f2:c2:56:ab:8b:9f:d2:e6:8e:93:b3:d9: 42:4a:d2:0c:6f:f5:a6:34:d4:90:72:02:80:d7:dc:96:40:f7: b1:8a:f0:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC659e3BHojCfRFwLSm/t5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZTAwODE1ZDJiZDA0MWRjYzBlY2UwNjc2NTZiZTVlNmVi MTJiNjIwHhcNMjYwMjA5MTUwMTAzWhcNMjYwMjEwMTUwMTAzWjAzMTEwLwYDVQQD Eyg1NDkwNjAyZmM5ZjFiNDAyYjU2NjAzYzhiMDA3M2RmYTc5ZWI5YzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5xC0y985KO7CI9sXFZA5U2J0ZtM kUR7xsrxr8vYMHigM0pXY5pfVXFBz6SjFX3/K4n5UFThk8rv6sMCSezc9rut1DZF FeIuDEDlBP1JlrRes4PTlhNX7MPHscTpTIXMXTMu1cntax4lnoA/LdWQEzM8rolc 9DhXDJZzs8jkEoQgB3SacopaT7561d6MX15ndfSKQ+Hk7Kpai7F75W00aUtUN9ve GUwreTKI1pYL4J2/7LHiWWflxk15s5Can1mHTmfjJ2kJ+um3A/UdcUXIeiojVRmu FR16OlKO+S4OoEJn558IVqn+BiGyYOmk1LrsqY1S3ilPQs/cVgtz/mE9KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFSQYC/J8bQCtWYDyLAHPfp565w7MB8GA1UdIwQY MBaAFJrgCBXSvQQdzA7OBnZWvl5usStiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXVBSUZkSzlCQjNNRHM0R2RsYS1YbTZ4SzJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80MDQxNWItNTk2Yy00ODBkLThiZTIt ZjQ4NTFkYTg3NjNkLzEvbXVBSUZkSzlCQjNNRHM0R2RsYS1YbTZ4SzJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC80MDQxNWItNTk2Yy00ODBkLThiZTItZjQ4NTFkYTg3NjNk LzEvbXVBSUZkSzlCQjNNRHM0R2RsYS1YbTZ4SzJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJLnAbe5i f9HftKARCnf8cux8Fscen9rvIsW90quQMyFvRb3lO4YG26qP8dvZy9v9+CYmYFXx BNN12qf0MqFc41Csxhf09TYCLp0QDBkIWNU9rnwx6tQxUfhghZASj53pnZiaSTL5 d3aMFw7jxUCyuQBMkmJREZNhEWKAVK1Nha3JRa2xOh4XTfrjTTl36o+p+j+UWLwf sqZKmJ3BgNAFPAFjFL5Y51GaTFCdWzb8IqpZC6YicSyyIslTfHn25cgAOt/CST5F dS5gMBKIrF+WwTTRh/WbOyni+/Q7hqGB8sJWq4uf0uaOk7PZQkrSDG/1pjTUkHIC gNfclkD3sYrwJg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:28 2026 by rpki-client