This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft File: M1M9nu9agSjcQ10C8iMygDSNwrY.mft (raw, json) Hash identifier: KJ50AMJlUAgMHguE9GgK63tuLDV+wBu0cmG3MSoDVuA= Subject key identifier: 51:72:E1:89:2D:57:26:84:CD:5C:3B:A0:3A:D2:B8:BB:71:D0:6C:DE Authority key identifier: 33:53:3D:9E:EF:5A:81:28:DC:43:5D:02:F2:23:32:80:34:8D:C2:B6 Certificate issuer: /CN=33533d9eef5a8128dc435d02f2233280348dc2b6 Certificate serial: 019C43FE082C06968D607031E0AE02A236F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1M9nu9agSjcQ10C8iMygDSNwrY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft Manifest number: 14A3 Signing time: Mon 09 Feb 2026 20:00:47 +0000 Manifest this update: Mon 09 Feb 2026 20:00:47 +0000 Manifest next update: Tue 10 Feb 2026 20:00:47 +0000 Files and hashes: 1: 3JDOgau4GXIlP-8TxtcC06uAWi0.roa (hash: QjML2vUB5G/DnLmOZku9aV5tntgCQSEVJ8kdiDg/M3E=) 2: M1M9nu9agSjcQ10C8iMygDSNwrY.crl (hash: jNvv3cvQajXfhpi6xmA2NQao9+PUj+8MCDqt4OWPB9k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.crl rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft rsync://rpki.ripe.net/repository/DEFAULT/M1M9nu9agSjcQ10C8iMygDSNwrY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:08:2c:06:96:8d:60:70:31:e0:ae:02:a2:36:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33533d9eef5a8128dc435d02f2233280348dc2b6 Validity Not Before: Feb 9 20:00:47 2026 GMT Not After : Feb 10 20:00:47 2026 GMT Subject: CN=5172e1892d572684cd5c3ba03ad2b8bb71d06cde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:68:23:09:72:21:56:bc:9a:84:33:b3:5a:4f: a1:67:98:48:b9:e7:4c:8f:15:a1:e6:d6:87:da:8a: 96:47:85:0b:41:a4:ae:a0:68:fc:1b:a2:a9:d7:09: a3:83:04:06:d1:e2:ab:c6:d9:5c:79:4f:0c:fc:f4: 1c:da:64:4d:94:0b:bf:6c:f0:ac:38:25:c9:11:4c: 08:47:65:0a:07:5b:f5:86:8b:8e:98:13:bd:21:53: e7:75:10:11:ba:ab:7f:35:f5:27:b2:d2:a2:f0:41: cb:e2:21:b4:fd:c7:9e:44:5e:fe:51:b7:4d:b0:da: 3c:23:15:0f:8d:d3:cd:14:7b:1b:f4:ad:f9:d7:0e: 86:24:df:2a:d1:a8:50:5d:ec:6e:d4:91:e0:5f:e7: 58:90:61:c6:85:e9:71:ca:02:ef:b8:57:a8:9c:38: 62:f9:f5:97:5a:9f:d6:7e:0a:d6:4a:db:e6:6f:02: ed:6e:3c:60:5c:41:b5:c7:a8:e3:58:ff:92:77:b5: 53:53:c8:62:a3:1f:e9:b7:d2:35:2b:2e:ce:54:37: 0b:45:8e:60:c5:a1:8f:ea:2e:ef:a6:f4:86:95:82: 44:41:09:39:d6:43:3e:73:87:fa:ba:05:55:c7:d8: f8:eb:06:a3:7a:8a:39:ae:30:4d:f5:4b:b5:ec:fa: cc:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:72:E1:89:2D:57:26:84:CD:5C:3B:A0:3A:D2:B8:BB:71:D0:6C:DE X509v3 Authority Key Identifier: keyid:33:53:3D:9E:EF:5A:81:28:DC:43:5D:02:F2:23:32:80:34:8D:C2:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1M9nu9agSjcQ10C8iMygDSNwrY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:c5:0e:0a:4b:1d:56:84:91:94:55:32:11:9b:18:42:92:57: 45:e9:a3:c9:8e:ea:16:6f:4f:b7:04:63:05:e5:53:2f:ba:cc: 8e:83:56:29:f3:44:ad:5f:d8:a0:31:b1:dd:36:02:8f:8d:76: f5:06:68:3d:a2:da:b3:ab:e4:d7:10:8d:43:8d:d3:7e:51:34: f8:56:c0:6a:36:1c:c5:1e:f2:db:d0:25:da:a9:a7:92:c8:18: c4:fb:ad:94:95:02:3e:a7:00:07:11:b6:1e:5d:82:29:9f:34: b6:56:bb:23:49:7c:23:20:45:67:a3:6f:57:ae:d9:71:56:9a: 28:c8:45:87:e8:d5:e2:1e:11:ef:23:04:b6:0f:ac:3d:95:ba: ad:86:7c:f6:ab:5b:4a:f1:42:74:f4:de:f0:a0:c4:ef:43:75: f1:20:d4:01:8d:9d:d3:71:ad:50:56:38:d9:ac:e1:75:46:de: 7e:8c:e3:57:c8:fd:3d:1a:06:ab:ac:a5:e8:f8:35:1f:b3:91: cf:27:ff:86:0d:26:e8:48:fa:c4:ef:bc:66:28:8e:9e:b8:7d: 8f:b8:f6:d5:89:27:26:ee:22:cf:f1:58:43:29:0f:43:08:3d: 9f:7b:8d:15:3b:7d:60:3c:f6:25:dc:12:c1:62:ed:ec:05:b1: 8b:4a:11:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/ggsBpaNYHAx4K4Cojb0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNTMzZDllZWY1YTgxMjhkYzQzNWQwMmYyMjMzMjgwMzQ4 ZGMyYjYwHhcNMjYwMjA5MjAwMDQ3WhcNMjYwMjEwMjAwMDQ3WjAzMTEwLwYDVQQD Eyg1MTcyZTE4OTJkNTcyNjg0Y2Q1YzNiYTAzYWQyYjhiYjcxZDA2Y2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWgjCXIhVryahDOzWk+hZ5hIuedM jxWh5taH2oqWR4ULQaSuoGj8G6Kp1wmjgwQG0eKrxtlceU8M/PQc2mRNlAu/bPCs OCXJEUwIR2UKB1v1houOmBO9IVPndRARuqt/NfUnstKi8EHL4iG0/ceeRF7+UbdN sNo8IxUPjdPNFHsb9K351w6GJN8q0ahQXexu1JHgX+dYkGHGhelxygLvuFeonDhi +fWXWp/WfgrWStvmbwLtbjxgXEG1x6jjWP+Sd7VTU8hiox/pt9I1Ky7OVDcLRY5g xaGP6i7vpvSGlYJEQQk51kM+c4f6ugVVx9j46wajeoo5rjBN9Uu17PrMAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFFy4YktVyaEzVw7oDrSuLtx0GzeMB8GA1UdIwQY MBaAFDNTPZ7vWoEo3ENdAvIjMoA0jcK2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTFNOW51OWFnU2pjUTEwQzhpTXlnRFNOd3JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9hM2JjYWQtMWQ5OC00OGI0LWFmYWYt ZDJjM2I0YzA5ZWExLzEvTTFNOW51OWFnU2pjUTEwQzhpTXlnRFNOd3JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9hM2JjYWQtMWQ5OC00OGI0LWFmYWYtZDJjM2I0YzA5ZWEx LzEvTTFNOW51OWFnU2pjUTEwQzhpTXlnRFNOd3JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo8UOCksd VoSRlFUyEZsYQpJXRemjyY7qFm9PtwRjBeVTL7rMjoNWKfNErV/YoDGx3TYCj412 9QZoPaLas6vk1xCNQ43TflE0+FbAajYcxR7y29Al2qmnksgYxPutlJUCPqcABxG2 Hl2CKZ80tla7I0l8IyBFZ6NvV67ZcVaaKMhFh+jV4h4R7yMEtg+sPZW6rYZ89qtb SvFCdPTe8KDE70N18SDUAY2d03GtUFY42azhdUbefozjV8j9PRoGq6yl6Pg1H7OR zyf/hg0m6Ej6xO+8ZiiOnrh9j7j21YknJu4iz/FYQykPQwg9n3uNFTt9YDz2JdwS wWLt7AWxi0oRkQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:48:54 2026 by rpki-client