This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft File: MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft (raw, json) Hash identifier: lrLaeCsz27qtVZZ++weHYI6gLDN8Ko6TScVkTuwfg8s= Subject key identifier: BB:E9:61:54:59:F9:97:61:35:F3:53:7D:40:E5:7A:EA:24:8A:C9:9B Authority key identifier: 30:A9:C9:57:D2:09:1D:24:E0:DF:E5:F6:6C:97:BE:4A:A1:F9:30:84 Certificate issuer: /CN=30a9c957d2091d24e0dfe5f66c97be4aa1f93084 Certificate serial: 019C427D083796110FD15CAD471287ED40CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 13:00:16 +0000 Manifest this update: Mon 09 Feb 2026 13:00:16 +0000 Manifest next update: Tue 10 Feb 2026 13:00:16 +0000 Files and hashes: 1: MKnJV9IJHSTg3-X2bJe-SqH5MIQ.crl (hash: w1b4ILU+VO6uaVKEcEgvlTXoIgw8/k5Adubi17nx1pw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft rsync://rpki.ripe.net/repository/DEFAULT/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:08:37:96:11:0f:d1:5c:ad:47:12:87:ed:40:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30a9c957d2091d24e0dfe5f66c97be4aa1f93084 Validity Not Before: Feb 9 13:00:16 2026 GMT Not After : Feb 10 13:00:16 2026 GMT Subject: CN=bbe9615459f9976135f3537d40e57aea248ac99b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3a:01:d0:2a:97:58:7d:03:11:f6:4e:35:0a: c9:e8:c2:08:2c:6f:78:de:7a:35:13:b5:d5:1e:ee: 28:d3:56:e8:40:6f:61:b5:b9:96:a3:da:8a:07:47: 2e:4e:5f:df:29:d3:35:84:05:7d:eb:4a:8b:64:62: 80:e4:48:3d:52:5c:eb:46:c7:67:a7:aa:2e:6f:ab: 35:ac:fc:bb:a1:c9:68:ec:03:9e:35:95:69:5c:d3: b5:7f:c8:2c:02:38:d5:ec:88:2c:5a:54:be:a4:87: ef:d0:32:f0:37:bc:18:28:06:2d:2a:87:67:24:95: a7:00:1e:54:13:4d:20:73:0a:30:e5:52:51:24:fe: 3f:43:a2:88:ab:06:32:a8:67:11:c4:94:fd:36:8d: 20:c8:8c:ec:9e:f2:89:34:07:21:ea:5e:64:22:e8: 97:18:51:e9:c6:74:52:0b:98:7d:74:58:40:17:8d: 3f:08:c6:94:68:45:5b:c9:95:d5:c2:c2:9d:73:1d: f1:b9:ab:ca:76:b1:ce:e6:b2:89:e4:d3:32:bb:b1: 0f:66:17:f0:61:32:e3:3e:12:ab:20:a5:23:cd:d8: 81:06:e2:37:bb:be:b5:da:53:34:15:fb:c8:c7:52: a2:a8:51:9e:aa:8d:a6:ce:43:5c:be:88:22:33:27: ed:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E9:61:54:59:F9:97:61:35:F3:53:7D:40:E5:7A:EA:24:8A:C9:9B X509v3 Authority Key Identifier: keyid:30:A9:C9:57:D2:09:1D:24:E0:DF:E5:F6:6C:97:BE:4A:A1:F9:30:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:cc:63:01:f6:dc:6b:9c:1c:58:68:c4:bf:60:17:42:ee:fe: 1b:38:1e:23:77:07:a0:64:ba:b8:f4:40:a3:9a:36:9f:20:fb: ab:14:4c:d8:1f:30:b6:c1:39:e4:ea:d8:63:7d:8a:1a:58:09: 22:07:b4:a1:ea:a6:29:3e:41:f5:42:74:4a:b3:fc:4b:db:4c: 76:f3:8f:2c:ef:dc:2b:d7:7d:ee:25:e2:33:3a:64:b1:08:af: 66:69:a5:08:c5:f3:89:cb:a0:51:45:c5:63:45:69:bc:ae:dc: 31:17:aa:5a:3e:7f:ab:df:a5:32:6a:d7:63:9f:2d:4d:d4:c1: 76:1d:fc:8b:e1:b9:0f:de:70:fd:8a:00:02:2a:4a:06:79:13: 5a:fe:b7:b7:a5:34:7c:cb:bd:dc:a6:99:3c:0c:00:21:dd:3a: 1a:86:f3:42:91:51:ea:ca:34:64:70:0e:86:4e:42:50:82:5a: 0e:88:44:4f:78:29:e4:df:b4:bb:23:fa:00:b6:ca:3b:31:d1: 56:08:0b:5d:05:06:0b:f2:2e:0f:55:00:95:61:96:96:e1:ce: e0:9c:b7:65:ac:0c:52:e8:f4:0c:a2:7c:d4:2e:89:96:7d:c4: 72:63:4c:06:3a:b5:06:b9:ad:dd:c5:55:6d:50:35:ef:59:34: 4f:4e:2a:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfQg3lhEP0VytRxKH7UDPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYTljOTU3ZDIwOTFkMjRlMGRmZTVmNjZjOTdiZTRhYTFm OTMwODQwHhcNMjYwMjA5MTMwMDE2WhcNMjYwMjEwMTMwMDE2WjAzMTEwLwYDVQQD EyhiYmU5NjE1NDU5Zjk5NzYxMzVmMzUzN2Q0MGU1N2FlYTI0OGFjOTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjoB0CqXWH0DEfZONQrJ6MIILG94 3no1E7XVHu4o01boQG9htbmWo9qKB0cuTl/fKdM1hAV960qLZGKA5Eg9UlzrRsdn p6oub6s1rPy7oclo7AOeNZVpXNO1f8gsAjjV7IgsWlS+pIfv0DLwN7wYKAYtKodn JJWnAB5UE00gcwow5VJRJP4/Q6KIqwYyqGcRxJT9No0gyIzsnvKJNAch6l5kIuiX GFHpxnRSC5h9dFhAF40/CMaUaEVbyZXVwsKdcx3xuavKdrHO5rKJ5NMyu7EPZhfw YTLjPhKrIKUjzdiBBuI3u7612lM0FfvIx1KiqFGeqo2mzkNcvogiMyftrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLvpYVRZ+ZdhNfNTfUDleuokismbMB8GA1UdIwQY MBaAFDCpyVfSCR0k4N/l9myXvkqh+TCEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUtuSlY5SUpIU1RnMy1YMmJKZS1TcUg1TUlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy84MTJhMTUtYzZlNC00MTZhLWIwOWQt ODRiZjMxZGU4NDEzLzEvTUtuSlY5SUpIU1RnMy1YMmJKZS1TcUg1TUlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy84MTJhMTUtYzZlNC00MTZhLWIwOWQtODRiZjMxZGU4NDEz LzEvTUtuSlY5SUpIU1RnMy1YMmJKZS1TcUg1TUlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW8xjAfbc a5wcWGjEv2AXQu7+GzgeI3cHoGS6uPRAo5o2nyD7qxRM2B8wtsE55OrYY32KGlgJ Ige0oeqmKT5B9UJ0SrP8S9tMdvOPLO/cK9d97iXiMzpksQivZmmlCMXzicugUUXF Y0VpvK7cMReqWj5/q9+lMmrXY58tTdTBdh38i+G5D95w/YoAAipKBnkTWv63t6U0 fMu93KaZPAwAId06GobzQpFR6so0ZHAOhk5CUIJaDohET3gp5N+0uyP6ALbKOzHR VggLXQUGC/IuD1UAlWGWluHO4Jy3ZawMUuj0DKJ81C6Jln3EcmNMBjq1Brmt3cVV bVA171k0T04qVA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:11 2026 by rpki-client