This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft File: muOJscw5niFvztjTnsPuifwguDk.mft (raw, json) Hash identifier: ec1MkiFXud4wMeRTj5Juxlg1iHZzGMfYA95MtL7OqOE= Subject key identifier: A0:F6:90:3C:9F:02:33:88:67:B8:9A:40:5B:74:E4:D3:73:AD:46:D4 Authority key identifier: 9A:E3:89:B1:CC:39:9E:21:6F:CE:D8:D3:9E:C3:EE:89:FC:20:B8:39 Certificate issuer: /CN=9ae389b1cc399e216fced8d39ec3ee89fc20b839 Certificate serial: 019C42B47AE1EAE3068B4B5EDDD4AB26FB1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muOJscw5niFvztjTnsPuifwguDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 14:00:50 +0000 Manifest this update: Mon 09 Feb 2026 14:00:50 +0000 Manifest next update: Tue 10 Feb 2026 14:00:50 +0000 Files and hashes: 1: muOJscw5niFvztjTnsPuifwguDk.crl (hash: Fr+MNx3wEhmOX79V3yN4cl9gde0OIeWfOuZEg7nAjvc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.crl rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft rsync://rpki.ripe.net/repository/DEFAULT/muOJscw5niFvztjTnsPuifwguDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:7a:e1:ea:e3:06:8b:4b:5e:dd:d4:ab:26:fb:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ae389b1cc399e216fced8d39ec3ee89fc20b839 Validity Not Before: Feb 9 14:00:50 2026 GMT Not After : Feb 10 14:00:50 2026 GMT Subject: CN=a0f6903c9f02338867b89a405b74e4d373ad46d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:09:c5:86:df:2e:6c:ee:bf:8c:43:ff:11:ca: ae:97:bc:52:7d:3d:8f:6d:42:b9:c2:f8:8f:06:26: 83:c1:cb:ca:49:25:44:b0:78:91:4c:93:8c:a8:ee: 34:39:a5:39:34:25:87:77:ae:95:d2:74:dc:d6:64: 2f:e1:72:c9:a9:b5:a3:4d:8d:61:30:b5:09:e4:ec: 42:3c:f3:29:b3:9c:6e:6b:94:e0:1d:54:ac:ca:0e: 2c:d9:46:03:16:1e:18:ae:11:49:51:5d:f7:16:28: 30:35:c6:83:a0:bd:67:b5:56:bc:a4:03:4b:05:5e: 62:95:72:63:77:f4:a7:51:e9:a6:bd:36:21:93:cc: 05:96:27:28:1f:fd:57:6d:b8:3e:95:39:4d:51:96: 04:ad:d9:22:92:43:1d:71:f1:83:ac:c9:ee:bc:7e: 81:93:bb:d8:6e:0c:a3:61:fc:87:2e:ab:e2:ab:ab: 01:cd:8e:9f:f9:eb:a7:65:7e:c5:01:4d:7e:b0:0a: a4:57:ff:11:01:93:af:d1:03:10:92:68:74:c6:86: 53:ec:91:87:cc:c0:21:b4:5d:da:0c:44:ce:bb:cc: 0d:b1:d9:db:0a:34:8c:b8:35:73:98:7d:e8:e5:4d: 94:fd:8c:71:d9:a9:5e:86:99:57:65:7a:5e:38:45: 00:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F6:90:3C:9F:02:33:88:67:B8:9A:40:5B:74:E4:D3:73:AD:46:D4 X509v3 Authority Key Identifier: keyid:9A:E3:89:B1:CC:39:9E:21:6F:CE:D8:D3:9E:C3:EE:89:FC:20:B8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muOJscw5niFvztjTnsPuifwguDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:d0:f5:47:66:97:d2:db:f3:33:d4:76:25:1a:fe:e5:d6:eb: 26:08:d1:00:b1:e1:7c:31:c8:01:b7:67:6e:f8:10:08:b2:e2: 6b:bd:bb:78:c2:2a:33:36:07:90:02:73:f3:c2:20:53:b2:9f: 7f:fd:75:3f:6c:8c:4b:cc:5b:6d:78:2a:6f:b7:21:3b:fe:33: c3:52:80:92:7e:9c:0a:d7:53:fe:d3:85:93:d2:46:92:46:2b: a4:f0:c1:d6:f0:83:ec:04:ce:1b:e9:8b:53:d3:2a:e6:13:9c: fd:0a:84:23:d4:97:21:7c:41:f9:c0:a7:1d:49:6b:a4:ab:9f: 25:fd:b4:a6:5a:e2:dd:6a:a4:66:cb:eb:5a:3f:1e:34:c8:d1: 66:78:0e:2f:bd:92:90:35:4e:d8:ab:53:ca:4e:cb:d1:62:8e: 58:96:93:01:30:06:81:f2:d3:db:6d:eb:1e:f1:53:5d:2d:a7: ad:ab:19:7b:f9:36:41:e1:fc:67:c7:70:78:0a:82:42:d8:b8: 4e:65:a1:f6:89:0b:61:9c:52:a0:7a:dd:a4:2c:db:f7:56:40: 2d:3f:f0:10:2f:e0:b0:b0:24:d2:fb:24:a6:c9:7c:7a:bb:f7: df:78:9c:c7:38:53:9e:9f:14:ff:25:32:40:37:c2:13:22:e4: 27:57:68:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtHrh6uMGi0te3dSrJvseMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZTM4OWIxY2MzOTllMjE2ZmNlZDhkMzllYzNlZTg5ZmMy MGI4MzkwHhcNMjYwMjA5MTQwMDUwWhcNMjYwMjEwMTQwMDUwWjAzMTEwLwYDVQQD EyhhMGY2OTAzYzlmMDIzMzg4NjdiODlhNDA1Yjc0ZTRkMzczYWQ0NmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAownFht8ubO6/jEP/Ecqul7xSfT2P bUK5wviPBiaDwcvKSSVEsHiRTJOMqO40OaU5NCWHd66V0nTc1mQv4XLJqbWjTY1h MLUJ5OxCPPMps5xua5TgHVSsyg4s2UYDFh4YrhFJUV33FigwNcaDoL1ntVa8pANL BV5ilXJjd/SnUemmvTYhk8wFlicoH/1Xbbg+lTlNUZYErdkikkMdcfGDrMnuvH6B k7vYbgyjYfyHLqviq6sBzY6f+eunZX7FAU1+sAqkV/8RAZOv0QMQkmh0xoZT7JGH zMAhtF3aDETOu8wNsdnbCjSMuDVzmH3o5U2U/Yxx2alehplXZXpeOEUAjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKD2kDyfAjOIZ7iaQFt05NNzrUbUMB8GA1UdIwQY MBaAFJrjibHMOZ4hb87Y057D7on8ILg5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXVPSnNjdzVuaUZ2enRqVG5zUHVpZndndURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS84ZDVhOWItYjIxZS00MjFlLWJjZTgt Mzg5ZjkyMTk1YmViLzEvbXVPSnNjdzVuaUZ2enRqVG5zUHVpZndndURrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS84ZDVhOWItYjIxZS00MjFlLWJjZTgtMzg5ZjkyMTk1YmVi LzEvbXVPSnNjdzVuaUZ2enRqVG5zUHVpZndndURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANtD1R2aX 0tvzM9R2JRr+5dbrJgjRALHhfDHIAbdnbvgQCLLia727eMIqMzYHkAJz88IgU7Kf f/11P2yMS8xbbXgqb7chO/4zw1KAkn6cCtdT/tOFk9JGkkYrpPDB1vCD7ATOG+mL U9Mq5hOc/QqEI9SXIXxB+cCnHUlrpKufJf20plri3WqkZsvrWj8eNMjRZngOL72S kDVO2KtTyk7L0WKOWJaTATAGgfLT223rHvFTXS2nrasZe/k2QeH8Z8dweAqCQti4 TmWh9okLYZxSoHrdpCzb91ZALT/wEC/gsLAk0vskpsl8erv333icxzhTnp8U/yUy QDfCEyLkJ1doGw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:47:23 2026 by rpki-client