This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/a96094-db94-4546-a424-8908f0ab185b/1/MfxYQJK_niCslRtZUN1PpxMgPMM.mft File: MfxYQJK_niCslRtZUN1PpxMgPMM.mft (raw, json) Hash identifier: /ma5yBKinnyaAu+BVOmj1e0YzsAxSU9D8GFuNx7F3mE= Subject key identifier: AF:2A:8C:0C:EE:3B:95:62:21:B6:8D:78:35:24:06:9A:97:89:88:8F Authority key identifier: 31:FC:58:40:92:BF:9E:20:AC:95:1B:59:50:DD:4F:A7:13:20:3C:C3 Certificate issuer: /CN=31fc584092bf9e20ac951b5950dd4fa713203cc3 Certificate serial: 019C4321DAD9739084451DE229D26004BF7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MfxYQJK_niCslRtZUN1PpxMgPMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/a96094-db94-4546-a424-8908f0ab185b/1/MfxYQJK_niCslRtZUN1PpxMgPMM.mft Manifest number: 122E Signing time: Mon 09 Feb 2026 16:00:17 +0000 Manifest this update: Mon 09 Feb 2026 16:00:17 +0000 Manifest next update: Tue 10 Feb 2026 16:00:17 +0000 Files and hashes: 1: MfxYQJK_niCslRtZUN1PpxMgPMM.crl (hash: anQaqNCDbTvYBlcTGdqro56AgzSoJ7Bw+xo3ElaujrI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/a96094-db94-4546-a424-8908f0ab185b/1/MfxYQJK_niCslRtZUN1PpxMgPMM.crl rsync://rpki.ripe.net/repository/DEFAULT/77/a96094-db94-4546-a424-8908f0ab185b/1/MfxYQJK_niCslRtZUN1PpxMgPMM.mft rsync://rpki.ripe.net/repository/DEFAULT/MfxYQJK_niCslRtZUN1PpxMgPMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:da:d9:73:90:84:45:1d:e2:29:d2:60:04:bf:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31fc584092bf9e20ac951b5950dd4fa713203cc3 Validity Not Before: Feb 9 16:00:17 2026 GMT Not After : Feb 10 16:00:17 2026 GMT Subject: CN=af2a8c0cee3b956221b68d783524069a9789888f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e5:37:04:17:9a:9f:ca:6b:6d:d3:e6:95:07: 7c:c9:c8:e9:26:c6:86:40:8d:2f:d6:2d:62:fa:35: a3:2c:97:e6:93:86:49:7d:9d:1b:d8:2c:05:ca:a1: 10:f7:41:2b:03:7e:d8:86:95:0e:29:fb:a8:35:db: 37:0d:d0:04:fb:1c:7a:af:32:a5:6b:0d:ec:16:20: a3:92:29:74:5e:5c:d5:a5:55:a4:71:a9:57:1c:24: ac:e9:a9:1b:24:fe:31:de:f1:b0:c6:d7:83:24:87: 92:d5:fe:70:09:0a:24:a9:d8:33:9c:8e:28:f4:08: fa:6f:12:50:d3:f4:ca:cd:da:7b:32:73:6e:14:24: 5d:55:44:5a:a7:61:69:2d:d4:0d:02:1e:7b:e5:e0: 88:1e:e2:ca:f0:27:8b:b9:92:cf:7e:41:bb:95:4b: 5f:0e:f4:08:a8:4a:d6:ce:06:86:a7:29:06:12:c4: 4e:a8:24:7f:aa:ab:c8:ea:8b:85:45:7b:61:7f:c9: 7a:75:06:c3:b9:37:2b:60:ce:aa:86:13:73:97:f3: db:8e:14:51:47:a3:a7:8a:23:c8:28:74:f6:0a:ee: 3a:ce:7c:13:da:0d:40:a5:21:0a:3d:4e:cb:f6:63: 0a:35:d9:25:fd:49:3b:5a:86:59:c0:39:bf:1e:1f: 44:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:2A:8C:0C:EE:3B:95:62:21:B6:8D:78:35:24:06:9A:97:89:88:8F X509v3 Authority Key Identifier: keyid:31:FC:58:40:92:BF:9E:20:AC:95:1B:59:50:DD:4F:A7:13:20:3C:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MfxYQJK_niCslRtZUN1PpxMgPMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a96094-db94-4546-a424-8908f0ab185b/1/MfxYQJK_niCslRtZUN1PpxMgPMM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a96094-db94-4546-a424-8908f0ab185b/1/MfxYQJK_niCslRtZUN1PpxMgPMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:6f:28:f2:a9:8c:1d:1b:5e:04:30:b6:8d:66:a2:3f:f7:5e: 37:3f:0c:8d:3c:50:a4:30:7f:7e:7b:5d:94:87:6d:42:8d:db: e2:09:4a:ef:69:53:87:3c:51:05:6e:0b:06:eb:9d:92:71:97: 22:59:8f:0f:6a:76:d8:5a:27:92:6a:1e:a0:cc:cd:3d:a5:53: df:69:81:a2:34:93:7c:a8:26:b6:96:40:cc:1a:ad:c2:6a:6e: 1b:17:43:31:24:47:36:1d:b5:57:d6:6d:4c:55:d1:3e:68:d5: 8b:8a:e1:31:10:cb:25:36:b3:7c:66:e5:94:88:7f:da:4c:63: f6:b7:34:49:5f:df:25:09:63:38:f2:cc:5b:17:ba:da:7b:35: 98:a7:24:0f:09:c9:ce:44:64:7e:46:98:3d:ab:1d:2e:48:c8: 0b:65:35:f0:9f:05:ca:71:03:e6:2e:12:bc:f0:f2:56:b3:82: a6:ad:77:65:61:9d:c1:20:4f:26:3d:e8:29:cf:2e:4e:d7:7c: 55:1f:41:c2:9f:4c:00:2c:22:88:2a:98:30:b0:ce:40:37:30: 4a:ba:d0:c1:78:53:27:e1:60:bc:8e:da:ae:7d:8a:05:af:2e: 7d:80:42:5d:79:44:aa:58:9f:ff:0b:ad:7f:42:c4:38:ea:2d: 86:6a:c4:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIdrZc5CERR3iKdJgBL9/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxZmM1ODQwOTJiZjllMjBhYzk1MWI1OTUwZGQ0ZmE3MTMy MDNjYzMwHhcNMjYwMjA5MTYwMDE3WhcNMjYwMjEwMTYwMDE3WjAzMTEwLwYDVQQD EyhhZjJhOGMwY2VlM2I5NTYyMjFiNjhkNzgzNTI0MDY5YTk3ODk4ODhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eU3BBean8prbdPmlQd8ycjpJsaG QI0v1i1i+jWjLJfmk4ZJfZ0b2CwFyqEQ90ErA37YhpUOKfuoNds3DdAE+xx6rzKl aw3sFiCjkil0XlzVpVWkcalXHCSs6akbJP4x3vGwxteDJIeS1f5wCQokqdgznI4o 9Aj6bxJQ0/TKzdp7MnNuFCRdVURap2FpLdQNAh575eCIHuLK8CeLuZLPfkG7lUtf DvQIqErWzgaGpykGEsROqCR/qqvI6ouFRXthf8l6dQbDuTcrYM6qhhNzl/PbjhRR R6OniiPIKHT2Cu46znwT2g1ApSEKPU7L9mMKNdkl/Uk7WoZZwDm/Hh9E2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK8qjAzuO5ViIbaNeDUkBpqXiYiPMB8GA1UdIwQY MBaAFDH8WECSv54grJUbWVDdT6cTIDzDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWZ4WVFKS19uaUNzbFJ0WlVOMVBweE1nUE1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9hOTYwOTQtZGI5NC00NTQ2LWE0MjQt ODkwOGYwYWIxODViLzEvTWZ4WVFKS19uaUNzbFJ0WlVOMVBweE1nUE1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9hOTYwOTQtZGI5NC00NTQ2LWE0MjQtODkwOGYwYWIxODVi LzEvTWZ4WVFKS19uaUNzbFJ0WlVOMVBweE1nUE1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX28o8qmM HRteBDC2jWaiP/deNz8MjTxQpDB/fntdlIdtQo3b4glK72lThzxRBW4LBuudknGX IlmPD2p22FonkmoeoMzNPaVT32mBojSTfKgmtpZAzBqtwmpuGxdDMSRHNh21V9Zt TFXRPmjVi4rhMRDLJTazfGbllIh/2kxj9rc0SV/fJQljOPLMWxe62ns1mKckDwnJ zkRkfkaYPasdLkjIC2U18J8FynED5i4SvPDyVrOCpq13ZWGdwSBPJj3oKc8uTtd8 VR9Bwp9MACwiiCqYMLDOQDcwSrrQwXhTJ+FgvI7arn2KBa8ufYBCXXlEqlif/wut f0LEOOothmrEPg== -----END CERTIFICATE-----Generated at Mon Feb 9 23:59:42 2026 by rpki-client