This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft File: mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft (raw, json) Hash identifier: a0gP/xxJaPgWj8fwcoGznwYA/kWArtAeMGR9U7tthck= Subject key identifier: 29:12:FE:08:A1:0F:AA:1C:00:45:B0:17:6C:E7:8E:14:B4:AC:1B:D2 Authority key identifier: 99:0D:9F:E7:93:B1:8E:EF:91:DC:76:FB:CB:A2:B2:CF:C5:2E:0B:C4 Certificate issuer: /CN=990d9fe793b18eef91dc76fbcba2b2cfc52e0bc4 Certificate serial: 019C427E1700E9AC480CCD7686AEFF440AA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 13:01:25 +0000 Manifest this update: Mon 09 Feb 2026 13:01:25 +0000 Manifest next update: Tue 10 Feb 2026 13:01:25 +0000 Files and hashes: 1: mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.crl (hash: IDyccAEaPzZyYEreor/XHVSUXvhkiYjsh4339a7VyNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7e:17:00:e9:ac:48:0c:cd:76:86:ae:ff:44:0a:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=990d9fe793b18eef91dc76fbcba2b2cfc52e0bc4 Validity Not Before: Feb 9 13:01:25 2026 GMT Not After : Feb 10 13:01:25 2026 GMT Subject: CN=2912fe08a10faa1c0045b0176ce78e14b4ac1bd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e6:ce:d7:9a:35:1f:65:eb:5b:a2:14:e5:8a: ca:aa:eb:20:dc:8b:98:49:7c:b7:9e:40:49:5f:d3: 43:4a:24:57:c9:eb:b7:65:00:f9:05:38:45:88:8e: a2:f5:06:d2:b3:2a:80:31:66:14:77:00:b2:b8:29: cd:f6:1c:f4:91:69:c4:8e:a9:41:3f:1a:ea:4a:d8: 95:14:8f:e6:55:84:8d:4f:81:98:76:09:18:8d:cd: 57:ae:cb:fa:ae:d2:3d:6b:fd:03:6d:fa:45:cf:4f: bf:c9:13:dd:f4:21:16:1d:24:3d:31:53:8f:f9:dc: 23:d2:49:cd:70:8b:05:f0:a7:9e:7d:ca:97:f4:16: 47:1b:70:5a:f7:c9:03:0a:b6:18:71:7b:29:c9:2a: ae:8f:d8:d7:76:d6:07:f7:12:9b:31:1b:4e:8b:bd: 36:3a:1a:3b:7c:b7:69:7a:3e:46:f6:2f:6a:6e:95: 9d:ac:9e:1e:82:b7:08:5c:fe:36:bf:01:2f:a4:c0: c5:f9:89:ad:fe:32:b2:c7:92:1e:f1:c1:64:28:db: 0c:f2:08:62:f5:d4:73:25:e3:69:3f:4c:d9:fd:16: 0b:ae:27:91:b5:a8:39:a8:60:99:2b:5b:61:55:da: ab:c9:d8:14:cc:64:04:8b:2b:60:d8:87:67:2d:2c: 25:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:12:FE:08:A1:0F:AA:1C:00:45:B0:17:6C:E7:8E:14:B4:AC:1B:D2 X509v3 Authority Key Identifier: keyid:99:0D:9F:E7:93:B1:8E:EF:91:DC:76:FB:CB:A2:B2:CF:C5:2E:0B:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e5:d5:72:73:27:76:1c:f7:9e:2a:39:cf:6f:e3:c0:8b:53:29: 87:ed:91:b8:9e:52:5d:8d:d0:18:88:13:be:ab:92:6b:a0:23: e6:35:67:8b:06:14:86:11:b3:4a:82:2a:33:2b:50:42:df:fb: a5:47:40:f2:a9:ae:d2:b1:e3:c3:09:ba:3a:e2:ab:0b:32:59: 24:ae:21:84:e0:5c:57:24:5d:8a:21:4d:76:ce:64:f2:6a:7f: 40:e0:85:18:49:a1:62:46:c6:77:37:ed:9a:7d:aa:6b:fd:02: 76:50:12:a2:64:39:f9:82:47:d6:1f:07:68:11:61:80:48:ca: af:d5:81:f1:fe:3f:8a:28:3b:73:ef:2e:50:78:fd:95:b0:5a: 96:d0:46:95:7a:96:63:5c:71:0e:1a:39:86:b4:ba:27:95:49: 95:ab:41:92:b4:55:e8:e5:fb:9a:45:bd:0c:a0:88:4d:83:9f: ab:e8:e7:e2:81:8f:3b:ee:e1:8b:7f:df:f1:db:cc:23:03:20: d9:ac:d4:ca:9b:89:7e:38:05:84:91:9a:69:70:45:a8:7b:03: 14:ab:ef:3a:63:91:4d:bc:7c:6f:00:01:34:74:7f:b4:ec:ab: 38:a3:39:5a:02:78:d1:c9:37:42:1e:8a:70:fe:7a:64:51:dd: 48:55:3d:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfhcA6axIDM12hq7/RAqoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MGQ5ZmU3OTNiMThlZWY5MWRjNzZmYmNiYTJiMmNmYzUy ZTBiYzQwHhcNMjYwMjA5MTMwMTI1WhcNMjYwMjEwMTMwMTI1WjAzMTEwLwYDVQQD EygyOTEyZmUwOGExMGZhYTFjMDA0NWIwMTc2Y2U3OGUxNGI0YWMxYmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ubO15o1H2XrW6IU5YrKqusg3IuY SXy3nkBJX9NDSiRXyeu3ZQD5BThFiI6i9QbSsyqAMWYUdwCyuCnN9hz0kWnEjqlB PxrqStiVFI/mVYSNT4GYdgkYjc1Xrsv6rtI9a/0DbfpFz0+/yRPd9CEWHSQ9MVOP +dwj0knNcIsF8KeefcqX9BZHG3Ba98kDCrYYcXspySquj9jXdtYH9xKbMRtOi702 Oho7fLdpej5G9i9qbpWdrJ4egrcIXP42vwEvpMDF+Ymt/jKyx5Ie8cFkKNsM8ghi 9dRzJeNpP0zZ/RYLrieRtag5qGCZK1thVdqrydgUzGQEiytg2IdnLSwlEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCkS/gihD6ocAEWwF2znjhS0rBvSMB8GA1UdIwQY MBaAFJkNn+eTsY7vkdx2+8uiss/FLgvEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVEyZjU1T3hqdS1SM0hiN3k2S3l6OFV1QzhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9hZjFhYWUtYzVmOS00MmM3LWE3ZmYt ZTI5NmY4MThhZGU5LzEvbVEyZjU1T3hqdS1SM0hiN3k2S3l6OFV1QzhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9hZjFhYWUtYzVmOS00MmM3LWE3ZmYtZTI5NmY4MThhZGU5 LzEvbVEyZjU1T3hqdS1SM0hiN3k2S3l6OFV1QzhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5dVycyd2 HPeeKjnPb+PAi1Mph+2RuJ5SXY3QGIgTvquSa6Aj5jVniwYUhhGzSoIqMytQQt/7 pUdA8qmu0rHjwwm6OuKrCzJZJK4hhOBcVyRdiiFNds5k8mp/QOCFGEmhYkbGdzft mn2qa/0CdlASomQ5+YJH1h8HaBFhgEjKr9WB8f4/iig7c+8uUHj9lbBaltBGlXqW Y1xxDho5hrS6J5VJlatBkrRV6OX7mkW9DKCITYOfq+jn4oGPO+7hi3/f8dvMIwMg 2azUypuJfjgFhJGaaXBFqHsDFKvvOmORTbx8bwABNHR/tOyrOKM5WgJ40ck3Qh6K cP56ZFHdSFU9rw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:19 2026 by rpki-client