This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/73c43f-be48-4957-ad38-cd2887b42667/1/Mxj1evB8TfWYXkpyC4DIm5fpCnk.mft File: Mxj1evB8TfWYXkpyC4DIm5fpCnk.mft (raw, json) Hash identifier: 4iY7YnTw+c145OumAuTy/y9GPatOunEOsGX7pZLnrLo= Subject key identifier: 78:81:4F:B2:7C:15:60:A1:42:B1:E3:FF:85:25:E1:54:A3:54:CD:81 Authority key identifier: 33:18:F5:7A:F0:7C:4D:F5:98:5E:4A:72:0B:80:C8:9B:97:E9:0A:79 Certificate issuer: /CN=3318f57af07c4df5985e4a720b80c89b97e90a79 Certificate serial: 019C427D784DD90224E770200E59F4ED8107 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mxj1evB8TfWYXkpyC4DIm5fpCnk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/73c43f-be48-4957-ad38-cd2887b42667/1/Mxj1evB8TfWYXkpyC4DIm5fpCnk.mft Manifest number: 0231 Signing time: Mon 09 Feb 2026 13:00:44 +0000 Manifest this update: Mon 09 Feb 2026 13:00:44 +0000 Manifest next update: Tue 10 Feb 2026 13:00:44 +0000 Files and hashes: 1: Mxj1evB8TfWYXkpyC4DIm5fpCnk.crl (hash: sAngOntPLWadhT+7n8M4EgdPzr+mb3IC70EBAK6eNVg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/73c43f-be48-4957-ad38-cd2887b42667/1/Mxj1evB8TfWYXkpyC4DIm5fpCnk.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/73c43f-be48-4957-ad38-cd2887b42667/1/Mxj1evB8TfWYXkpyC4DIm5fpCnk.mft rsync://rpki.ripe.net/repository/DEFAULT/Mxj1evB8TfWYXkpyC4DIm5fpCnk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:78:4d:d9:02:24:e7:70:20:0e:59:f4:ed:81:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3318f57af07c4df5985e4a720b80c89b97e90a79 Validity Not Before: Feb 9 13:00:44 2026 GMT Not After : Feb 10 13:00:44 2026 GMT Subject: CN=78814fb27c1560a142b1e3ff8525e154a354cd81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:97:25:74:a3:fb:5c:ab:90:69:e4:bd:d7:c6: 99:e7:e2:32:a2:58:ed:41:22:84:8e:dd:c5:d3:64: 6c:0e:c1:33:e7:e7:9d:8a:61:11:2f:69:c7:ac:e9: 4d:d0:d7:55:9e:14:08:c3:fd:10:1f:75:0b:9a:2f: 2d:5a:4c:71:05:b3:76:af:a9:4e:5f:25:6e:fb:7b: 06:ad:11:fb:75:d6:ea:0c:4c:24:39:6e:b5:6d:29: f5:be:8c:34:59:a2:a9:3d:8a:8e:2b:e1:8c:32:18: 21:54:fd:46:21:bf:20:cd:b8:84:d9:47:17:55:a3: 08:06:78:b4:8c:58:32:09:f0:b8:8c:6f:9c:30:92: 53:10:8d:88:3f:ba:30:77:36:bc:65:a4:00:93:ca: a2:5c:f0:64:21:39:a8:c7:ec:a6:17:8e:98:99:af: a0:3a:0b:86:2b:69:a3:64:23:b3:03:a3:47:7f:da: bf:dc:b6:74:b9:b2:9f:3d:bc:cb:98:18:55:89:52: 61:b0:b1:09:e5:67:4d:b5:75:82:aa:5a:08:df:3c: c4:3d:46:6c:8c:2f:d7:07:35:11:a2:eb:7d:a2:70: f3:11:2d:a1:ff:51:c3:45:0c:a9:fb:6a:32:8f:2b: 50:c2:6b:0e:e6:99:70:e5:85:01:85:3a:14:ac:e8: 57:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:81:4F:B2:7C:15:60:A1:42:B1:E3:FF:85:25:E1:54:A3:54:CD:81 X509v3 Authority Key Identifier: keyid:33:18:F5:7A:F0:7C:4D:F5:98:5E:4A:72:0B:80:C8:9B:97:E9:0A:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mxj1evB8TfWYXkpyC4DIm5fpCnk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/73c43f-be48-4957-ad38-cd2887b42667/1/Mxj1evB8TfWYXkpyC4DIm5fpCnk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/73c43f-be48-4957-ad38-cd2887b42667/1/Mxj1evB8TfWYXkpyC4DIm5fpCnk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:0d:e2:3f:95:95:55:85:3f:04:b3:0e:b4:14:a2:cb:04:90: e5:4d:a6:a2:75:cc:3d:bb:f7:51:2c:d4:8f:ad:70:c8:a8:d7: 04:64:7a:81:68:67:67:d1:77:96:83:d4:01:95:47:42:5d:47: 32:35:4f:8f:90:1b:d3:49:ef:82:1a:3d:bb:33:5f:96:14:db: 62:c1:3a:32:0c:50:28:31:45:17:8d:7b:fe:b5:e0:62:c1:40: 1f:12:ec:e0:fc:63:2b:d4:d0:3d:95:1e:55:f2:18:0b:cf:ad: 75:5d:7f:cc:2f:24:50:ad:ab:84:93:aa:75:00:c7:c0:62:fa: 4e:a2:00:74:3b:98:3b:e2:5f:a3:06:ff:9b:a9:69:d8:53:1b: c4:12:b6:02:f4:2c:ec:a2:f8:c8:95:39:13:66:3e:55:3e:09: 75:ee:cd:0f:84:69:d9:20:fe:51:d9:f2:b3:a4:c7:52:70:8e: 9f:52:4d:c7:85:46:1c:3f:53:55:0e:10:17:19:85:01:f1:2c: 07:c1:02:69:55:cb:ac:09:59:1d:68:ac:e5:34:b1:e6:fe:c1: 2d:43:23:ff:19:bb:1f:4b:53:55:30:df:f4:1d:89:7c:68:b5: 1d:75:1e:2c:a6:a6:6c:32:1e:31:13:b4:26:60:1d:d2:8d:58: 12:9c:b1:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfXhN2QIk53AgDln07YEHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMThmNTdhZjA3YzRkZjU5ODVlNGE3MjBiODBjODliOTdl OTBhNzkwHhcNMjYwMjA5MTMwMDQ0WhcNMjYwMjEwMTMwMDQ0WjAzMTEwLwYDVQQD Eyg3ODgxNGZiMjdjMTU2MGExNDJiMWUzZmY4NTI1ZTE1NGEzNTRjZDgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZcldKP7XKuQaeS918aZ5+Iyoljt QSKEjt3F02RsDsEz5+edimERL2nHrOlN0NdVnhQIw/0QH3ULmi8tWkxxBbN2r6lO XyVu+3sGrRH7ddbqDEwkOW61bSn1vow0WaKpPYqOK+GMMhghVP1GIb8gzbiE2UcX VaMIBni0jFgyCfC4jG+cMJJTEI2IP7owdza8ZaQAk8qiXPBkITmox+ymF46Yma+g OguGK2mjZCOzA6NHf9q/3LZ0ubKfPbzLmBhViVJhsLEJ5WdNtXWCqloI3zzEPUZs jC/XBzURout9onDzES2h/1HDRQyp+2oyjytQwmsO5plw5YUBhToUrOhXlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHiBT7J8FWChQrHj/4Ul4VSjVM2BMB8GA1UdIwQY MBaAFDMY9XrwfE31mF5KcguAyJuX6Qp5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXhqMWV2QjhUZldZWGtweUM0REltNWZwQ25rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi83M2M0M2YtYmU0OC00OTU3LWFkMzgt Y2QyODg3YjQyNjY3LzEvTXhqMWV2QjhUZldZWGtweUM0REltNWZwQ25rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi83M2M0M2YtYmU0OC00OTU3LWFkMzgtY2QyODg3YjQyNjY3 LzEvTXhqMWV2QjhUZldZWGtweUM0REltNWZwQ25rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATQ3iP5WV VYU/BLMOtBSiywSQ5U2monXMPbv3USzUj61wyKjXBGR6gWhnZ9F3loPUAZVHQl1H MjVPj5Ab00nvgho9uzNflhTbYsE6MgxQKDFFF417/rXgYsFAHxLs4PxjK9TQPZUe VfIYC8+tdV1/zC8kUK2rhJOqdQDHwGL6TqIAdDuYO+Jfowb/m6lp2FMbxBK2AvQs 7KL4yJU5E2Y+VT4Jde7ND4Rp2SD+Udnys6THUnCOn1JNx4VGHD9TVQ4QFxmFAfEs B8ECaVXLrAlZHWis5TSx5v7BLUMj/xm7H0tTVTDf9B2JfGi1HXUeLKambDIeMRO0 JmAd0o1YEpyxkQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:57 2026 by rpki-client