This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.mft File: mxNLbpAkBkuQVyg0ib8sQ29Adeg.mft (raw, json) Hash identifier: xddFSbCNh7nBt1IXgA3oCxMqSslBDIU8RiPfAQ4Fhcc= Subject key identifier: 87:38:86:EC:6E:96:89:77:CA:62:03:1D:2A:93:EC:1C:9C:E7:C2:0E Authority key identifier: 9B:13:4B:6E:90:24:06:4B:90:57:28:34:89:BF:2C:43:6F:40:75:E8 Certificate issuer: /CN=9b134b6e9024064b9057283489bf2c436f4075e8 Certificate serial: 019C41340815188DE9F092A30F12E47BD893 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mxNLbpAkBkuQVyg0ib8sQ29Adeg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.mft Manifest number: 096A Signing time: Mon 09 Feb 2026 07:00:54 +0000 Manifest this update: Mon 09 Feb 2026 07:00:54 +0000 Manifest next update: Tue 10 Feb 2026 07:00:54 +0000 Files and hashes: 1: mxNLbpAkBkuQVyg0ib8sQ29Adeg.crl (hash: 78aELqe172R0x1ypxOi6A04xei0MFoztoz1nYMRXRfc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.mft rsync://rpki.ripe.net/repository/DEFAULT/mxNLbpAkBkuQVyg0ib8sQ29Adeg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:34:08:15:18:8d:e9:f0:92:a3:0f:12:e4:7b:d8:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b134b6e9024064b9057283489bf2c436f4075e8 Validity Not Before: Feb 9 07:00:54 2026 GMT Not After : Feb 10 07:00:54 2026 GMT Subject: CN=873886ec6e968977ca62031d2a93ec1c9ce7c20e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cb:69:79:8c:ba:9f:de:6e:3f:f5:d2:04:96: b8:eb:83:9e:6e:8a:2e:2d:d3:36:31:14:b8:49:09: d6:cd:52:a4:f3:f9:56:ef:6f:05:77:2d:94:89:ad: 91:e6:1a:96:92:82:59:45:77:ac:27:44:42:8f:55: 61:1d:69:dc:61:9e:38:31:b3:15:75:1e:a1:32:3a: 17:29:d3:77:51:f4:59:37:51:43:48:66:c8:fa:13: 29:c6:14:2d:91:c2:04:ec:43:24:10:14:47:d6:51: 57:6c:9f:b5:c4:f9:15:c0:14:1f:7f:41:8f:53:f0: 2d:83:d2:35:5a:4e:78:ce:98:cc:bb:49:d7:f8:24: ee:22:34:f0:d4:73:a3:50:5a:c9:d2:b9:70:db:f3: bc:b3:cb:c6:2b:f2:41:27:7c:95:41:15:26:2f:3e: e9:c4:84:fc:28:16:36:14:1b:9c:a6:3b:38:6d:37: d9:d4:25:9b:f3:5e:a6:8a:b5:b1:c9:22:6b:2d:3d: 9e:9a:b1:d7:ee:43:97:a3:5e:d7:e0:21:80:b1:4a: 76:07:48:9f:aa:1b:ee:53:13:f8:05:e2:31:06:fd: ad:93:89:ee:63:3e:2e:2d:7d:d7:e5:39:ba:e6:70: 70:5c:cc:1e:89:fb:f5:bc:42:a2:46:36:54:7b:75: ef:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:38:86:EC:6E:96:89:77:CA:62:03:1D:2A:93:EC:1C:9C:E7:C2:0E X509v3 Authority Key Identifier: keyid:9B:13:4B:6E:90:24:06:4B:90:57:28:34:89:BF:2C:43:6F:40:75:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxNLbpAkBkuQVyg0ib8sQ29Adeg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:50:de:77:32:81:a0:05:12:5b:39:ec:ac:5d:0b:32:28:fa: da:72:0f:42:47:dd:26:12:6a:69:cb:d9:7e:0f:96:b5:db:4d: cc:1b:bf:73:53:b3:a1:ba:93:99:15:d2:96:14:1c:78:08:08: e4:18:9c:27:3d:ac:6a:dc:fc:f0:c8:3d:ef:95:2d:1a:58:61: db:79:61:e4:41:57:f7:b9:2a:a3:8e:76:a1:d9:0f:9d:dc:1a: 04:95:2f:5a:ec:b4:f2:cf:21:7b:30:03:3c:54:21:15:2a:75: c5:d8:0b:6c:1f:ba:07:15:2c:0d:15:18:d4:5d:3d:0b:a8:33: 51:ef:5c:b8:63:5a:bf:8b:1e:77:79:56:24:5e:03:74:91:92: b6:9a:1d:d2:65:c2:7f:d7:b5:8c:dd:31:21:31:81:51:cf:a5: 62:58:f9:83:63:a2:ed:95:58:c1:31:62:4b:0a:22:4f:ed:18: 21:e8:6a:5f:02:17:94:4e:b3:5d:11:16:e6:1b:78:48:8c:a1: e4:a9:ac:48:e8:fb:30:e6:d1:94:2c:ab:6f:18:a5:22:06:69: 18:92:2d:c4:d8:9f:d7:59:dc:eb:f6:5e:5c:5c:d0:03:50:80: d3:0b:7e:d1:47:00:93:24:50:48:cf:85:da:ab:cc:a6:f2:b4: da:7d:1f:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBNAgVGI3p8JKjDxLke9iTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliMTM0YjZlOTAyNDA2NGI5MDU3MjgzNDg5YmYyYzQzNmY0 MDc1ZTgwHhcNMjYwMjA5MDcwMDU0WhcNMjYwMjEwMDcwMDU0WjAzMTEwLwYDVQQD Eyg4NzM4ODZlYzZlOTY4OTc3Y2E2MjAzMWQyYTkzZWMxYzljZTdjMjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMtpeYy6n95uP/XSBJa464Oeboou LdM2MRS4SQnWzVKk8/lW728Fdy2Uia2R5hqWkoJZRXesJ0RCj1VhHWncYZ44MbMV dR6hMjoXKdN3UfRZN1FDSGbI+hMpxhQtkcIE7EMkEBRH1lFXbJ+1xPkVwBQff0GP U/Atg9I1Wk54zpjMu0nX+CTuIjTw1HOjUFrJ0rlw2/O8s8vGK/JBJ3yVQRUmLz7p xIT8KBY2FBucpjs4bTfZ1CWb816mirWxySJrLT2emrHX7kOXo17X4CGAsUp2B0if qhvuUxP4BeIxBv2tk4nuYz4uLX3X5Tm65nBwXMweifv1vEKiRjZUe3Xv1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIc4huxulol3ymIDHSqT7Byc58IOMB8GA1UdIwQY MBaAFJsTS26QJAZLkFcoNIm/LENvQHXoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXhOTGJwQWtCa3VRVnlnMGliOHNRMjlBZGVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi84YjA2MGMtMTdjMS00ZDlhLTg1MWUt YjQ3ZTA0MTczOTdkLzEvbXhOTGJwQWtCa3VRVnlnMGliOHNRMjlBZGVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi84YjA2MGMtMTdjMS00ZDlhLTg1MWUtYjQ3ZTA0MTczOTdk LzEvbXhOTGJwQWtCa3VRVnlnMGliOHNRMjlBZGVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXlDedzKB oAUSWznsrF0LMij62nIPQkfdJhJqacvZfg+WtdtNzBu/c1OzobqTmRXSlhQceAgI 5BicJz2satz88Mg975UtGlhh23lh5EFX97kqo452odkPndwaBJUvWuy08s8hezAD PFQhFSp1xdgLbB+6BxUsDRUY1F09C6gzUe9cuGNav4sed3lWJF4DdJGStpod0mXC f9e1jN0xITGBUc+lYlj5g2Oi7ZVYwTFiSwoiT+0YIehqXwIXlE6zXREW5ht4SIyh 5KmsSOj7MObRlCyrbxilIgZpGJItxNif11nc6/ZeXFzQA1CA0wt+0UcAkyRQSM+F 2qvMpvK02n0fgQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:52 2026 by rpki-client