This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/7b6340-b261-4a8d-b5b7-d5d8142b2dea/1/rMLFlKR8h2Yif9mlEolO-Ko0tgc.mft File: rMLFlKR8h2Yif9mlEolO-Ko0tgc.mft (raw, json) Hash identifier: jATFhzd6uwZafOMw5+Qn9ukfhzQ8GUwGI14tz2ocZm0= Subject key identifier: D4:C4:EB:A5:F7:EC:BB:16:64:0A:FD:2E:0B:53:8B:AB:55:42:26:75 Authority key identifier: AC:C2:C5:94:A4:7C:87:66:22:7F:D9:A5:12:89:4E:F8:AA:34:B6:07 Certificate issuer: /CN=acc2c594a47c8766227fd9a512894ef8aa34b607 Certificate serial: 019C4322B301301B0FF7EE7814C906BAEF49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMLFlKR8h2Yif9mlEolO-Ko0tgc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/7b6340-b261-4a8d-b5b7-d5d8142b2dea/1/rMLFlKR8h2Yif9mlEolO-Ko0tgc.mft Manifest number: 0107 Signing time: Mon 09 Feb 2026 16:01:13 +0000 Manifest this update: Mon 09 Feb 2026 16:01:13 +0000 Manifest next update: Tue 10 Feb 2026 16:01:13 +0000 Files and hashes: 1: rMLFlKR8h2Yif9mlEolO-Ko0tgc.crl (hash: bhK42OqlwpuXEe5nXyaYPZnGyZ7l0UTVKBoSbxdta0g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/7b6340-b261-4a8d-b5b7-d5d8142b2dea/1/rMLFlKR8h2Yif9mlEolO-Ko0tgc.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/7b6340-b261-4a8d-b5b7-d5d8142b2dea/1/rMLFlKR8h2Yif9mlEolO-Ko0tgc.mft rsync://rpki.ripe.net/repository/DEFAULT/rMLFlKR8h2Yif9mlEolO-Ko0tgc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:b3:01:30:1b:0f:f7:ee:78:14:c9:06:ba:ef:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acc2c594a47c8766227fd9a512894ef8aa34b607 Validity Not Before: Feb 9 16:01:13 2026 GMT Not After : Feb 10 16:01:13 2026 GMT Subject: CN=d4c4eba5f7ecbb16640afd2e0b538bab55422675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fb:ff:80:18:b0:19:f7:81:c0:0f:76:08:74: bd:a5:d5:e2:f6:1f:a5:a7:96:01:01:6b:5b:e0:71: dc:60:a8:dd:b8:ff:61:75:96:a1:30:8a:71:6b:ab: ae:89:63:a3:27:91:48:b6:31:19:47:21:50:22:ac: 5a:4c:3a:df:8b:4f:d8:b5:2a:5f:a5:58:cc:7e:0e: a2:25:1c:65:9a:7c:c8:fc:55:d3:b6:48:58:14:9d: 6d:9b:2a:c7:23:64:38:31:47:2c:8e:1e:a7:33:34: fc:86:13:13:d3:70:2d:49:90:92:05:5f:f7:5f:9b: 1f:b6:82:b1:b4:37:5f:fc:c8:e3:99:e5:6a:bc:af: b0:80:6f:ea:4f:5e:05:4a:17:74:56:b4:34:eb:f7: 44:43:57:8d:a9:f6:ab:79:1b:06:2b:94:3d:f5:d2: 6d:e9:f0:f6:47:d5:33:ce:c9:42:5d:c2:a4:d2:cd: 28:13:85:ac:76:24:53:83:06:5a:1e:e0:6e:a0:95: 9d:47:0d:48:0d:4d:7e:08:51:35:67:6f:ed:45:94: 67:b3:ec:6f:61:5e:d2:96:89:6d:56:16:01:04:b3: 73:82:77:13:d5:22:d0:41:ff:13:f2:b1:20:2d:dd: 57:07:2d:60:86:b0:c4:1a:d4:ee:b2:a5:73:c1:0d: 54:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C4:EB:A5:F7:EC:BB:16:64:0A:FD:2E:0B:53:8B:AB:55:42:26:75 X509v3 Authority Key Identifier: keyid:AC:C2:C5:94:A4:7C:87:66:22:7F:D9:A5:12:89:4E:F8:AA:34:B6:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMLFlKR8h2Yif9mlEolO-Ko0tgc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7b6340-b261-4a8d-b5b7-d5d8142b2dea/1/rMLFlKR8h2Yif9mlEolO-Ko0tgc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7b6340-b261-4a8d-b5b7-d5d8142b2dea/1/rMLFlKR8h2Yif9mlEolO-Ko0tgc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:58:5a:85:6b:9a:c6:62:80:3c:ec:4e:c1:59:4b:d9:51:66: c3:ed:a3:68:d0:72:5e:76:fa:af:f4:df:a3:c6:94:92:54:73: c5:f9:89:7f:5d:49:0f:62:06:ef:e3:1b:2c:f5:3a:68:39:82: 87:0b:09:a9:cc:2b:df:3b:0d:c1:fb:72:fe:9c:f0:9e:64:97: e1:93:db:af:3a:90:50:bc:2e:19:9d:08:15:aa:80:b9:75:1a: ad:5c:dd:2c:78:66:5f:fa:1f:8e:6f:0f:3a:e2:06:d0:35:cd: bd:f5:84:1b:c4:f0:9d:ff:d4:25:1f:4a:a8:52:b1:44:06:d3: 35:8f:33:87:2f:0b:5d:9e:7d:71:7b:95:69:2c:85:8d:04:ae: 7b:9e:86:db:5e:c9:eb:2f:fa:b2:f0:a7:99:4f:a5:d5:23:b0: 0b:ca:78:b0:ac:ec:9a:d9:f9:c7:2b:0f:d0:9d:fc:0a:80:cb: 05:9f:d7:62:54:92:31:23:17:ae:46:75:05:68:13:3a:d4:4f: ed:89:0a:9d:ee:a8:06:f1:3b:b2:a6:cd:a3:0e:99:28:f3:75: b2:85:be:aa:46:d0:02:71:5b:5e:b9:4c:78:2f:08:59:d3:12: 4d:cf:a1:bb:e1:17:e3:4e:12:a8:08:0a:2d:f9:83:d2:a3:d3: fd:98:c2:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIrMBMBsP9+54FMkGuu9JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYzJjNTk0YTQ3Yzg3NjYyMjdmZDlhNTEyODk0ZWY4YWEz NGI2MDcwHhcNMjYwMjA5MTYwMTEzWhcNMjYwMjEwMTYwMTEzWjAzMTEwLwYDVQQD EyhkNGM0ZWJhNWY3ZWNiYjE2NjQwYWZkMmUwYjUzOGJhYjU1NDIyNjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/v/gBiwGfeBwA92CHS9pdXi9h+l p5YBAWtb4HHcYKjduP9hdZahMIpxa6uuiWOjJ5FItjEZRyFQIqxaTDrfi0/YtSpf pVjMfg6iJRxlmnzI/FXTtkhYFJ1tmyrHI2Q4MUcsjh6nMzT8hhMT03AtSZCSBV/3 X5sftoKxtDdf/MjjmeVqvK+wgG/qT14FShd0VrQ06/dEQ1eNqfareRsGK5Q99dJt 6fD2R9UzzslCXcKk0s0oE4WsdiRTgwZaHuBuoJWdRw1IDU1+CFE1Z2/tRZRns+xv YV7SloltVhYBBLNzgncT1SLQQf8T8rEgLd1XBy1ghrDEGtTusqVzwQ1UwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNTE66X37LsWZAr9LgtTi6tVQiZ1MB8GA1UdIwQY MBaAFKzCxZSkfIdmIn/ZpRKJTviqNLYHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvck1MRmxLUjhoMllpZjltbEVvbE8tS28wdGdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi83YjYzNDAtYjI2MS00YThkLWI1Yjct ZDVkODE0MmIyZGVhLzEvck1MRmxLUjhoMllpZjltbEVvbE8tS28wdGdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi83YjYzNDAtYjI2MS00YThkLWI1YjctZDVkODE0MmIyZGVh LzEvck1MRmxLUjhoMllpZjltbEVvbE8tS28wdGdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH1hahWua xmKAPOxOwVlL2VFmw+2jaNByXnb6r/Tfo8aUklRzxfmJf11JD2IG7+MbLPU6aDmC hwsJqcwr3zsNwfty/pzwnmSX4ZPbrzqQULwuGZ0IFaqAuXUarVzdLHhmX/ofjm8P OuIG0DXNvfWEG8Twnf/UJR9KqFKxRAbTNY8zhy8LXZ59cXuVaSyFjQSue56G217J 6y/6svCnmU+l1SOwC8p4sKzsmtn5xysP0J38CoDLBZ/XYlSSMSMXrkZ1BWgTOtRP 7YkKne6oBvE7sqbNow6ZKPN1soW+qkbQAnFbXrlMeC8IWdMSTc+hu+EX404SqAgK LfmD0qPT/ZjCOg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:38 2026 by rpki-client