This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft File: 1mQz-w-93Ml-sBVmko1gcGzMZiM.mft (raw, json) Hash identifier: 7ZpYw4g7Gg+ucfRrsdZql3ZoVk72ohsyJvbMM45j0N4= Subject key identifier: 88:6A:0D:BD:C8:AF:F8:64:B1:8D:C5:89:F7:ED:51:95:37:6A:C4:AC Authority key identifier: D6:64:33:FB:0F:BD:DC:C9:7E:B0:15:66:92:8D:60:70:6C:CC:66:23 Certificate issuer: /CN=d66433fb0fbddcc97eb01566928d60706ccc6623 Certificate serial: 019C41D85D6AEFA21F9BB417F2B56E855B89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1mQz-w-93Ml-sBVmko1gcGzMZiM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft Manifest number: 0A75 Signing time: Mon 09 Feb 2026 10:00:24 +0000 Manifest this update: Mon 09 Feb 2026 10:00:24 +0000 Manifest next update: Tue 10 Feb 2026 10:00:24 +0000 Files and hashes: 1: 1mQz-w-93Ml-sBVmko1gcGzMZiM.crl (hash: f1x7Nix9kBA/MKbmfnLhe+00CPczOR+FdWFqueqMoZQ=) 2: AKAYJxK55ho0_-tu4n3xkwEVy0E.roa (hash: CwiOEuZ5WNXcf/WHMc8X4C6V6miMKO5JICnCl7N0bT4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft rsync://rpki.ripe.net/repository/DEFAULT/1mQz-w-93Ml-sBVmko1gcGzMZiM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:5d:6a:ef:a2:1f:9b:b4:17:f2:b5:6e:85:5b:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d66433fb0fbddcc97eb01566928d60706ccc6623 Validity Not Before: Feb 9 10:00:24 2026 GMT Not After : Feb 10 10:00:24 2026 GMT Subject: CN=886a0dbdc8aff864b18dc589f7ed5195376ac4ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8e:69:74:c0:a3:40:09:cc:f4:66:ac:9e:03: 8e:29:cd:38:af:21:fb:25:cf:53:c1:46:10:5b:c6: 00:e5:2b:31:3c:8a:77:22:f3:c5:2f:d4:d4:8b:3f: 27:74:7d:1c:9d:1c:f2:b3:a1:a1:24:ea:d3:a9:6d: 4d:d4:0c:36:0d:b3:74:49:be:31:5f:b0:86:5c:31: 34:78:94:59:64:16:78:92:d3:97:26:3c:9d:a8:48: 82:8f:7b:55:32:79:1f:ef:b1:11:a1:b0:66:3a:78: 25:fa:92:54:fc:6b:22:6f:84:4f:1d:25:7d:33:4b: 85:4e:26:a9:fb:f8:1b:0d:f6:ea:67:45:7e:ca:d0: 12:df:05:68:9e:dd:51:f1:82:d3:c8:cd:57:26:bb: 74:8b:75:63:4f:d5:b6:df:54:ba:7c:1f:5f:03:6e: 7f:2c:dd:88:00:10:7d:2d:96:d8:ff:8d:d9:31:41: 8b:8f:4c:00:2d:13:42:6d:61:82:55:e8:82:a9:d1: 9a:aa:90:d0:25:64:c1:32:59:ae:4b:0d:d7:73:26: 7a:76:4f:9b:45:b4:66:a0:7a:20:81:2b:66:0e:b0: c2:0e:da:4c:58:90:ed:99:bd:4a:cd:eb:78:52:7c: a2:56:08:7c:3f:b6:2f:af:da:f6:69:12:1c:48:be: 5c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:6A:0D:BD:C8:AF:F8:64:B1:8D:C5:89:F7:ED:51:95:37:6A:C4:AC X509v3 Authority Key Identifier: keyid:D6:64:33:FB:0F:BD:DC:C9:7E:B0:15:66:92:8D:60:70:6C:CC:66:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1mQz-w-93Ml-sBVmko1gcGzMZiM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:26:71:ec:8d:33:be:11:0b:cd:40:e7:f8:7c:dc:9e:36:6e: d3:5e:e4:7d:af:d0:58:be:d2:1e:9d:40:1d:fb:33:2d:f9:f6: 81:83:76:78:f2:59:66:5a:ad:5d:a2:46:b4:b4:f2:bf:0f:dc: 4c:aa:9d:09:b0:7f:1b:f9:ad:d0:72:40:2b:bf:24:45:3d:bd: b3:e9:b0:85:ab:37:29:71:86:4b:d1:97:de:70:37:cc:8f:32: ef:db:20:d7:6e:86:24:10:c8:c6:9a:57:5c:36:ce:16:80:1a: 21:10:93:a5:a7:be:fb:83:52:fa:fc:9a:20:ac:fd:a3:9a:e2: 3f:a3:58:d4:5a:29:46:c6:7f:86:15:97:42:b9:86:65:ef:90: 65:46:e8:97:84:6a:e7:85:85:65:0b:c6:e4:9a:16:81:c3:87: 6f:03:5c:f6:a0:fa:53:65:8b:75:ae:22:f0:5b:53:30:a5:bf: 6a:29:64:77:a2:ad:52:39:d1:e6:3d:46:39:ea:84:b3:29:c8: 70:4d:c6:20:df:ef:ce:34:4a:47:83:97:a1:b8:f3:0c:1e:70: ce:4c:8f:50:6a:c8:a1:6c:9b:b5:b0:30:98:72:fa:26:c1:d4: 74:f5:7d:00:c5:9a:5f:5d:58:3d:21:6b:67:b9:c4:ab:5c:e8: 5b:94:4d:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2F1q76Ifm7QX8rVuhVuJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NjQzM2ZiMGZiZGRjYzk3ZWIwMTU2NjkyOGQ2MDcwNmNj YzY2MjMwHhcNMjYwMjA5MTAwMDI0WhcNMjYwMjEwMTAwMDI0WjAzMTEwLwYDVQQD Eyg4ODZhMGRiZGM4YWZmODY0YjE4ZGM1ODlmN2VkNTE5NTM3NmFjNGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAno5pdMCjQAnM9GasngOOKc04ryH7 Jc9TwUYQW8YA5SsxPIp3IvPFL9TUiz8ndH0cnRzys6GhJOrTqW1N1Aw2DbN0Sb4x X7CGXDE0eJRZZBZ4ktOXJjydqEiCj3tVMnkf77ERobBmOngl+pJU/Gsib4RPHSV9 M0uFTiap+/gbDfbqZ0V+ytAS3wVont1R8YLTyM1XJrt0i3VjT9W231S6fB9fA25/ LN2IABB9LZbY/43ZMUGLj0wALRNCbWGCVeiCqdGaqpDQJWTBMlmuSw3XcyZ6dk+b RbRmoHoggStmDrDCDtpMWJDtmb1Kzet4UnyiVgh8P7Yvr9r2aRIcSL5cvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIhqDb3Ir/hksY3FifftUZU3asSsMB8GA1UdIwQY MBaAFNZkM/sPvdzJfrAVZpKNYHBszGYjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW1Rei13LTkzTWwtc0JWbWtvMWdjR3pNWmlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8zMGU2ZmUtZGFmZC00YzBlLWIyMDkt MDVkMmNkZmExNmE2LzEvMW1Rei13LTkzTWwtc0JWbWtvMWdjR3pNWmlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8zMGU2ZmUtZGFmZC00YzBlLWIyMDktMDVkMmNkZmExNmE2 LzEvMW1Rei13LTkzTWwtc0JWbWtvMWdjR3pNWmlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaCZx7I0z vhELzUDn+HzcnjZu017kfa/QWL7SHp1AHfszLfn2gYN2ePJZZlqtXaJGtLTyvw/c TKqdCbB/G/mt0HJAK78kRT29s+mwhas3KXGGS9GX3nA3zI8y79sg126GJBDIxppX XDbOFoAaIRCTpae++4NS+vyaIKz9o5riP6NY1FopRsZ/hhWXQrmGZe+QZUbol4Rq 54WFZQvG5JoWgcOHbwNc9qD6U2WLda4i8FtTMKW/ailkd6KtUjnR5j1GOeqEsynI cE3GIN/vzjRKR4OXobjzDB5wzkyPUGrIoWybtbAwmHL6JsHUdPV9AMWaX11YPSFr Z7nEq1zoW5RNWw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:40:36 2026 by rpki-client