This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft File: MBc-_VmPqpjUtSWOUfs6txbXrHE.mft (raw, json) Hash identifier: k0HeQ34ssVQzgMgu8uOxI9b43HdReqytj+26wOZ7ie8= Subject key identifier: 65:EC:F0:FF:77:9A:0C:E0:41:EF:67:1C:B9:CB:34:5A:E8:A6:5C:49 Authority key identifier: 30:17:3E:FD:59:8F:AA:98:D4:B5:25:8E:51:FB:3A:B7:16:D7:AC:71 Certificate issuer: /CN=30173efd598faa98d4b5258e51fb3ab716d7ac71 Certificate serial: 019C43C708E94DEF036E1EFB70DB6EEB827F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBc-_VmPqpjUtSWOUfs6txbXrHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft Manifest number: 16BB Signing time: Mon 09 Feb 2026 19:00:43 +0000 Manifest this update: Mon 09 Feb 2026 19:00:43 +0000 Manifest next update: Tue 10 Feb 2026 19:00:43 +0000 Files and hashes: 1: MBc-_VmPqpjUtSWOUfs6txbXrHE.crl (hash: brYrs1qVIG1k1pVys/QWJrCR7W6vwBCtYSu0IY+Ijn4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft rsync://rpki.ripe.net/repository/DEFAULT/MBc-_VmPqpjUtSWOUfs6txbXrHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c7:08:e9:4d:ef:03:6e:1e:fb:70:db:6e:eb:82:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30173efd598faa98d4b5258e51fb3ab716d7ac71 Validity Not Before: Feb 9 19:00:43 2026 GMT Not After : Feb 10 19:00:43 2026 GMT Subject: CN=65ecf0ff779a0ce041ef671cb9cb345ae8a65c49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:18:03:a0:af:f2:f4:8f:eb:07:0b:ca:71:e3: e0:91:bf:1c:b5:28:95:be:ec:24:dd:6c:36:ac:4c: d6:fc:56:ce:64:43:8f:aa:ee:f9:32:7b:3a:a6:f6: f7:ed:54:2d:81:83:d0:e7:10:26:d9:4d:c7:3f:3c: a6:7c:9f:17:e1:39:3d:10:84:87:aa:cd:4c:c6:31: c3:47:1c:f1:eb:68:2b:73:a9:92:1c:d5:59:92:e9: 7c:64:96:0b:ac:b4:28:f9:fc:48:21:04:5f:94:53: e7:a5:30:53:5b:17:01:eb:fb:76:7d:a0:14:bf:eb: f4:a6:ac:27:38:75:33:09:11:d1:0f:70:52:3e:c0: fe:db:63:a6:fa:f7:f6:67:dd:b1:b0:54:fc:86:18: 5e:a9:c7:c5:35:ec:57:2f:b1:5a:e3:82:e9:3f:24: 65:20:f7:5e:16:db:27:5e:30:60:ea:95:e8:ba:45: 0a:4d:33:9a:e9:5c:1d:a1:ee:71:9d:f8:4e:0a:8f: 63:04:35:41:93:aa:da:53:de:62:de:c2:0e:81:90: 6e:70:da:30:37:af:49:71:2d:dd:85:ba:53:48:c2: 26:01:ac:ef:25:11:d4:2b:2d:70:06:dd:47:86:99: 38:ac:d3:55:1d:df:40:bc:5f:eb:0b:51:01:3e:c2: 9c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:EC:F0:FF:77:9A:0C:E0:41:EF:67:1C:B9:CB:34:5A:E8:A6:5C:49 X509v3 Authority Key Identifier: keyid:30:17:3E:FD:59:8F:AA:98:D4:B5:25:8E:51:FB:3A:B7:16:D7:AC:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBc-_VmPqpjUtSWOUfs6txbXrHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:02:33:51:44:28:a1:8d:bf:ae:09:e5:00:9c:64:0a:75:e1: e8:ab:60:f7:5f:09:44:f3:bb:e8:b9:65:84:cd:f1:e2:82:99: 6e:d2:51:04:15:80:bb:69:80:fd:ed:fd:fc:0d:db:77:e1:16: 65:cf:5b:62:22:58:7a:23:14:70:ca:d8:37:ed:e5:b1:52:58: dd:d0:9f:3f:e5:7a:ca:5a:8a:12:ea:58:4a:e1:f5:44:d8:82: 32:26:3e:04:99:42:36:b2:fd:d1:29:87:39:81:7e:f3:f3:42: 78:1e:96:f9:62:4e:5d:da:13:6b:31:ae:58:b4:7d:78:5d:5a: 8c:51:67:6e:09:03:c5:92:b8:6f:3a:34:94:e2:84:45:21:a9: 30:c8:a3:f6:5f:f0:16:1a:f5:59:c9:ef:3c:38:fc:5b:52:72: 34:1a:ad:86:82:56:20:b9:60:93:e8:8d:c3:f6:b7:96:bd:8b: 77:18:92:1c:70:4d:27:c5:16:1f:16:61:76:ff:e3:3a:25:cb: b7:2a:79:cd:3d:dc:51:8f:fb:2e:03:63:8a:d5:20:1b:d9:58: ab:fc:71:1e:fc:7c:f2:96:a2:eb:d7:d2:91:5b:d2:28:bb:17: 7b:4f:13:eb:f1:3c:85:ba:75:a9:07:3f:97:8c:35:85:c0:4f: c6:f1:55:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxwjpTe8Dbh77cNtu64J/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMTczZWZkNTk4ZmFhOThkNGI1MjU4ZTUxZmIzYWI3MTZk N2FjNzEwHhcNMjYwMjA5MTkwMDQzWhcNMjYwMjEwMTkwMDQzWjAzMTEwLwYDVQQD Eyg2NWVjZjBmZjc3OWEwY2UwNDFlZjY3MWNiOWNiMzQ1YWU4YTY1YzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xgDoK/y9I/rBwvKcePgkb8ctSiV vuwk3Ww2rEzW/FbOZEOPqu75Mns6pvb37VQtgYPQ5xAm2U3HPzymfJ8X4Tk9EISH qs1MxjHDRxzx62grc6mSHNVZkul8ZJYLrLQo+fxIIQRflFPnpTBTWxcB6/t2faAU v+v0pqwnOHUzCRHRD3BSPsD+22Om+vf2Z92xsFT8hhheqcfFNexXL7Fa44LpPyRl IPdeFtsnXjBg6pXoukUKTTOa6Vwdoe5xnfhOCo9jBDVBk6raU95i3sIOgZBucNow N69JcS3dhbpTSMImAazvJRHUKy1wBt1Hhpk4rNNVHd9AvF/rC1EBPsKchwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGXs8P93mgzgQe9nHLnLNFroplxJMB8GA1UdIwQY MBaAFDAXPv1Zj6qY1LUljlH7OrcW16xxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUJjLV9WbVBxcGpVdFNXT1VmczZ0eGJYckhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC83YTA2N2MtZWExOS00MDVhLThlNzQt YjRhM2ZjM2EwMWYxLzEvTUJjLV9WbVBxcGpVdFNXT1VmczZ0eGJYckhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC83YTA2N2MtZWExOS00MDVhLThlNzQtYjRhM2ZjM2EwMWYx LzEvTUJjLV9WbVBxcGpVdFNXT1VmczZ0eGJYckhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIQIzUUQo oY2/rgnlAJxkCnXh6Ktg918JRPO76LllhM3x4oKZbtJRBBWAu2mA/e39/A3bd+EW Zc9bYiJYeiMUcMrYN+3lsVJY3dCfP+V6ylqKEupYSuH1RNiCMiY+BJlCNrL90SmH OYF+8/NCeB6W+WJOXdoTazGuWLR9eF1ajFFnbgkDxZK4bzo0lOKERSGpMMij9l/w Fhr1WcnvPDj8W1JyNBqthoJWILlgk+iNw/a3lr2LdxiSHHBNJ8UWHxZhdv/jOiXL typ5zT3cUY/7LgNjitUgG9lYq/xxHvx88pai69fSkVvSKLsXe08T6/E8hbp1qQc/ l4w1hcBPxvFV2g== -----END CERTIFICATE-----Generated at Tue Feb 10 01:41:18 2026 by rpki-client