This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft File: M7n5GBbdTYImpB47TDsJx73MZKk.mft (raw, json) Hash identifier: YTSaLo0Htr+5ym1qWJQeVBW4W18SUI0oRHRYuP2VTbs= Subject key identifier: F9:B5:3B:5C:0F:B4:B5:02:09:66:D4:6C:7E:09:B0:30:CE:BA:AF:B2 Authority key identifier: 33:B9:F9:18:16:DD:4D:82:26:A4:1E:3B:4C:3B:09:C7:BD:CC:64:A9 Certificate issuer: /CN=33b9f91816dd4d8226a41e3b4c3b09c7bdcc64a9 Certificate serial: 019C4358DF9BA0C8501D4F3AD4B3D4F1D599 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 17:00:23 +0000 Manifest this update: Mon 09 Feb 2026 17:00:23 +0000 Manifest next update: Tue 10 Feb 2026 17:00:23 +0000 Files and hashes: 1: M7n5GBbdTYImpB47TDsJx73MZKk.crl (hash: DHnQplxNfiejEU91FuNbKWcEB/LCIR58q22HlO7R2Bw=) 2: aTwucs9Pwvr6YSYXdadFRJo6hLs.roa (hash: ilcm0/S70CqecxpFPp/FDen+jHt9VTiUtWGnp7lMb1Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:df:9b:a0:c8:50:1d:4f:3a:d4:b3:d4:f1:d5:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33b9f91816dd4d8226a41e3b4c3b09c7bdcc64a9 Validity Not Before: Feb 9 17:00:23 2026 GMT Not After : Feb 10 17:00:23 2026 GMT Subject: CN=f9b53b5c0fb4b5020966d46c7e09b030cebaafb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:28:b1:68:6f:46:1f:7f:55:14:c6:cf:82:7f: 08:b8:5d:45:37:8c:77:b7:02:b3:ac:ae:40:f4:5b: 9b:ad:fb:81:aa:9f:cc:a4:3f:73:98:35:19:10:14: 68:88:fe:fa:5d:7b:99:4d:30:69:9c:83:4c:53:d7: 1c:48:48:8f:af:46:37:db:82:7a:29:e1:5b:45:66: c5:ed:e3:00:9a:1b:51:e5:c8:00:50:21:73:eb:f6: 9b:d6:02:fb:94:01:9f:67:ba:38:24:47:a9:40:d4: df:97:50:34:cc:3f:7f:d0:a4:c2:77:4f:1f:94:7d: 70:ba:03:05:ef:3c:3e:5b:77:04:4c:b6:53:ba:a8: cd:b5:5c:4e:f0:4d:a0:cf:77:e4:07:ea:9b:a8:f0: 40:6e:71:dc:c9:df:2e:77:d4:bb:51:20:d2:3d:e5: 0d:e5:6f:0c:85:24:da:e5:72:f2:a8:d2:6b:dc:c4: d7:20:68:73:20:d0:e4:8c:05:42:20:d6:85:20:64: 79:18:38:99:b2:bb:5c:04:ba:7c:4a:25:e6:77:09: 71:9b:2c:24:ed:f1:9b:86:81:7b:96:c2:31:2c:9a: ec:76:af:b5:1f:2e:46:30:86:f9:cb:9e:86:30:f2: 83:5c:bd:77:c9:49:d9:6d:8b:bb:5c:37:f9:66:0a: dd:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:B5:3B:5C:0F:B4:B5:02:09:66:D4:6C:7E:09:B0:30:CE:BA:AF:B2 X509v3 Authority Key Identifier: keyid:33:B9:F9:18:16:DD:4D:82:26:A4:1E:3B:4C:3B:09:C7:BD:CC:64:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:21:25:f3:ff:0e:fc:53:60:41:35:64:6f:d7:21:8f:6d:d4: b1:a4:84:e5:7c:4b:e1:4c:3d:b5:92:24:09:d8:04:9f:f0:90: 70:18:98:3b:7c:07:10:ad:0b:7a:04:29:8f:e4:9a:e6:70:53: 8f:f7:98:98:51:ac:7d:1f:6c:2d:01:04:70:37:1c:47:21:f9: 06:5c:00:a4:e4:38:9b:91:e2:51:04:b2:24:72:fc:9b:35:a8: 8e:78:44:6c:06:a9:10:ae:11:c3:9f:71:9c:dc:45:bd:b9:a6: d9:e4:90:a4:16:3b:0d:37:89:89:68:61:8b:f7:e6:bc:80:33: eb:25:95:e8:9e:6b:12:28:e1:e3:33:50:62:e0:4f:19:96:4b: 12:d1:ca:04:37:1b:5a:49:a8:42:4d:e2:17:95:0e:1f:b4:b4: 49:0e:7d:92:90:6a:35:2e:80:ff:53:f6:71:d9:31:6c:a3:6f: 4a:fb:c9:41:82:67:c6:9c:c4:39:b3:d8:e3:26:5c:7e:1a:ea: 0e:45:47:2e:ed:e3:07:c9:17:bd:63:0e:ea:80:b2:b3:be:e3: 79:d4:ad:6b:a8:b1:dc:09:74:11:2f:53:67:92:bb:de:8e:e1: 8c:4f:fe:a6:19:62:65:eb:34:c8:1d:54:0f:72:00:5d:e0:c8: a4:e4:2e:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWN+boMhQHU861LPU8dWZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzYjlmOTE4MTZkZDRkODIyNmE0MWUzYjRjM2IwOWM3YmRj YzY0YTkwHhcNMjYwMjA5MTcwMDIzWhcNMjYwMjEwMTcwMDIzWjAzMTEwLwYDVQQD EyhmOWI1M2I1YzBmYjRiNTAyMDk2NmQ0NmM3ZTA5YjAzMGNlYmFhZmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyixaG9GH39VFMbPgn8IuF1FN4x3 twKzrK5A9FubrfuBqp/MpD9zmDUZEBRoiP76XXuZTTBpnINMU9ccSEiPr0Y324J6 KeFbRWbF7eMAmhtR5cgAUCFz6/ab1gL7lAGfZ7o4JEepQNTfl1A0zD9/0KTCd08f lH1wugMF7zw+W3cETLZTuqjNtVxO8E2gz3fkB+qbqPBAbnHcyd8ud9S7USDSPeUN 5W8MhSTa5XLyqNJr3MTXIGhzINDkjAVCINaFIGR5GDiZsrtcBLp8SiXmdwlxmywk 7fGbhoF7lsIxLJrsdq+1Hy5GMIb5y56GMPKDXL13yUnZbYu7XDf5ZgrdWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPm1O1wPtLUCCWbUbH4JsDDOuq+yMB8GA1UdIwQY MBaAFDO5+RgW3U2CJqQeO0w7Cce9zGSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTduNUdCYmRUWUltcEI0N1REc0p4NzNNWktrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi84MTMyZjAtNzAyZS00MDQ0LWI2ZDYt Y2E4Y2Y2YWNmYWViLzEvTTduNUdCYmRUWUltcEI0N1REc0p4NzNNWktrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi84MTMyZjAtNzAyZS00MDQ0LWI2ZDYtY2E4Y2Y2YWNmYWVi LzEvTTduNUdCYmRUWUltcEI0N1REc0p4NzNNWktrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANCEl8/8O /FNgQTVkb9chj23UsaSE5XxL4Uw9tZIkCdgEn/CQcBiYO3wHEK0LegQpj+Sa5nBT j/eYmFGsfR9sLQEEcDccRyH5BlwApOQ4m5HiUQSyJHL8mzWojnhEbAapEK4Rw59x nNxFvbmm2eSQpBY7DTeJiWhhi/fmvIAz6yWV6J5rEijh4zNQYuBPGZZLEtHKBDcb WkmoQk3iF5UOH7S0SQ59kpBqNS6A/1P2cdkxbKNvSvvJQYJnxpzEObPY4yZcfhrq DkVHLu3jB8kXvWMO6oCys77jedSta6ix3Al0ES9TZ5K73o7hjE/+phliZes0yB1U D3IAXeDIpOQuRQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:54 2026 by rpki-client