This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/cf98c6-bc6b-4c98-b650-8a3a36d71c66/1/MqD9Xa9E_FXXzlk452RKFyOEjDI.mft File: MqD9Xa9E_FXXzlk452RKFyOEjDI.mft (raw, json) Hash identifier: pTtsz7RKl23/R4+tDh8ZNFj0Y/daSdao3gmBBlMYL4k= Subject key identifier: 60:82:52:62:03:DD:82:28:BA:D1:07:5A:AF:71:BC:BF:0C:8D:16:BD Authority key identifier: 32:A0:FD:5D:AF:44:FC:55:D7:CE:59:38:E7:64:4A:17:23:84:8C:32 Certificate issuer: /CN=32a0fd5daf44fc55d7ce5938e7644a1723848c32 Certificate serial: 019C43591B8E52BC0923F2E6727F7ABA00EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MqD9Xa9E_FXXzlk452RKFyOEjDI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/cf98c6-bc6b-4c98-b650-8a3a36d71c66/1/MqD9Xa9E_FXXzlk452RKFyOEjDI.mft Manifest number: 0118 Signing time: Mon 09 Feb 2026 17:00:39 +0000 Manifest this update: Mon 09 Feb 2026 17:00:39 +0000 Manifest next update: Tue 10 Feb 2026 17:00:39 +0000 Files and hashes: 1: MqD9Xa9E_FXXzlk452RKFyOEjDI.crl (hash: m9iWXl23jk5jIZmQJkxwkMYTnkc5kq64lp1cYQUgolU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/cf98c6-bc6b-4c98-b650-8a3a36d71c66/1/MqD9Xa9E_FXXzlk452RKFyOEjDI.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/cf98c6-bc6b-4c98-b650-8a3a36d71c66/1/MqD9Xa9E_FXXzlk452RKFyOEjDI.mft rsync://rpki.ripe.net/repository/DEFAULT/MqD9Xa9E_FXXzlk452RKFyOEjDI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:1b:8e:52:bc:09:23:f2:e6:72:7f:7a:ba:00:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32a0fd5daf44fc55d7ce5938e7644a1723848c32 Validity Not Before: Feb 9 17:00:39 2026 GMT Not After : Feb 10 17:00:39 2026 GMT Subject: CN=6082526203dd8228bad1075aaf71bcbf0c8d16bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f0:64:37:b2:60:94:80:5d:fa:a4:a3:4d:7e: f2:d0:58:7a:83:0f:01:81:81:77:8d:bc:f1:c9:4a: d8:0e:fa:ef:7f:22:17:1a:51:d6:0f:9f:b6:d1:c9: f4:9c:06:5d:e8:9c:7c:2a:83:f6:6a:cd:a5:b5:be: a2:86:0b:cd:31:f4:a1:2d:95:b3:1b:49:2d:4b:53: 92:07:07:0b:72:81:29:55:a2:5e:49:0c:60:a9:8d: 46:b9:2a:68:59:14:df:91:a6:fa:c1:2d:ef:57:8c: 9e:14:3a:ec:e2:90:a2:53:6a:97:0a:a3:87:5b:c0: 63:dc:43:e7:60:76:03:ff:45:d7:43:c8:96:0f:b8: d6:f3:f6:c2:7a:45:8a:56:66:7d:ee:af:19:40:ee: 14:19:c5:f8:04:0f:5e:e3:13:ee:31:c4:da:ce:cf: 04:9a:b6:78:0c:1d:88:ea:e2:3f:13:85:3b:8a:4c: 4e:b4:57:49:9c:62:2f:ed:82:a5:5e:ce:c0:96:8a: 3b:82:09:8d:00:23:43:f3:2f:8c:10:44:cb:22:cc: 51:31:ea:60:c5:99:77:a3:4d:d5:52:2c:79:90:ee: d5:cd:4d:32:78:9f:de:ac:57:e5:82:e6:a8:92:04: 13:4c:58:14:da:eb:df:c3:a0:02:78:81:91:5d:da: c8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:82:52:62:03:DD:82:28:BA:D1:07:5A:AF:71:BC:BF:0C:8D:16:BD X509v3 Authority Key Identifier: keyid:32:A0:FD:5D:AF:44:FC:55:D7:CE:59:38:E7:64:4A:17:23:84:8C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MqD9Xa9E_FXXzlk452RKFyOEjDI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cf98c6-bc6b-4c98-b650-8a3a36d71c66/1/MqD9Xa9E_FXXzlk452RKFyOEjDI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cf98c6-bc6b-4c98-b650-8a3a36d71c66/1/MqD9Xa9E_FXXzlk452RKFyOEjDI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:ec:4d:34:14:1f:ff:da:ed:62:4f:a2:b2:36:b7:6c:05:18: 18:0c:08:a9:ea:47:c3:7b:e2:f1:df:28:be:d4:09:b1:97:ab: 21:cc:47:b2:d1:99:33:30:cd:76:a8:dc:18:b7:db:e7:3e:3b: 18:1d:41:cf:1d:86:ed:fb:71:92:da:7c:e9:47:43:69:66:94: 55:2b:0c:67:a5:2a:05:81:49:05:fc:43:da:0c:aa:cd:f7:aa: e5:45:28:c2:fd:e7:17:e6:23:79:87:4e:c5:b2:cd:06:c8:a5: 28:eb:5f:5c:5f:ec:93:fc:9e:1b:98:cf:5f:c0:4a:65:3b:5f: 1d:bd:86:a1:39:18:79:45:54:3c:78:55:3a:86:b9:5f:60:89: 3e:84:90:9a:fc:89:7d:35:7c:1b:12:53:e6:00:fe:de:6f:21: 44:f1:9f:1c:21:cf:b6:46:fb:22:bb:23:fd:77:7d:9d:91:3f: a3:6e:6a:0f:ff:b4:1d:31:5d:9c:ff:97:35:8b:12:23:cd:00: c5:83:34:bf:11:98:e6:1f:92:b4:38:5a:48:b2:d3:2e:0d:59: 2b:a5:9e:b3:ad:0e:c7:84:8c:52:b1:4f:48:1c:41:be:ac:d5: b4:f0:d7:1a:98:c2:fe:a3:52:36:57:99:3e:3c:36:e0:43:67: 36:c3:5d:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWRuOUrwJI/Lmcn96ugDvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyYTBmZDVkYWY0NGZjNTVkN2NlNTkzOGU3NjQ0YTE3MjM4 NDhjMzIwHhcNMjYwMjA5MTcwMDM5WhcNMjYwMjEwMTcwMDM5WjAzMTEwLwYDVQQD Eyg2MDgyNTI2MjAzZGQ4MjI4YmFkMTA3NWFhZjcxYmNiZjBjOGQxNmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/BkN7JglIBd+qSjTX7y0Fh6gw8B gYF3jbzxyUrYDvrvfyIXGlHWD5+20cn0nAZd6Jx8KoP2as2ltb6ihgvNMfShLZWz G0ktS1OSBwcLcoEpVaJeSQxgqY1GuSpoWRTfkab6wS3vV4yeFDrs4pCiU2qXCqOH W8Bj3EPnYHYD/0XXQ8iWD7jW8/bCekWKVmZ97q8ZQO4UGcX4BA9e4xPuMcTazs8E mrZ4DB2I6uI/E4U7ikxOtFdJnGIv7YKlXs7Aloo7ggmNACND8y+MEETLIsxRMepg xZl3o03VUix5kO7VzU0yeJ/erFflguaokgQTTFgU2uvfw6ACeIGRXdrIXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGCCUmID3YIoutEHWq9xvL8MjRa9MB8GA1UdIwQY MBaAFDKg/V2vRPxV185ZOOdkShcjhIwyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXFEOVhhOUVfRlhYemxrNDUyUktGeU9FakRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jZjk4YzYtYmM2Yi00Yzk4LWI2NTAt OGEzYTM2ZDcxYzY2LzEvTXFEOVhhOUVfRlhYemxrNDUyUktGeU9FakRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9jZjk4YzYtYmM2Yi00Yzk4LWI2NTAtOGEzYTM2ZDcxYzY2 LzEvTXFEOVhhOUVfRlhYemxrNDUyUktGeU9FakRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm+xNNBQf /9rtYk+isja3bAUYGAwIqepHw3vi8d8ovtQJsZerIcxHstGZMzDNdqjcGLfb5z47 GB1Bzx2G7ftxktp86UdDaWaUVSsMZ6UqBYFJBfxD2gyqzfeq5UUowv3nF+YjeYdO xbLNBsilKOtfXF/sk/yeG5jPX8BKZTtfHb2GoTkYeUVUPHhVOoa5X2CJPoSQmvyJ fTV8GxJT5gD+3m8hRPGfHCHPtkb7Irsj/Xd9nZE/o25qD/+0HTFdnP+XNYsSI80A xYM0vxGY5h+StDhaSLLTLg1ZK6Wes60Ox4SMUrFPSBxBvqzVtPDXGpjC/qNSNleZ Pjw24ENnNsNd6A== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:48 2026 by rpki-client