This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft File: MGm6frw7Zy3QnsA0Th-AqhEx79A.mft (raw, json) Hash identifier: 78ykUa28PYFhnZAgPisS9xAP9+ETZ6j76cfxmGcddQI= Subject key identifier: E0:77:2D:00:45:20:1A:B4:99:97:9C:EE:FC:5A:A0:21:A0:E6:58:5A Authority key identifier: 30:69:BA:7E:BC:3B:67:2D:D0:9E:C0:34:4E:1F:80:AA:11:31:EF:D0 Certificate issuer: /CN=3069ba7ebc3b672dd09ec0344e1f80aa1131efd0 Certificate serial: 019C427DDAE757CFDE7ABBA6C03D2DF02A27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 13:01:10 +0000 Manifest this update: Mon 09 Feb 2026 13:01:10 +0000 Manifest next update: Tue 10 Feb 2026 13:01:10 +0000 Files and hashes: 1: AJubno4ZrqTS0RpcQUJX01d0Kkw.roa (hash: p6tmt7fq6LNsnRh4ZNDQsOuCuF6aJ3pZ0TDsZFJJx24=) 2: MGm6frw7Zy3QnsA0Th-AqhEx79A.crl (hash: ghOF94p5h7V6cJUYIVsc8jq89d6FmZ9qG+5ZlGNLO6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:da:e7:57:cf:de:7a:bb:a6:c0:3d:2d:f0:2a:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3069ba7ebc3b672dd09ec0344e1f80aa1131efd0 Validity Not Before: Feb 9 13:01:10 2026 GMT Not After : Feb 10 13:01:10 2026 GMT Subject: CN=e0772d0045201ab499979ceefc5aa021a0e6585a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1a:3c:db:96:de:93:b4:02:7b:fc:ea:81:0d: 86:0b:15:db:19:97:3d:3a:4a:2d:64:73:d7:4f:f6: a6:fc:62:82:4c:ed:ca:10:22:f8:39:f3:8b:a3:dc: bf:c9:69:eb:41:f2:cd:7d:fc:6d:40:a1:3a:83:a9: 5e:1e:13:d2:49:97:72:3f:8c:b3:8a:4a:11:51:91: 83:49:18:cb:0f:42:df:bd:73:2e:db:5e:0d:79:7d: 0d:62:ae:b0:f3:93:ed:30:7d:69:63:99:6e:27:a1: a3:0f:99:81:e8:75:78:57:79:31:fb:c2:da:39:45: 78:ca:71:42:7f:33:ba:46:6f:1d:5d:75:76:2c:f7: 99:ac:99:54:1a:8b:b7:dd:ef:cb:df:e3:5b:3c:6b: 40:aa:0c:8b:70:22:80:b5:a4:df:f8:e0:c8:d6:dd: d2:12:db:b7:b3:ac:e8:97:ea:45:3d:66:a0:48:7b: 0b:8f:46:16:31:a1:6b:4a:fd:a7:c5:13:b6:0f:d7: 75:be:2a:cf:87:59:30:e5:63:69:d1:4c:46:0a:40: a2:f2:f4:dc:0a:38:b0:37:3e:d1:06:5b:86:93:42: c6:b9:c8:64:d7:93:35:2d:5b:64:b7:f8:50:e3:cb: c1:3d:33:84:b0:ff:e5:b0:f6:e3:71:ce:f7:d3:4d: da:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:77:2D:00:45:20:1A:B4:99:97:9C:EE:FC:5A:A0:21:A0:E6:58:5A X509v3 Authority Key Identifier: keyid:30:69:BA:7E:BC:3B:67:2D:D0:9E:C0:34:4E:1F:80:AA:11:31:EF:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:77:fc:83:22:0e:1c:fa:5b:5f:9b:c9:46:3d:e5:ab:ad:df: 0f:d0:51:2f:98:8b:6d:81:e3:89:e6:d5:8b:63:11:60:42:38: 0d:6a:10:11:4b:6c:0f:b7:ea:3e:61:5e:50:05:81:82:ea:14: 88:79:8d:8d:8c:4d:aa:cd:73:bc:e6:42:ad:b8:3d:8f:38:05: 2a:5a:4a:a5:b1:02:0f:6d:2d:54:89:66:57:f5:c2:86:3a:86: c9:91:b5:61:53:8e:d2:5f:56:df:65:29:89:be:86:59:cb:ef: 58:ac:cc:a3:8c:e1:f3:4f:91:28:17:cb:2c:11:b7:29:fe:68: 1e:b4:a7:4e:2d:96:8e:86:47:97:db:08:30:ab:fd:11:2b:6e: 57:28:4c:33:82:a9:21:7b:73:ce:6c:6b:6c:b6:40:2e:0b:6e: a8:b5:2e:e2:e3:e0:d7:5a:a1:35:14:fc:a0:4f:c0:f8:03:e4: 26:48:89:e8:99:c2:af:ad:cc:92:fc:89:e4:1d:3a:0b:df:3b: f7:64:b3:fe:20:42:af:9d:d7:46:c6:4b:3e:67:ae:dc:91:94: 64:6a:85:21:a2:97:fd:cf:52:06:93:cd:c6:a9:9f:91:20:47: 42:b1:97:22:8f:a0:b9:78:23:f3:da:63:0f:ef:a5:b1:df:45: 6f:bc:17:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfdrnV8/eerumwD0t8ConMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNjliYTdlYmMzYjY3MmRkMDllYzAzNDRlMWY4MGFhMTEz MWVmZDAwHhcNMjYwMjA5MTMwMTEwWhcNMjYwMjEwMTMwMTEwWjAzMTEwLwYDVQQD EyhlMDc3MmQwMDQ1MjAxYWI0OTk5NzljZWVmYzVhYTAyMWEwZTY1ODVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvho825bek7QCe/zqgQ2GCxXbGZc9 OkotZHPXT/am/GKCTO3KECL4OfOLo9y/yWnrQfLNffxtQKE6g6leHhPSSZdyP4yz ikoRUZGDSRjLD0LfvXMu214NeX0NYq6w85PtMH1pY5luJ6GjD5mB6HV4V3kx+8La OUV4ynFCfzO6Rm8dXXV2LPeZrJlUGou33e/L3+NbPGtAqgyLcCKAtaTf+ODI1t3S Etu3s6zol+pFPWagSHsLj0YWMaFrSv2nxRO2D9d1virPh1kw5WNp0UxGCkCi8vTc CjiwNz7RBluGk0LGuchk15M1LVtkt/hQ48vBPTOEsP/lsPbjcc73003a5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOB3LQBFIBq0mZec7vxaoCGg5lhaMB8GA1UdIwQY MBaAFDBpun68O2ct0J7ANE4fgKoRMe/QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUdtNmZydzdaeTNRbnNBMFRoLUFxaEV4NzlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80Y2JhMmYtNGE1Yi00NDM1LThhZWMt OTIzY2I1MGFiZTJlLzEvTUdtNmZydzdaeTNRbnNBMFRoLUFxaEV4NzlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi80Y2JhMmYtNGE1Yi00NDM1LThhZWMtOTIzY2I1MGFiZTJl LzEvTUdtNmZydzdaeTNRbnNBMFRoLUFxaEV4NzlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlnf8gyIO HPpbX5vJRj3lq63fD9BRL5iLbYHjiebVi2MRYEI4DWoQEUtsD7fqPmFeUAWBguoU iHmNjYxNqs1zvOZCrbg9jzgFKlpKpbECD20tVIlmV/XChjqGyZG1YVOO0l9W32Up ib6GWcvvWKzMo4zh80+RKBfLLBG3Kf5oHrSnTi2WjoZHl9sIMKv9EStuVyhMM4Kp IXtzzmxrbLZALgtuqLUu4uPg11qhNRT8oE/A+APkJkiJ6JnCr63MkvyJ5B06C987 92Sz/iBCr53XRsZLPmeu3JGUZGqFIaKX/c9SBpPNxqmfkSBHQrGXIo+guXgj89pj D++lsd9Fb7wXKg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:09 2026 by rpki-client