This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft File: MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft (raw, json) Hash identifier: 4OijWWk5dn1LUbqESysfA5qQYN/Nm5/2fsJPFoumD2w= Subject key identifier: 8D:86:0E:DF:B7:4D:F5:9D:C8:11:5F:E8:E1:5F:62:08:72:E6:BF:87 Authority key identifier: 32:91:C7:FD:57:12:F9:0E:D5:D1:31:D3:AB:18:CB:AD:7D:D7:AE:5E Certificate issuer: /CN=3291c7fd5712f90ed5d131d3ab18cbad7dd7ae5e Certificate serial: 019C4322F2070143CC5394255BA16F25D472 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft Manifest number: 14B8 Signing time: Mon 09 Feb 2026 16:01:29 +0000 Manifest this update: Mon 09 Feb 2026 16:01:29 +0000 Manifest next update: Tue 10 Feb 2026 16:01:29 +0000 Files and hashes: 1: MpHH_VcS-Q7V0THTqxjLrX3Xrl4.crl (hash: uuk6bwUGoDjuDReh8VKc63aGTH1ACe2LkcwrpEHAY5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft rsync://rpki.ripe.net/repository/DEFAULT/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:f2:07:01:43:cc:53:94:25:5b:a1:6f:25:d4:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3291c7fd5712f90ed5d131d3ab18cbad7dd7ae5e Validity Not Before: Feb 9 16:01:29 2026 GMT Not After : Feb 10 16:01:29 2026 GMT Subject: CN=8d860edfb74df59dc8115fe8e15f620872e6bf87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:76:4a:7a:f0:82:5a:c0:c3:2d:3b:91:ef:67: d7:06:d0:22:74:e5:cc:f9:06:d5:2b:74:4a:75:60: 67:49:a0:bf:92:f2:d3:c3:b6:36:2b:ad:7a:13:8a: d3:bf:89:a8:33:4f:5e:36:40:d6:88:55:3c:5d:cb: 99:3d:a2:27:58:50:1d:b6:97:65:b7:a2:69:9a:70: 95:cd:c3:12:a8:f7:90:66:a3:c1:4f:d8:04:93:b7: b2:c2:ca:05:5b:f2:bd:e8:b1:3e:15:9e:40:38:f3: bc:06:94:9f:35:a8:af:f0:5c:6a:11:39:36:f4:2c: 17:73:4d:bb:1c:44:c8:f3:d1:d2:6a:1a:56:1f:87: e0:dc:6d:6a:b8:53:0b:17:a8:19:41:d2:ec:ef:67: 03:a3:38:69:90:c7:4e:1a:41:38:2f:a3:53:f3:d1: 0a:08:5b:8b:95:37:34:63:28:fc:d4:e8:aa:9c:c2: 9c:e8:af:be:2b:9d:60:35:4d:52:4c:76:4d:68:77: 54:4f:1c:4e:03:b7:36:15:36:cd:3c:be:1a:e5:8e: 5c:b0:88:29:77:ea:61:26:13:0c:f3:1c:52:84:6a: 95:e5:aa:c3:b4:28:ec:ff:e7:7b:5b:f3:b0:d5:69: 9f:dd:4e:e9:be:e6:7d:a4:51:d5:d9:11:f4:a6:e3: fe:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:86:0E:DF:B7:4D:F5:9D:C8:11:5F:E8:E1:5F:62:08:72:E6:BF:87 X509v3 Authority Key Identifier: keyid:32:91:C7:FD:57:12:F9:0E:D5:D1:31:D3:AB:18:CB:AD:7D:D7:AE:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:70:de:a4:a6:88:d7:7e:d8:c9:03:92:b8:f3:d5:42:40:56: f3:75:10:09:d5:37:57:76:70:3d:88:b1:a2:01:c2:76:aa:3d: 1f:6a:e3:9d:ba:e5:2b:83:46:60:07:03:49:30:00:a5:dd:27: b0:f4:26:3e:90:0f:67:07:e5:37:8f:db:1d:f3:0d:cb:49:3b: d0:19:1f:2a:b2:dc:26:5d:ae:98:5b:79:80:f1:ac:b9:1d:d4: 51:aa:cb:19:ae:55:69:87:89:73:e2:22:ec:c3:99:60:98:26: 3e:3e:72:e8:12:a0:8d:0d:09:90:06:c8:ee:41:43:7b:1c:6c: da:7b:e1:5b:7f:2a:2f:de:92:14:7a:e1:57:71:8c:a6:5d:14: 21:d1:cf:1c:25:14:4a:7b:5d:7e:65:67:9d:bc:34:33:65:d0: 27:e3:53:3a:a3:8e:94:87:9a:08:53:49:a3:bf:be:a3:54:ed: a5:07:33:ce:39:5f:8c:66:e3:08:fd:44:02:0c:d7:66:91:ec: 02:b4:90:93:ab:aa:15:16:ff:72:8e:5b:0c:e1:1b:47:e3:e8: 06:9b:b1:09:87:8b:cb:8c:f6:2e:dc:e4:00:e3:9e:2a:4d:c8: ea:dc:8a:8b:f1:2c:bc:23:f2:31:f8:1d:2f:27:4c:fe:1d:bb: a1:67:1a:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIvIHAUPMU5QlW6FvJdRyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyOTFjN2ZkNTcxMmY5MGVkNWQxMzFkM2FiMThjYmFkN2Rk N2FlNWUwHhcNMjYwMjA5MTYwMTI5WhcNMjYwMjEwMTYwMTI5WjAzMTEwLwYDVQQD Eyg4ZDg2MGVkZmI3NGRmNTlkYzgxMTVmZThlMTVmNjIwODcyZTZiZjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznZKevCCWsDDLTuR72fXBtAidOXM +QbVK3RKdWBnSaC/kvLTw7Y2K616E4rTv4moM09eNkDWiFU8XcuZPaInWFAdtpdl t6JpmnCVzcMSqPeQZqPBT9gEk7eywsoFW/K96LE+FZ5AOPO8BpSfNaiv8FxqETk2 9CwXc027HETI89HSahpWH4fg3G1quFMLF6gZQdLs72cDozhpkMdOGkE4L6NT89EK CFuLlTc0Yyj81OiqnMKc6K++K51gNU1STHZNaHdUTxxOA7c2FTbNPL4a5Y5csIgp d+phJhMM8xxShGqV5arDtCjs/+d7W/Ow1Wmf3U7pvuZ9pFHV2RH0puP+BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI2GDt+3TfWdyBFf6OFfYghy5r+HMB8GA1UdIwQY MBaAFDKRx/1XEvkO1dEx06sYy619165eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXBISF9WY1MtUTdWMFRIVHF4akxyWDNYcmw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9iMTE3ZGQtODYzMi00NWE0LWIwZmQt ODZmYTJkZGQzM2QxLzEvTXBISF9WY1MtUTdWMFRIVHF4akxyWDNYcmw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9iMTE3ZGQtODYzMi00NWE0LWIwZmQtODZmYTJkZGQzM2Qx LzEvTXBISF9WY1MtUTdWMFRIVHF4akxyWDNYcmw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATnDepKaI 137YyQOSuPPVQkBW83UQCdU3V3ZwPYixogHCdqo9H2rjnbrlK4NGYAcDSTAApd0n sPQmPpAPZwflN4/bHfMNy0k70BkfKrLcJl2umFt5gPGsuR3UUarLGa5VaYeJc+Ii 7MOZYJgmPj5y6BKgjQ0JkAbI7kFDexxs2nvhW38qL96SFHrhV3GMpl0UIdHPHCUU SntdfmVnnbw0M2XQJ+NTOqOOlIeaCFNJo7++o1TtpQczzjlfjGbjCP1EAgzXZpHs ArSQk6uqFRb/co5bDOEbR+PoBpuxCYeLy4z2LtzkAOOeKk3I6tyKi/EsvCPyMfgd LydM/h27oWcayQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:34 2026 by rpki-client