This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft File: Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft (raw, json) Hash identifier: k7VZ2pZ6826v6e/1IVz6wUk4gF1jxdYa5Qo+CCqOKEc= Subject key identifier: 48:F8:20:89:10:2C:F8:CB:A8:01:46:1B:A4:6C:6A:8D:E4:D3:3E:38 Authority key identifier: 32:AD:7F:7D:83:84:85:A1:9E:00:27:99:68:A9:B9:86:83:A4:C5:6E Certificate issuer: /CN=32ad7f7d838485a19e00279968a9b98683a4c56e Certificate serial: 019C432217ECE26FAE43FA2A30A703130427 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mq1_fYOEhaGeACeZaKm5hoOkxW4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 16:00:33 +0000 Manifest this update: Mon 09 Feb 2026 16:00:33 +0000 Manifest next update: Tue 10 Feb 2026 16:00:33 +0000 Files and hashes: 1: Mq1_fYOEhaGeACeZaKm5hoOkxW4.crl (hash: 5fKCogoTWkCOJjLzf2tR3L68BMmYjMiaxCLLDO5pGK0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft rsync://rpki.ripe.net/repository/DEFAULT/Mq1_fYOEhaGeACeZaKm5hoOkxW4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:17:ec:e2:6f:ae:43:fa:2a:30:a7:03:13:04:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32ad7f7d838485a19e00279968a9b98683a4c56e Validity Not Before: Feb 9 16:00:33 2026 GMT Not After : Feb 10 16:00:33 2026 GMT Subject: CN=48f82089102cf8cba801461ba46c6a8de4d33e38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:07:d4:79:d3:0d:e2:ec:e2:ac:73:aa:64:b4: 17:3c:16:62:8f:f5:35:3b:bf:08:61:5b:00:2a:b6: 95:98:67:6e:50:51:3a:df:73:cd:77:06:a0:39:47: a2:b4:42:59:dc:8b:1f:52:55:e9:fa:17:2c:02:35: 11:ef:fe:cf:b8:26:56:f3:f8:c4:3c:12:f5:b9:a4: ae:cd:28:33:e0:3f:ce:30:94:52:72:5a:e2:08:c2: d1:4c:31:07:5d:28:30:a9:7d:85:43:2b:41:f4:94: 7a:97:e9:1a:17:bb:f8:e5:5d:da:9b:e8:54:4d:93: 9d:bd:6c:0e:19:99:78:b8:8f:32:6c:e8:26:ec:bf: 81:b4:29:c4:09:7b:38:dc:95:a7:d3:15:05:c4:65: a9:e8:e8:e6:85:65:cb:d5:2d:b4:6b:91:06:a0:d5: 55:56:c2:0c:f0:85:44:8f:03:c6:45:6f:69:85:4b: f2:be:c6:3b:9e:00:b2:43:ee:52:c3:4f:14:66:7b: 55:b8:04:68:ac:72:50:77:f1:af:b8:82:d0:06:3b: dd:48:32:c3:b9:2a:3d:49:84:cb:67:8e:7d:ce:f3: ea:e1:0e:5b:ff:37:aa:80:d1:cf:6d:2f:f2:80:18: 7a:bf:4a:89:df:0a:ce:ac:c3:7f:f7:d2:25:58:fd: 3c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:F8:20:89:10:2C:F8:CB:A8:01:46:1B:A4:6C:6A:8D:E4:D3:3E:38 X509v3 Authority Key Identifier: keyid:32:AD:7F:7D:83:84:85:A1:9E:00:27:99:68:A9:B9:86:83:A4:C5:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mq1_fYOEhaGeACeZaKm5hoOkxW4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:e4:e0:48:21:61:af:23:56:66:b9:2d:15:6c:4b:2f:4b:f6: 97:1f:f9:81:f2:a1:a0:e6:1d:2c:ba:cb:5f:10:cb:14:bb:10: 1a:90:1f:12:24:4d:e0:c0:82:cb:41:f0:42:30:2b:8e:b1:6a: 92:ff:5b:47:48:08:56:a4:a2:4e:7a:05:ca:41:86:f6:0f:92: c1:e0:ee:82:9e:ed:ce:90:cc:b5:d9:09:f0:ac:9f:37:d9:2d: 46:0a:a7:c8:95:ca:7f:c2:fc:3c:82:98:28:14:65:33:21:0e: cc:e2:b7:1b:f3:03:0a:62:13:6a:8b:12:2c:33:09:2a:69:65: 9e:6c:13:92:3e:93:c9:f0:31:eb:05:b0:71:79:78:4e:90:d0: 81:bd:fa:d8:ba:88:d7:35:57:45:0e:2b:ea:31:67:18:b0:26: 02:9f:31:a9:17:af:03:08:6e:7c:c8:79:af:d4:7d:c7:b2:37: f7:b9:12:96:21:b4:e4:a8:b6:d3:bf:71:cf:79:da:c9:34:7e: 63:d5:76:e5:64:2f:ff:17:91:03:85:7f:6f:73:c1:a1:70:94: 4b:37:81:22:41:85:3d:15:df:7b:ac:57:c2:e0:33:52:4a:f5: 76:12:d1:b8:48:61:e5:1e:21:00:30:3f:df:c4:86:0c:f0:aa: cc:57:dd:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIhfs4m+uQ/oqMKcDEwQnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyYWQ3ZjdkODM4NDg1YTE5ZTAwMjc5OTY4YTliOTg2ODNh NGM1NmUwHhcNMjYwMjA5MTYwMDMzWhcNMjYwMjEwMTYwMDMzWjAzMTEwLwYDVQQD Eyg0OGY4MjA4OTEwMmNmOGNiYTgwMTQ2MWJhNDZjNmE4ZGU0ZDMzZTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowfUedMN4uzirHOqZLQXPBZij/U1 O78IYVsAKraVmGduUFE633PNdwagOUeitEJZ3IsfUlXp+hcsAjUR7/7PuCZW8/jE PBL1uaSuzSgz4D/OMJRSclriCMLRTDEHXSgwqX2FQytB9JR6l+kaF7v45V3am+hU TZOdvWwOGZl4uI8ybOgm7L+BtCnECXs43JWn0xUFxGWp6OjmhWXL1S20a5EGoNVV VsIM8IVEjwPGRW9phUvyvsY7ngCyQ+5Sw08UZntVuARorHJQd/GvuILQBjvdSDLD uSo9SYTLZ459zvPq4Q5b/zeqgNHPbS/ygBh6v0qJ3wrOrMN/99IlWP08OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEj4IIkQLPjLqAFGG6Rsao3k0z44MB8GA1UdIwQY MBaAFDKtf32DhIWhngAnmWipuYaDpMVuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXExX2ZZT0VoYUdlQUNlWmFLbTVob09reFc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy81M2I3NTAtNjkxNi00YzNmLWJkZmIt OTRjNGU0ZWJjZDQxLzEvTXExX2ZZT0VoYUdlQUNlWmFLbTVob09reFc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy81M2I3NTAtNjkxNi00YzNmLWJkZmItOTRjNGU0ZWJjZDQx LzEvTXExX2ZZT0VoYUdlQUNlWmFLbTVob09reFc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAduTgSCFh ryNWZrktFWxLL0v2lx/5gfKhoOYdLLrLXxDLFLsQGpAfEiRN4MCCy0HwQjArjrFq kv9bR0gIVqSiTnoFykGG9g+SweDugp7tzpDMtdkJ8KyfN9ktRgqnyJXKf8L8PIKY KBRlMyEOzOK3G/MDCmITaosSLDMJKmllnmwTkj6TyfAx6wWwcXl4TpDQgb362LqI 1zVXRQ4r6jFnGLAmAp8xqRevAwhufMh5r9R9x7I397kSliG05Ki2079xz3nayTR+ Y9V25WQv/xeRA4V/b3PBoXCUSzeBIkGFPRXfe6xXwuAzUkr1dhLRuEhh5R4hADA/ 38SGDPCqzFfdFA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:54 2026 by rpki-client