This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft File: mQRCuMDNHdU1vq5yuU3TX5JyA40.mft (raw, json) Hash identifier: IF4/5QgwdVnjAOsj8FOUgPhwy42Xk7c7gtmIJXbHato= Subject key identifier: 0A:7E:CC:74:40:1C:0A:24:73:46:4C:3F:70:BC:7D:4C:85:02:4D:D4 Authority key identifier: 99:04:42:B8:C0:CD:1D:D5:35:BE:AE:72:B9:4D:D3:5F:92:72:03:8D Certificate issuer: /CN=990442b8c0cd1dd535beae72b94dd35f9272038d Certificate serial: 019C4322273F9302BE72731C6E9161CDC05E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQRCuMDNHdU1vq5yuU3TX5JyA40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft Manifest number: 08E4 Signing time: Mon 09 Feb 2026 16:00:37 +0000 Manifest this update: Mon 09 Feb 2026 16:00:37 +0000 Manifest next update: Tue 10 Feb 2026 16:00:37 +0000 Files and hashes: 1: mQRCuMDNHdU1vq5yuU3TX5JyA40.crl (hash: F5U8D4Ryc+ljpZNw6+N/0LwgvDKGuMJRhsBcDlOGkcM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft rsync://rpki.ripe.net/repository/DEFAULT/mQRCuMDNHdU1vq5yuU3TX5JyA40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:27:3f:93:02:be:72:73:1c:6e:91:61:cd:c0:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=990442b8c0cd1dd535beae72b94dd35f9272038d Validity Not Before: Feb 9 16:00:37 2026 GMT Not After : Feb 10 16:00:37 2026 GMT Subject: CN=0a7ecc74401c0a2473464c3f70bc7d4c85024dd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:02:05:58:7b:0e:b2:f5:3e:f9:00:2a:f8:3d: 61:78:ac:13:d4:07:ad:f0:7c:38:ec:13:48:01:9a: d9:5d:7c:02:cc:d9:ae:32:c9:69:b1:77:18:aa:4f: 70:56:60:42:bc:37:10:a0:63:af:11:96:a1:a1:d5: ac:06:8b:fc:6e:25:69:0e:d8:92:6d:c0:14:5c:9e: d2:fa:f1:f1:e6:44:c6:71:57:8b:42:9d:01:05:19: c2:2e:42:ed:eb:5e:0a:d5:04:cc:3a:73:8e:23:ee: 6b:73:fb:a5:26:4d:d5:49:5b:f8:97:54:67:f1:a9: 83:3e:7a:a2:f0:1f:87:7f:10:dd:1c:6d:98:dc:78: a9:34:dd:c6:c8:4a:55:e0:3a:0c:b4:c7:a3:78:4f: aa:ae:c9:d7:84:3a:fe:f5:7e:a5:f8:62:68:36:fa: eb:d1:f4:37:26:5e:0e:a1:1f:18:6b:ed:5d:7b:f3: 86:bb:fb:30:19:ea:e2:49:db:05:2c:bf:04:00:f9: 2b:32:2b:22:7f:10:8b:20:b2:49:96:55:0a:47:6a: 19:3a:4b:b6:59:fe:77:a0:67:4d:4a:6e:8f:fa:ea: 5f:c6:72:44:d5:17:85:62:72:34:01:27:51:86:4d: 50:aa:c3:39:52:80:b6:93:38:93:a5:5e:87:4a:ba: 94:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:7E:CC:74:40:1C:0A:24:73:46:4C:3F:70:BC:7D:4C:85:02:4D:D4 X509v3 Authority Key Identifier: keyid:99:04:42:B8:C0:CD:1D:D5:35:BE:AE:72:B9:4D:D3:5F:92:72:03:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQRCuMDNHdU1vq5yuU3TX5JyA40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:27:30:8f:fa:ac:28:ee:ed:7d:ab:af:0c:7a:a6:dc:4b:99: a3:db:2d:d9:87:06:4e:02:bb:38:53:aa:ed:32:75:77:4c:de: 0f:b5:b8:b2:d4:5b:5a:16:3d:f5:0d:f6:f8:ee:b3:c5:f8:78: 14:98:83:a3:e0:5d:6c:c2:d0:db:37:eb:7e:15:e0:9a:cc:aa: 34:80:b1:4c:81:46:c9:3d:5a:1d:c5:dc:bd:eb:5e:0f:67:75: ed:ec:b4:58:de:46:82:1c:e7:6e:9e:b7:e7:60:41:40:d4:a9: b3:aa:9d:28:9d:ae:6b:b0:cc:b6:71:e7:9e:d8:32:59:15:ee: d7:d2:3c:f2:5f:ea:f2:3c:38:25:57:a7:a6:c6:3d:41:e3:ff: 64:2a:e0:64:bf:ce:e0:8a:43:b4:a8:0c:fb:6a:2f:73:fb:7e: 1b:4b:90:35:8a:b6:49:10:09:e7:c0:16:13:cc:05:65:be:5a: 41:91:a4:eb:45:2e:58:5f:14:e2:41:04:a5:a1:e7:31:af:68: e0:cb:09:02:2d:50:63:c1:c2:c8:c2:15:73:a8:bf:2b:35:3f: c3:e1:e4:44:b2:b7:b8:1e:29:40:1b:93:1d:c4:6a:0d:fa:68: b8:d8:5a:97:58:bf:60:17:21:7b:50:7c:97:4b:4d:ea:0c:e5: 4b:77:cf:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIic/kwK+cnMcbpFhzcBeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MDQ0MmI4YzBjZDFkZDUzNWJlYWU3MmI5NGRkMzVmOTI3 MjAzOGQwHhcNMjYwMjA5MTYwMDM3WhcNMjYwMjEwMTYwMDM3WjAzMTEwLwYDVQQD EygwYTdlY2M3NDQwMWMwYTI0NzM0NjRjM2Y3MGJjN2Q0Yzg1MDI0ZGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAIFWHsOsvU++QAq+D1heKwT1Aet 8Hw47BNIAZrZXXwCzNmuMslpsXcYqk9wVmBCvDcQoGOvEZahodWsBov8biVpDtiS bcAUXJ7S+vHx5kTGcVeLQp0BBRnCLkLt614K1QTMOnOOI+5rc/ulJk3VSVv4l1Rn 8amDPnqi8B+HfxDdHG2Y3HipNN3GyEpV4DoMtMejeE+qrsnXhDr+9X6l+GJoNvrr 0fQ3Jl4OoR8Ya+1de/OGu/swGeriSdsFLL8EAPkrMisifxCLILJJllUKR2oZOku2 Wf53oGdNSm6P+upfxnJE1ReFYnI0ASdRhk1QqsM5UoC2kziTpV6HSrqUoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAp+zHRAHAokc0ZMP3C8fUyFAk3UMB8GA1UdIwQY MBaAFJkEQrjAzR3VNb6ucrlN01+ScgONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVFSQ3VNRE5IZFUxdnE1eXVVM1RYNUp5QTQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8xNWVjZGUtNDAzOC00YjQ2LTg5M2Mt ODRjYWQ3YTZlNWNiLzEvbVFSQ3VNRE5IZFUxdnE1eXVVM1RYNUp5QTQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8xNWVjZGUtNDAzOC00YjQ2LTg5M2MtODRjYWQ3YTZlNWNi LzEvbVFSQ3VNRE5IZFUxdnE1eXVVM1RYNUp5QTQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWCcwj/qs KO7tfauvDHqm3EuZo9st2YcGTgK7OFOq7TJ1d0zeD7W4stRbWhY99Q32+O6zxfh4 FJiDo+BdbMLQ2zfrfhXgmsyqNICxTIFGyT1aHcXcveteD2d17ey0WN5Gghznbp63 52BBQNSps6qdKJ2ua7DMtnHnntgyWRXu19I88l/q8jw4JVenpsY9QeP/ZCrgZL/O 4IpDtKgM+2ovc/t+G0uQNYq2SRAJ58AWE8wFZb5aQZGk60UuWF8U4kEEpaHnMa9o 4MsJAi1QY8HCyMIVc6i/KzU/w+HkRLK3uB4pQBuTHcRqDfpouNhal1i/YBche1B8 l0tN6gzlS3fP4Q== -----END CERTIFICATE-----Generated at Mon Feb 9 20:06:37 2026 by rpki-client