This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft File: 0mHPvAfsMGN33LFql6EWDHptgsw.mft (raw, json) Hash identifier: xe9h7RNOBALIGUzhfA63jRUsyXq0Qu3o6VdPmeceN7k= Subject key identifier: 3C:EF:A4:3A:CA:45:9A:C4:A8:B7:D4:29:7D:76:F5:3A:A0:ED:FD:B4 Authority key identifier: D2:61:CF:BC:07:EC:30:63:77:DC:B1:6A:97:A1:16:0C:7A:6D:82:CC Certificate issuer: /CN=d261cfbc07ec306377dcb16a97a1160c7a6d82cc Certificate serial: 019C43FE64F55970DC4D963628A8E7026552 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft Manifest number: 0452 Signing time: Mon 09 Feb 2026 20:01:11 +0000 Manifest this update: Mon 09 Feb 2026 20:01:11 +0000 Manifest next update: Tue 10 Feb 2026 20:01:11 +0000 Files and hashes: 1: 0mHPvAfsMGN33LFql6EWDHptgsw.crl (hash: oa/uJX1xxN58k5CNCqkWkxz88XRuZo0C8yLfXmFZSWs=) 2: p0fL_-s25OijH9UglPLyGf3hQ3k.roa (hash: sp4Y+8h1IocJtG1a3SfrXHCpPOK9+n80lPdEb2+Nl4c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft rsync://rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:64:f5:59:70:dc:4d:96:36:28:a8:e7:02:65:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d261cfbc07ec306377dcb16a97a1160c7a6d82cc Validity Not Before: Feb 9 20:01:11 2026 GMT Not After : Feb 10 20:01:11 2026 GMT Subject: CN=3cefa43aca459ac4a8b7d4297d76f53aa0edfdb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f7:43:c8:ff:91:42:38:8c:a0:b2:33:c9:a1: 03:af:ca:54:1a:b0:f4:46:e6:81:4f:8e:4d:e1:94: f6:6c:98:e9:c3:c3:01:fd:6f:ac:b9:6b:f1:2d:18: 4a:dd:31:44:24:ab:88:06:12:81:2f:42:3b:60:f4: b9:2b:86:9e:0f:e6:e5:0a:e9:4c:6f:a1:2e:0d:99: a1:03:47:c9:0b:80:a8:70:d3:ba:be:66:b2:43:78: f4:70:01:1d:ea:5a:71:3b:30:08:35:8d:c5:c9:09: 6f:c5:8d:40:b6:b6:b9:22:39:ad:ce:2b:e0:ec:47: 6e:14:63:de:e8:02:5e:cd:b0:20:63:00:33:d6:6d: 8c:8c:4d:9f:b7:c9:45:af:55:c1:26:1f:48:92:59: 96:cc:1d:38:fb:ee:3c:03:23:35:65:8c:f3:ee:e7: a7:5e:6d:62:3e:a1:6b:72:f8:7b:68:3d:b7:db:ff: b6:48:81:13:6d:9b:13:cc:9f:c1:6f:82:24:ba:75: 61:60:73:e8:e8:9d:7c:fd:a9:62:08:29:55:f6:4c: 0e:84:6a:cf:6a:d6:cb:df:59:11:a3:ce:5d:3e:80: 11:b5:41:ab:d2:f5:69:f4:09:f3:fb:ed:46:b0:3f: 61:ef:95:3c:4c:f0:2d:48:71:62:eb:01:5e:23:52: 43:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:EF:A4:3A:CA:45:9A:C4:A8:B7:D4:29:7D:76:F5:3A:A0:ED:FD:B4 X509v3 Authority Key Identifier: keyid:D2:61:CF:BC:07:EC:30:63:77:DC:B1:6A:97:A1:16:0C:7A:6D:82:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:48:2b:b5:4d:0c:60:61:56:dc:84:6d:88:db:b3:09:c7:50: 5e:6c:04:ca:2b:a3:49:c6:29:29:15:c7:ee:55:3f:83:8b:2b: f2:c5:63:32:1b:7d:2b:c8:e2:65:8f:30:f4:30:b7:b8:20:cc: 4f:21:a7:3a:d1:60:78:2e:93:73:01:88:d1:71:a0:3c:ab:64: a4:1d:d3:13:ab:5f:bd:c0:2a:61:8a:e2:6a:43:b1:a6:06:e1: 2f:8b:a7:55:e8:d4:01:35:7b:f1:82:a9:7d:e9:80:47:8b:10: a2:8e:32:f1:32:22:73:01:17:c7:43:bf:2d:e2:94:da:e3:fe: ad:dd:b4:da:8b:29:fe:1f:57:1c:94:58:3c:27:9d:97:e0:59: 53:b8:7f:d8:1f:fe:7e:cd:2a:6a:58:a5:39:a2:0a:2c:72:f6: 99:9d:91:2c:0a:7b:07:c6:a5:50:ae:b8:a6:b5:72:05:a9:6f: a1:4c:95:1c:07:b9:43:ed:fa:30:4b:9a:81:33:14:86:b2:88: 54:db:27:0d:9a:85:b3:c9:d2:f5:3e:97:47:8b:66:2b:df:3f: 6e:58:56:c2:fb:4c:46:bd:b4:63:df:fd:93:36:8d:cd:ad:65: 04:87:00:de:e7:9a:c8:aa:87:71:92:95:4c:54:4a:90:ea:5e: de:66:c5:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/mT1WXDcTZY2KKjnAmVSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNjFjZmJjMDdlYzMwNjM3N2RjYjE2YTk3YTExNjBjN2E2 ZDgyY2MwHhcNMjYwMjA5MjAwMTExWhcNMjYwMjEwMjAwMTExWjAzMTEwLwYDVQQD EygzY2VmYTQzYWNhNDU5YWM0YThiN2Q0Mjk3ZDc2ZjUzYWEwZWRmZGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvdDyP+RQjiMoLIzyaEDr8pUGrD0 RuaBT45N4ZT2bJjpw8MB/W+suWvxLRhK3TFEJKuIBhKBL0I7YPS5K4aeD+blCulM b6EuDZmhA0fJC4CocNO6vmayQ3j0cAEd6lpxOzAINY3FyQlvxY1Atra5Ijmtzivg 7EduFGPe6AJezbAgYwAz1m2MjE2ft8lFr1XBJh9IklmWzB04++48AyM1ZYzz7uen Xm1iPqFrcvh7aD232/+2SIETbZsTzJ/Bb4IkunVhYHPo6J18/aliCClV9kwOhGrP atbL31kRo85dPoARtUGr0vVp9Anz++1GsD9h75U8TPAtSHFi6wFeI1JDLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDzvpDrKRZrEqLfUKX129Tqg7f20MB8GA1UdIwQY MBaAFNJhz7wH7DBjd9yxapehFgx6bYLMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMG1IUHZBZnNNR04zM0xGcWw2RVdESHB0Z3N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS80ZWFmYzktNTQ3My00NjAyLWExNDkt OTIyYTE2ZDExN2RkLzEvMG1IUHZBZnNNR04zM0xGcWw2RVdESHB0Z3N3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS80ZWFmYzktNTQ3My00NjAyLWExNDktOTIyYTE2ZDExN2Rk LzEvMG1IUHZBZnNNR04zM0xGcWw2RVdESHB0Z3N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEUgrtU0M YGFW3IRtiNuzCcdQXmwEyiujScYpKRXH7lU/g4sr8sVjMht9K8jiZY8w9DC3uCDM TyGnOtFgeC6TcwGI0XGgPKtkpB3TE6tfvcAqYYriakOxpgbhL4unVejUATV78YKp femAR4sQoo4y8TIicwEXx0O/LeKU2uP+rd202osp/h9XHJRYPCedl+BZU7h/2B/+ fs0qalilOaIKLHL2mZ2RLAp7B8alUK64prVyBalvoUyVHAe5Q+36MEuagTMUhrKI VNsnDZqFs8nS9T6XR4tmK98/blhWwvtMRr20Y9/9kzaNza1lBIcA3ueayKqHcZKV TFRKkOpe3mbF4w== -----END CERTIFICATE-----Generated at Mon Feb 9 22:39:27 2026 by rpki-client