This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d0beb2-c576-4e8d-b148-d79508e16869/1/MgOPanu3dwpyrnANMbagCoHujbs.mft File: MgOPanu3dwpyrnANMbagCoHujbs.mft (raw, json) Hash identifier: PjcDnq3+ESIJMmBtipke6jJ9HInO9bn4Wh3M8kMN5aI= Subject key identifier: C5:50:9A:B0:89:E4:90:A4:D0:C5:FF:77:01:15:C7:63:A4:5F:A0:DE Authority key identifier: 32:03:8F:6A:7B:B7:77:0A:72:AE:70:0D:31:B6:A0:0A:81:EE:8D:BB Certificate issuer: /CN=32038f6a7bb7770a72ae700d31b6a00a81ee8dbb Certificate serial: 019C432302AF8AA0B9EF6908CC78D18D774B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgOPanu3dwpyrnANMbagCoHujbs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d0beb2-c576-4e8d-b148-d79508e16869/1/MgOPanu3dwpyrnANMbagCoHujbs.mft Manifest number: 0DF9 Signing time: Mon 09 Feb 2026 16:01:33 +0000 Manifest this update: Mon 09 Feb 2026 16:01:33 +0000 Manifest next update: Tue 10 Feb 2026 16:01:33 +0000 Files and hashes: 1: MgOPanu3dwpyrnANMbagCoHujbs.crl (hash: xDZ1lRrYUghj836NBVo5svFXjFxeEUQ/4YCO+d+KTA8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d0beb2-c576-4e8d-b148-d79508e16869/1/MgOPanu3dwpyrnANMbagCoHujbs.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/d0beb2-c576-4e8d-b148-d79508e16869/1/MgOPanu3dwpyrnANMbagCoHujbs.mft rsync://rpki.ripe.net/repository/DEFAULT/MgOPanu3dwpyrnANMbagCoHujbs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:23:02:af:8a:a0:b9:ef:69:08:cc:78:d1:8d:77:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32038f6a7bb7770a72ae700d31b6a00a81ee8dbb Validity Not Before: Feb 9 16:01:33 2026 GMT Not After : Feb 10 16:01:33 2026 GMT Subject: CN=c5509ab089e490a4d0c5ff770115c763a45fa0de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8e:96:d2:a7:9f:6d:f8:77:b7:da:cd:47:75: f1:d7:90:8f:59:a1:db:cd:8b:bd:78:96:08:48:d1: 6a:00:00:ce:54:12:5a:8b:9f:af:46:76:48:d3:cc: 26:f5:68:b1:e4:cc:5f:65:ad:7a:21:64:c4:67:10: 8a:63:d2:bb:ee:11:63:91:2d:b3:9b:eb:01:e2:7c: af:83:54:25:e8:97:d0:f2:c8:9a:bd:ed:9c:93:de: d7:f2:e8:7a:e3:d1:84:0e:00:29:90:b8:4f:e3:ea: 7b:a4:b0:c4:e8:1f:fb:9e:73:05:fe:dd:83:32:df: 41:ad:a3:a2:47:b4:56:a3:f0:e0:97:1e:a2:58:26: 74:02:c5:92:42:49:3b:28:28:72:20:79:f2:1b:c9: bb:d8:37:75:db:3a:a7:94:01:23:c1:6e:a1:7b:a3: 3b:55:12:36:34:6b:b1:17:2e:64:93:ca:16:55:9a: e1:ca:4d:0e:26:68:ab:41:c2:c0:fc:fa:b2:54:e0: b8:17:9b:00:fe:a9:cf:65:0b:48:ba:88:62:36:3a: e9:64:1d:e2:59:de:02:94:95:7e:26:f6:83:6e:30: 49:23:ca:e5:36:dd:c7:61:d6:2b:64:d9:80:52:45: 70:89:9f:54:50:f2:5b:b1:6c:cd:33:7a:97:67:0c: 92:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:50:9A:B0:89:E4:90:A4:D0:C5:FF:77:01:15:C7:63:A4:5F:A0:DE X509v3 Authority Key Identifier: keyid:32:03:8F:6A:7B:B7:77:0A:72:AE:70:0D:31:B6:A0:0A:81:EE:8D:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgOPanu3dwpyrnANMbagCoHujbs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d0beb2-c576-4e8d-b148-d79508e16869/1/MgOPanu3dwpyrnANMbagCoHujbs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d0beb2-c576-4e8d-b148-d79508e16869/1/MgOPanu3dwpyrnANMbagCoHujbs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:82:71:59:ee:f7:bd:4c:6f:9d:6e:d7:17:c1:6a:73:64:3a: b7:6e:11:97:f2:54:56:ee:3f:5e:3a:df:97:82:b8:bb:82:8c: bc:28:42:a2:a2:86:d4:d2:fd:59:a7:c3:39:fb:79:7b:81:98: 93:d6:97:7f:d1:85:7e:e2:50:31:39:5d:4f:59:84:a8:80:60: 8f:ef:c4:68:c0:8c:fc:b9:da:51:74:b8:75:3d:e0:73:77:8e: fe:f8:79:6e:7e:8f:23:3f:13:3c:c0:40:f3:25:da:2e:26:d6: a2:8f:99:c7:1b:0f:56:bf:10:b5:18:14:ee:a5:77:2e:d8:35: ee:9d:6b:f4:ae:4d:5e:5a:d8:a5:4c:61:47:d4:bf:e4:e4:5d: ca:7d:6a:8a:1a:9d:f5:1e:70:54:21:6a:52:b2:f5:f0:5f:c1: 4a:d1:da:02:6e:bc:43:d8:b7:74:53:49:d6:96:90:72:27:0c: e5:be:69:fd:d1:0e:52:46:5f:0a:c6:ae:61:65:3b:7c:0c:eb: a2:01:c3:d0:62:8e:e3:35:a2:f6:c0:b8:17:a1:3e:fe:0e:33: 71:39:ed:82:19:6c:83:2b:6f:6e:fb:31:3d:59:74:0d:87:da: 6e:9a:4a:ad:f4:3d:c8:7d:85:11:6c:8e:8c:87:08:67:9c:8b: 81:1b:5e:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIwKviqC572kIzHjRjXdLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyMDM4ZjZhN2JiNzc3MGE3MmFlNzAwZDMxYjZhMDBhODFl ZThkYmIwHhcNMjYwMjA5MTYwMTMzWhcNMjYwMjEwMTYwMTMzWjAzMTEwLwYDVQQD EyhjNTUwOWFiMDg5ZTQ5MGE0ZDBjNWZmNzcwMTE1Yzc2M2E0NWZhMGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu46W0qefbfh3t9rNR3Xx15CPWaHb zYu9eJYISNFqAADOVBJai5+vRnZI08wm9Wix5MxfZa16IWTEZxCKY9K77hFjkS2z m+sB4nyvg1Ql6JfQ8siave2ck97X8uh649GEDgApkLhP4+p7pLDE6B/7nnMF/t2D Mt9BraOiR7RWo/Dglx6iWCZ0AsWSQkk7KChyIHnyG8m72Dd12zqnlAEjwW6he6M7 VRI2NGuxFy5kk8oWVZrhyk0OJmirQcLA/PqyVOC4F5sA/qnPZQtIuohiNjrpZB3i Wd4ClJV+JvaDbjBJI8rlNt3HYdYrZNmAUkVwiZ9UUPJbsWzNM3qXZwySiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMVQmrCJ5JCk0MX/dwEVx2OkX6DeMB8GA1UdIwQY MBaAFDIDj2p7t3cKcq5wDTG2oAqB7o27MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWdPUGFudTNkd3B5cm5BTk1iYWdDb0h1amJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kMGJlYjItYzU3Ni00ZThkLWIxNDgt ZDc5NTA4ZTE2ODY5LzEvTWdPUGFudTNkd3B5cm5BTk1iYWdDb0h1amJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9kMGJlYjItYzU3Ni00ZThkLWIxNDgtZDc5NTA4ZTE2ODY5 LzEvTWdPUGFudTNkd3B5cm5BTk1iYWdDb0h1amJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKYJxWe73 vUxvnW7XF8Fqc2Q6t24Rl/JUVu4/Xjrfl4K4u4KMvChCoqKG1NL9WafDOft5e4GY k9aXf9GFfuJQMTldT1mEqIBgj+/EaMCM/LnaUXS4dT3gc3eO/vh5bn6PIz8TPMBA 8yXaLibWoo+ZxxsPVr8QtRgU7qV3Ltg17p1r9K5NXlrYpUxhR9S/5ORdyn1qihqd 9R5wVCFqUrL18F/BStHaAm68Q9i3dFNJ1paQcicM5b5p/dEOUkZfCsauYWU7fAzr ogHD0GKO4zWi9sC4F6E+/g4zcTntghlsgytvbvsxPVl0DYfabppKrfQ9yH2FEWyO jIcIZ5yLgRte6g== -----END CERTIFICATE-----Generated at Mon Feb 9 20:53:22 2026 by rpki-client