This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft File: MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft (raw, json) Hash identifier: seSSfcjX5G0VfcvchwnzH0xmHrPQ55kGMczu0pZdWfE= Subject key identifier: B8:4C:93:A7:6C:C5:18:3C:F4:77:5D:6D:67:54:34:02:86:89:48:8C Authority key identifier: 30:62:8D:92:38:E2:3D:6B:F4:C7:35:99:5C:9E:2D:EA:00:50:F0:0C Certificate issuer: /CN=30628d9238e23d6bf4c735995c9e2dea0050f00c Certificate serial: 019C4246B66BDFFB2DE1C0E24E4E9C925529 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft Manifest number: 0876 Signing time: Mon 09 Feb 2026 12:00:56 +0000 Manifest this update: Mon 09 Feb 2026 12:00:56 +0000 Manifest next update: Tue 10 Feb 2026 12:00:56 +0000 Files and hashes: 1: MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.crl (hash: v1e9vvUETHUGJGH0WCFKhVZCMGnLzb6yJQXp3xZriOQ=) 2: dIqWZ2cWHiBFVvZxoBhqWpuAwmQ.roa (hash: uE7jBQ3nDWE2TUDIdFmUrQEZmjWLtoSS41WGaaBfii4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft rsync://rpki.ripe.net/repository/DEFAULT/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:b6:6b:df:fb:2d:e1:c0:e2:4e:4e:9c:92:55:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30628d9238e23d6bf4c735995c9e2dea0050f00c Validity Not Before: Feb 9 12:00:56 2026 GMT Not After : Feb 10 12:00:56 2026 GMT Subject: CN=b84c93a76cc5183cf4775d6d675434028689488c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:62:cf:9e:05:82:c3:31:1b:c5:94:5f:84:ae: 2a:d5:6a:95:89:7f:b9:53:4d:09:7e:60:f0:fb:44: 51:64:43:7f:23:c0:6e:dc:6f:9a:df:99:ce:cd:f2: a2:2f:91:f9:7a:6f:83:11:21:72:c5:66:07:e7:fa: 7e:0b:fb:c9:42:fa:f2:a8:1c:2a:5c:19:b3:8c:19: 5d:c7:59:59:9d:37:7a:d4:05:3f:fb:a4:c9:af:aa: 5d:12:01:bc:04:e3:8b:83:74:02:24:fc:a8:54:91: 3c:7f:ec:0a:3f:6b:7e:d2:a9:26:ae:92:cb:09:2f: b7:70:43:ae:47:83:fd:cc:42:f0:41:ca:1e:5b:54: f7:86:fe:ba:e5:4b:27:25:40:27:5f:15:2a:aa:50: 39:28:5e:9e:64:bf:da:55:f6:b7:17:6f:38:18:85: 89:81:ff:84:41:32:53:f5:98:3f:16:0d:aa:2e:62: a6:73:95:2a:37:3c:62:37:4a:19:59:86:6c:0d:6e: 15:e8:56:d7:47:e1:69:3a:ed:30:70:67:a9:d1:f5: b2:8a:fc:8f:0a:f3:b1:01:31:8a:ca:bd:be:0f:c8: 12:dc:ac:47:e0:09:3b:bc:ce:d9:a8:e6:1a:60:ed: 1c:79:26:22:7e:97:49:ae:f7:52:82:17:4c:7c:99: eb:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:4C:93:A7:6C:C5:18:3C:F4:77:5D:6D:67:54:34:02:86:89:48:8C X509v3 Authority Key Identifier: keyid:30:62:8D:92:38:E2:3D:6B:F4:C7:35:99:5C:9E:2D:EA:00:50:F0:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:a0:42:06:db:fb:ef:98:f0:e2:88:79:fd:e0:38:0d:e5:b9: 9d:ea:91:9e:ec:95:a5:64:54:f3:82:b9:8c:95:2b:3b:f4:fa: 08:de:68:82:54:a7:4d:2c:fe:d2:7b:fd:fd:a9:e8:5f:b8:ca: cb:8e:16:dc:26:bd:60:1f:1c:e2:fe:22:15:58:69:68:90:51: 6b:9d:fe:8c:f0:22:a7:d2:03:e1:03:f0:ea:71:2f:25:23:7c: 8c:ea:1e:a6:95:c1:e4:50:2e:4a:68:65:3f:10:43:09:01:10: 75:1e:31:57:7e:f0:62:54:e1:a0:09:31:cc:fd:88:60:03:38: e4:b8:60:7a:c4:14:bb:7d:ba:82:78:a3:7c:88:36:0d:e9:15: c4:6a:78:b8:05:3c:70:6d:8f:ec:69:4f:a2:72:d1:4c:be:0d: 7a:d6:85:b0:5c:6b:70:b7:20:a8:c4:32:20:86:1f:bd:60:7d: 5f:0b:cc:57:6b:33:30:e6:2f:05:f9:01:e8:d6:d4:5a:30:48: 2a:ea:4f:2a:b7:93:cc:32:51:a1:a8:e0:2e:71:d9:3a:2f:a5: c2:9d:a7:34:67:82:d1:45:ef:72:76:1c:0a:69:4e:90:a6:5a: 40:5a:e4:38:9d:2d:62:05:a5:f1:b6:b8:ee:fb:a7:e1:35:37: 8b:d7:33:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRrZr3/st4cDiTk6cklUpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNjI4ZDkyMzhlMjNkNmJmNGM3MzU5OTVjOWUyZGVhMDA1 MGYwMGMwHhcNMjYwMjA5MTIwMDU2WhcNMjYwMjEwMTIwMDU2WjAzMTEwLwYDVQQD EyhiODRjOTNhNzZjYzUxODNjZjQ3NzVkNmQ2NzU0MzQwMjg2ODk0ODhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWLPngWCwzEbxZRfhK4q1WqViX+5 U00JfmDw+0RRZEN/I8Bu3G+a35nOzfKiL5H5em+DESFyxWYH5/p+C/vJQvryqBwq XBmzjBldx1lZnTd61AU/+6TJr6pdEgG8BOOLg3QCJPyoVJE8f+wKP2t+0qkmrpLL CS+3cEOuR4P9zELwQcoeW1T3hv665UsnJUAnXxUqqlA5KF6eZL/aVfa3F284GIWJ gf+EQTJT9Zg/Fg2qLmKmc5UqNzxiN0oZWYZsDW4V6FbXR+FpOu0wcGep0fWyivyP CvOxATGKyr2+D8gS3KxH4Ak7vM7ZqOYaYO0ceSYifpdJrvdSghdMfJnrdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLhMk6dsxRg89HddbWdUNAKGiUiMMB8GA1UdIwQY MBaAFDBijZI44j1r9Mc1mVyeLeoAUPAMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUdLTmtqamlQV3YweHpXWlhKNHQ2Z0JROEF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS80MGU1N2UtYzYyNy00YjliLTk1Nzct NTk2ZmE4YzBhNTdhLzEvTUdLTmtqamlQV3YweHpXWlhKNHQ2Z0JROEF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS80MGU1N2UtYzYyNy00YjliLTk1NzctNTk2ZmE4YzBhNTdh LzEvTUdLTmtqamlQV3YweHpXWlhKNHQ2Z0JROEF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG6BCBtv7 75jw4oh5/eA4DeW5neqRnuyVpWRU84K5jJUrO/T6CN5oglSnTSz+0nv9/anoX7jK y44W3Ca9YB8c4v4iFVhpaJBRa53+jPAip9ID4QPw6nEvJSN8jOoeppXB5FAuSmhl PxBDCQEQdR4xV37wYlThoAkxzP2IYAM45LhgesQUu326gnijfIg2DekVxGp4uAU8 cG2P7GlPonLRTL4NetaFsFxrcLcgqMQyIIYfvWB9XwvMV2szMOYvBfkB6NbUWjBI KupPKreTzDJRoajgLnHZOi+lwp2nNGeC0UXvcnYcCmlOkKZaQFrkOJ0tYgWl8ba4 7vun4TU3i9czIA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:58 2026 by rpki-client