This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft File: mrlC3a28mskLTs---tsjEyOmcFU.mft (raw, json) Hash identifier: PBwWiyI2S085SE2KBZS6/Ds2npGd32xxvBw/79OLxII= Subject key identifier: 7F:77:49:89:92:5C:9A:7C:E6:82:B2:FC:FD:0C:FB:A5:4C:D1:20:63 Authority key identifier: 9A:B9:42:DD:AD:BC:9A:C9:0B:4E:CF:BE:FA:DB:23:13:23:A6:70:55 Certificate issuer: /CN=9ab942ddadbc9ac90b4ecfbefadb231323a67055 Certificate serial: 019C43904D80BE30182F7948581B9A868CE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrlC3a28mskLTs---tsjEyOmcFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft Manifest number: 0EF5 Signing time: Mon 09 Feb 2026 18:00:56 +0000 Manifest this update: Mon 09 Feb 2026 18:00:56 +0000 Manifest next update: Tue 10 Feb 2026 18:00:56 +0000 Files and hashes: 1: mrlC3a28mskLTs---tsjEyOmcFU.crl (hash: 1f/ayoq+7+DLAJYubVP8igNyvVNk6pUYU1AWlULuBgc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft rsync://rpki.ripe.net/repository/DEFAULT/mrlC3a28mskLTs---tsjEyOmcFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:4d:80:be:30:18:2f:79:48:58:1b:9a:86:8c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab942ddadbc9ac90b4ecfbefadb231323a67055 Validity Not Before: Feb 9 18:00:56 2026 GMT Not After : Feb 10 18:00:56 2026 GMT Subject: CN=7f774989925c9a7ce682b2fcfd0cfba54cd12063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:af:72:02:0b:5b:e9:b5:7b:be:18:39:21:57: 0d:06:62:b1:fb:dc:c5:2c:ef:b1:11:d4:7d:96:2e: b2:e2:7a:04:38:8f:77:09:07:fa:c2:df:c5:1c:c9: 94:7c:63:8d:5b:b2:b6:81:d4:2a:7e:b7:2e:35:78: b6:ac:52:7d:aa:87:2b:17:4e:59:75:b2:8e:51:d6: 72:96:d4:34:d8:43:ae:cb:67:cd:2a:bd:04:53:04: 45:67:6e:2b:fb:db:06:8e:31:99:16:3a:c6:f8:9b: e8:b8:e5:88:28:e7:12:cf:ba:f5:de:2c:a1:79:f6: 26:33:84:a5:91:f2:40:1f:bf:8d:e0:2e:b3:70:aa: 66:e0:1e:72:80:b3:d4:cc:de:f5:50:b6:52:54:1e: f9:ed:51:1f:a9:74:92:05:ad:dc:20:72:0b:9e:f6: 9b:40:c0:8f:35:dc:ea:f3:30:85:8d:d1:7b:80:d7: 97:d1:d9:4e:b2:4e:25:80:ab:e2:41:f3:58:f8:2f: ed:f3:f2:07:6b:4f:fa:b8:9f:49:2c:f0:05:e2:e9: 7c:18:86:71:60:79:8d:3f:3d:89:b6:f2:57:7c:49: 34:75:32:ca:b1:75:d2:95:cb:27:02:95:7c:e1:66: 49:fc:69:4c:3f:2e:a7:36:a6:c0:0a:a2:57:44:af: 57:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:77:49:89:92:5C:9A:7C:E6:82:B2:FC:FD:0C:FB:A5:4C:D1:20:63 X509v3 Authority Key Identifier: keyid:9A:B9:42:DD:AD:BC:9A:C9:0B:4E:CF:BE:FA:DB:23:13:23:A6:70:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrlC3a28mskLTs---tsjEyOmcFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:a1:b7:2b:69:13:75:63:bd:19:6a:d9:89:56:ba:a0:d1:a8: 19:96:76:13:f5:85:e0:07:55:9e:8d:05:da:8b:49:14:0b:69: 9c:e1:9c:45:3d:ac:bb:8e:74:1c:ec:62:5d:e0:05:4a:91:8b: 2c:1e:75:5a:19:e7:8c:f4:64:cd:24:c0:15:a4:3b:40:76:2a: 25:ff:50:81:92:cc:dd:81:93:89:cd:b1:c0:14:08:9f:32:5c: b6:d8:65:4b:d9:f8:4c:c6:0b:ab:13:38:fa:2d:68:d9:94:34: b3:b4:5e:43:54:5c:64:07:12:69:ce:bc:0b:0e:8d:7e:30:22: 19:a1:78:62:30:9d:e0:90:34:3b:27:6f:08:43:21:12:49:86: b9:a4:ef:11:ae:37:ae:12:0e:df:26:7b:b5:28:8b:a4:ce:0c: ec:70:ea:97:d5:c3:dd:a7:5e:b5:4e:ed:9f:b9:3f:99:17:af: 12:7e:c9:88:18:18:6a:84:d4:9a:cc:83:2a:a5:18:07:70:70: 58:06:2f:49:a4:a0:f8:62:ae:bb:04:81:55:fb:c6:80:af:5a: 22:9e:c0:a3:20:4d:92:c0:99:24:65:a4:32:7d:08:74:80:d4: 25:22:5b:0d:68:b8:ad:46:10:24:fb:f5:c7:ee:47:24:6b:45: e2:80:b2:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkE2AvjAYL3lIWBuahozgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhYjk0MmRkYWRiYzlhYzkwYjRlY2ZiZWZhZGIyMzEzMjNh NjcwNTUwHhcNMjYwMjA5MTgwMDU2WhcNMjYwMjEwMTgwMDU2WjAzMTEwLwYDVQQD Eyg3Zjc3NDk4OTkyNWM5YTdjZTY4MmIyZmNmZDBjZmJhNTRjZDEyMDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvq9yAgtb6bV7vhg5IVcNBmKx+9zF LO+xEdR9li6y4noEOI93CQf6wt/FHMmUfGONW7K2gdQqfrcuNXi2rFJ9qocrF05Z dbKOUdZyltQ02EOuy2fNKr0EUwRFZ24r+9sGjjGZFjrG+JvouOWIKOcSz7r13iyh efYmM4SlkfJAH7+N4C6zcKpm4B5ygLPUzN71ULZSVB757VEfqXSSBa3cIHILnvab QMCPNdzq8zCFjdF7gNeX0dlOsk4lgKviQfNY+C/t8/IHa0/6uJ9JLPAF4ul8GIZx YHmNPz2JtvJXfEk0dTLKsXXSlcsnApV84WZJ/GlMPy6nNqbACqJXRK9XFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH93SYmSXJp85oKy/P0M+6VM0SBjMB8GA1UdIwQY MBaAFJq5Qt2tvJrJC07PvvrbIxMjpnBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXJsQzNhMjhtc2tMVHMtLS10c2pFeU9tY0ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84MmNkNTctZWZkOS00NjY5LThhNDkt YzYxYWI1NmQzNTk3LzEvbXJsQzNhMjhtc2tMVHMtLS10c2pFeU9tY0ZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS84MmNkNTctZWZkOS00NjY5LThhNDktYzYxYWI1NmQzNTk3 LzEvbXJsQzNhMjhtc2tMVHMtLS10c2pFeU9tY0ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaqG3K2kT dWO9GWrZiVa6oNGoGZZ2E/WF4AdVno0F2otJFAtpnOGcRT2su450HOxiXeAFSpGL LB51WhnnjPRkzSTAFaQ7QHYqJf9QgZLM3YGTic2xwBQInzJctthlS9n4TMYLqxM4 +i1o2ZQ0s7ReQ1RcZAcSac68Cw6NfjAiGaF4YjCd4JA0OydvCEMhEkmGuaTvEa43 rhIO3yZ7tSiLpM4M7HDql9XD3adetU7tn7k/mRevEn7JiBgYaoTUmsyDKqUYB3Bw WAYvSaSg+GKuuwSBVfvGgK9aIp7AoyBNksCZJGWkMn0IdIDUJSJbDWi4rUYQJPv1 x+5HJGtF4oCy5Q== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:13 2026 by rpki-client