This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.mft File: MWAAQeTs-YwxVdSPSXz20UNoMj4.mft (raw, json) Hash identifier: OsnAqSw4AGvIX+bJdNrsEVtLBeklQ1ynkPMMG7R/+Gc= Subject key identifier: 33:B0:93:B7:4D:58:8F:3F:5C:55:DD:B2:4D:E3:67:D8:72:08:96:9E Authority key identifier: 31:60:00:41:E4:EC:F9:8C:31:55:D4:8F:49:7C:F6:D1:43:68:32:3E Certificate issuer: /CN=31600041e4ecf98c3155d48f497cf6d14368323e Certificate serial: 019C420FCA767BDC8583542D4340F42162B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MWAAQeTs-YwxVdSPSXz20UNoMj4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.mft Manifest number: 03CC Signing time: Mon 09 Feb 2026 11:00:56 +0000 Manifest this update: Mon 09 Feb 2026 11:00:56 +0000 Manifest next update: Tue 10 Feb 2026 11:00:56 +0000 Files and hashes: 1: MWAAQeTs-YwxVdSPSXz20UNoMj4.crl (hash: rFXuIVt7GcFJITkoOoI9L6xY+cgIa1lcvSn4BcKjtPc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.mft rsync://rpki.ripe.net/repository/DEFAULT/MWAAQeTs-YwxVdSPSXz20UNoMj4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:ca:76:7b:dc:85:83:54:2d:43:40:f4:21:62:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31600041e4ecf98c3155d48f497cf6d14368323e Validity Not Before: Feb 9 11:00:56 2026 GMT Not After : Feb 10 11:00:56 2026 GMT Subject: CN=33b093b74d588f3f5c55ddb24de367d87208969e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:76:30:ef:c0:f4:61:a0:2e:55:30:ed:d0:b0: d6:76:47:e3:4d:86:88:0e:d9:d5:81:bd:b6:8c:4b: 10:c5:49:f2:10:a8:0c:ab:59:e5:b4:96:e6:d3:c9: 7b:02:2f:99:89:53:0f:6e:c1:ee:82:b5:57:1f:05: de:78:1d:e1:5d:94:73:bc:0c:c5:ab:a8:e4:1f:21: d6:02:6c:fa:39:3b:ca:6b:f9:58:3b:db:9e:a4:40: fd:a5:ea:97:91:26:b2:0d:f4:47:51:47:87:c8:8f: 99:fa:ca:5d:20:c6:aa:19:6b:3f:7e:85:52:fe:61: c3:ab:fe:4f:50:74:85:61:82:b9:42:34:a8:ea:9a: 6d:56:4c:b7:7d:54:f8:b9:9c:a8:f4:49:c9:8d:e3: e7:ae:e6:ee:ed:d6:3d:13:0b:2b:2a:a9:62:73:7d: a8:1d:d8:fd:29:13:92:91:0a:a7:13:57:01:ef:c4: 09:38:6e:01:e0:f3:57:6c:4b:3d:e2:ff:b1:e3:e9: 77:3b:f2:1d:10:23:dd:b4:33:f7:08:d6:9c:af:1a: 71:f5:32:b8:26:55:e9:18:76:3a:d4:21:56:75:c8: 21:10:0d:b4:f7:a3:56:4f:23:7d:84:22:66:51:6e: 55:e4:5b:85:50:1d:d9:a7:13:32:c3:1f:67:04:5b: d3:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B0:93:B7:4D:58:8F:3F:5C:55:DD:B2:4D:E3:67:D8:72:08:96:9E X509v3 Authority Key Identifier: keyid:31:60:00:41:E4:EC:F9:8C:31:55:D4:8F:49:7C:F6:D1:43:68:32:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWAAQeTs-YwxVdSPSXz20UNoMj4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:66:35:b0:7c:84:1f:7e:19:96:b6:bf:fe:1d:8e:91:52:89: ea:f3:f6:a1:84:92:af:f5:e5:59:16:04:9a:7e:45:ad:1e:81: 65:58:e2:47:14:41:3c:c4:8f:df:43:5b:32:03:05:21:65:e6: 91:1a:91:c5:9b:15:00:ea:93:c8:89:67:0b:52:57:66:94:a1: 8e:3b:f2:8b:57:d4:c6:62:d6:8e:80:76:43:b2:63:84:66:62: 92:10:2d:c6:ff:82:24:96:76:fd:ad:d4:59:88:a7:03:f9:57: 1a:a8:c2:02:fd:3e:ac:33:77:2c:90:c2:d3:0b:c9:07:fc:23: 5b:7b:2e:71:42:8a:fe:ac:8b:2f:77:5d:47:fb:3d:df:1f:c7: 09:89:4e:df:32:3b:c2:90:ab:4b:f3:6f:62:6f:7e:56:00:90: 08:e9:ea:40:bd:35:6a:4a:f7:e8:0c:8d:d1:cf:e4:70:e2:98: 4c:b7:90:34:da:98:bc:d9:cd:0a:d5:05:40:4e:49:cc:70:a6: 68:18:65:db:b4:11:44:03:96:ff:b1:38:a2:25:f8:9f:05:4e: 4d:2e:3a:7b:bb:ec:9e:24:b8:6b:99:77:4a:99:87:6c:4e:40: c4:42:ea:9c:f3:97:30:16:3b:ab:af:1c:7a:ba:7f:13:bc:6e: 5e:97:31:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD8p2e9yFg1QtQ0D0IWKyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxNjAwMDQxZTRlY2Y5OGMzMTU1ZDQ4ZjQ5N2NmNmQxNDM2 ODMyM2UwHhcNMjYwMjA5MTEwMDU2WhcNMjYwMjEwMTEwMDU2WjAzMTEwLwYDVQQD EygzM2IwOTNiNzRkNTg4ZjNmNWM1NWRkYjI0ZGUzNjdkODcyMDg5NjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3Yw78D0YaAuVTDt0LDWdkfjTYaI DtnVgb22jEsQxUnyEKgMq1nltJbm08l7Ai+ZiVMPbsHugrVXHwXeeB3hXZRzvAzF q6jkHyHWAmz6OTvKa/lYO9uepED9peqXkSayDfRHUUeHyI+Z+spdIMaqGWs/foVS /mHDq/5PUHSFYYK5QjSo6pptVky3fVT4uZyo9EnJjePnrubu7dY9EwsrKqlic32o Hdj9KROSkQqnE1cB78QJOG4B4PNXbEs94v+x4+l3O/IdECPdtDP3CNacrxpx9TK4 JlXpGHY61CFWdcghEA2096NWTyN9hCJmUW5V5FuFUB3ZpxMywx9nBFvTAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDOwk7dNWI8/XFXdsk3jZ9hyCJaeMB8GA1UdIwQY MBaAFDFgAEHk7PmMMVXUj0l89tFDaDI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVdBQVFlVHMtWXd4VmRTUFNYejIwVU5vTWo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy84NjlmNjQtMDJiNi00NjAzLTk4N2Qt OWMzNmMyMjJkOGRjLzEvTVdBQVFlVHMtWXd4VmRTUFNYejIwVU5vTWo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy84NjlmNjQtMDJiNi00NjAzLTk4N2QtOWMzNmMyMjJkOGRj LzEvTVdBQVFlVHMtWXd4VmRTUFNYejIwVU5vTWo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIGY1sHyE H34Zlra//h2OkVKJ6vP2oYSSr/XlWRYEmn5FrR6BZVjiRxRBPMSP30NbMgMFIWXm kRqRxZsVAOqTyIlnC1JXZpShjjvyi1fUxmLWjoB2Q7JjhGZikhAtxv+CJJZ2/a3U WYinA/lXGqjCAv0+rDN3LJDC0wvJB/wjW3sucUKK/qyLL3ddR/s93x/HCYlO3zI7 wpCrS/NvYm9+VgCQCOnqQL01akr36AyN0c/kcOKYTLeQNNqYvNnNCtUFQE5JzHCm aBhl27QRRAOW/7E4oiX4nwVOTS46e7vsniS4a5l3SpmHbE5AxELqnPOXMBY7q68c erp/E7xuXpcxXw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:04 2026 by rpki-client