This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft File: MxpRr9TLZoLCMN7WQGWMETxWL9I.mft (raw, json) Hash identifier: 8+9gkmcQeFhlcIgDEad5lfjydY/kxzUXgVeAEBUjF6o= Subject key identifier: B0:F6:58:1C:B3:4E:6A:08:0E:7E:FF:57:6F:D3:8C:8D:1C:5C:A5:FC Authority key identifier: 33:1A:51:AF:D4:CB:66:82:C2:30:DE:D6:40:65:8C:11:3C:56:2F:D2 Certificate issuer: /CN=331a51afd4cb6682c230ded640658c113c562fd2 Certificate serial: 019C446C5ECA7A50883BCD34E65BA8CB11CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MxpRr9TLZoLCMN7WQGWMETxWL9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft Manifest number: 0A5F Signing time: Mon 09 Feb 2026 22:01:18 +0000 Manifest this update: Mon 09 Feb 2026 22:01:18 +0000 Manifest next update: Tue 10 Feb 2026 22:01:18 +0000 Files and hashes: 1: MxpRr9TLZoLCMN7WQGWMETxWL9I.crl (hash: 471+augbfIc+wLw7PCRX0OSYMnrxSOzlR0KxOI0A0dQ=) 2: _2CCeE-Uv7qfwwVfdf-mFwT5gbc.roa (hash: TYooW/gUsVFWHXthOPEQi5a4rd+m2KssG9xszmHlKRY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft rsync://rpki.ripe.net/repository/DEFAULT/MxpRr9TLZoLCMN7WQGWMETxWL9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6c:5e:ca:7a:50:88:3b:cd:34:e6:5b:a8:cb:11:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=331a51afd4cb6682c230ded640658c113c562fd2 Validity Not Before: Feb 9 22:01:18 2026 GMT Not After : Feb 10 22:01:18 2026 GMT Subject: CN=b0f6581cb34e6a080e7eff576fd38c8d1c5ca5fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ed:8f:6c:ab:01:d1:5e:7d:fa:fd:c8:a7:1e: f0:21:88:85:02:34:fe:1d:b8:de:a4:b1:28:22:e7: 9e:ca:93:83:5c:bb:4c:22:dd:9c:cc:d5:01:30:ff: a3:b5:64:af:ac:32:c9:b0:9a:70:e5:fe:1f:d5:29: 67:f0:15:16:45:12:17:e0:25:14:88:cb:fb:ed:13: 8c:c6:2a:ff:8a:15:7e:b0:0e:47:4d:28:d4:07:c1: 3c:fb:b5:e8:08:ca:0a:09:bb:47:5b:28:92:f1:22: 0a:19:6c:7e:76:41:3d:f3:c3:b7:4c:53:f0:d7:fd: fa:f3:4a:ce:d2:21:16:28:cb:e7:0c:82:f7:f1:06: 00:42:1a:b1:49:14:49:ab:f9:e8:fa:65:81:83:b9: f6:e5:99:45:da:82:ac:00:fa:76:c5:97:1a:53:69: c4:50:cf:e1:65:d9:a0:e9:10:f2:ca:e5:6e:66:85: aa:00:02:6f:91:99:82:88:53:ee:02:71:f4:04:9a: f5:b8:fd:a7:d8:a4:a6:ef:c5:04:fa:40:50:57:32: 92:4e:fe:f7:c2:1d:91:c9:57:e2:1e:1a:4c:c3:4f: 0c:fb:e8:9a:5d:06:73:c9:75:db:93:e1:3d:6e:f9: 0c:81:ef:71:a4:eb:c8:15:71:70:07:b7:ae:93:8c: 73:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:F6:58:1C:B3:4E:6A:08:0E:7E:FF:57:6F:D3:8C:8D:1C:5C:A5:FC X509v3 Authority Key Identifier: keyid:33:1A:51:AF:D4:CB:66:82:C2:30:DE:D6:40:65:8C:11:3C:56:2F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxpRr9TLZoLCMN7WQGWMETxWL9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:61:c7:95:ad:77:c8:98:cf:c2:f6:c0:57:6f:c3:f1:7b:29: e4:01:73:7e:7a:04:5a:eb:da:93:30:75:91:8e:4e:a7:cc:57: e2:ae:5f:af:fb:aa:6f:e9:98:94:3e:23:24:02:41:69:78:29: 35:ae:1b:c9:3d:b5:4c:e5:1c:2d:5f:ec:62:18:61:36:36:0a: b0:2b:1d:95:96:73:c7:07:f2:a5:a8:e1:80:c9:4e:4d:22:6a: 01:5a:c0:e5:b4:fa:97:19:f9:38:2a:0c:dc:a8:31:11:53:76: 5b:75:86:ab:c0:2b:da:e5:5f:fa:19:7c:5f:3d:91:c5:81:ef: a4:74:88:b2:25:cd:86:87:99:f5:e8:87:4a:de:89:0b:2c:55: 23:60:12:b5:a3:57:d1:31:b5:9e:85:84:88:5e:77:d4:2b:bf: cc:0a:63:df:cf:3c:be:8b:57:4c:72:cb:21:dc:d5:84:2b:84: 53:da:aa:d4:35:68:81:d1:ba:38:24:25:80:e9:4b:cd:b4:a7: d3:f4:71:d1:59:d0:75:27:21:76:74:b8:c0:d4:a9:3b:e9:9d: 55:1d:ec:93:19:37:60:5f:e1:5a:26:73:7a:f5:c2:97:39:37: 57:db:4e:cd:ec:d4:73:50:3c:6a:93:0d:9a:da:fa:eb:e3:b1: 82:4f:e1:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEbF7KelCIO8005luoyxHPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMWE1MWFmZDRjYjY2ODJjMjMwZGVkNjQwNjU4YzExM2M1 NjJmZDIwHhcNMjYwMjA5MjIwMTE4WhcNMjYwMjEwMjIwMTE4WjAzMTEwLwYDVQQD EyhiMGY2NTgxY2IzNGU2YTA4MGU3ZWZmNTc2ZmQzOGM4ZDFjNWNhNWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAie2PbKsB0V59+v3Ipx7wIYiFAjT+ HbjepLEoIueeypODXLtMIt2czNUBMP+jtWSvrDLJsJpw5f4f1Sln8BUWRRIX4CUU iMv77ROMxir/ihV+sA5HTSjUB8E8+7XoCMoKCbtHWyiS8SIKGWx+dkE988O3TFPw 1/3680rO0iEWKMvnDIL38QYAQhqxSRRJq/no+mWBg7n25ZlF2oKsAPp2xZcaU2nE UM/hZdmg6RDyyuVuZoWqAAJvkZmCiFPuAnH0BJr1uP2n2KSm78UE+kBQVzKSTv73 wh2RyVfiHhpMw08M++iaXQZzyXXbk+E9bvkMge9xpOvIFXFwB7euk4xzCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLD2WByzTmoIDn7/V2/TjI0cXKX8MB8GA1UdIwQY MBaAFDMaUa/Uy2aCwjDe1kBljBE8Vi/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXhwUnI5VExab0xDTU43V1FHV01FVHhXTDlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xY2RiYjEtZTI2NS00NGM1LWI5ODAt NGE1NjZhZGQ1NGIyLzEvTXhwUnI5VExab0xDTU43V1FHV01FVHhXTDlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8xY2RiYjEtZTI2NS00NGM1LWI5ODAtNGE1NjZhZGQ1NGIy LzEvTXhwUnI5VExab0xDTU43V1FHV01FVHhXTDlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoWHHla13 yJjPwvbAV2/D8Xsp5AFzfnoEWuvakzB1kY5Op8xX4q5fr/uqb+mYlD4jJAJBaXgp Na4byT21TOUcLV/sYhhhNjYKsCsdlZZzxwfypajhgMlOTSJqAVrA5bT6lxn5OCoM 3KgxEVN2W3WGq8Ar2uVf+hl8Xz2RxYHvpHSIsiXNhoeZ9eiHSt6JCyxVI2AStaNX 0TG1noWEiF531Cu/zApj3888votXTHLLIdzVhCuEU9qq1DVogdG6OCQlgOlLzbSn 0/Rx0VnQdSchdnS4wNSpO+mdVR3skxk3YF/hWiZzevXClzk3V9tOzezUc1A8apMN mtr66+Oxgk/hBg== -----END CERTIFICATE-----Generated at Tue Feb 10 01:42:25 2026 by rpki-client