This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft File: M54PXmVDk87aIttEl48nPnieI0E.mft (raw, json) Hash identifier: rqLiMbUVZxemfPmqpLzt6d36FoyZhvzmiAPGCj07O/M= Subject key identifier: 4F:4F:FE:73:0C:E4:9A:4A:D7:79:D4:8E:4F:22:07:5A:A6:21:96:C0 Authority key identifier: 33:9E:0F:5E:65:43:93:CE:DA:22:DB:44:97:8F:27:3E:78:9E:23:41 Certificate issuer: /CN=339e0f5e654393ceda22db44978f273e789e2341 Certificate serial: 019C420FE9774EE5CE59FB6D23A8FE16F516 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft Manifest number: 11E4 Signing time: Mon 09 Feb 2026 11:01:04 +0000 Manifest this update: Mon 09 Feb 2026 11:01:04 +0000 Manifest next update: Tue 10 Feb 2026 11:01:04 +0000 Files and hashes: 1: M54PXmVDk87aIttEl48nPnieI0E.crl (hash: vpK4CQY6woWbmrj/0IY2w792PghBlF/DdNseH82kj1Q=) 2: WdDSmHu8piwjkaXknTgjAYhTRAg.roa (hash: CUnFAf2sONYPtqjTetxje/LoEZ9f/M7eZmBz5cxD1nU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:e9:77:4e:e5:ce:59:fb:6d:23:a8:fe:16:f5:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=339e0f5e654393ceda22db44978f273e789e2341 Validity Not Before: Feb 9 11:01:04 2026 GMT Not After : Feb 10 11:01:04 2026 GMT Subject: CN=4f4ffe730ce49a4ad779d48e4f22075aa62196c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a0:97:ea:4e:4c:3f:b4:de:c8:34:41:24:d6: a7:72:30:e3:5d:f9:06:66:99:bb:d2:cf:83:64:f0: a7:57:ec:5a:d3:d7:a6:85:64:31:31:4a:2e:56:0e: f9:5f:12:75:12:14:9d:07:ca:bc:d7:20:9b:95:47: 85:ce:db:9c:3e:27:e5:39:cd:66:df:ac:a9:59:97: c8:12:7f:af:d5:99:9a:c4:c6:41:47:5c:e4:e5:78: 15:16:ef:e5:5e:5d:30:ec:a3:22:32:93:f6:9a:89: 03:e0:75:5d:bb:a1:c5:e9:4d:dc:94:40:83:5d:b0: 6c:e8:9a:aa:c2:34:c1:5c:a0:57:3d:f4:1f:cf:de: 80:5b:10:02:0e:d1:22:77:ba:0a:a8:87:43:4e:a8: 14:0d:bd:ef:ef:0d:57:52:f3:11:74:7a:f7:c0:bf: df:01:20:a5:c3:b6:99:c7:16:43:c8:79:6f:8d:f0: 11:4e:0c:22:71:c5:3b:db:e2:e7:d1:36:ec:0d:c2: bf:f2:13:ce:c6:e6:a2:17:0f:fe:0f:d5:52:64:d3: 9d:3d:1e:25:3a:0b:64:4b:c6:48:59:c2:70:9a:2f: fb:67:1b:b7:30:37:d5:fe:d1:1e:ef:7b:f3:d8:f4: d9:eb:b7:c1:91:67:96:73:c3:a5:af:14:d1:60:26: 4e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:4F:FE:73:0C:E4:9A:4A:D7:79:D4:8E:4F:22:07:5A:A6:21:96:C0 X509v3 Authority Key Identifier: keyid:33:9E:0F:5E:65:43:93:CE:DA:22:DB:44:97:8F:27:3E:78:9E:23:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:17:3b:a0:18:bc:a8:ba:64:ed:0a:b6:c2:b9:f6:fd:fd:a2: e4:23:e5:10:48:d4:70:60:47:33:71:63:88:43:f0:ab:ad:af: 10:e3:83:b0:c6:c4:b4:cd:cb:60:89:be:fa:28:07:a9:4c:27: 8a:4f:76:1b:cf:55:8b:97:71:f3:79:f6:5c:37:d5:35:b5:9d: a6:1f:6c:5e:f2:23:67:cd:44:71:d7:42:09:08:cb:9c:a1:c0: be:8e:e0:f5:b7:49:aa:6f:14:14:30:a3:35:29:0f:31:f5:a5: 1f:fe:c7:21:d4:24:d1:18:87:a6:6f:15:fc:87:74:32:b2:b9: 4e:20:b5:4f:90:e5:6c:30:6e:5a:b7:dd:63:11:4d:1b:72:31: fa:a5:7b:80:b2:ea:a2:b0:1b:c4:27:ad:60:7c:fa:c6:7d:3b: fa:12:9a:b3:e4:1d:3f:bc:09:b3:f2:76:86:54:d0:c3:2a:ef: f4:68:53:d7:ec:02:4e:b4:eb:9c:52:56:bc:13:ea:92:ea:98: 26:0c:f5:14:01:48:ff:3e:e2:16:f9:1a:ec:bf:38:9b:62:9c: 85:bb:73:71:b7:df:f0:a2:32:99:10:88:88:36:26:97:3d:68: f2:f6:94:2b:31:c6:4c:0d:d7:84:f5:f3:6b:32:41:23:2d:da: 7e:b7:e6:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD+l3TuXOWfttI6j+FvUWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzOWUwZjVlNjU0MzkzY2VkYTIyZGI0NDk3OGYyNzNlNzg5 ZTIzNDEwHhcNMjYwMjA5MTEwMTA0WhcNMjYwMjEwMTEwMTA0WjAzMTEwLwYDVQQD Eyg0ZjRmZmU3MzBjZTQ5YTRhZDc3OWQ0OGU0ZjIyMDc1YWE2MjE5NmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56CX6k5MP7TeyDRBJNancjDjXfkG Zpm70s+DZPCnV+xa09emhWQxMUouVg75XxJ1EhSdB8q81yCblUeFztucPiflOc1m 36ypWZfIEn+v1ZmaxMZBR1zk5XgVFu/lXl0w7KMiMpP2mokD4HVdu6HF6U3clECD XbBs6JqqwjTBXKBXPfQfz96AWxACDtEid7oKqIdDTqgUDb3v7w1XUvMRdHr3wL/f ASClw7aZxxZDyHlvjfARTgwiccU72+Ln0TbsDcK/8hPOxuaiFw/+D9VSZNOdPR4l OgtkS8ZIWcJwmi/7Zxu3MDfV/tEe73vz2PTZ67fBkWeWc8OlrxTRYCZOpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE9P/nMM5JpK13nUjk8iB1qmIZbAMB8GA1UdIwQY MBaAFDOeD15lQ5PO2iLbRJePJz54niNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTU0UFhtVkRrODdhSXR0RWw0OG5QbmllSTBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8zNmIwOTgtZTlhYy00OTEwLWE2ZjUt OGU1ZDllZWZhZjkxLzEvTTU0UFhtVkRrODdhSXR0RWw0OG5QbmllSTBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8zNmIwOTgtZTlhYy00OTEwLWE2ZjUtOGU1ZDllZWZhZjkx LzEvTTU0UFhtVkRrODdhSXR0RWw0OG5QbmllSTBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMhc7oBi8 qLpk7Qq2wrn2/f2i5CPlEEjUcGBHM3FjiEPwq62vEOODsMbEtM3LYIm++igHqUwn ik92G89Vi5dx83n2XDfVNbWdph9sXvIjZ81EcddCCQjLnKHAvo7g9bdJqm8UFDCj NSkPMfWlH/7HIdQk0RiHpm8V/Id0MrK5TiC1T5DlbDBuWrfdYxFNG3Ix+qV7gLLq orAbxCetYHz6xn07+hKas+QdP7wJs/J2hlTQwyrv9GhT1+wCTrTrnFJWvBPqkuqY Jgz1FAFI/z7iFvka7L84m2Kchbtzcbff8KIymRCIiDYmlz1o8vaUKzHGTA3XhPXz azJBIy3afrfmyA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:03 2026 by rpki-client