This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.mft File: Mb9CyzMks4trh4t81W9pk263w9M.mft (raw, json) Hash identifier: 3BzKrEWfmlSV71uXKs2BadtMen9+tzjP1HHgl7+SKno= Subject key identifier: 7F:24:6F:28:DF:20:A0:F4:F9:1C:01:93:7D:6E:47:D7:AE:D2:C2:13 Authority key identifier: 31:BF:42:CB:33:24:B3:8B:6B:87:8B:7C:D5:6F:69:93:6E:B7:C3:D3 Certificate issuer: /CN=31bf42cb3324b38b6b878b7cd56f69936eb7c3d3 Certificate serial: 019C4246A634659496A4F19B9B0E31D9ACCA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mb9CyzMks4trh4t81W9pk263w9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.mft Manifest number: 0654 Signing time: Mon 09 Feb 2026 12:00:52 +0000 Manifest this update: Mon 09 Feb 2026 12:00:52 +0000 Manifest next update: Tue 10 Feb 2026 12:00:52 +0000 Files and hashes: 1: Mb9CyzMks4trh4t81W9pk263w9M.crl (hash: JAF3lrMD3U818+Lx8x7xaQEUqD//OKUjixwyv1Ic8Rk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.mft rsync://rpki.ripe.net/repository/DEFAULT/Mb9CyzMks4trh4t81W9pk263w9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:a6:34:65:94:96:a4:f1:9b:9b:0e:31:d9:ac:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31bf42cb3324b38b6b878b7cd56f69936eb7c3d3 Validity Not Before: Feb 9 12:00:52 2026 GMT Not After : Feb 10 12:00:52 2026 GMT Subject: CN=7f246f28df20a0f4f91c01937d6e47d7aed2c213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ee:c0:c5:94:2e:71:be:bd:33:33:68:32:68: 23:94:f4:35:ee:dc:7b:08:67:7e:6e:24:5d:65:27: af:b6:1f:86:77:00:15:a0:b9:df:4e:c4:0c:a6:d7: 1f:e0:7b:05:f3:60:75:dd:51:7f:ff:3d:70:b2:50: b9:6f:63:63:5e:33:94:3f:3a:f8:a9:37:3d:97:24: 19:80:f3:72:80:9e:c7:f4:72:4d:f6:3a:2b:d1:8f: 06:a6:b1:46:e1:8a:d7:57:a3:9e:93:77:20:5a:06: be:3b:1d:9b:f0:8c:65:b6:1e:df:6b:d9:9e:27:39: 9e:c9:7d:c0:9b:4d:68:85:fe:6e:2b:8d:df:a7:7a: 68:30:e3:a0:48:6c:f1:be:89:91:4e:76:0d:1c:10: 64:2e:a9:d5:fe:07:93:d3:ed:8c:f1:64:53:de:7b: 65:4a:b8:b0:b4:d5:b1:9a:b2:d0:59:b3:98:ef:a5: 04:49:96:87:a3:9a:7e:24:29:7a:6a:bc:47:b5:ec: 1d:f7:a0:b4:26:c5:0f:7e:86:13:99:50:99:db:ed: d7:d9:85:54:14:d6:d9:16:98:7b:00:9f:ad:a5:e3: 4f:73:b5:1f:a5:92:6b:db:c4:da:fd:9e:59:80:48: 04:00:44:67:85:49:27:fe:09:be:25:c4:ba:69:2a: 94:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:24:6F:28:DF:20:A0:F4:F9:1C:01:93:7D:6E:47:D7:AE:D2:C2:13 X509v3 Authority Key Identifier: keyid:31:BF:42:CB:33:24:B3:8B:6B:87:8B:7C:D5:6F:69:93:6E:B7:C3:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mb9CyzMks4trh4t81W9pk263w9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:0a:b0:c1:94:d3:fa:14:d5:b2:4d:39:8d:d5:ab:a9:23:e7: 18:3f:ca:df:8b:3d:09:d5:b3:62:ad:01:f9:0e:e8:b2:68:24: bd:61:12:a5:cd:66:08:8d:b3:d6:e2:32:db:19:bb:40:34:37: 30:6d:ec:cf:fe:4d:f7:8d:6c:38:d8:08:af:01:3c:2d:ef:3a: b2:2b:54:98:29:0d:95:f9:76:92:97:18:94:3b:69:99:4d:79: 6f:21:97:f4:0f:16:f8:47:69:d3:02:00:3e:5b:cd:df:a5:1a: 61:18:c0:11:c7:08:c9:20:83:40:74:cf:6b:15:6c:2b:26:2f: 9a:7f:38:33:b5:fe:aa:4b:d2:dc:9c:2b:8a:f7:10:1c:37:88: ca:fa:83:b5:c4:ac:77:e6:c1:78:d5:30:48:1b:b2:1a:71:9e: 9b:bf:fc:2a:12:cc:e3:ef:09:55:32:a1:bf:7b:88:d4:30:41: 47:b1:89:ea:c5:86:d4:33:92:5f:44:1c:01:ca:c7:61:28:5e: ce:1f:f0:c7:78:c9:00:93:7b:d9:d3:c5:74:bc:9c:87:4e:92: ae:52:4b:f7:b7:c2:c2:a6:d4:28:12:0b:a2:31:ba:63:60:54: 38:10:1c:84:82:5a:52:35:5c:b7:8f:86:f1:fa:0b:b1:d4:6c: c1:09:76:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRqY0ZZSWpPGbmw4x2azKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxYmY0MmNiMzMyNGIzOGI2Yjg3OGI3Y2Q1NmY2OTkzNmVi N2MzZDMwHhcNMjYwMjA5MTIwMDUyWhcNMjYwMjEwMTIwMDUyWjAzMTEwLwYDVQQD Eyg3ZjI0NmYyOGRmMjBhMGY0ZjkxYzAxOTM3ZDZlNDdkN2FlZDJjMjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAje7AxZQucb69MzNoMmgjlPQ17tx7 CGd+biRdZSevth+GdwAVoLnfTsQMptcf4HsF82B13VF//z1wslC5b2NjXjOUPzr4 qTc9lyQZgPNygJ7H9HJN9jor0Y8GprFG4YrXV6Oek3cgWga+Ox2b8Ixlth7fa9me JzmeyX3Am01ohf5uK43fp3poMOOgSGzxvomRTnYNHBBkLqnV/geT0+2M8WRT3ntl SriwtNWxmrLQWbOY76UESZaHo5p+JCl6arxHtewd96C0JsUPfoYTmVCZ2+3X2YVU FNbZFph7AJ+tpeNPc7UfpZJr28Ta/Z5ZgEgEAERnhUkn/gm+JcS6aSqU8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH8kbyjfIKD0+RwBk31uR9eu0sITMB8GA1UdIwQY MBaAFDG/QsszJLOLa4eLfNVvaZNut8PTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWI5Q3l6TWtzNHRyaDR0ODFXOXBrMjYzdzlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9iYTY4YmQtOTNhOC00N2QzLTljNDgt NDkxY2I0ODU0MzJkLzEvTWI5Q3l6TWtzNHRyaDR0ODFXOXBrMjYzdzlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9iYTY4YmQtOTNhOC00N2QzLTljNDgtNDkxY2I0ODU0MzJk LzEvTWI5Q3l6TWtzNHRyaDR0ODFXOXBrMjYzdzlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcwqwwZTT +hTVsk05jdWrqSPnGD/K34s9CdWzYq0B+Q7osmgkvWESpc1mCI2z1uIy2xm7QDQ3 MG3sz/5N941sONgIrwE8Le86sitUmCkNlfl2kpcYlDtpmU15byGX9A8W+Edp0wIA PlvN36UaYRjAEccIySCDQHTPaxVsKyYvmn84M7X+qkvS3JwrivcQHDeIyvqDtcSs d+bBeNUwSBuyGnGem7/8KhLM4+8JVTKhv3uI1DBBR7GJ6sWG1DOSX0QcAcrHYShe zh/wx3jJAJN72dPFdLych06SrlJL97fCwqbUKBILojG6Y2BUOBAchIJaUjVct4+G 8foLsdRswQl2TA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:13 2026 by rpki-client