This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft File: mQxLs441zXAyDreRUgxsrTSksnE.mft (raw, json) Hash identifier: G89g/4aIjruvFeM4SEwd3o9XtxMYIose2kA9DpkIqZo= Subject key identifier: FD:CD:3D:B4:DF:59:EA:D7:F7:5D:D8:AD:B8:FE:3F:63:27:08:CA:E8 Authority key identifier: 99:0C:4B:B3:8E:35:CD:70:32:0E:B7:91:52:0C:6C:AD:34:A4:B2:71 Certificate issuer: /CN=990c4bb38e35cd70320eb791520c6cad34a4b271 Certificate serial: 019C424665379A51F4BBABBB91A2E23977B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft Manifest number: 14A4 Signing time: Mon 09 Feb 2026 12:00:35 +0000 Manifest this update: Mon 09 Feb 2026 12:00:35 +0000 Manifest next update: Tue 10 Feb 2026 12:00:35 +0000 Files and hashes: 1: jgN5b340IqujXH8DiLAcaLBDPQg.roa (hash: vjTTYKgnFfE85jmKgHsh0LqEiHa9mFhJMA/4cn0Av3w=) 2: mQxLs441zXAyDreRUgxsrTSksnE.crl (hash: X3IoCUSSa934MHRAwa9/x7I0xAJhGYyHTnVZNqe6Qwc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:65:37:9a:51:f4:bb:ab:bb:91:a2:e2:39:77:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=990c4bb38e35cd70320eb791520c6cad34a4b271 Validity Not Before: Feb 9 12:00:35 2026 GMT Not After : Feb 10 12:00:35 2026 GMT Subject: CN=fdcd3db4df59ead7f75dd8adb8fe3f632708cae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:b7:c7:9a:fb:95:5e:c5:de:be:f3:60:bb:d5: 7f:14:d9:c9:5c:a1:d5:26:77:08:98:03:7f:b2:e0: ef:9b:a1:83:6e:1d:8c:2a:bf:26:a5:65:a4:a0:9d: 01:e7:05:62:37:a3:73:d5:d0:09:07:c6:89:7b:11: 5e:6c:fa:67:2f:37:2b:d2:86:06:ce:c8:ea:af:b7: 1e:dc:90:1b:ef:f5:38:04:fa:fc:7a:e7:ba:de:03: 39:cc:f9:ed:e8:d1:88:00:b6:bf:87:75:29:7a:7b: 30:56:70:89:d5:e4:cb:31:e9:5a:5c:c5:41:b8:1c: e4:64:ec:ef:dc:ae:db:37:96:80:b8:b1:a9:7e:53: da:a7:6a:31:ee:15:3d:39:cd:3f:77:ba:b6:ed:e2: ea:97:a1:a2:17:f3:0f:ce:9d:b3:a9:54:b1:5f:a5: 85:d9:0a:dc:4b:63:0d:9e:8d:48:b7:81:d1:75:9d: ec:4a:e3:44:d7:87:89:09:c7:32:9a:53:67:f3:8a: f9:45:02:fa:0b:af:b8:56:7d:51:33:d1:f1:e1:a6: 7c:a5:7d:e6:84:87:82:cb:5e:aa:2a:7c:97:11:cb: e1:06:11:ed:67:91:05:a8:af:9d:e5:56:05:84:71: 6f:2e:b1:c6:89:a4:33:07:f1:84:e9:ce:70:95:87: e3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:CD:3D:B4:DF:59:EA:D7:F7:5D:D8:AD:B8:FE:3F:63:27:08:CA:E8 X509v3 Authority Key Identifier: keyid:99:0C:4B:B3:8E:35:CD:70:32:0E:B7:91:52:0C:6C:AD:34:A4:B2:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:2f:08:bb:64:6b:cd:1a:83:5d:bc:42:f3:f1:28:39:9a:eb: 5f:ec:df:79:7d:49:11:5d:8d:46:9e:ed:ba:2d:d5:63:cb:80: 47:a3:a4:4a:e7:47:39:2b:19:ff:df:01:52:53:17:b0:22:e3: 53:fc:f0:97:5a:3c:15:bf:0e:5f:a8:6e:10:bd:5a:bf:d6:21: cd:10:d9:a2:7f:a5:7a:74:e3:3d:68:0b:03:88:9f:8e:4b:ec: 20:85:0c:08:f3:77:3a:b6:a8:aa:0f:e3:d8:82:0f:f1:7c:e7: c8:f9:a1:9f:63:8c:01:72:e0:f8:7b:82:9c:76:ec:0d:94:19: 94:76:75:11:91:8e:23:99:22:60:30:d4:35:24:18:d1:42:1a: 80:eb:68:5a:ef:93:9c:35:2f:49:55:79:4d:1f:63:3d:5a:2f: f1:cf:6e:69:b2:a9:1c:13:af:84:49:10:ca:d3:41:1d:69:62: 73:e8:70:40:0c:ec:1d:2b:fb:f4:36:3f:8f:ca:e2:d0:0f:95: 31:97:01:95:ab:dd:63:8d:e6:b5:7b:5b:5e:67:db:97:23:35: f0:c7:8d:13:4d:6b:f6:a2:56:07:dd:13:c7:73:80:1c:35:4e: 84:22:7c:f7:32:67:30:32:bf:81:bc:96:6c:8d:3e:0b:d9:68: c1:64:23:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRmU3mlH0u6u7kaLiOXezMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MGM0YmIzOGUzNWNkNzAzMjBlYjc5MTUyMGM2Y2FkMzRh NGIyNzEwHhcNMjYwMjA5MTIwMDM1WhcNMjYwMjEwMTIwMDM1WjAzMTEwLwYDVQQD EyhmZGNkM2RiNGRmNTllYWQ3Zjc1ZGQ4YWRiOGZlM2Y2MzI3MDhjYWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA67fHmvuVXsXevvNgu9V/FNnJXKHV JncImAN/suDvm6GDbh2MKr8mpWWkoJ0B5wViN6Nz1dAJB8aJexFebPpnLzcr0oYG zsjqr7ce3JAb7/U4BPr8eue63gM5zPnt6NGIALa/h3UpenswVnCJ1eTLMelaXMVB uBzkZOzv3K7bN5aAuLGpflPap2ox7hU9Oc0/d7q27eLql6GiF/MPzp2zqVSxX6WF 2QrcS2MNno1It4HRdZ3sSuNE14eJCccymlNn84r5RQL6C6+4Vn1RM9Hx4aZ8pX3m hIeCy16qKnyXEcvhBhHtZ5EFqK+d5VYFhHFvLrHGiaQzB/GE6c5wlYfj4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP3NPbTfWerX913Yrbj+P2MnCMroMB8GA1UdIwQY MBaAFJkMS7OONc1wMg63kVIMbK00pLJxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVF4THM0NDF6WEF5RHJlUlVneHNyVFNrc25FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80NGM0MmMtMWU2OC00YWFiLTgzOWQt OTU5M2UzYTQzNzI1LzEvbVF4THM0NDF6WEF5RHJlUlVneHNyVFNrc25FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi80NGM0MmMtMWU2OC00YWFiLTgzOWQtOTU5M2UzYTQzNzI1 LzEvbVF4THM0NDF6WEF5RHJlUlVneHNyVFNrc25FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKS8Iu2Rr zRqDXbxC8/EoOZrrX+zfeX1JEV2NRp7tui3VY8uAR6OkSudHOSsZ/98BUlMXsCLj U/zwl1o8Fb8OX6huEL1av9YhzRDZon+lenTjPWgLA4ifjkvsIIUMCPN3Oraoqg/j 2IIP8XznyPmhn2OMAXLg+HuCnHbsDZQZlHZ1EZGOI5kiYDDUNSQY0UIagOtoWu+T nDUvSVV5TR9jPVov8c9uabKpHBOvhEkQytNBHWlic+hwQAzsHSv79DY/j8ri0A+V MZcBlavdY43mtXtbXmfblyM18MeNE01r9qJWB90Tx3OAHDVOhCJ89zJnMDK/gbyW bI0+C9lowWQj+g== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:11 2026 by rpki-client