This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft File: MXqSdCYInzuMUACDIhp5ip0uhGY.mft (raw, json) Hash identifier: B4AIaWhvrt0TrP3QSWLIiy3nCeemlPiJyaMJeLszAq8= Subject key identifier: E3:C2:51:7C:62:5F:29:BB:80:13:E6:1D:CB:9E:EE:7B:17:F0:CD:F0 Authority key identifier: 31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66 Certificate issuer: /CN=317a927426089f3b8c500083221a798a9d2e8466 Certificate serial: 019C43C708F8B0E3B04E2D188F81B427D238 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft Manifest number: 153B Signing time: Mon 09 Feb 2026 19:00:43 +0000 Manifest this update: Mon 09 Feb 2026 19:00:43 +0000 Manifest next update: Tue 10 Feb 2026 19:00:43 +0000 Files and hashes: 1: AAeB0P11BLo-0wFOSgELqWi6J00.roa (hash: ne5zZYzC8PT1Zd7TFJmCajzK/4fC4/JAvjpEfVor37I=) 2: MXqSdCYInzuMUACDIhp5ip0uhGY.crl (hash: IyFoLOMReNtZz+9s4ANrFsE4ZdqYcHQ8qWSk64352BQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c7:08:f8:b0:e3:b0:4e:2d:18:8f:81:b4:27:d2:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=317a927426089f3b8c500083221a798a9d2e8466 Validity Not Before: Feb 9 19:00:43 2026 GMT Not After : Feb 10 19:00:43 2026 GMT Subject: CN=e3c2517c625f29bb8013e61dcb9eee7b17f0cdf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:17:d4:3a:4a:95:fd:3b:78:1e:cb:fe:8e:84: 82:14:73:3e:40:8a:95:2a:92:4b:eb:ea:7e:a8:cc: 03:59:3d:20:91:e5:b8:25:c5:ab:a7:af:88:9f:25: 88:e8:19:d8:7b:d1:5e:1e:c0:b7:40:43:d2:26:bb: 29:43:53:44:12:c1:3b:a0:01:13:b1:48:47:d1:1c: c9:80:51:1b:93:30:53:1f:56:fe:83:c0:91:46:09: 8a:35:28:e3:ed:10:84:bf:af:c3:83:6f:10:3d:d6: db:33:05:bc:7c:4f:14:6b:3e:ab:ee:77:c9:15:73: 30:5a:6a:19:40:2d:a3:1c:16:12:62:c2:a6:9f:ff: 22:eb:35:ac:f0:4e:02:f9:dd:4d:84:34:9d:ad:4a: a2:e1:cb:f1:60:74:eb:cf:34:81:71:1f:ca:43:ef: b0:3e:ad:5d:b8:15:cb:a2:5c:ba:c6:f6:f9:c1:87: f1:00:48:20:73:f9:66:f9:d8:bb:fc:f7:18:a0:ac: 3a:10:1c:21:53:47:3c:61:7c:67:a3:e9:e5:16:cf: 9c:9d:b7:12:dc:c6:c0:34:bb:c3:c1:a5:83:a2:40: 80:58:78:0e:35:64:12:27:9a:98:25:2d:39:7b:45: f1:05:f1:51:15:2c:8f:ed:70:9b:0b:46:05:a7:83: 5f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:C2:51:7C:62:5F:29:BB:80:13:E6:1D:CB:9E:EE:7B:17:F0:CD:F0 X509v3 Authority Key Identifier: keyid:31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:30:f8:35:f4:b8:8f:45:89:64:25:9b:9c:d2:5c:95:62:9d: 04:48:f2:50:97:c5:10:8c:63:d8:40:b2:ec:dc:9c:91:30:88: f0:b4:5f:cd:76:cf:77:92:6f:69:87:55:46:f5:72:57:87:d9: 9f:ad:2c:d0:b1:4d:f4:24:bb:bc:51:91:03:94:b1:e0:46:e8: eb:44:cd:01:e9:b6:fc:a3:43:91:0a:47:dd:0c:14:d6:74:1e: 2c:39:57:db:ac:06:ac:27:7c:b0:b2:e4:97:1d:ab:94:63:dc: 13:38:d6:5e:0d:31:ea:5d:22:ec:9f:93:4d:51:d3:2c:cb:68: 93:7c:a3:df:12:83:9e:8d:39:24:61:3b:a4:32:cd:7a:81:9b: b9:58:89:38:60:48:fe:89:b5:a9:0f:e1:c2:75:df:3c:5e:cf: 04:71:bb:81:e2:ca:5d:6c:28:5f:77:77:15:95:d6:06:03:ab: 50:88:51:6a:96:88:93:b9:f0:11:a3:c0:1a:44:6d:9b:17:3d: fd:92:e5:10:c8:4d:19:be:2d:ec:f1:77:28:a9:02:12:e5:a8: 6e:74:33:35:12:be:da:ba:4e:d2:12:2b:c5:82:6b:86:13:80: e5:ba:34:2e:d1:43:d2:3e:03:6e:5f:3a:d5:22:32:21:b2:aa: 3d:a1:bc:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxwj4sOOwTi0Yj4G0J9I4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxN2E5Mjc0MjYwODlmM2I4YzUwMDA4MzIyMWE3OThhOWQy ZTg0NjYwHhcNMjYwMjA5MTkwMDQzWhcNMjYwMjEwMTkwMDQzWjAzMTEwLwYDVQQD EyhlM2MyNTE3YzYyNWYyOWJiODAxM2U2MWRjYjllZWU3YjE3ZjBjZGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xfUOkqV/Tt4Hsv+joSCFHM+QIqV KpJL6+p+qMwDWT0gkeW4JcWrp6+InyWI6BnYe9FeHsC3QEPSJrspQ1NEEsE7oAET sUhH0RzJgFEbkzBTH1b+g8CRRgmKNSjj7RCEv6/Dg28QPdbbMwW8fE8Uaz6r7nfJ FXMwWmoZQC2jHBYSYsKmn/8i6zWs8E4C+d1NhDSdrUqi4cvxYHTrzzSBcR/KQ++w Pq1duBXLoly6xvb5wYfxAEggc/lm+di7/PcYoKw6EBwhU0c8YXxno+nlFs+cnbcS 3MbANLvDwaWDokCAWHgONWQSJ5qYJS05e0XxBfFRFSyP7XCbC0YFp4NfTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOPCUXxiXym7gBPmHcue7nsX8M3wMB8GA1UdIwQY MBaAFDF6knQmCJ87jFAAgyIaeYqdLoRmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVhxU2RDWUluenVNVUFDRElocDVpcDB1aEdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kZTQ3NDAtZDM0ZS00MmE3LTg5Njgt NDY0YjhmM2I4MzYzLzEvTVhxU2RDWUluenVNVUFDRElocDVpcDB1aEdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9kZTQ3NDAtZDM0ZS00MmE3LTg5NjgtNDY0YjhmM2I4MzYz LzEvTVhxU2RDWUluenVNVUFDRElocDVpcDB1aEdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnTD4NfS4 j0WJZCWbnNJclWKdBEjyUJfFEIxj2ECy7NyckTCI8LRfzXbPd5JvaYdVRvVyV4fZ n60s0LFN9CS7vFGRA5Sx4Ebo60TNAem2/KNDkQpH3QwU1nQeLDlX26wGrCd8sLLk lx2rlGPcEzjWXg0x6l0i7J+TTVHTLMtok3yj3xKDno05JGE7pDLNeoGbuViJOGBI /om1qQ/hwnXfPF7PBHG7geLKXWwoX3d3FZXWBgOrUIhRapaIk7nwEaPAGkRtmxc9 /ZLlEMhNGb4t7PF3KKkCEuWobnQzNRK+2rpO0hIrxYJrhhOA5bo0LtFD0j4Dbl86 1SIyIbKqPaG8RQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:24 2026 by rpki-client