This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft File: e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft (raw, json) Hash identifier: jCkXb4VvB4Ea1ewuYCW7AiroTkt4iQq4MdViuTD1CnE= Subject key identifier: DD:CC:9E:BF:04:EA:2D:E6:5A:D0:7F:2E:E0:0E:00:ED:18:5A:16:28 Authority key identifier: 7B:D7:8D:91:40:AD:6E:74:2E:16:70:63:20:65:82:C1:C4:59:52:BF Certificate issuer: /CN=7bd78d9140ad6e742e167063206582c1c45952bf Certificate serial: 019C432240C997B89B2B72AEDB57F00A6E70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9eNkUCtbnQuFnBjIGWCwcRZUr8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft Manifest number: 167F Signing time: Mon 09 Feb 2026 16:00:43 +0000 Manifest this update: Mon 09 Feb 2026 16:00:43 +0000 Manifest next update: Tue 10 Feb 2026 16:00:43 +0000 Files and hashes: 1: e9eNkUCtbnQuFnBjIGWCwcRZUr8.crl (hash: HjKxNPxgVjk1G50koubB2BvPUOJM3uv7B0pfzckMcME=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.crl rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft rsync://rpki.ripe.net/repository/DEFAULT/e9eNkUCtbnQuFnBjIGWCwcRZUr8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:40:c9:97:b8:9b:2b:72:ae:db:57:f0:0a:6e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bd78d9140ad6e742e167063206582c1c45952bf Validity Not Before: Feb 9 16:00:43 2026 GMT Not After : Feb 10 16:00:43 2026 GMT Subject: CN=ddcc9ebf04ea2de65ad07f2ee00e00ed185a1628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4e:f1:19:2a:7a:37:9e:23:90:5d:a8:a5:b5: 3f:43:12:c2:52:83:df:91:d9:d4:4f:d3:ab:9b:cf: 70:6c:1f:12:43:24:37:dc:92:a8:5c:38:c6:37:df: 2a:73:06:7e:fe:11:0a:35:c8:2f:88:fc:1a:80:f7: d2:8b:c3:ad:0b:7d:2e:49:96:76:7a:ee:49:1d:de: eb:54:16:cf:c6:85:87:00:ae:0b:7a:85:2b:6b:64: cb:df:ca:12:5b:5d:9e:b5:37:91:88:00:2c:3f:af: 08:40:9d:e1:d2:52:08:b8:50:20:80:c9:8f:85:a0: 5b:fe:79:0a:32:32:05:e2:27:e1:7f:56:1e:97:10: 4e:82:e3:86:09:8f:74:eb:19:aa:e3:42:9d:41:9c: 49:e8:3d:11:e6:c5:35:d8:ae:63:66:6f:75:67:23: c6:1f:0a:5b:43:03:aa:73:44:d6:9a:7b:80:f8:cc: 5d:5d:73:31:92:69:de:d1:0d:7b:f9:5b:65:bb:fe: 13:eb:52:8c:8a:15:c4:b2:d0:0f:96:6f:3d:79:ce: c5:e0:d1:57:8f:af:cd:3a:6a:cb:0e:07:cc:a7:4e: 8d:12:24:4f:e3:50:cb:bf:8e:37:0a:28:d1:ca:d3: b9:04:03:89:8d:ef:d9:b6:37:50:72:4b:38:b4:47: 8f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:CC:9E:BF:04:EA:2D:E6:5A:D0:7F:2E:E0:0E:00:ED:18:5A:16:28 X509v3 Authority Key Identifier: keyid:7B:D7:8D:91:40:AD:6E:74:2E:16:70:63:20:65:82:C1:C4:59:52:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9eNkUCtbnQuFnBjIGWCwcRZUr8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:94:e0:1d:48:99:cf:f7:b3:a2:1b:e6:2f:43:bd:61:1e:57: 0e:94:f6:c3:0d:b5:80:8e:ab:cd:95:60:a7:e4:a7:3e:95:57: d9:c5:ea:99:fa:ee:f3:a6:86:db:cb:78:b8:b4:f7:14:37:90: c3:e2:c9:39:2b:7d:28:33:08:f3:ef:8b:34:ec:0c:d1:18:9c: df:5b:c9:c0:2c:fa:b6:a1:16:09:b5:31:ff:9e:e2:89:ff:ba: 2f:ea:86:f0:e6:34:05:90:3e:cb:b7:73:9e:73:e1:75:c3:3a: da:a1:8a:77:c2:82:31:d3:fa:d2:99:7f:aa:d6:82:b3:e4:84: 4b:5c:f6:fe:91:76:17:2e:15:33:a2:3a:b3:e7:36:49:25:8b: 40:58:34:88:7c:8f:ac:a3:b4:fa:11:f7:fc:69:f9:50:d3:e4: ab:84:3c:87:e3:73:6c:78:a1:22:b7:98:94:bd:07:08:37:54: 86:6f:68:bf:50:39:90:15:47:0b:fb:24:d0:07:10:87:68:6c: e8:e3:e1:c6:06:eb:2a:07:d1:b6:8f:9c:70:64:94:3c:3f:74: 0a:35:73:bd:16:60:be:fe:8d:9f:94:75:83:b0:13:ff:4b:93: 7e:9b:7a:ca:f1:ab:24:63:69:50:3e:29:22:81:da:ee:8a:cd: f8:5a:0f:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIkDJl7ibK3Ku21fwCm5wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiZDc4ZDkxNDBhZDZlNzQyZTE2NzA2MzIwNjU4MmMxYzQ1 OTUyYmYwHhcNMjYwMjA5MTYwMDQzWhcNMjYwMjEwMTYwMDQzWjAzMTEwLwYDVQQD EyhkZGNjOWViZjA0ZWEyZGU2NWFkMDdmMmVlMDBlMDBlZDE4NWExNjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt07xGSp6N54jkF2opbU/QxLCUoPf kdnUT9Orm89wbB8SQyQ33JKoXDjGN98qcwZ+/hEKNcgviPwagPfSi8OtC30uSZZ2 eu5JHd7rVBbPxoWHAK4LeoUra2TL38oSW12etTeRiAAsP68IQJ3h0lIIuFAggMmP haBb/nkKMjIF4ifhf1YelxBOguOGCY906xmq40KdQZxJ6D0R5sU12K5jZm91ZyPG HwpbQwOqc0TWmnuA+MxdXXMxkmne0Q17+Vtlu/4T61KMihXEstAPlm89ec7F4NFX j6/NOmrLDgfMp06NEiRP41DLv443CijRytO5BAOJje/ZtjdQcks4tEePFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN3Mnr8E6i3mWtB/LuAOAO0YWhYoMB8GA1UdIwQY MBaAFHvXjZFArW50LhZwYyBlgsHEWVK/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTllTmtVQ3RiblF1Rm5CaklHV0N3Y1JaVXI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8yZDM4NTAtMjlmYi00YmZhLWE4MDYt M2NmZDhlZDUyYTk0LzEvZTllTmtVQ3RiblF1Rm5CaklHV0N3Y1JaVXI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi8yZDM4NTAtMjlmYi00YmZhLWE4MDYtM2NmZDhlZDUyYTk0 LzEvZTllTmtVQ3RiblF1Rm5CaklHV0N3Y1JaVXI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATZTgHUiZ z/ezohvmL0O9YR5XDpT2ww21gI6rzZVgp+SnPpVX2cXqmfru86aG28t4uLT3FDeQ w+LJOSt9KDMI8++LNOwM0Ric31vJwCz6tqEWCbUx/57iif+6L+qG8OY0BZA+y7dz nnPhdcM62qGKd8KCMdP60pl/qtaCs+SES1z2/pF2Fy4VM6I6s+c2SSWLQFg0iHyP rKO0+hH3/Gn5UNPkq4Q8h+NzbHihIreYlL0HCDdUhm9ov1A5kBVHC/sk0AcQh2hs 6OPhxgbrKgfRto+ccGSUPD90CjVzvRZgvv6Nn5R1g7AT/0uTfpt6yvGrJGNpUD4p IoHa7orN+FoP9w== -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:56 2026 by rpki-client