This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.mft File: eyQ7cy5WRpBILMglGZ-LWRsB9vI.mft (raw, json) Hash identifier: hA/muBxqs5EsdAsYBkTvJbOZ/QsgWhKZPIA4eCn80ms= Subject key identifier: 43:5A:28:A2:FA:21:A8:CB:86:94:A3:DC:48:2A:53:59:76:0F:B1:08 Authority key identifier: 7B:24:3B:73:2E:56:46:90:48:2C:C8:25:19:9F:8B:59:1B:01:F6:F2 Certificate issuer: /CN=7b243b732e564690482cc825199f8b591b01f6f2 Certificate serial: 019C4322D379C9A71F1CBF7E718BC5730D61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyQ7cy5WRpBILMglGZ-LWRsB9vI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.mft Manifest number: 13B3 Signing time: Mon 09 Feb 2026 16:01:21 +0000 Manifest this update: Mon 09 Feb 2026 16:01:21 +0000 Manifest next update: Tue 10 Feb 2026 16:01:21 +0000 Files and hashes: 1: eyQ7cy5WRpBILMglGZ-LWRsB9vI.crl (hash: rqSNw1pVd1s/hu1CgC96fso5qUt8b9HVGynQyH4dMsU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.mft rsync://rpki.ripe.net/repository/DEFAULT/eyQ7cy5WRpBILMglGZ-LWRsB9vI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:d3:79:c9:a7:1f:1c:bf:7e:71:8b:c5:73:0d:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b243b732e564690482cc825199f8b591b01f6f2 Validity Not Before: Feb 9 16:01:21 2026 GMT Not After : Feb 10 16:01:21 2026 GMT Subject: CN=435a28a2fa21a8cb8694a3dc482a5359760fb108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c4:2c:1e:e3:07:88:8d:8e:08:16:4d:9e:64: c1:a2:ee:f8:af:48:07:4c:67:c1:d0:45:3b:2e:b3: 98:01:9f:5a:70:31:8a:59:be:aa:05:67:1c:d1:6c: 55:9f:a6:19:76:2a:f9:f8:5e:44:4e:2e:38:0c:93: ae:47:95:92:1a:33:a5:01:80:25:4c:c8:60:79:f2: 14:64:78:7e:c8:1b:54:49:cb:0c:a5:7f:56:9d:06: b0:2a:cf:33:3c:cd:1c:bc:72:db:84:90:ae:fd:3e: 9a:f5:d9:1d:cb:e6:b3:21:87:cc:0a:5e:cd:18:ee: 55:ff:dc:71:f7:b4:72:18:dd:f8:ca:30:c5:88:ab: 1f:ae:e5:5c:82:06:43:27:7d:00:e2:e6:3a:fb:c6: c8:76:f2:c4:86:d5:2c:ce:51:23:99:14:af:7e:de: 3d:d9:71:0c:ec:27:97:0f:7c:73:e9:02:a8:e8:c7: fc:d7:98:f9:7f:61:c6:d8:29:1c:64:23:06:97:ee: 76:11:79:ca:ac:54:8b:e0:7a:89:0c:d1:23:cd:ee: fb:5d:e0:94:17:93:fa:5b:82:1d:07:79:d2:cd:c7: 3a:fb:a8:84:9e:c6:e5:08:78:e5:cf:97:6d:05:80: 5e:ed:df:db:d8:e9:66:04:a1:ad:ae:44:d0:e0:4c: 68:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:5A:28:A2:FA:21:A8:CB:86:94:A3:DC:48:2A:53:59:76:0F:B1:08 X509v3 Authority Key Identifier: keyid:7B:24:3B:73:2E:56:46:90:48:2C:C8:25:19:9F:8B:59:1B:01:F6:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyQ7cy5WRpBILMglGZ-LWRsB9vI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:0f:8d:e2:d1:41:02:7e:5a:2a:94:af:bd:76:bf:c7:8e:db: c3:11:a3:80:41:4b:0f:f5:e8:6b:d2:b7:83:15:c2:6a:3d:06: 7b:3e:a2:a9:8e:54:e7:0a:50:42:7d:7d:d0:11:93:57:4e:7f: 8a:9f:89:51:3d:d9:f2:29:05:97:77:8f:b8:cb:ce:20:06:8a: b3:33:23:4b:3f:ee:e6:a5:3d:5b:83:1e:22:71:98:df:46:8e: 11:e4:c4:7e:99:e2:1e:a5:cb:cf:78:d8:47:99:f4:93:9d:c6: f2:81:a0:69:54:19:ae:43:bc:96:a2:01:ce:a9:59:bf:49:c3: 7e:4e:9f:b6:1a:4a:69:fb:6b:a4:c8:d7:21:f4:6d:1f:79:2e: 02:22:cc:6f:56:72:db:7b:57:ec:85:aa:6f:1e:56:5e:b2:3f: dc:02:75:b9:0f:ad:ae:a6:10:f5:57:13:65:0b:0f:d0:84:70: a7:34:a6:34:a7:24:64:7b:64:8a:b7:f2:19:30:c7:77:8f:f2: 29:36:9e:66:56:5c:67:b2:e8:bd:bf:5a:96:20:98:27:8c:37: 62:54:4e:64:d1:d2:fe:83:5c:a1:8c:62:6d:3f:5c:08:6f:d4: 37:f9:37:40:37:ab:aa:06:17:17:28:f3:dc:80:55:f9:7f:82: 0e:db:46:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDItN5yacfHL9+cYvFcw1hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMjQzYjczMmU1NjQ2OTA0ODJjYzgyNTE5OWY4YjU5MWIw MWY2ZjIwHhcNMjYwMjA5MTYwMTIxWhcNMjYwMjEwMTYwMTIxWjAzMTEwLwYDVQQD Eyg0MzVhMjhhMmZhMjFhOGNiODY5NGEzZGM0ODJhNTM1OTc2MGZiMTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMQsHuMHiI2OCBZNnmTBou74r0gH TGfB0EU7LrOYAZ9acDGKWb6qBWcc0WxVn6YZdir5+F5ETi44DJOuR5WSGjOlAYAl TMhgefIUZHh+yBtUScsMpX9WnQawKs8zPM0cvHLbhJCu/T6a9dkdy+azIYfMCl7N GO5V/9xx97RyGN34yjDFiKsfruVcggZDJ30A4uY6+8bIdvLEhtUszlEjmRSvft49 2XEM7CeXD3xz6QKo6Mf815j5f2HG2CkcZCMGl+52EXnKrFSL4HqJDNEjze77XeCU F5P6W4IdB3nSzcc6+6iEnsblCHjlz5dtBYBe7d/b2OlmBKGtrkTQ4ExoCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFENaKKL6IajLhpSj3EgqU1l2D7EIMB8GA1UdIwQY MBaAFHskO3MuVkaQSCzIJRmfi1kbAfbyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXlRN2N5NVdScEJJTE1nbEdaLUxXUnNCOXZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS81YjJkMmMtYTc4Yy00YzQ3LTk3ODUt M2I5YTI4MmU3NjNlLzEvZXlRN2N5NVdScEJJTE1nbEdaLUxXUnNCOXZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS81YjJkMmMtYTc4Yy00YzQ3LTk3ODUtM2I5YTI4MmU3NjNl LzEvZXlRN2N5NVdScEJJTE1nbEdaLUxXUnNCOXZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlA+N4tFB An5aKpSvvXa/x47bwxGjgEFLD/Xoa9K3gxXCaj0Gez6iqY5U5wpQQn190BGTV05/ ip+JUT3Z8ikFl3ePuMvOIAaKszMjSz/u5qU9W4MeInGY30aOEeTEfpniHqXLz3jY R5n0k53G8oGgaVQZrkO8lqIBzqlZv0nDfk6fthpKaftrpMjXIfRtH3kuAiLMb1Zy 23tX7IWqbx5WXrI/3AJ1uQ+trqYQ9VcTZQsP0IRwpzSmNKckZHtkirfyGTDHd4/y KTaeZlZcZ7Lovb9aliCYJ4w3YlROZNHS/oNcoYxibT9cCG/UN/k3QDerqgYXFyjz 3IBV+X+CDttGPA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:58 2026 by rpki-client