This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.mft File: eJiLIIHZlCID0iJIrNgF2zoT3MU.mft (raw, json) Hash identifier: sl1ShJACkyaJNq4TN0JZYKIY/7+MMJnc2i8sbWyWZQ4= Subject key identifier: 85:09:D3:6C:03:86:38:42:91:1B:CE:19:B8:76:C6:6C:9C:29:B0:CF Authority key identifier: 78:98:8B:20:81:D9:94:22:03:D2:22:48:AC:D8:05:DB:3A:13:DC:C5 Certificate issuer: /CN=78988b2081d9942203d22248acd805db3a13dcc5 Certificate serial: 019C42B4698E5B76A64CB68D09FBECA60164 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eJiLIIHZlCID0iJIrNgF2zoT3MU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.mft Manifest number: 12D2 Signing time: Mon 09 Feb 2026 14:00:45 +0000 Manifest this update: Mon 09 Feb 2026 14:00:45 +0000 Manifest next update: Tue 10 Feb 2026 14:00:45 +0000 Files and hashes: 1: XCzfh62vqtaLoBLmnf7KwpKjJEA.roa (hash: KTbdtDtJvNQ824N7s/PkrhI3vieli+GuTfSDO92U57s=) 2: eJiLIIHZlCID0iJIrNgF2zoT3MU.crl (hash: AE4XkyByXf7SAUtT2KwUPnexhUHzClPXdgP4pjqJcH4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.crl rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.mft rsync://rpki.ripe.net/repository/DEFAULT/eJiLIIHZlCID0iJIrNgF2zoT3MU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:69:8e:5b:76:a6:4c:b6:8d:09:fb:ec:a6:01:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78988b2081d9942203d22248acd805db3a13dcc5 Validity Not Before: Feb 9 14:00:45 2026 GMT Not After : Feb 10 14:00:45 2026 GMT Subject: CN=8509d36c03863842911bce19b876c66c9c29b0cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:94:4a:e2:ea:cb:ec:ed:2f:b9:da:ee:df:44: c2:af:c7:13:5f:35:6b:8e:2f:0e:3d:50:8d:fa:b7: 6e:de:bc:9f:a0:32:19:cd:9f:74:d6:d3:d8:fc:44: b7:8e:4b:0e:b2:ff:2d:c8:b3:5f:da:64:23:cb:54: 19:d4:d7:7c:10:38:1b:a5:c9:ef:35:9f:4c:da:36: ff:ad:8c:1b:f2:48:fd:e4:bf:a9:2b:cf:e3:28:44: 24:b6:21:83:48:ca:a9:4b:ca:b7:33:e9:41:ae:42: 70:16:5b:e8:b2:f3:48:d8:d3:37:70:24:5c:b0:9a: 8c:f9:1e:a4:50:ba:a4:9e:35:ae:5c:8f:ff:4f:17: f9:a4:0b:95:ca:a5:60:c3:99:31:56:8f:9d:60:5c: 56:37:d6:45:43:7f:09:1f:8c:2d:9e:f4:b9:fc:03: fb:4b:d2:0a:d7:1c:c3:e2:a9:53:f0:27:50:71:40: d5:2d:81:fc:16:30:92:d9:65:b2:a0:a6:a5:8e:ee: f8:e4:7c:77:0e:be:81:21:2a:99:34:a8:29:ea:87: f8:b1:6e:ca:9b:05:83:16:bc:7b:c8:89:da:07:da: 37:ea:44:5e:6c:5f:2f:7c:d3:e0:1b:51:a0:99:f6: bd:66:85:04:e6:67:3e:89:9e:82:e0:1f:cc:12:87: 26:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:09:D3:6C:03:86:38:42:91:1B:CE:19:B8:76:C6:6C:9C:29:B0:CF X509v3 Authority Key Identifier: keyid:78:98:8B:20:81:D9:94:22:03:D2:22:48:AC:D8:05:DB:3A:13:DC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJiLIIHZlCID0iJIrNgF2zoT3MU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:07:71:a4:8c:65:b8:36:a9:5c:25:98:67:23:36:84:45:06: 1d:9f:7c:dd:85:60:3c:46:cd:f5:c6:dc:c8:41:92:23:88:bc: 40:84:87:24:09:bb:e4:d5:59:85:06:ff:21:6e:36:cc:f5:21: 4c:83:c6:14:51:45:b3:3f:4b:0d:a1:30:79:a1:86:1c:e9:af: 9d:40:e1:c5:8b:94:68:5e:63:60:48:81:11:78:10:34:69:0d: fe:c2:cc:f8:4c:70:db:7f:f7:e0:b1:15:f0:c4:33:e2:34:35: 9c:e3:fa:74:3c:b8:c9:ba:2c:3b:1f:2b:bf:e1:cf:68:f0:76: b9:23:82:a6:13:59:9e:ed:8b:0a:5b:9b:a8:d2:e8:c1:40:30: 92:62:a5:62:9e:08:a6:7c:20:13:24:a6:67:41:4a:2a:fd:06: 47:49:d1:a6:d0:0b:ad:86:a6:bc:a9:2f:1d:51:2f:33:23:d8: 16:6e:92:99:c4:43:6b:16:2d:05:12:47:52:98:df:59:0e:f2: 0e:12:d6:27:20:c5:4b:cf:83:9f:d3:bb:1f:c5:52:6b:f1:51: 00:1c:72:68:54:3d:11:fb:ed:70:1a:44:ba:e9:cc:4c:c8:3c: 9a:56:a3:70:5d:3d:2d:a0:db:3e:da:07:64:76:bb:c9:32:27: 69:d9:ca:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtGmOW3amTLaNCfvspgFkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4OTg4YjIwODFkOTk0MjIwM2QyMjI0OGFjZDgwNWRiM2Ex M2RjYzUwHhcNMjYwMjA5MTQwMDQ1WhcNMjYwMjEwMTQwMDQ1WjAzMTEwLwYDVQQD Eyg4NTA5ZDM2YzAzODYzODQyOTExYmNlMTliODc2YzY2YzljMjliMGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopRK4urL7O0vudru30TCr8cTXzVr ji8OPVCN+rdu3ryfoDIZzZ901tPY/ES3jksOsv8tyLNf2mQjy1QZ1Nd8EDgbpcnv NZ9M2jb/rYwb8kj95L+pK8/jKEQktiGDSMqpS8q3M+lBrkJwFlvosvNI2NM3cCRc sJqM+R6kULqknjWuXI//Txf5pAuVyqVgw5kxVo+dYFxWN9ZFQ38JH4wtnvS5/AP7 S9IK1xzD4qlT8CdQcUDVLYH8FjCS2WWyoKalju745Hx3Dr6BISqZNKgp6of4sW7K mwWDFrx7yInaB9o36kRebF8vfNPgG1Ggmfa9ZoUE5mc+iZ6C4B/MEocmYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIUJ02wDhjhCkRvOGbh2xmycKbDPMB8GA1UdIwQY MBaAFHiYiyCB2ZQiA9IiSKzYBds6E9zFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUppTElJSFpsQ0lEMGlKSXJOZ0Yyem9UM01VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC81YzI5YzEtMTk0YS00MTBkLThjNzYt YmJkMDFkNDI1MDg0LzEvZUppTElJSFpsQ0lEMGlKSXJOZ0Yyem9UM01VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC81YzI5YzEtMTk0YS00MTBkLThjNzYtYmJkMDFkNDI1MDg0 LzEvZUppTElJSFpsQ0lEMGlKSXJOZ0Yyem9UM01VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvwdxpIxl uDapXCWYZyM2hEUGHZ983YVgPEbN9cbcyEGSI4i8QISHJAm75NVZhQb/IW42zPUh TIPGFFFFsz9LDaEweaGGHOmvnUDhxYuUaF5jYEiBEXgQNGkN/sLM+Exw23/34LEV 8MQz4jQ1nOP6dDy4ybosOx8rv+HPaPB2uSOCphNZnu2LClubqNLowUAwkmKlYp4I pnwgEySmZ0FKKv0GR0nRptALrYamvKkvHVEvMyPYFm6SmcRDaxYtBRJHUpjfWQ7y DhLWJyDFS8+Dn9O7H8VSa/FRABxyaFQ9EfvtcBpEuunMTMg8mlajcF09LaDbPtoH ZHa7yTInadnKnQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:50 2026 by rpki-client