This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft File: 564LxrVkpXPje515fLdeuxt24AE.mft (raw, json) Hash identifier: xC9Z1Q7bpyOYpWxOu688x0vzY3859RJ8Ne7kPq7Wru0= Subject key identifier: 58:B3:FE:E9:7E:73:F0:0B:25:79:28:D2:D6:3D:8C:86:58:89:36:CB Authority key identifier: E7:AE:0B:C6:B5:64:A5:73:E3:7B:9D:79:7C:B7:5E:BB:1B:76:E0:01 Certificate issuer: /CN=e7ae0bc6b564a573e37b9d797cb75ebb1b76e001 Certificate serial: 019C42EBAD10E155A9898008344CF16C59CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/564LxrVkpXPje515fLdeuxt24AE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 15:01:07 +0000 Manifest this update: Mon 09 Feb 2026 15:01:07 +0000 Manifest next update: Tue 10 Feb 2026 15:01:07 +0000 Files and hashes: 1: 564LxrVkpXPje515fLdeuxt24AE.crl (hash: sxgc7+kSblDlpn3eD6RYLBsRjpSK1PVblJvpqLdmHsY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft rsync://rpki.ripe.net/repository/DEFAULT/564LxrVkpXPje515fLdeuxt24AE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:ad:10:e1:55:a9:89:80:08:34:4c:f1:6c:59:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7ae0bc6b564a573e37b9d797cb75ebb1b76e001 Validity Not Before: Feb 9 15:01:07 2026 GMT Not After : Feb 10 15:01:07 2026 GMT Subject: CN=58b3fee97e73f00b257928d2d63d8c86588936cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:eb:77:f5:6d:5e:2e:1b:b6:c8:db:c6:d8:78: 2a:5a:60:c5:30:bc:f6:35:e0:0f:85:ef:f1:33:0b: fa:a5:e8:dc:df:71:5f:52:a4:8d:88:d8:92:db:2f: ef:17:d4:fb:e9:a9:72:a6:95:9e:44:d8:7d:43:54: f9:eb:7b:c8:16:84:38:dd:b2:19:44:88:0e:86:c6: d2:77:17:9f:19:6f:e2:ec:25:55:00:98:19:ba:62: f1:d6:30:98:db:11:f7:78:7c:5e:18:16:ac:a6:30: 6e:b5:c0:e9:7a:ea:28:2a:99:01:f2:fd:d4:c8:4e: d0:4d:50:df:ed:8c:14:a0:63:d8:ea:05:26:69:01: 07:b8:d6:b7:a1:20:e6:4a:3e:f7:10:d8:fc:08:52: 42:1d:04:bc:cc:ca:fa:24:a1:7f:d8:1b:34:17:82: 3f:b1:a5:fb:e5:0b:d6:11:05:8f:82:39:73:c7:ae: 83:d1:f2:54:c6:98:fb:1c:a0:b3:a0:18:c4:eb:f5: 84:ab:2d:51:50:ac:85:07:43:5c:cd:91:c8:38:c4: 50:f9:33:57:d1:c1:c5:10:61:c4:55:ac:62:51:58: 6c:3c:30:8f:18:b7:8f:5c:89:61:e6:6a:69:0f:e3: 6f:98:9f:a7:ab:78:02:8f:df:d6:5d:ce:f1:b6:d1: a2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B3:FE:E9:7E:73:F0:0B:25:79:28:D2:D6:3D:8C:86:58:89:36:CB X509v3 Authority Key Identifier: keyid:E7:AE:0B:C6:B5:64:A5:73:E3:7B:9D:79:7C:B7:5E:BB:1B:76:E0:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/564LxrVkpXPje515fLdeuxt24AE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:eb:a0:13:4e:63:25:c5:db:13:ae:9e:a3:79:10:6f:41:f3: 6a:e8:06:60:b6:b5:7e:04:dc:66:80:1c:2a:73:a8:bc:9c:88: 41:23:8b:dd:99:6a:19:49:60:bd:e2:f6:9c:6b:50:3b:e3:ec: fc:e0:07:f8:60:e5:fc:2e:9d:9f:2c:62:1a:50:30:6d:ff:c0: 96:cf:17:92:e5:a4:b4:d9:61:22:9c:41:0c:b6:cf:cf:79:72: 83:ef:33:78:81:84:c6:21:99:0d:4e:ce:02:8f:40:fd:58:c4: 1a:82:e8:2d:f5:79:08:f3:ad:60:a5:20:d3:4d:a4:6b:21:88: 45:d8:0e:19:4c:97:41:6c:2a:29:73:0a:05:6c:c1:c1:1f:e5: e2:51:56:15:3e:31:36:6e:93:a0:48:34:11:a9:35:d0:4c:c4: 1e:0f:63:69:7e:48:98:4f:9a:3e:fd:ab:46:2d:62:6e:ca:c6: bc:27:96:0a:14:1b:ff:02:70:01:53:83:ad:6a:a3:0f:24:c0: 76:cc:9a:e8:bb:16:2c:c4:0f:6b:93:26:62:58:85:94:00:2f: a8:9e:a9:c5:b7:b1:ed:6c:29:8c:a4:a1:17:1c:8f:44:93:7a: f7:11:01:64:6b:f3:69:ff:ce:b8:8c:2e:61:49:79:c8:34:f6: 54:bc:4c:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC660Q4VWpiYAINEzxbFnPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3YWUwYmM2YjU2NGE1NzNlMzdiOWQ3OTdjYjc1ZWJiMWI3 NmUwMDEwHhcNMjYwMjA5MTUwMTA3WhcNMjYwMjEwMTUwMTA3WjAzMTEwLwYDVQQD Eyg1OGIzZmVlOTdlNzNmMDBiMjU3OTI4ZDJkNjNkOGM4NjU4ODkzNmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+t39W1eLhu2yNvG2HgqWmDFMLz2 NeAPhe/xMwv6pejc33FfUqSNiNiS2y/vF9T76alyppWeRNh9Q1T563vIFoQ43bIZ RIgOhsbSdxefGW/i7CVVAJgZumLx1jCY2xH3eHxeGBaspjButcDpeuooKpkB8v3U yE7QTVDf7YwUoGPY6gUmaQEHuNa3oSDmSj73ENj8CFJCHQS8zMr6JKF/2Bs0F4I/ saX75QvWEQWPgjlzx66D0fJUxpj7HKCzoBjE6/WEqy1RUKyFB0NczZHIOMRQ+TNX 0cHFEGHEVaxiUVhsPDCPGLePXIlh5mppD+NvmJ+nq3gCj9/WXc7xttGiYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFiz/ul+c/ALJXko0tY9jIZYiTbLMB8GA1UdIwQY MBaAFOeuC8a1ZKVz43udeXy3XrsbduABMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTY0THhyVmtwWFBqZTUxNWZMZGV1eHQyNEFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82YmQzMjEtN2Y1Yi00MTUyLThkMGMt OWIxMDdiZWY5MDMwLzEvNTY0THhyVmtwWFBqZTUxNWZMZGV1eHQyNEFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82YmQzMjEtN2Y1Yi00MTUyLThkMGMtOWIxMDdiZWY5MDMw LzEvNTY0THhyVmtwWFBqZTUxNWZMZGV1eHQyNEFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIOugE05j JcXbE66eo3kQb0HzaugGYLa1fgTcZoAcKnOovJyIQSOL3ZlqGUlgveL2nGtQO+Ps /OAH+GDl/C6dnyxiGlAwbf/Als8XkuWktNlhIpxBDLbPz3lyg+8zeIGExiGZDU7O Ao9A/VjEGoLoLfV5CPOtYKUg002kayGIRdgOGUyXQWwqKXMKBWzBwR/l4lFWFT4x Nm6ToEg0Eak10EzEHg9jaX5ImE+aPv2rRi1ibsrGvCeWChQb/wJwAVODrWqjDyTA dsya6LsWLMQPa5MmYliFlAAvqJ6pxbex7WwpjKShFxyPRJN69xEBZGvzaf/OuIwu YUl5yDT2VLxMmA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:33 2026 by rpki-client