This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft File: 56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft (raw, json) Hash identifier: aOsGumejK8lqiQ0toVCXaLMHd3vVWV0BAsg5rd6xkho= Subject key identifier: BE:01:DC:31:30:AC:43:62:8E:52:FB:3B:51:CB:01:75:BA:91:82:B2 Authority key identifier: E7:A3:BD:17:08:C6:5D:EA:4E:E9:41:84:9C:46:DB:43:E6:79:12:B9 Certificate issuer: /CN=e7a3bd1708c65dea4ee941849c46db43e67912b9 Certificate serial: 019C4358E575CC64D41936417DCA95903B12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/56O9FwjGXepO6UGEnEbbQ-Z5Erk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft Manifest number: 032D Signing time: Mon 09 Feb 2026 17:00:25 +0000 Manifest this update: Mon 09 Feb 2026 17:00:25 +0000 Manifest next update: Tue 10 Feb 2026 17:00:25 +0000 Files and hashes: 1: 56O9FwjGXepO6UGEnEbbQ-Z5Erk.crl (hash: UNO38XIPtYl4sZnDX5UiYgLSfAOqHaPL2p1oFs88/JQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.crl rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft rsync://rpki.ripe.net/repository/DEFAULT/56O9FwjGXepO6UGEnEbbQ-Z5Erk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:e5:75:cc:64:d4:19:36:41:7d:ca:95:90:3b:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7a3bd1708c65dea4ee941849c46db43e67912b9 Validity Not Before: Feb 9 17:00:25 2026 GMT Not After : Feb 10 17:00:25 2026 GMT Subject: CN=be01dc3130ac43628e52fb3b51cb0175ba9182b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:cc:6c:6a:39:12:00:e1:8f:fd:5c:f1:2d:70: 7e:af:e0:3e:ea:80:e4:a6:19:88:d9:df:e1:df:e1: 34:1c:ed:03:a8:74:7e:6b:01:2a:c2:13:6d:22:65: 3a:90:7e:de:b8:84:34:e9:f2:17:66:a8:f0:d4:e7: 3b:a7:06:aa:8c:7d:61:a5:eb:c1:91:21:c1:49:e4: 9b:0b:55:97:28:7c:0c:33:e4:e2:ce:d1:5b:ef:f8: f2:b9:e2:ff:c4:9e:86:3c:7e:6d:58:49:ba:7a:b2: ad:b5:d2:83:74:52:fe:5c:e7:a0:01:9b:f9:cb:4c: f7:51:3d:d4:05:e1:11:bb:c9:cf:45:63:43:8e:dd: ab:40:3d:bb:94:e9:cd:e6:3a:7a:1a:0c:4e:3a:13: 1b:c2:cd:ed:88:08:b6:30:35:76:9f:88:c9:5e:0b: 91:b2:e0:4a:5a:e2:38:ca:02:28:78:cf:78:e4:15: 24:43:2e:c6:ca:75:bf:60:60:c9:64:33:9c:bc:85: 54:1c:e1:5e:5e:fc:18:75:20:51:d4:ed:d6:a9:2c: 5a:07:e9:8f:15:34:e3:07:39:8c:ef:85:85:87:26: b9:d9:65:1f:5e:9e:97:38:db:11:e8:24:b7:17:c1: f2:af:93:22:de:1e:aa:a7:9d:46:7a:ec:7c:81:c8: a1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:01:DC:31:30:AC:43:62:8E:52:FB:3B:51:CB:01:75:BA:91:82:B2 X509v3 Authority Key Identifier: keyid:E7:A3:BD:17:08:C6:5D:EA:4E:E9:41:84:9C:46:DB:43:E6:79:12:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/56O9FwjGXepO6UGEnEbbQ-Z5Erk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:77:25:53:7f:a6:c6:48:a5:47:7d:db:84:32:9c:32:9b:5e: 09:b2:55:3b:61:f7:f3:44:c4:34:c3:e9:ef:8a:92:d4:e1:2f: fe:2a:74:7e:6e:a3:50:46:b1:c9:cc:53:a8:33:f3:41:6b:f4: 03:19:12:46:86:de:66:34:19:e7:89:bf:07:58:e4:71:4e:e9: c8:7a:d9:44:78:b5:e9:c9:72:d0:57:60:c8:bf:57:af:6d:a1: 07:7b:06:4f:19:58:d7:0a:b7:8b:4a:1e:6b:ec:0a:9f:ce:a8: 9b:ee:8c:34:dc:a6:3a:39:79:22:08:30:19:64:63:81:5a:fd: 1e:60:83:4a:ef:66:ce:90:79:1d:ed:39:a8:4b:17:28:1c:c3: 7c:d5:41:c0:cf:98:1c:12:62:cc:43:85:c3:72:ac:88:ab:bb: 51:67:d0:20:6a:e0:00:69:e8:32:57:9e:d0:63:f0:28:fc:f3: 05:f9:a2:a8:63:38:82:53:3d:73:d7:a3:49:a1:da:27:0e:f6: 25:47:6d:52:cf:bf:df:40:a4:3c:41:eb:ff:43:f5:18:c9:98: 17:63:ec:19:61:21:e9:73:b6:aa:59:a2:49:42:a7:a4:a0:8d: 53:17:7b:53:b0:48:30:02:7c:09:d7:d3:d3:05:42:af:9a:83: 30:99:bc:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWOV1zGTUGTZBfcqVkDsSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3YTNiZDE3MDhjNjVkZWE0ZWU5NDE4NDljNDZkYjQzZTY3 OTEyYjkwHhcNMjYwMjA5MTcwMDI1WhcNMjYwMjEwMTcwMDI1WjAzMTEwLwYDVQQD EyhiZTAxZGMzMTMwYWM0MzYyOGU1MmZiM2I1MWNiMDE3NWJhOTE4MmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncxsajkSAOGP/VzxLXB+r+A+6oDk phmI2d/h3+E0HO0DqHR+awEqwhNtImU6kH7euIQ06fIXZqjw1Oc7pwaqjH1hpevB kSHBSeSbC1WXKHwMM+TiztFb7/jyueL/xJ6GPH5tWEm6erKttdKDdFL+XOegAZv5 y0z3UT3UBeERu8nPRWNDjt2rQD27lOnN5jp6GgxOOhMbws3tiAi2MDV2n4jJXguR suBKWuI4ygIoeM945BUkQy7GynW/YGDJZDOcvIVUHOFeXvwYdSBR1O3WqSxaB+mP FTTjBzmM74WFhya52WUfXp6XONsR6CS3F8Hyr5Mi3h6qp51Geux8gcihRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL4B3DEwrENijlL7O1HLAXW6kYKyMB8GA1UdIwQY MBaAFOejvRcIxl3qTulBhJxG20PmeRK5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTZPOUZ3akdYZXBPNlVHRW5FYmJRLVo1RXJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9jZTM2NjctNDdkNC00NTE4LWJmOTQt NzQ0MGFkMmNlN2E0LzEvNTZPOUZ3akdYZXBPNlVHRW5FYmJRLVo1RXJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9jZTM2NjctNDdkNC00NTE4LWJmOTQtNzQ0MGFkMmNlN2E0 LzEvNTZPOUZ3akdYZXBPNlVHRW5FYmJRLVo1RXJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADnclU3+m xkilR33bhDKcMpteCbJVO2H380TENMPp74qS1OEv/ip0fm6jUEaxycxTqDPzQWv0 AxkSRobeZjQZ54m/B1jkcU7pyHrZRHi16cly0FdgyL9Xr22hB3sGTxlY1wq3i0oe a+wKn86om+6MNNymOjl5IggwGWRjgVr9HmCDSu9mzpB5He05qEsXKBzDfNVBwM+Y HBJizEOFw3KsiKu7UWfQIGrgAGnoMlee0GPwKPzzBfmiqGM4glM9c9ejSaHaJw72 JUdtUs+/30CkPEHr/0P1GMmYF2PsGWEh6XO2qlmiSUKnpKCNUxd7U7BIMAJ8CdfT 0wVCr5qDMJm8zA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:31 2026 by rpki-client