This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft File: fEajytgJZa-Gy7AIPftAqy_xus8.mft (raw, json) Hash identifier: YMI95tYO23xaJRLWU+uPZDho6VVAYQm2VjUHwlwUshU= Subject key identifier: EF:A9:E6:25:0D:14:84:4B:6E:78:62:A9:9B:E8:4B:51:17:1F:50:76 Authority key identifier: 7C:46:A3:CA:D8:09:65:AF:86:CB:B0:08:3D:FB:40:AB:2F:F1:BA:CF Certificate issuer: /CN=7c46a3cad80965af86cbb0083dfb40ab2ff1bacf Certificate serial: 019C42B4951EF95DA905388B3740F7979C05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEajytgJZa-Gy7AIPftAqy_xus8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft Manifest number: 123A Signing time: Mon 09 Feb 2026 14:00:56 +0000 Manifest this update: Mon 09 Feb 2026 14:00:56 +0000 Manifest next update: Tue 10 Feb 2026 14:00:56 +0000 Files and hashes: 1: fEajytgJZa-Gy7AIPftAqy_xus8.crl (hash: jtuWxRCzLXlxRdQ06twhyA+bL75VVx/zInb73BO5TPA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft rsync://rpki.ripe.net/repository/DEFAULT/fEajytgJZa-Gy7AIPftAqy_xus8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:95:1e:f9:5d:a9:05:38:8b:37:40:f7:97:9c:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c46a3cad80965af86cbb0083dfb40ab2ff1bacf Validity Not Before: Feb 9 14:00:56 2026 GMT Not After : Feb 10 14:00:56 2026 GMT Subject: CN=efa9e6250d14844b6e7862a99be84b51171f5076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:36:ee:71:1a:0d:f8:ee:83:ed:f5:73:d4:a1: 61:e5:01:0c:38:97:27:9c:67:a3:9a:34:e3:57:2f: 36:47:83:ef:2a:74:a3:3d:e7:65:6e:26:2e:6a:73: fa:e6:4f:03:b4:cd:3f:2f:47:73:14:04:cd:80:16: a2:a1:a5:83:d7:3e:c4:4e:b6:3a:48:04:88:f2:4a: 7d:41:05:60:e3:eb:f9:90:95:15:12:07:99:0c:12: 67:55:c1:cd:aa:44:c3:c0:5b:07:a1:43:03:88:a5: 22:69:9d:d3:0c:65:11:0c:0a:b8:44:9c:c0:b6:4b: 67:fc:d7:f9:98:a9:85:a9:12:7c:31:b6:26:1b:35: 16:7d:e1:3d:2b:d6:33:96:2f:80:ab:c2:f9:a7:29: 81:fb:78:c9:13:55:e7:d9:28:44:ba:14:3f:eb:7c: 63:bb:e4:88:7a:6f:9e:2c:b4:0a:a9:04:22:7d:fa: 43:be:f6:f6:a4:47:bf:00:11:da:aa:ed:34:8e:ca: 8b:1d:16:5a:2b:12:67:e0:ee:e3:ad:f8:0d:23:ec: 95:04:a4:0b:97:d2:2e:6c:ad:47:0f:1a:9d:cf:b1: 01:2d:9f:09:0d:1a:b9:ad:bf:6e:d1:69:43:15:b0: fb:0a:8d:8a:ee:ec:61:e7:9b:27:54:bf:6d:9f:e8: 25:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:A9:E6:25:0D:14:84:4B:6E:78:62:A9:9B:E8:4B:51:17:1F:50:76 X509v3 Authority Key Identifier: keyid:7C:46:A3:CA:D8:09:65:AF:86:CB:B0:08:3D:FB:40:AB:2F:F1:BA:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEajytgJZa-Gy7AIPftAqy_xus8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:e7:96:4a:25:8c:34:b5:60:24:83:54:cb:e7:65:48:2b:a9: b5:26:fd:d7:bb:f9:b3:62:6a:25:c1:65:81:56:56:d0:c4:6d: bb:b4:20:e6:f4:36:a4:71:16:16:1a:2c:a1:a4:07:1c:0d:5c: 7e:c5:20:b9:1b:04:57:06:32:2c:28:cc:f0:5f:b3:75:d6:65: 81:bd:87:b6:fa:e1:f2:e3:c3:88:10:eb:8e:c2:b0:e2:43:49: 32:64:5f:0d:0f:2a:38:32:2e:e7:43:04:f1:45:3d:00:39:bb: 06:1f:29:ef:bc:e8:35:5f:0c:38:38:f7:81:30:bb:0a:b8:2e: ac:01:a0:f3:4e:e7:2f:26:42:b8:0b:11:88:a1:52:06:89:40: 04:73:94:12:f5:78:66:a8:02:b1:ff:d5:66:5f:dc:72:54:17: b4:df:49:f0:f4:77:31:70:08:83:84:1e:7f:a6:2b:2c:57:d2: 6d:cd:17:04:b6:96:05:fa:a3:8c:e2:99:fe:75:65:2e:dc:f0: f2:4b:87:ca:41:57:98:62:a3:ef:14:19:cc:47:7f:84:bd:d4: c6:50:f7:e9:af:a0:3e:2f:53:26:66:5c:96:b9:8b:e6:d2:27: 32:e4:fe:4b:35:e3:08:7f:9a:41:b1:1b:f1:b0:64:50:db:97: 1e:b5:7c:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtJUe+V2pBTiLN0D3l5wFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjNDZhM2NhZDgwOTY1YWY4NmNiYjAwODNkZmI0MGFiMmZm MWJhY2YwHhcNMjYwMjA5MTQwMDU2WhcNMjYwMjEwMTQwMDU2WjAzMTEwLwYDVQQD EyhlZmE5ZTYyNTBkMTQ4NDRiNmU3ODYyYTk5YmU4NGI1MTE3MWY1MDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjbucRoN+O6D7fVz1KFh5QEMOJcn nGejmjTjVy82R4PvKnSjPedlbiYuanP65k8DtM0/L0dzFATNgBaioaWD1z7ETrY6 SASI8kp9QQVg4+v5kJUVEgeZDBJnVcHNqkTDwFsHoUMDiKUiaZ3TDGURDAq4RJzA tktn/Nf5mKmFqRJ8MbYmGzUWfeE9K9Yzli+Aq8L5pymB+3jJE1Xn2ShEuhQ/63xj u+SIem+eLLQKqQQiffpDvvb2pEe/ABHaqu00jsqLHRZaKxJn4O7jrfgNI+yVBKQL l9IubK1HDxqdz7EBLZ8JDRq5rb9u0WlDFbD7Co2K7uxh55snVL9tn+glTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO+p5iUNFIRLbnhiqZvoS1EXH1B2MB8GA1UdIwQY MBaAFHxGo8rYCWWvhsuwCD37QKsv8brPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkVhanl0Z0paYS1HeTdBSVBmdEFxeV94dXM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zNzNiY2YtNzlkNi00ODYzLTliZjAt ZDhjOTY0NTkxYWZhLzEvZkVhanl0Z0paYS1HeTdBSVBmdEFxeV94dXM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zNzNiY2YtNzlkNi00ODYzLTliZjAtZDhjOTY0NTkxYWZh LzEvZkVhanl0Z0paYS1HeTdBSVBmdEFxeV94dXM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz+eWSiWM NLVgJINUy+dlSCuptSb917v5s2JqJcFlgVZW0MRtu7Qg5vQ2pHEWFhosoaQHHA1c fsUguRsEVwYyLCjM8F+zddZlgb2Htvrh8uPDiBDrjsKw4kNJMmRfDQ8qODIu50ME 8UU9ADm7Bh8p77zoNV8MODj3gTC7CrgurAGg807nLyZCuAsRiKFSBolABHOUEvV4 ZqgCsf/VZl/cclQXtN9J8PR3MXAIg4Qef6YrLFfSbc0XBLaWBfqjjOKZ/nVlLtzw 8kuHykFXmGKj7xQZzEd/hL3UxlD36a+gPi9TJmZclrmL5tInMuT+SzXjCH+aQbEb 8bBkUNuXHrV8uw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:53 2026 by rpki-client