This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft File: ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft (raw, json) Hash identifier: TS7sJn2dm/5GLHYba82kSUai1hLRN4LuBJTjx0l1Ufo= Subject key identifier: 29:A1:2A:CE:B3:B0:1B:18:19:5A:34:88:E3:60:90:E4:4A:1F:B6:F7 Authority key identifier: 11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1 Certificate issuer: /CN=111b09710acdb72086d658e90d8f025fa6a111b1 Certificate serial: 019C427D699B254EB58F9120D2A8664E2035 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft Manifest number: 0AAF Signing time: Mon 09 Feb 2026 13:00:41 +0000 Manifest this update: Mon 09 Feb 2026 13:00:41 +0000 Manifest next update: Tue 10 Feb 2026 13:00:41 +0000 Files and hashes: 1: 185JWtL1nJVygOFr95-RQtms_58.roa (hash: KasP2muj3cS9GbttmeKweMSTbVCW9PhTnMbBxoVVNls=) 2: ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl (hash: Rp+FHDV3NrrNLifARkXkONikYU1qJMKbH6R1QWqTAIU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:69:9b:25:4e:b5:8f:91:20:d2:a8:66:4e:20:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=111b09710acdb72086d658e90d8f025fa6a111b1 Validity Not Before: Feb 9 13:00:41 2026 GMT Not After : Feb 10 13:00:41 2026 GMT Subject: CN=29a12aceb3b01b18195a3488e36090e44a1fb6f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3b:b6:7b:98:d2:30:26:4d:1e:37:7c:9e:c3: 80:15:ed:f8:59:63:1b:05:ed:d8:b2:76:96:e1:10: 6f:62:e3:9c:1c:74:fb:d4:a3:6c:28:8b:11:f7:6b: a1:f1:3c:49:7a:56:ab:1c:76:43:72:7f:c8:11:64: 11:74:6d:d6:dc:85:65:cf:b7:1b:13:30:37:6b:96: 7e:6a:ab:27:40:78:3c:a9:f6:36:48:6a:73:a0:c7: be:92:88:70:32:9b:ff:70:ea:be:42:f6:72:2c:7e: 8d:60:b2:bf:e7:ba:d8:e0:00:a3:4c:ff:98:61:96: a1:b3:6f:b7:ff:e9:b2:63:59:17:01:39:93:ef:5f: c7:6a:fa:da:b6:78:04:ba:37:5a:8e:ab:05:16:b2: 39:f9:10:e1:30:e3:cc:6d:7e:3d:7a:df:ed:2c:04: 55:b3:1e:10:52:fe:21:22:cd:a6:37:33:b9:f3:a2: 73:52:71:06:cb:50:0d:91:6c:49:6b:0a:24:1a:36: 5d:84:30:28:ee:b3:06:9a:09:2e:48:6c:57:e5:6e: 06:b5:f8:95:07:d0:2e:89:d6:2b:fe:65:3c:85:8d: 92:20:86:05:8c:e9:aa:fe:7f:14:30:54:a5:47:a9: 60:8e:76:ed:84:84:38:40:fa:b1:05:47:3e:c5:fc: ac:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A1:2A:CE:B3:B0:1B:18:19:5A:34:88:E3:60:90:E4:4A:1F:B6:F7 X509v3 Authority Key Identifier: keyid:11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:5f:ab:79:46:ce:9e:cc:cc:51:19:f6:c5:8d:bc:b5:9b:29: a9:23:7c:47:78:aa:ca:00:b6:7c:5b:1d:b6:69:46:4c:57:43: 8a:5b:eb:1b:e6:67:83:7e:e5:44:7a:03:8b:84:84:be:1a:52: cd:a6:6f:cc:10:7d:36:59:07:f8:96:1b:af:cf:38:a2:8c:65: f2:84:4f:04:57:79:3e:49:9e:5d:9d:5a:b1:79:35:1d:d1:38: 93:f7:75:79:e6:54:dd:66:09:a4:88:5c:e4:e3:a1:8f:98:19: 31:84:78:a8:46:d0:fa:03:79:e4:b7:57:37:c6:6f:65:78:ba: 47:3c:58:21:1c:dd:25:ed:df:d5:bb:14:88:62:8d:1c:ab:15: 32:49:cc:c3:25:da:2d:d6:27:53:e4:47:f8:d6:31:cf:7e:9e: ec:f1:1c:45:af:8d:33:b0:f2:c5:0d:c6:80:8c:1f:f2:76:dd: 54:d7:9c:88:d4:d6:65:9b:ed:2a:ba:ce:71:42:b5:03:bb:52: 0a:83:12:8c:1c:44:eb:77:9d:9d:24:e9:ac:93:32:92:38:62: 1d:ef:b7:e7:92:23:a1:62:9b:6b:4c:17:55:41:63:7e:22:c9: f6:6e:16:19:9b:51:22:be:9c:e9:2b:47:92:2e:07:50:f6:87: 62:bb:4e:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfWmbJU61j5Eg0qhmTiA1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMWIwOTcxMGFjZGI3MjA4NmQ2NThlOTBkOGYwMjVmYTZh MTExYjEwHhcNMjYwMjA5MTMwMDQxWhcNMjYwMjEwMTMwMDQxWjAzMTEwLwYDVQQD EygyOWExMmFjZWIzYjAxYjE4MTk1YTM0ODhlMzYwOTBlNDRhMWZiNmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDu2e5jSMCZNHjd8nsOAFe34WWMb Be3YsnaW4RBvYuOcHHT71KNsKIsR92uh8TxJelarHHZDcn/IEWQRdG3W3IVlz7cb EzA3a5Z+aqsnQHg8qfY2SGpzoMe+kohwMpv/cOq+QvZyLH6NYLK/57rY4ACjTP+Y YZahs2+3/+myY1kXATmT71/HavratngEujdajqsFFrI5+RDhMOPMbX49et/tLARV sx4QUv4hIs2mNzO586JzUnEGy1ANkWxJawokGjZdhDAo7rMGmgkuSGxX5W4GtfiV B9AuidYr/mU8hY2SIIYFjOmq/n8UMFSlR6lgjnbthIQ4QPqxBUc+xfysmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCmhKs6zsBsYGVo0iONgkORKH7b3MB8GA1UdIwQY MBaAFBEbCXEKzbcghtZY6Q2PAl+moRGxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVJzSmNRck50eUNHMWxqcERZOENYNmFoRWJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8xY2QxMzQtNGQwMy00ZmNkLWIyMjkt N2JmMDM1NmE2YmFiLzEvRVJzSmNRck50eUNHMWxqcERZOENYNmFoRWJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8xY2QxMzQtNGQwMy00ZmNkLWIyMjktN2JmMDM1NmE2YmFi LzEvRVJzSmNRck50eUNHMWxqcERZOENYNmFoRWJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqV+reUbO nszMURn2xY28tZspqSN8R3iqygC2fFsdtmlGTFdDilvrG+Zng37lRHoDi4SEvhpS zaZvzBB9NlkH+JYbr884ooxl8oRPBFd5PkmeXZ1asXk1HdE4k/d1eeZU3WYJpIhc 5OOhj5gZMYR4qEbQ+gN55LdXN8ZvZXi6RzxYIRzdJe3f1bsUiGKNHKsVMknMwyXa LdYnU+RH+NYxz36e7PEcRa+NM7DyxQ3GgIwf8nbdVNeciNTWZZvtKrrOcUK1A7tS CoMSjBxE63ednSTprJMykjhiHe+355IjoWKba0wXVUFjfiLJ9m4WGZtRIr6c6StH ki4HUPaHYrtOEQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:45:22 2026 by rpki-client