This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft File: e4jNrtKWszDz3e1AaNVTJLNQPhE.mft (raw, json) Hash identifier: I1nkN/NFkqcIIKnvmfvv14gsu63AR5v2uPTCSN7JiKI= Subject key identifier: 23:B2:11:0D:E0:2B:9B:04:D6:42:F5:03:1A:A0:F6:83:14:73:D4:BF Authority key identifier: 7B:88:CD:AE:D2:96:B3:30:F3:DD:ED:40:68:D5:53:24:B3:50:3E:11 Certificate issuer: /CN=7b88cdaed296b330f3dded4068d55324b3503e11 Certificate serial: 019C4322A5B606A066A821CE25449613702B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4jNrtKWszDz3e1AaNVTJLNQPhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft Manifest number: 0EE0 Signing time: Mon 09 Feb 2026 16:01:09 +0000 Manifest this update: Mon 09 Feb 2026 16:01:09 +0000 Manifest next update: Tue 10 Feb 2026 16:01:09 +0000 Files and hashes: 1: e4jNrtKWszDz3e1AaNVTJLNQPhE.crl (hash: rEMqbSSAWuEBpuc/NxfdzBJz7C7aItEx4wlavlstRNk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.crl rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft rsync://rpki.ripe.net/repository/DEFAULT/e4jNrtKWszDz3e1AaNVTJLNQPhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:a5:b6:06:a0:66:a8:21:ce:25:44:96:13:70:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b88cdaed296b330f3dded4068d55324b3503e11 Validity Not Before: Feb 9 16:01:09 2026 GMT Not After : Feb 10 16:01:09 2026 GMT Subject: CN=23b2110de02b9b04d642f5031aa0f6831473d4bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:79:76:e1:91:53:53:8c:61:7f:e0:e5:63:ca: cd:9b:41:0d:f8:66:6f:ca:08:58:dd:0b:7e:6e:d1: b5:7c:7c:d4:9f:3b:0a:f9:6f:de:01:d1:72:62:ae: f8:d5:07:1c:8c:ec:ff:c0:ca:82:4b:f3:c8:f5:f4: 98:3d:ea:2a:5f:5e:44:f2:3b:74:c7:e1:a5:04:f0: 4f:e5:55:b9:0a:cb:6e:bc:3b:20:dd:6b:b4:6b:6d: d0:f7:a2:8c:c5:02:7d:c2:62:d2:c6:b1:e6:4b:cf: 56:dc:2d:9a:33:3f:45:db:b9:96:cc:c0:f4:26:b9: b7:2d:30:02:56:1a:e8:8c:98:71:59:10:9a:92:3f: d2:71:59:8f:83:9d:1a:fa:09:49:80:19:5e:6b:fb: c4:27:39:d8:98:b7:25:6c:11:f5:e6:e7:92:47:03: a3:0e:da:31:03:94:86:bd:84:c6:1e:fb:2c:01:71: 28:39:73:bd:2f:68:6d:ea:08:45:a9:20:eb:fe:0f: 0d:a8:93:0a:d1:af:02:55:45:81:36:f7:c2:fd:64: 87:f7:09:47:f3:9d:ea:ad:5e:69:0f:2f:0b:75:27: e2:7d:01:31:b3:ba:4b:b9:58:4a:1d:93:14:f3:22: ce:55:96:aa:16:9f:35:6d:03:62:5e:50:00:ff:10: 96:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:B2:11:0D:E0:2B:9B:04:D6:42:F5:03:1A:A0:F6:83:14:73:D4:BF X509v3 Authority Key Identifier: keyid:7B:88:CD:AE:D2:96:B3:30:F3:DD:ED:40:68:D5:53:24:B3:50:3E:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4jNrtKWszDz3e1AaNVTJLNQPhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:e1:ac:ab:30:6b:2c:62:ce:cd:4c:72:81:cc:f3:af:b2:cd: 76:0f:ba:ce:c1:f7:06:c3:a3:b4:b4:9b:6b:25:5c:37:35:ab: b8:53:2c:6a:70:98:73:c0:06:cb:c8:6c:ce:ad:af:9f:6a:66: 5b:30:1f:c6:de:74:19:93:8d:a9:74:e3:22:e6:fe:f0:a1:1f: 7c:19:31:bb:6b:93:2b:5f:84:91:27:fd:51:5a:29:e6:c5:24: d9:d0:c7:b9:fb:d3:6b:25:a5:3f:b1:86:d2:77:8d:b9:68:32: de:2f:05:ee:dc:98:24:ae:d0:1f:43:65:1c:f0:47:11:9d:f3: fa:30:c2:cf:08:37:93:bb:45:20:02:97:ac:3a:d5:65:95:6c: 29:96:8e:09:a0:b8:a8:a0:ef:bb:0c:c7:c7:fd:c1:71:ab:bd: 96:2e:98:eb:c0:97:18:dc:15:1d:ce:c0:39:75:07:36:15:aa: 88:4d:14:5a:61:b6:0d:a4:2e:bb:df:d0:cf:50:bd:6d:0a:6a: 58:91:6f:0c:b2:b4:5e:55:b8:77:8d:0b:9f:44:e9:91:be:34: 51:e9:58:b4:c1:ab:01:f6:1b:eb:e6:a1:e3:83:a4:76:f8:6f: 1b:5c:a7:c7:f2:3d:32:60:95:1a:f4:be:e8:64:f4:ed:85:a9: 28:a5:cc:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIqW2BqBmqCHOJUSWE3ArMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiODhjZGFlZDI5NmIzMzBmM2RkZWQ0MDY4ZDU1MzI0YjM1 MDNlMTEwHhcNMjYwMjA5MTYwMTA5WhcNMjYwMjEwMTYwMTA5WjAzMTEwLwYDVQQD EygyM2IyMTEwZGUwMmI5YjA0ZDY0MmY1MDMxYWEwZjY4MzE0NzNkNGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3l24ZFTU4xhf+DlY8rNm0EN+GZv yghY3Qt+btG1fHzUnzsK+W/eAdFyYq741QccjOz/wMqCS/PI9fSYPeoqX15E8jt0 x+GlBPBP5VW5CstuvDsg3Wu0a23Q96KMxQJ9wmLSxrHmS89W3C2aMz9F27mWzMD0 Jrm3LTACVhrojJhxWRCakj/ScVmPg50a+glJgBlea/vEJznYmLclbBH15ueSRwOj DtoxA5SGvYTGHvssAXEoOXO9L2ht6ghFqSDr/g8NqJMK0a8CVUWBNvfC/WSH9wlH 853qrV5pDy8LdSfifQExs7pLuVhKHZMU8yLOVZaqFp81bQNiXlAA/xCWYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCOyEQ3gK5sE1kL1Axqg9oMUc9S/MB8GA1UdIwQY MBaAFHuIza7SlrMw893tQGjVUySzUD4RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTRqTnJ0S1dzekR6M2UxQWFOVlRKTE5RUGhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy83Yzk5ZGUtMDJiMS00NmVmLWI5YjEt ODlhNWYxMmZhMDE5LzEvZTRqTnJ0S1dzekR6M2UxQWFOVlRKTE5RUGhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy83Yzk5ZGUtMDJiMS00NmVmLWI5YjEtODlhNWYxMmZhMDE5 LzEvZTRqTnJ0S1dzekR6M2UxQWFOVlRKTE5RUGhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANuGsqzBr LGLOzUxygczzr7LNdg+6zsH3BsOjtLSbayVcNzWruFMsanCYc8AGy8hszq2vn2pm WzAfxt50GZONqXTjIub+8KEffBkxu2uTK1+EkSf9UVop5sUk2dDHufvTayWlP7GG 0neNuWgy3i8F7tyYJK7QH0NlHPBHEZ3z+jDCzwg3k7tFIAKXrDrVZZVsKZaOCaC4 qKDvuwzHx/3Bcau9li6Y68CXGNwVHc7AOXUHNhWqiE0UWmG2DaQuu9/Qz1C9bQpq WJFvDLK0XlW4d40Ln0Tpkb40UelYtMGrAfYb6+ah44OkdvhvG1ynx/I9MmCVGvS+ 6GT07YWpKKXM7Q== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:41 2026 by rpki-client