This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft File: ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft (raw, json) Hash identifier: 9C8mUPpiA89n+xEiakDHOmEEypgmH2qGnHDootvZXw0= Subject key identifier: 5F:AB:8E:0A:A2:8A:AF:6F:61:EA:CE:B2:64:02:3A:83:9E:73:95:3E Authority key identifier: 7A:46:CA:31:0F:CE:7E:3D:42:C6:2F:37:71:E2:B8:66:02:98:EF:00 Certificate issuer: /CN=7a46ca310fce7e3d42c62f3771e2b8660298ef00 Certificate serial: 019C4322C207EE4226AF33A436426A70F338 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft Manifest number: 050C Signing time: Mon 09 Feb 2026 16:01:17 +0000 Manifest this update: Mon 09 Feb 2026 16:01:17 +0000 Manifest next update: Tue 10 Feb 2026 16:01:17 +0000 Files and hashes: 1: ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.crl (hash: ssTvE0gtxnW0j+8R5N1QpNzQFvz/SNbEPxHaLMWBi6U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.crl rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft rsync://rpki.ripe.net/repository/DEFAULT/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:c2:07:ee:42:26:af:33:a4:36:42:6a:70:f3:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a46ca310fce7e3d42c62f3771e2b8660298ef00 Validity Not Before: Feb 9 16:01:17 2026 GMT Not After : Feb 10 16:01:17 2026 GMT Subject: CN=5fab8e0aa28aaf6f61eaceb264023a839e73953e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:24:45:dc:1b:2e:71:3f:ca:fd:82:ea:29:38: 66:9d:69:8b:56:02:c8:d4:77:7a:b7:b5:61:97:ef: cb:4e:87:11:c3:bf:6f:b6:d0:f5:50:ef:c5:c1:7d: 9f:ff:fc:e2:cf:a7:58:3e:a5:13:27:a9:0c:db:6c: 30:c9:ea:7c:bf:3c:aa:dc:91:01:7a:9d:81:12:9d: cb:29:5f:18:ae:58:61:50:54:e5:99:57:35:9a:4d: e8:9d:50:8f:ba:61:3a:81:e8:8e:37:59:e9:09:c6: 04:22:50:be:9c:53:ec:85:ea:1a:0e:db:40:7b:9d: c2:e5:e9:8e:47:e1:3c:e0:20:b0:fa:2f:21:81:d7: dd:5c:fb:b6:55:91:60:79:61:3e:12:12:06:4d:4f: 71:62:c0:1a:23:0c:d7:5d:30:63:f2:7f:58:d4:ee: 85:4e:26:75:eb:76:2f:41:7c:c9:57:41:c3:cd:32: 30:11:03:56:2d:5e:5d:07:35:04:93:d7:b3:cd:ce: 1a:7f:c0:f9:c3:02:0e:96:67:96:63:17:97:60:14: c5:d0:18:61:f8:52:79:60:9b:32:7d:ae:a2:25:1d: 8f:59:24:12:6d:6b:e1:54:34:45:62:78:8c:ac:ae: 4c:b2:2d:85:d9:71:ee:62:f4:3f:12:0c:ed:b4:04: 37:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:AB:8E:0A:A2:8A:AF:6F:61:EA:CE:B2:64:02:3A:83:9E:73:95:3E X509v3 Authority Key Identifier: keyid:7A:46:CA:31:0F:CE:7E:3D:42:C6:2F:37:71:E2:B8:66:02:98:EF:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:fb:b3:6d:22:ad:e7:81:a9:15:ca:ca:39:f6:b4:14:b4:c7: 8b:ba:72:73:fc:f3:90:f5:15:fa:2c:e6:db:fd:28:d3:07:d3: f6:53:9f:b7:20:f5:38:18:4d:7c:4b:52:7b:49:d2:d7:d3:19: 02:4d:94:a7:3b:7f:f3:0e:f8:a2:f9:ce:69:b0:36:8d:24:b6: 0f:e4:ff:2c:03:65:8e:bd:96:b7:40:10:08:58:87:ea:59:0e: 59:eb:49:5b:0d:80:44:50:37:e2:87:82:50:3a:26:50:0c:af: 0b:db:98:0e:79:59:cf:6f:9e:b6:46:32:7e:94:51:a5:d5:59: 10:70:05:77:71:4c:05:d7:33:00:5a:f0:06:b4:fa:bf:36:6e: 4e:94:f6:90:cb:7e:66:1d:01:af:9e:9e:9b:64:cd:b1:2c:5f: bc:0d:bc:ae:4c:d4:f4:4e:e0:44:e9:80:2e:82:51:9b:11:f4: fc:a5:6e:57:27:2d:90:b9:33:7a:62:80:39:92:ba:4a:63:a7: 9b:db:22:f7:0b:cc:ab:4c:64:73:1f:3b:d9:45:20:c0:7e:28: bf:22:c8:e2:a4:e8:a7:41:64:d8:73:cf:76:5b:f6:61:ae:0a: 24:c5:3f:d3:bb:8f:fc:72:25:6a:a5:52:d8:37:be:2f:9a:6b: 20:d0:1b:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIsIH7kImrzOkNkJqcPM4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhNDZjYTMxMGZjZTdlM2Q0MmM2MmYzNzcxZTJiODY2MDI5 OGVmMDAwHhcNMjYwMjA5MTYwMTE3WhcNMjYwMjEwMTYwMTE3WjAzMTEwLwYDVQQD Eyg1ZmFiOGUwYWEyOGFhZjZmNjFlYWNlYjI2NDAyM2E4MzllNzM5NTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSRF3BsucT/K/YLqKThmnWmLVgLI 1Hd6t7Vhl+/LTocRw79vttD1UO/FwX2f//ziz6dYPqUTJ6kM22wwyep8vzyq3JEB ep2BEp3LKV8YrlhhUFTlmVc1mk3onVCPumE6geiON1npCcYEIlC+nFPsheoaDttA e53C5emOR+E84CCw+i8hgdfdXPu2VZFgeWE+EhIGTU9xYsAaIwzXXTBj8n9Y1O6F TiZ163YvQXzJV0HDzTIwEQNWLV5dBzUEk9ezzc4af8D5wwIOlmeWYxeXYBTF0Bhh +FJ5YJsyfa6iJR2PWSQSbWvhVDRFYniMrK5Msi2F2XHuYvQ/EgzttAQ3OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF+rjgqiiq9vYerOsmQCOoOec5U+MB8GA1UdIwQY MBaAFHpGyjEPzn49QsYvN3HiuGYCmO8AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWtiS01RX09majFDeGk4M2NlSzRaZ0tZN3dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kNzk2MGQtNzliYi00NDA4LWE4NWQt YWM0NzcxNWQxNWFhLzEvZWtiS01RX09majFDeGk4M2NlSzRaZ0tZN3dBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9kNzk2MGQtNzliYi00NDA4LWE4NWQtYWM0NzcxNWQxNWFh LzEvZWtiS01RX09majFDeGk4M2NlSzRaZ0tZN3dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO/uzbSKt 54GpFcrKOfa0FLTHi7pyc/zzkPUV+izm2/0o0wfT9lOftyD1OBhNfEtSe0nS19MZ Ak2Upzt/8w74ovnOabA2jSS2D+T/LANljr2Wt0AQCFiH6lkOWetJWw2ARFA34oeC UDomUAyvC9uYDnlZz2+etkYyfpRRpdVZEHAFd3FMBdczAFrwBrT6vzZuTpT2kMt+ Zh0Br56em2TNsSxfvA28rkzU9E7gROmALoJRmxH0/KVuVyctkLkzemKAOZK6SmOn m9si9wvMq0xkcx872UUgwH4ovyLI4qTop0Fk2HPPdlv2Ya4KJMU/07uP/HIlaqVS 2De+L5prINAbgw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:38 2026 by rpki-client