This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/053310-03af-4434-8307-dfa707940537/1/E7QhuCq3u6bi9V6QKp-4H6OvKY8.mft File: E7QhuCq3u6bi9V6QKp-4H6OvKY8.mft (raw, json) Hash identifier: 809Z4LshfExjV+1IY2CajxG9MfnaYvmgWhjK+q1kRFU= Subject key identifier: B7:9F:34:9B:C4:8C:71:1B:DD:38:E8:FB:F8:8D:4B:11:D2:8B:BD:15 Authority key identifier: 13:B4:21:B8:2A:B7:BB:A6:E2:F5:5E:90:2A:9F:B8:1F:A3:AF:29:8F Certificate issuer: /CN=13b421b82ab7bba6e2f55e902a9fb81fa3af298f Certificate serial: 019C420FB9885AD3D98E08CDD553471C68DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7QhuCq3u6bi9V6QKp-4H6OvKY8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/053310-03af-4434-8307-dfa707940537/1/E7QhuCq3u6bi9V6QKp-4H6OvKY8.mft Manifest number: 045B Signing time: Mon 09 Feb 2026 11:00:52 +0000 Manifest this update: Mon 09 Feb 2026 11:00:52 +0000 Manifest next update: Tue 10 Feb 2026 11:00:52 +0000 Files and hashes: 1: E7QhuCq3u6bi9V6QKp-4H6OvKY8.crl (hash: za6CunFvj7sL0mtkqS7j/1taRQZLDs/EWB0/XHcxNLE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/053310-03af-4434-8307-dfa707940537/1/E7QhuCq3u6bi9V6QKp-4H6OvKY8.crl rsync://rpki.ripe.net/repository/DEFAULT/35/053310-03af-4434-8307-dfa707940537/1/E7QhuCq3u6bi9V6QKp-4H6OvKY8.mft rsync://rpki.ripe.net/repository/DEFAULT/E7QhuCq3u6bi9V6QKp-4H6OvKY8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:b9:88:5a:d3:d9:8e:08:cd:d5:53:47:1c:68:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13b421b82ab7bba6e2f55e902a9fb81fa3af298f Validity Not Before: Feb 9 11:00:52 2026 GMT Not After : Feb 10 11:00:52 2026 GMT Subject: CN=b79f349bc48c711bdd38e8fbf88d4b11d28bbd15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:eb:c7:2c:00:52:a0:f0:de:f1:0f:38:95:13: 7c:f7:23:8e:1e:15:33:2f:9c:6e:9e:75:dd:37:c0: 6c:71:65:da:09:e6:79:82:5e:c2:9d:60:64:23:71: 1e:b6:90:5c:ab:14:ed:ef:71:b6:af:06:fd:87:aa: 30:54:54:cf:7a:f4:7f:28:69:9a:2c:56:19:40:0d: ea:36:e2:eb:55:53:31:dc:52:cf:b0:2f:47:6a:3d: 8d:b8:08:54:a6:9d:3c:43:fd:6d:18:da:66:ab:92: b7:9f:0f:79:b9:63:81:36:cd:54:66:b7:dc:e8:6b: 47:d9:59:88:86:d3:01:59:b6:f9:9e:57:01:51:2d: 68:86:32:9d:a7:1b:32:1a:8e:49:ea:83:64:35:61: 0e:de:d1:79:56:11:09:1d:d3:c3:09:51:93:3a:9f: b7:68:a1:31:d2:83:c7:fe:10:eb:11:90:69:04:77: eb:be:01:a7:f1:78:eb:58:69:57:a7:1b:d8:63:58: 68:fa:25:eb:8d:77:52:d3:2f:85:24:c4:26:80:36: a2:fe:54:9d:21:c6:3f:e8:01:43:a4:ab:2e:ec:cf: 82:3a:b3:45:6c:fa:d2:da:d9:85:79:0e:e7:b6:67: ad:ae:2c:0c:02:46:59:7d:84:3a:25:ba:31:09:71: 75:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:9F:34:9B:C4:8C:71:1B:DD:38:E8:FB:F8:8D:4B:11:D2:8B:BD:15 X509v3 Authority Key Identifier: keyid:13:B4:21:B8:2A:B7:BB:A6:E2:F5:5E:90:2A:9F:B8:1F:A3:AF:29:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7QhuCq3u6bi9V6QKp-4H6OvKY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/053310-03af-4434-8307-dfa707940537/1/E7QhuCq3u6bi9V6QKp-4H6OvKY8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/053310-03af-4434-8307-dfa707940537/1/E7QhuCq3u6bi9V6QKp-4H6OvKY8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:35:e8:84:ad:88:1a:85:f0:7e:01:f1:0f:35:19:03:86:02: 5c:53:be:5f:cb:78:20:99:88:93:c1:02:f5:0f:22:6b:a6:a4: 13:42:d2:ba:6f:a9:bb:a8:e1:0c:22:e8:3f:0f:2e:e2:53:63: c7:8a:a8:ae:b7:0f:36:8f:51:c6:b6:60:d3:50:7e:37:ea:33: 7e:05:5e:b2:08:35:1e:c0:8d:e6:e4:d5:67:cf:16:be:49:e4: ca:08:7a:45:e2:3f:62:55:6f:5b:06:d3:74:83:cc:cb:41:a4: 5c:7d:4f:20:7e:f1:d4:9e:5a:a8:ed:22:59:52:94:1b:5f:48: cf:b7:a4:bc:c6:4a:91:d9:4b:a7:87:26:cc:76:66:58:f4:85: 8f:bd:e8:24:a0:f2:31:8b:22:72:77:53:b4:05:ea:8e:c8:7a: 66:ad:ce:4d:f0:39:54:2e:19:a3:57:16:59:31:42:e1:cd:c7: 51:46:ea:98:e8:29:0e:48:37:67:4a:d0:f8:45:51:02:5f:b3: 2b:d4:73:15:56:ec:e0:9a:d9:20:05:91:86:49:c8:01:1c:be: d1:5b:6f:59:1c:c3:9c:16:6d:aa:00:e7:1f:01:d6:0b:ff:b0: 19:9c:40:4c:27:51:97:71:3f:fd:11:97:67:ef:97:03:5e:17: 11:f5:2a:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD7mIWtPZjgjN1VNHHGjbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzYjQyMWI4MmFiN2JiYTZlMmY1NWU5MDJhOWZiODFmYTNh ZjI5OGYwHhcNMjYwMjA5MTEwMDUyWhcNMjYwMjEwMTEwMDUyWjAzMTEwLwYDVQQD EyhiNzlmMzQ5YmM0OGM3MTFiZGQzOGU4ZmJmODhkNGIxMWQyOGJiZDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2evHLABSoPDe8Q84lRN89yOOHhUz L5xunnXdN8BscWXaCeZ5gl7CnWBkI3EetpBcqxTt73G2rwb9h6owVFTPevR/KGma LFYZQA3qNuLrVVMx3FLPsC9Haj2NuAhUpp08Q/1tGNpmq5K3nw95uWOBNs1UZrfc 6GtH2VmIhtMBWbb5nlcBUS1ohjKdpxsyGo5J6oNkNWEO3tF5VhEJHdPDCVGTOp+3 aKEx0oPH/hDrEZBpBHfrvgGn8XjrWGlXpxvYY1ho+iXrjXdS0y+FJMQmgDai/lSd IcY/6AFDpKsu7M+COrNFbPrS2tmFeQ7ntmetriwMAkZZfYQ6JboxCXF1hQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLefNJvEjHEb3Tjo+/iNSxHSi70VMB8GA1UdIwQY MBaAFBO0Ibgqt7um4vVekCqfuB+jrymPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTdRaHVDcTN1NmJpOVY2UUtwLTRINk92S1k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8wNTMzMTAtMDNhZi00NDM0LTgzMDct ZGZhNzA3OTQwNTM3LzEvRTdRaHVDcTN1NmJpOVY2UUtwLTRINk92S1k4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8wNTMzMTAtMDNhZi00NDM0LTgzMDctZGZhNzA3OTQwNTM3 LzEvRTdRaHVDcTN1NmJpOVY2UUtwLTRINk92S1k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfTXohK2I GoXwfgHxDzUZA4YCXFO+X8t4IJmIk8EC9Q8ia6akE0LSum+pu6jhDCLoPw8u4lNj x4qorrcPNo9RxrZg01B+N+ozfgVesgg1HsCN5uTVZ88Wvknkygh6ReI/YlVvWwbT dIPMy0GkXH1PIH7x1J5aqO0iWVKUG19Iz7ekvMZKkdlLp4cmzHZmWPSFj73oJKDy MYsicndTtAXqjsh6Zq3OTfA5VC4Zo1cWWTFC4c3HUUbqmOgpDkg3Z0rQ+EVRAl+z K9RzFVbs4JrZIAWRhknIARy+0VtvWRzDnBZtqgDnHwHWC/+wGZxATCdRl3E//RGX Z++XA14XEfUqog== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:24 2026 by rpki-client