This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft File: ERxtryd8JzXN7koMheNshcJdPD0.mft (raw, json) Hash identifier: EF9wQf8zfVhlnVeqaAgHF3xsBke0zvFhKU/lPgstux8= Subject key identifier: 3A:11:8A:95:27:19:D7:53:E7:D8:AB:C1:00:80:9C:FB:B3:51:04:3F Authority key identifier: 11:1C:6D:AF:27:7C:27:35:CD:EE:4A:0C:85:E3:6C:85:C2:5D:3C:3D Certificate issuer: /CN=111c6daf277c2735cdee4a0c85e36c85c25d3c3d Certificate serial: 019C42465F8001AC1B1FA04ED6D6C8ECBB47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft Manifest number: 03C7 Signing time: Mon 09 Feb 2026 12:00:33 +0000 Manifest this update: Mon 09 Feb 2026 12:00:33 +0000 Manifest next update: Tue 10 Feb 2026 12:00:33 +0000 Files and hashes: 1: ERxtryd8JzXN7koMheNshcJdPD0.crl (hash: bNel5L53CAG3plE1SM12uha7uSipyntB8Kmpb2eRKBI=) 2: _4M4oq0S8mIZa0V69_lse01j-Sk.roa (hash: NZU7UkxZ6lsoZXHjmmCZKMcfUdhd7kq2mJZpnareMGQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.crl rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:5f:80:01:ac:1b:1f:a0:4e:d6:d6:c8:ec:bb:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=111c6daf277c2735cdee4a0c85e36c85c25d3c3d Validity Not Before: Feb 9 12:00:33 2026 GMT Not After : Feb 10 12:00:33 2026 GMT Subject: CN=3a118a952719d753e7d8abc100809cfbb351043f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:07:8d:6b:6c:37:19:f1:ce:b2:07:00:57:c8: 6e:89:35:11:e4:f6:41:69:d5:90:20:a0:1c:e6:aa: b8:13:1c:5d:48:73:18:f2:43:42:59:6c:9d:dc:56: a2:29:b2:1d:e5:5a:d2:af:07:5e:ca:25:a9:48:de: 66:ac:d5:80:bb:c2:13:8a:95:c7:64:33:4f:a6:9e: e2:48:ff:c6:52:00:e2:57:2c:49:3b:c5:97:7a:a8: 34:bf:12:bc:ac:3e:34:37:67:c7:d5:9c:30:84:86: 7f:dd:6e:51:91:26:bb:c1:89:85:a4:8c:7a:1c:29: 44:4f:27:a1:de:02:10:f9:e3:67:c9:a9:3f:06:fb: dc:39:7c:df:3f:d6:f3:db:4d:82:fe:fa:bb:b2:02: 8b:24:06:02:48:f0:ad:11:f5:5f:a4:00:a6:ed:3c: 69:b0:92:a2:2c:79:54:ec:dc:01:44:52:81:0c:e8: 3b:76:dc:d5:29:b2:da:e9:76:47:81:f5:0c:d7:2d: 0c:fa:54:e6:bd:f9:d6:ea:61:10:79:d0:e4:9b:7c: 95:ac:02:24:b6:5d:a5:04:24:0b:dc:f4:48:c9:9c: d3:b5:5c:77:be:e6:c6:1f:36:d5:03:fa:8b:05:d6: 61:83:f1:57:a7:1f:61:8d:05:4e:3e:e1:28:2c:8c: 6d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:11:8A:95:27:19:D7:53:E7:D8:AB:C1:00:80:9C:FB:B3:51:04:3F X509v3 Authority Key Identifier: keyid:11:1C:6D:AF:27:7C:27:35:CD:EE:4A:0C:85:E3:6C:85:C2:5D:3C:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:d2:c8:4f:05:bd:f9:a6:2c:46:f8:9a:4c:34:f7:0f:86:cb: 11:97:59:fa:11:2b:a7:f3:12:26:e5:5a:c6:5e:70:49:ce:58: 44:77:09:0d:9e:c7:24:ca:05:c4:a5:4f:75:87:10:3c:4f:94: 84:ae:3b:60:e0:c8:6b:a4:82:f1:51:1a:89:93:ff:1e:af:b1: cb:10:13:47:81:50:3d:b8:0c:49:d6:35:fd:9e:1c:40:5b:d3: 1b:c2:4d:4e:ba:6c:28:22:2f:ed:5c:b8:ee:e7:cc:c8:e4:2c: 7a:14:c9:28:43:41:88:2a:11:da:7c:ce:e6:bc:06:af:42:b3: 4a:14:09:e8:f9:15:5b:39:4b:15:64:8b:ee:39:ab:c6:25:62: 9e:2f:10:08:44:a0:63:69:99:68:b0:07:cc:4e:2f:63:a4:01: 7b:26:ce:49:31:1b:c4:55:22:aa:68:65:0d:4d:fe:cb:64:8f: 82:6a:7a:ee:ec:e4:63:41:79:5f:47:c7:d4:14:97:ad:70:5d: cd:a7:26:1e:3d:e1:dd:20:1c:7a:41:94:c7:65:67:a4:1e:1f: 65:df:93:a6:c1:dc:01:45:f1:e8:af:e9:dc:bc:26:be:66:62: 6e:2f:c4:67:dd:10:ce:ab:15:68:31:06:f0:bf:55:fc:d3:ae: 00:46:af:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRl+AAawbH6BO1tbI7LtHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMWM2ZGFmMjc3YzI3MzVjZGVlNGEwYzg1ZTM2Yzg1YzI1 ZDNjM2QwHhcNMjYwMjA5MTIwMDMzWhcNMjYwMjEwMTIwMDMzWjAzMTEwLwYDVQQD EygzYTExOGE5NTI3MTlkNzUzZTdkOGFiYzEwMDgwOWNmYmIzNTEwNDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQeNa2w3GfHOsgcAV8huiTUR5PZB adWQIKAc5qq4ExxdSHMY8kNCWWyd3FaiKbId5VrSrwdeyiWpSN5mrNWAu8ITipXH ZDNPpp7iSP/GUgDiVyxJO8WXeqg0vxK8rD40N2fH1ZwwhIZ/3W5RkSa7wYmFpIx6 HClETyeh3gIQ+eNnyak/BvvcOXzfP9bz202C/vq7sgKLJAYCSPCtEfVfpACm7Txp sJKiLHlU7NwBRFKBDOg7dtzVKbLa6XZHgfUM1y0M+lTmvfnW6mEQedDkm3yVrAIk tl2lBCQL3PRIyZzTtVx3vubGHzbVA/qLBdZhg/FXpx9hjQVOPuEoLIxtHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDoRipUnGddT59irwQCAnPuzUQQ/MB8GA1UdIwQY MBaAFBEcba8nfCc1ze5KDIXjbIXCXTw9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVJ4dHJ5ZDhKelhON2tvTWhlTnNoY0pkUEQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iYTQ3NjYtN2IzZi00ZTU3LTgzZGUt MzdiZmNiODBmNjE4LzEvRVJ4dHJ5ZDhKelhON2tvTWhlTnNoY0pkUEQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9iYTQ3NjYtN2IzZi00ZTU3LTgzZGUtMzdiZmNiODBmNjE4 LzEvRVJ4dHJ5ZDhKelhON2tvTWhlTnNoY0pkUEQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgdLITwW9 +aYsRviaTDT3D4bLEZdZ+hErp/MSJuVaxl5wSc5YRHcJDZ7HJMoFxKVPdYcQPE+U hK47YODIa6SC8VEaiZP/Hq+xyxATR4FQPbgMSdY1/Z4cQFvTG8JNTrpsKCIv7Vy4 7ufMyOQsehTJKENBiCoR2nzO5rwGr0KzShQJ6PkVWzlLFWSL7jmrxiVini8QCESg Y2mZaLAHzE4vY6QBeybOSTEbxFUiqmhlDU3+y2SPgmp67uzkY0F5X0fH1BSXrXBd zacmHj3h3SAcekGUx2VnpB4fZd+TpsHcAUXx6K/p3LwmvmZibi/EZ90QzqsVaDEG 8L9V/NOuAEavGA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:41 2026 by rpki-client