This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft File: erUEHcNxgO4qD5_dX11lzWxs3wQ.mft (raw, json) Hash identifier: ZXQvic3q8QQPTfVklq6NZYXm7EhBgWViLviMHphhID8= Subject key identifier: F4:A9:08:B8:74:BB:0F:46:4D:22:19:64:AA:B0:95:37:9D:E9:C5:0F Authority key identifier: 7A:B5:04:1D:C3:71:80:EE:2A:0F:9F:DD:5F:5D:65:CD:6C:6C:DF:04 Certificate issuer: /CN=7ab5041dc37180ee2a0f9fdd5f5d65cd6c6cdf04 Certificate serial: 019C446BC1319509A9BE0B73C99101C11A0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/erUEHcNxgO4qD5_dX11lzWxs3wQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft Manifest number: 12BC Signing time: Mon 09 Feb 2026 22:00:38 +0000 Manifest this update: Mon 09 Feb 2026 22:00:38 +0000 Manifest next update: Tue 10 Feb 2026 22:00:38 +0000 Files and hashes: 1: erUEHcNxgO4qD5_dX11lzWxs3wQ.crl (hash: k6NhXmUHOg0BO93LCkd8L/CUz462ZbwUn2DiWPo97Y0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft rsync://rpki.ripe.net/repository/DEFAULT/erUEHcNxgO4qD5_dX11lzWxs3wQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6b:c1:31:95:09:a9:be:0b:73:c9:91:01:c1:1a:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ab5041dc37180ee2a0f9fdd5f5d65cd6c6cdf04 Validity Not Before: Feb 9 22:00:38 2026 GMT Not After : Feb 10 22:00:38 2026 GMT Subject: CN=f4a908b874bb0f464d221964aab095379de9c50f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:11:e8:8f:be:3f:4b:8b:83:07:52:ea:75:e7: ac:da:f6:e8:d2:c9:8e:6a:5d:f2:4d:60:dc:1d:1b: ab:41:51:e1:f5:87:b4:21:84:d5:0b:43:d8:58:63: 40:1d:ca:12:7f:66:17:dc:d8:cd:58:f0:0d:63:07: 5b:28:4e:40:9f:6f:ca:e3:37:2c:4a:2e:25:26:7f: 64:0d:03:23:a5:60:33:8a:32:14:60:fb:38:90:3b: 93:92:af:53:f2:72:39:df:f6:22:bb:e0:9d:41:48: f2:a8:5a:70:fa:71:d9:1a:fd:af:d8:95:89:6a:0c: 82:2b:8c:86:f2:b6:c3:34:48:8f:19:c2:6e:2c:c9: 36:95:75:35:71:f3:4d:39:13:12:4e:e3:3a:17:b3: a3:16:d6:f8:3b:c5:6a:1f:6c:c9:82:e9:96:e4:ad: 2c:3e:d7:0c:82:84:44:5e:eb:c6:08:03:d9:89:bd: f1:2c:12:70:78:aa:92:88:6d:82:5d:12:2b:46:2e: 26:99:06:43:26:ec:35:b4:34:60:a8:87:4f:91:3f: 7f:bf:49:ee:75:8c:df:62:bf:a8:4a:4a:98:d8:f9: c3:8b:8c:20:60:bf:9c:da:79:10:a6:89:f7:10:0a: 43:02:79:c0:b1:3c:29:0a:a5:64:59:10:09:92:3a: 9c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:A9:08:B8:74:BB:0F:46:4D:22:19:64:AA:B0:95:37:9D:E9:C5:0F X509v3 Authority Key Identifier: keyid:7A:B5:04:1D:C3:71:80:EE:2A:0F:9F:DD:5F:5D:65:CD:6C:6C:DF:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/erUEHcNxgO4qD5_dX11lzWxs3wQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:bd:5c:c4:7b:2a:b6:ca:7d:7f:40:73:cf:95:8b:38:92:85: aa:55:88:ac:75:6b:0a:71:8b:9a:fb:21:15:7e:90:18:a8:00: 68:2f:76:b4:f3:51:ba:eb:5a:00:39:2f:19:64:7d:91:45:38: f7:6b:95:de:a0:c7:64:51:54:50:1c:ec:37:f9:fd:81:ae:d7: c3:b4:52:b4:54:bd:30:65:21:22:b6:b5:60:99:d6:b3:82:51: 80:d3:41:c1:6e:68:29:dd:f9:1c:fe:e7:d6:e5:e6:4e:e4:16: e6:e1:4f:ec:c0:5c:01:7d:27:bf:e0:de:6e:9e:be:cf:5e:1e: e3:ef:46:da:37:28:32:00:63:49:60:9e:72:38:9f:8c:a1:f8: 15:d1:00:53:47:6a:80:86:42:17:87:46:1d:58:2a:e4:d1:a3: d8:d7:80:1e:21:11:49:2e:c8:cd:8e:ba:53:0f:f5:f2:e5:c1: c8:bc:a1:fb:30:bc:2a:57:3f:f5:3a:93:e0:ab:c1:f8:b8:b1: 98:df:06:e4:e6:26:9d:72:c0:04:93:b0:ce:44:18:66:2b:4b: 1d:33:f1:33:cf:72:fa:48:a8:83:33:d0:35:bd:a0:8d:84:04: f9:c6:fb:a5:0e:e9:fe:d9:fc:22:35:73:e1:05:00:ff:f8:bd: b3:e2:46:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEa8ExlQmpvgtzyZEBwRoOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhYjUwNDFkYzM3MTgwZWUyYTBmOWZkZDVmNWQ2NWNkNmM2 Y2RmMDQwHhcNMjYwMjA5MjIwMDM4WhcNMjYwMjEwMjIwMDM4WjAzMTEwLwYDVQQD EyhmNGE5MDhiODc0YmIwZjQ2NGQyMjE5NjRhYWIwOTUzNzlkZTljNTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBHoj74/S4uDB1Lqdees2vbo0smO al3yTWDcHRurQVHh9Ye0IYTVC0PYWGNAHcoSf2YX3NjNWPANYwdbKE5An2/K4zcs Si4lJn9kDQMjpWAzijIUYPs4kDuTkq9T8nI53/Yiu+CdQUjyqFpw+nHZGv2v2JWJ agyCK4yG8rbDNEiPGcJuLMk2lXU1cfNNORMSTuM6F7OjFtb4O8VqH2zJgumW5K0s PtcMgoREXuvGCAPZib3xLBJweKqSiG2CXRIrRi4mmQZDJuw1tDRgqIdPkT9/v0nu dYzfYr+oSkqY2PnDi4wgYL+c2nkQpon3EApDAnnAsTwpCqVkWRAJkjqc1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPSpCLh0uw9GTSIZZKqwlTed6cUPMB8GA1UdIwQY MBaAFHq1BB3DcYDuKg+f3V9dZc1sbN8EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXJVRUhjTnhnTzRxRDVfZFgxMWx6V3hzM3dRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy80NzIzMjEtNGVhYi00OTA3LWI4YzQt M2RjZmZiNTQwYmJkLzEvZXJVRUhjTnhnTzRxRDVfZFgxMWx6V3hzM3dRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy80NzIzMjEtNGVhYi00OTA3LWI4YzQtM2RjZmZiNTQwYmJk LzEvZXJVRUhjTnhnTzRxRDVfZFgxMWx6V3hzM3dRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfL1cxHsq tsp9f0Bzz5WLOJKFqlWIrHVrCnGLmvshFX6QGKgAaC92tPNRuutaADkvGWR9kUU4 92uV3qDHZFFUUBzsN/n9ga7Xw7RStFS9MGUhIra1YJnWs4JRgNNBwW5oKd35HP7n 1uXmTuQW5uFP7MBcAX0nv+Debp6+z14e4+9G2jcoMgBjSWCecjifjKH4FdEAU0dq gIZCF4dGHVgq5NGj2NeAHiERSS7IzY66Uw/18uXByLyh+zC8Klc/9TqT4KvB+Lix mN8G5OYmnXLABJOwzkQYZitLHTPxM89y+kiogzPQNb2gjYQE+cb7pQ7p/tn8IjVz 4QUA//i9s+JGRQ== -----END CERTIFICATE-----Generated at Tue Feb 10 03:15:45 2026 by rpki-client