This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.mft File: ejvLQKHIyPn3WNzeHCkHk42GhS8.mft (raw, json) Hash identifier: arLYZck+U+xUIE7VOu0y5quK+Q1KRd8wTlIsgB1NiJs= Subject key identifier: D2:F7:07:4F:CD:24:80:12:84:D1:B0:BD:05:4D:B8:9D:53:5A:14:BF Authority key identifier: 7A:3B:CB:40:A1:C8:C8:F9:F7:58:DC:DE:1C:29:07:93:8D:86:85:2F Certificate issuer: /CN=7a3bcb40a1c8c8f9f758dcde1c2907938d86852f Certificate serial: 019C43FDFBB3807B9E532739F0FEEB4DC32D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejvLQKHIyPn3WNzeHCkHk42GhS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.mft Manifest number: 0A28 Signing time: Mon 09 Feb 2026 20:00:44 +0000 Manifest this update: Mon 09 Feb 2026 20:00:44 +0000 Manifest next update: Tue 10 Feb 2026 20:00:44 +0000 Files and hashes: 1: 5uyvZB91zhJOMBC5875SJA_KD2A.roa (hash: QG9dXb6mMEcHNSfXXxHtSMsMhufNAZUod41sUexDDqE=) 2: ejvLQKHIyPn3WNzeHCkHk42GhS8.crl (hash: NMnZIgSQ1Lo077w9eAI7AnKaUKSbJylapU4m/urwxHk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.crl rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.mft rsync://rpki.ripe.net/repository/DEFAULT/ejvLQKHIyPn3WNzeHCkHk42GhS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:fb:b3:80:7b:9e:53:27:39:f0:fe:eb:4d:c3:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a3bcb40a1c8c8f9f758dcde1c2907938d86852f Validity Not Before: Feb 9 20:00:44 2026 GMT Not After : Feb 10 20:00:44 2026 GMT Subject: CN=d2f7074fcd24801284d1b0bd054db89d535a14bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a9:cb:0c:86:82:0c:05:0a:a2:53:fc:d0:df: 0e:e7:53:20:54:84:1a:fd:56:88:95:59:15:f0:a6: a6:f8:3e:4d:88:8c:b4:81:c8:a9:37:5f:34:f8:dd: e9:cd:5e:b7:be:79:06:87:24:85:81:e9:fe:4e:69: da:dc:ec:72:3c:26:b1:62:20:f9:85:4c:b2:f0:44: df:26:4c:f3:31:6b:42:ee:8e:7d:ce:28:a3:d8:86: eb:b3:0a:6d:22:bd:c5:1b:88:dc:f4:dd:fb:10:25: ae:8f:b3:1c:f2:ca:0c:90:6c:d9:be:45:77:cc:aa: 96:b7:d8:bc:a5:f0:5e:fa:be:2b:69:70:91:20:da: 6a:74:8a:42:2c:83:e9:db:6e:f9:1f:de:61:da:33: a6:6b:fb:41:38:d4:f1:fa:bc:d8:57:78:66:7b:94: e0:f6:d7:fb:e1:b0:ae:6b:cf:e1:9a:0a:13:a2:7a: 87:90:9e:00:d5:de:b5:ed:5f:f2:85:64:a4:61:57: d6:32:fd:cb:71:f3:2f:6f:30:85:ec:2d:08:35:65: a2:ea:36:5a:47:e4:2a:41:75:6b:48:13:d6:53:66: 45:21:9e:36:15:07:8f:34:51:ca:e4:03:19:eb:a2: 9d:c6:d5:88:31:55:e1:6a:88:a0:88:e9:4d:59:7c: 24:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F7:07:4F:CD:24:80:12:84:D1:B0:BD:05:4D:B8:9D:53:5A:14:BF X509v3 Authority Key Identifier: keyid:7A:3B:CB:40:A1:C8:C8:F9:F7:58:DC:DE:1C:29:07:93:8D:86:85:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejvLQKHIyPn3WNzeHCkHk42GhS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:98:0f:57:93:7e:1f:89:52:37:ff:0b:00:10:e4:b0:2a:9c: 25:de:b7:2c:75:f6:0e:67:89:36:5f:22:78:80:84:e4:ff:c2: 59:ca:f5:31:1a:5c:8f:81:76:e4:03:e6:ad:9b:a9:85:52:e4: 6e:db:b5:21:38:e8:c3:d3:7d:2d:6b:7f:3d:02:e8:52:50:c4: 90:82:f9:9d:d1:2e:53:c2:4a:92:e5:16:5d:ac:14:0c:e0:48: 0b:56:fa:0c:e4:30:e1:5a:16:9b:ed:91:e7:86:21:bc:7c:ab: 6a:a1:b5:04:5b:1b:74:b0:40:5c:c8:6f:9b:7f:1b:60:ba:fb: 2a:10:f2:63:98:9f:24:34:83:d4:98:7f:77:95:54:6e:48:a3: f4:f7:4b:0c:f1:2b:f1:dc:0c:ec:7d:1e:6d:64:02:b5:e5:01: 7d:3c:c6:10:22:6e:cb:73:b8:7d:35:55:9b:cf:ed:c5:c3:b5: f9:b5:33:db:cd:ac:f9:92:8c:20:87:2b:18:b3:83:0e:d6:57: ea:1b:bc:c7:0c:fd:0e:c1:76:59:72:35:b8:9c:a5:58:e3:88: ca:f3:9f:bc:81:3e:04:6d:88:26:d8:81:96:25:e7:08:2d:32: a5:95:d0:65:49:c6:f6:8b:3c:bc:5c:0c:85:fa:d4:fa:e0:7c: 90:5d:40:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/fuzgHueUyc58P7rTcMtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhM2JjYjQwYTFjOGM4ZjlmNzU4ZGNkZTFjMjkwNzkzOGQ4 Njg1MmYwHhcNMjYwMjA5MjAwMDQ0WhcNMjYwMjEwMjAwMDQ0WjAzMTEwLwYDVQQD EyhkMmY3MDc0ZmNkMjQ4MDEyODRkMWIwYmQwNTRkYjg5ZDUzNWExNGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qnLDIaCDAUKolP80N8O51MgVIQa /VaIlVkV8Kam+D5NiIy0gcipN180+N3pzV63vnkGhySFgen+Tmna3OxyPCaxYiD5 hUyy8ETfJkzzMWtC7o59ziij2IbrswptIr3FG4jc9N37ECWuj7Mc8soMkGzZvkV3 zKqWt9i8pfBe+r4raXCRINpqdIpCLIPp2275H95h2jOma/tBONTx+rzYV3hme5Tg 9tf74bCua8/hmgoTonqHkJ4A1d617V/yhWSkYVfWMv3LcfMvbzCF7C0INWWi6jZa R+QqQXVrSBPWU2ZFIZ42FQePNFHK5AMZ66KdxtWIMVXhaoigiOlNWXwkRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNL3B0/NJIAShNGwvQVNuJ1TWhS/MB8GA1UdIwQY MBaAFHo7y0ChyMj591jc3hwpB5ONhoUvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWp2TFFLSEl5UG4zV056ZUhDa0hrNDJHaFM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9iYjNjNmItY2Q5Mi00MjJmLTk1MTgt MDE2NTI1NzZmNWEyLzEvZWp2TFFLSEl5UG4zV056ZUhDa0hrNDJHaFM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9iYjNjNmItY2Q5Mi00MjJmLTk1MTgtMDE2NTI1NzZmNWEy LzEvZWp2TFFLSEl5UG4zV056ZUhDa0hrNDJHaFM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUpgPV5N+ H4lSN/8LABDksCqcJd63LHX2DmeJNl8ieICE5P/CWcr1MRpcj4F25APmrZuphVLk btu1ITjow9N9LWt/PQLoUlDEkIL5ndEuU8JKkuUWXawUDOBIC1b6DOQw4VoWm+2R 54YhvHyraqG1BFsbdLBAXMhvm38bYLr7KhDyY5ifJDSD1Jh/d5VUbkij9PdLDPEr 8dwM7H0ebWQCteUBfTzGECJuy3O4fTVVm8/txcO1+bUz282s+ZKMIIcrGLODDtZX 6hu8xwz9DsF2WXI1uJylWOOIyvOfvIE+BG2IJtiBliXnCC0ypZXQZUnG9os8vFwM hfrU+uB8kF1AzQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:13 2026 by rpki-client