This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.mft File: _ejRxqr0qT_0G7-hvR2sYZfVlXU.mft (raw, json) Hash identifier: BUJLCNbaW5p7a2/E7/aFI6rKyVLVBFAIgpvdf7odnEw= Subject key identifier: F1:A7:FF:6F:40:92:59:3B:95:1E:E1:02:58:C3:17:B4:75:D2:27:50 Authority key identifier: FD:E8:D1:C6:AA:F4:A9:3F:F4:1B:BF:A1:BD:1D:AC:61:97:D5:95:75 Certificate issuer: /CN=fde8d1c6aaf4a93ff41bbfa1bd1dac6197d59575 Certificate serial: 019C427DCFAFBF139A917E10D3801288F9EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ejRxqr0qT_0G7-hvR2sYZfVlXU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.mft Manifest number: 1813 Signing time: Mon 09 Feb 2026 13:01:07 +0000 Manifest this update: Mon 09 Feb 2026 13:01:07 +0000 Manifest next update: Tue 10 Feb 2026 13:01:07 +0000 Files and hashes: 1: I5caSNoaibT5a3lfttKZWdRp0l8.roa (hash: sSCXetknx1GQMkwjOpWfK+QxR9ZMLOdkrRFR3Fi1Ufk=) 2: _ejRxqr0qT_0G7-hvR2sYZfVlXU.crl (hash: sdS6VKnFzcKe+QrptVLl1uQaR4BNDgg4IZntwiilfC0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.crl rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.mft rsync://rpki.ripe.net/repository/DEFAULT/_ejRxqr0qT_0G7-hvR2sYZfVlXU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:cf:af:bf:13:9a:91:7e:10:d3:80:12:88:f9:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde8d1c6aaf4a93ff41bbfa1bd1dac6197d59575 Validity Not Before: Feb 9 13:01:07 2026 GMT Not After : Feb 10 13:01:07 2026 GMT Subject: CN=f1a7ff6f4092593b951ee10258c317b475d22750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:12:3f:b7:87:20:26:81:b2:d7:bc:87:10:29: 75:54:93:4d:38:27:33:3b:73:b0:6f:a4:71:5b:d9: 09:50:ca:e6:9c:96:ad:ef:49:92:2a:f3:ab:6c:69: c6:e7:b0:b0:f1:11:7b:2d:02:a9:d5:36:3a:21:13: 6a:36:fa:30:93:ff:f2:de:55:3c:45:38:6d:68:82: f9:34:be:8c:e6:c4:74:3d:89:f7:72:c0:96:3c:de: c1:9e:57:c2:cb:09:97:b2:8f:a0:b3:75:22:09:b6: d2:e3:8e:db:31:76:e3:9c:e5:4a:ac:1b:83:ae:f7: 77:45:f2:02:77:01:14:cb:bf:49:29:c9:58:4b:17: 22:bf:ec:8b:b6:9d:85:cf:a3:31:dd:d5:97:29:b1: b7:20:31:f3:4e:a2:69:33:e8:bb:92:ea:77:46:3e: d4:30:3b:06:1e:67:9b:01:22:dc:a9:bd:00:c0:3e: 63:ea:e8:70:66:b3:87:10:60:2a:cd:6e:3a:b5:c8: 82:c8:10:c4:a7:93:55:35:62:7f:c9:3f:93:db:4e: fc:57:44:c9:86:b6:ad:22:de:a0:84:c5:83:bf:43: 42:7e:08:1a:5e:62:5e:20:d1:ba:78:66:ea:78:dd: 62:e1:06:61:d8:65:14:6a:c8:65:13:8a:c1:70:95: 84:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:A7:FF:6F:40:92:59:3B:95:1E:E1:02:58:C3:17:B4:75:D2:27:50 X509v3 Authority Key Identifier: keyid:FD:E8:D1:C6:AA:F4:A9:3F:F4:1B:BF:A1:BD:1D:AC:61:97:D5:95:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ejRxqr0qT_0G7-hvR2sYZfVlXU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:65:48:a9:7b:06:6c:0e:58:b0:64:de:35:ce:d4:3d:1b:e4: b5:30:55:32:1e:b1:98:41:2c:fe:c9:6e:6c:f6:d3:cf:ea:c8: 33:4c:33:76:b9:2d:ad:52:15:af:03:0b:c8:ea:01:28:d8:ab: 04:c9:68:c1:fd:7d:68:97:2c:e0:07:c2:a6:c2:03:67:80:c2: 06:ad:16:ad:e7:6d:43:0e:40:32:93:8d:45:6d:3d:a2:44:45: 27:3c:42:22:b5:c9:85:96:44:a9:ac:d6:4e:e1:41:67:ba:71: e9:5d:24:c2:2d:22:10:bf:40:14:c3:f0:d7:29:24:df:cc:b2: 81:84:74:04:83:c4:63:00:3e:4e:1b:11:84:c1:5b:21:ff:ec: ab:14:d8:e8:4d:1b:83:69:47:3c:2c:8e:dc:0c:e5:d0:da:ec: ed:92:52:35:ab:71:0a:c2:7a:0a:78:ea:fd:2b:0f:89:f2:b1: 4c:4b:77:bc:95:a0:fb:1b:80:65:d4:3b:04:ca:08:4c:52:57: 87:59:24:ba:a1:16:4a:ff:77:c6:b5:2c:df:37:f1:f1:8d:d7: a5:70:d1:9f:8b:d2:f8:cb:75:b8:0e:06:a4:d2:db:b9:39:2c: 3b:d5:85:7c:e5:8e:06:6e:93:2b:19:af:66:4e:48:75:a5:07: b0:6a:c5:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfc+vvxOakX4Q04ASiPnuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZThkMWM2YWFmNGE5M2ZmNDFiYmZhMWJkMWRhYzYxOTdk NTk1NzUwHhcNMjYwMjA5MTMwMTA3WhcNMjYwMjEwMTMwMTA3WjAzMTEwLwYDVQQD EyhmMWE3ZmY2ZjQwOTI1OTNiOTUxZWUxMDI1OGMzMTdiNDc1ZDIyNzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RI/t4cgJoGy17yHECl1VJNNOCcz O3Owb6RxW9kJUMrmnJat70mSKvOrbGnG57Cw8RF7LQKp1TY6IRNqNvowk//y3lU8 RThtaIL5NL6M5sR0PYn3csCWPN7BnlfCywmXso+gs3UiCbbS447bMXbjnOVKrBuD rvd3RfICdwEUy79JKclYSxciv+yLtp2Fz6Mx3dWXKbG3IDHzTqJpM+i7kup3Rj7U MDsGHmebASLcqb0AwD5j6uhwZrOHEGAqzW46tciCyBDEp5NVNWJ/yT+T2078V0TJ hratIt6ghMWDv0NCfggaXmJeING6eGbqeN1i4QZh2GUUashlE4rBcJWEgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPGn/29Aklk7lR7hAljDF7R10idQMB8GA1UdIwQY MBaAFP3o0caq9Kk/9Bu/ob0drGGX1ZV1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2VqUnhxcjBxVF8wRzctaHZSMnNZWmZWbFhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC80OTY4ODUtNzA5Zi00YmJiLTkzNzUt OTU0ZDE5NTQ5YjYxLzEvX2VqUnhxcjBxVF8wRzctaHZSMnNZWmZWbFhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC80OTY4ODUtNzA5Zi00YmJiLTkzNzUtOTU0ZDE5NTQ5YjYx LzEvX2VqUnhxcjBxVF8wRzctaHZSMnNZWmZWbFhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQWVIqXsG bA5YsGTeNc7UPRvktTBVMh6xmEEs/slubPbTz+rIM0wzdrktrVIVrwMLyOoBKNir BMlowf19aJcs4AfCpsIDZ4DCBq0WredtQw5AMpONRW09okRFJzxCIrXJhZZEqazW TuFBZ7px6V0kwi0iEL9AFMPw1ykk38yygYR0BIPEYwA+ThsRhMFbIf/sqxTY6E0b g2lHPCyO3Azl0Nrs7ZJSNatxCsJ6Cnjq/SsPifKxTEt3vJWg+xuAZdQ7BMoITFJX h1kkuqEWSv93xrUs3zfx8Y3XpXDRn4vS+Mt1uA4GpNLbuTksO9WFfOWOBm6TKxmv Zk5IdaUHsGrFfQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:06:38 2026 by rpki-client