This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft File: eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft (raw, json) Hash identifier: nGTRY7rKhUZYRprtAF1Zglxu50MSqoslCP/rqB4ZhPM= Subject key identifier: 89:83:4E:EF:3F:E1:A7:01:0F:BA:A2:A2:CB:C0:31:7F:FF:75:70:13 Authority key identifier: 7A:CC:F1:37:24:5A:EC:66:B2:F6:74:A8:58:1A:74:49:AE:2C:FC:E4 Certificate issuer: /CN=7accf137245aec66b2f674a8581a7449ae2cfce4 Certificate serial: 019C439060A68D444129012EC42EF3FE1DEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 18:01:01 +0000 Manifest this update: Mon 09 Feb 2026 18:01:01 +0000 Manifest next update: Tue 10 Feb 2026 18:01:01 +0000 Files and hashes: 1: 1-gB5rLPnht4_2fTXD19vo6rGOgY.roa (hash: MrHKvfkkxIsYa65L6lLIguftbi69CSEX2nGOpQCCn6M=) 2: eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl (hash: qI4UWoGqC9GnH5pUZtF3j0jD8cNjeZIkP07P9JQG1NI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:60:a6:8d:44:41:29:01:2e:c4:2e:f3:fe:1d:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7accf137245aec66b2f674a8581a7449ae2cfce4 Validity Not Before: Feb 9 18:01:01 2026 GMT Not After : Feb 10 18:01:01 2026 GMT Subject: CN=89834eef3fe1a7010fbaa2a2cbc0317fff757013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ad:1d:8d:81:61:38:23:14:ca:5f:8e:c1:71: 0f:ef:9c:ce:a2:6e:35:07:67:e0:34:7f:e3:9a:ce: 58:5f:00:22:44:a8:3e:34:19:a9:f6:eb:02:b8:da: df:88:58:ab:77:c9:7e:10:02:5e:23:b9:61:46:79: 39:70:5c:ac:b5:40:45:6d:9e:71:dc:1f:e6:2c:fd: da:cc:d7:c5:d1:28:81:22:8e:91:05:1b:02:fe:b7: b2:7f:0d:64:fe:7a:cf:a4:79:3a:ee:a4:bd:29:a5: f8:65:82:11:27:e8:0f:c3:4f:ba:c8:de:cf:a5:d7: e1:ca:80:08:85:69:87:77:f7:d7:dc:5f:34:b5:d1: 18:6b:a8:c4:92:99:ed:9f:98:6a:35:56:58:e5:5f: 46:ca:a2:62:c6:70:37:60:b2:88:f9:dd:78:ea:21: bf:2c:a0:75:f9:1e:75:83:38:55:c4:39:f1:56:1a: e8:4e:ec:67:85:ee:ee:22:0c:56:ae:32:31:26:4f: 5e:c9:5b:a1:40:d0:78:33:c4:3d:4f:8a:3b:ac:fa: 0f:30:c9:d2:68:be:19:5d:1b:d2:c4:0a:cc:66:b9: 04:5c:01:87:60:d5:9d:c3:fc:3b:d9:35:1f:1d:82: b3:9a:2e:28:e8:5e:62:29:a2:bc:14:30:41:01:2c: 8a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:83:4E:EF:3F:E1:A7:01:0F:BA:A2:A2:CB:C0:31:7F:FF:75:70:13 X509v3 Authority Key Identifier: keyid:7A:CC:F1:37:24:5A:EC:66:B2:F6:74:A8:58:1A:74:49:AE:2C:FC:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:db:a9:55:e1:3a:6e:e2:3a:c8:d2:c6:54:6c:7f:f7:30:8f: 24:ec:aa:ed:54:85:a4:56:b4:5f:f0:5a:42:a9:d3:c9:cc:30: 93:e1:52:d5:98:1d:35:62:14:6e:7c:37:74:a1:10:70:ea:a9: ee:76:8c:f2:4f:0c:b9:5f:b3:e7:53:57:65:1d:cf:8e:c6:e0: 7d:b9:33:df:16:db:50:9b:e2:3a:56:f6:05:f2:57:9d:27:55: 16:e2:de:89:91:7a:6a:14:9c:0b:e8:81:88:cb:a6:62:38:7c: 6e:47:fd:f4:d7:4b:7c:d8:09:f4:c0:04:46:c2:60:0b:7b:c0: 7f:6f:2e:c7:23:fd:87:c0:b3:a1:62:4b:1a:29:a4:f1:89:17: ec:00:ac:5a:68:09:60:c8:83:27:ee:1d:64:47:99:a7:3b:35: 80:b9:2c:07:4c:11:71:33:6c:01:5c:b8:1c:79:b9:6f:14:5a: 4c:02:a1:9a:c0:22:ce:33:45:87:e0:37:bd:90:a0:c0:c4:49: 39:38:81:a4:98:2b:bf:fe:71:e4:1c:72:54:c4:6d:f3:25:3f: c0:e1:0b:6a:18:92:bf:22:d5:d4:a8:7c:8c:4f:51:c3:01:95: cd:85:e2:f9:7a:b8:d0:f8:c5:db:bf:f8:d5:dd:3d:2c:f1:ea: 52:51:0a:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkGCmjURBKQEuxC7z/h3qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhY2NmMTM3MjQ1YWVjNjZiMmY2NzRhODU4MWE3NDQ5YWUy Y2ZjZTQwHhcNMjYwMjA5MTgwMTAxWhcNMjYwMjEwMTgwMTAxWjAzMTEwLwYDVQQD Eyg4OTgzNGVlZjNmZTFhNzAxMGZiYWEyYTJjYmMwMzE3ZmZmNzU3MDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn60djYFhOCMUyl+OwXEP75zOom41 B2fgNH/jms5YXwAiRKg+NBmp9usCuNrfiFird8l+EAJeI7lhRnk5cFystUBFbZ5x 3B/mLP3azNfF0SiBIo6RBRsC/reyfw1k/nrPpHk67qS9KaX4ZYIRJ+gPw0+6yN7P pdfhyoAIhWmHd/fX3F80tdEYa6jEkpntn5hqNVZY5V9GyqJixnA3YLKI+d146iG/ LKB1+R51gzhVxDnxVhroTuxnhe7uIgxWrjIxJk9eyVuhQNB4M8Q9T4o7rPoPMMnS aL4ZXRvSxArMZrkEXAGHYNWdw/w72TUfHYKzmi4o6F5iKaK8FDBBASyKVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFImDTu8/4acBD7qiosvAMX//dXATMB8GA1UdIwQY MBaAFHrM8TckWuxmsvZ0qFgadEmuLPzkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXN6eE55UmE3R2F5OW5Tb1dCcDBTYTRzX09RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8zOGYyNGItYjY4ZS00MTQzLWJiNTIt N2ZjM2ZlMDVmMzEwLzEvZXN6eE55UmE3R2F5OW5Tb1dCcDBTYTRzX09RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8zOGYyNGItYjY4ZS00MTQzLWJiNTItN2ZjM2ZlMDVmMzEw LzEvZXN6eE55UmE3R2F5OW5Tb1dCcDBTYTRzX09RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbtupVeE6 buI6yNLGVGx/9zCPJOyq7VSFpFa0X/BaQqnTycwwk+FS1ZgdNWIUbnw3dKEQcOqp 7naM8k8MuV+z51NXZR3Pjsbgfbkz3xbbUJviOlb2BfJXnSdVFuLeiZF6ahScC+iB iMumYjh8bkf99NdLfNgJ9MAERsJgC3vAf28uxyP9h8CzoWJLGimk8YkX7ACsWmgJ YMiDJ+4dZEeZpzs1gLksB0wRcTNsAVy4HHm5bxRaTAKhmsAizjNFh+A3vZCgwMRJ OTiBpJgrv/5x5BxyVMRt8yU/wOELahiSvyLV1Kh8jE9RwwGVzYXi+Xq40PjF27/4 1d09LPHqUlEKbw== -----END CERTIFICATE-----Generated at Tue Feb 10 01:34:53 2026 by rpki-client