This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft File: legTEe8dNuzG0SXjbILCb5FbDfc.mft (raw, json) Hash identifier: s6WeYaPUyk2vMKDkGBA0vtQoOXC4GfHnWFGm50kg+1M= Subject key identifier: 8C:5E:BB:CC:C6:CD:C7:42:25:E7:3A:E3:1D:F1:DC:E6:D0:AC:82:55 Authority key identifier: 95:E8:13:11:EF:1D:36:EC:C6:D1:25:E3:6C:82:C2:6F:91:5B:0D:F7 Certificate issuer: /CN=95e81311ef1d36ecc6d125e36c82c26f915b0df7 Certificate serial: 019C427DFCE2F9C1E99BEBCB118B8186C5AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft Manifest number: 1372 Signing time: Mon 09 Feb 2026 13:01:18 +0000 Manifest this update: Mon 09 Feb 2026 13:01:18 +0000 Manifest next update: Tue 10 Feb 2026 13:01:18 +0000 Files and hashes: 1: _C6lyxoQMU5yOrfGf8iAi-Sl_ow.roa (hash: p2xyfl4wigqQ6in3fdRR4OWjfDysBXxdWoA57WsF6ho=) 2: legTEe8dNuzG0SXjbILCb5FbDfc.crl (hash: q+MAqvXv342Bie3pivYcsLM4Z7BRpjLz5qsE5IrkwtE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.crl rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:fc:e2:f9:c1:e9:9b:eb:cb:11:8b:81:86:c5:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95e81311ef1d36ecc6d125e36c82c26f915b0df7 Validity Not Before: Feb 9 13:01:18 2026 GMT Not After : Feb 10 13:01:18 2026 GMT Subject: CN=8c5ebbccc6cdc74225e73ae31df1dce6d0ac8255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3d:d0:8e:1e:4e:e4:55:4e:ed:a9:e2:f8:fa: 72:89:a6:05:33:d7:82:f4:fe:a8:df:2d:3f:d4:62: e7:0b:39:0a:b8:bf:2b:f4:82:6d:24:25:6d:3e:7a: d3:f2:5c:cd:f7:59:23:8b:30:40:46:88:19:ca:40: 89:7d:41:df:0b:41:6f:11:6b:41:22:2e:53:1b:01: 49:e3:c3:ba:58:2f:90:ce:d8:a7:48:5a:04:13:05: 2a:03:dd:51:b7:7f:d7:bb:55:d3:ee:6e:a0:93:a4: ba:f7:7c:eb:be:ae:1b:7f:df:4a:57:33:65:4a:ca: 15:4b:b3:16:5c:8a:f1:5c:c3:45:52:fb:66:a0:59: 82:c2:d3:bf:6a:21:64:d3:a4:7f:2c:ea:6e:0f:13: 0b:63:42:50:4b:75:86:c5:52:83:e9:65:5e:22:57: b9:3c:40:e1:55:c1:56:48:02:eb:19:65:c1:25:aa: 08:72:20:93:f6:e3:04:5c:63:05:3a:ed:54:da:e5: 6e:07:5f:30:1b:e4:fc:04:44:0e:a2:4e:55:26:df: e4:9c:91:8f:9d:3b:df:f5:77:da:48:16:7e:69:11: bf:fe:48:6e:ec:7b:ac:4d:89:7f:b4:5c:b3:c2:7a: 21:29:1d:3b:ce:c8:f7:07:ae:d3:5c:74:ba:97:39: 9c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:5E:BB:CC:C6:CD:C7:42:25:E7:3A:E3:1D:F1:DC:E6:D0:AC:82:55 X509v3 Authority Key Identifier: keyid:95:E8:13:11:EF:1D:36:EC:C6:D1:25:E3:6C:82:C2:6F:91:5B:0D:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:27:31:bc:b1:46:f5:35:f0:4d:5c:86:91:86:8a:fd:d1:2a: 93:bc:7e:5a:e8:66:db:d3:97:26:97:c6:6f:be:0b:e4:b9:58: 19:d2:d9:3a:15:cb:39:21:c4:6b:be:47:0b:8f:d9:a9:84:3b: 21:98:47:c5:4d:a7:73:3e:46:41:f2:e1:c9:78:bf:6d:4a:60: 64:68:fb:b2:2b:69:c7:cf:ba:70:db:9b:cb:96:6f:8f:db:71: 11:01:19:05:e6:3e:84:4b:c0:35:70:f6:68:0d:0d:8b:fa:5e: 6b:e7:d6:fe:a8:80:a7:b8:b0:13:eb:10:d5:dd:7f:a2:d5:3a: d3:e3:f1:c2:9f:77:b5:e3:7f:42:e8:a0:07:87:a7:99:b6:c7: ab:7c:f9:2b:58:6f:32:b8:a6:1b:1b:ad:09:bc:a9:99:25:86: 9a:29:c9:da:e1:c8:a0:13:c1:f9:da:f7:4e:8f:b9:33:61:7d: 5d:04:ce:47:3a:59:74:dc:f3:e2:26:44:f5:a3:aa:de:61:42: 64:bd:4b:01:37:ec:27:68:ea:d0:5a:8d:d6:8f:42:46:81:82: 56:9d:f9:5a:d4:84:34:44:4b:c3:a0:fe:07:dc:81:72:d5:75: 8e:84:5a:b7:f7:50:31:24:55:c0:d6:42:7a:be:ee:49:93:21: 64:74:d3:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCffzi+cHpm+vLEYuBhsWtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1ZTgxMzExZWYxZDM2ZWNjNmQxMjVlMzZjODJjMjZmOTE1 YjBkZjcwHhcNMjYwMjA5MTMwMTE4WhcNMjYwMjEwMTMwMTE4WjAzMTEwLwYDVQQD Eyg4YzVlYmJjY2M2Y2RjNzQyMjVlNzNhZTMxZGYxZGNlNmQwYWM4MjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApT3Qjh5O5FVO7ani+PpyiaYFM9eC 9P6o3y0/1GLnCzkKuL8r9IJtJCVtPnrT8lzN91kjizBARogZykCJfUHfC0FvEWtB Ii5TGwFJ48O6WC+QztinSFoEEwUqA91Rt3/Xu1XT7m6gk6S693zrvq4bf99KVzNl SsoVS7MWXIrxXMNFUvtmoFmCwtO/aiFk06R/LOpuDxMLY0JQS3WGxVKD6WVeIle5 PEDhVcFWSALrGWXBJaoIciCT9uMEXGMFOu1U2uVuB18wG+T8BEQOok5VJt/knJGP nTvf9XfaSBZ+aRG//khu7HusTYl/tFyzwnohKR07zsj3B67TXHS6lzmchwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIxeu8zGzcdCJec64x3x3ObQrIJVMB8GA1UdIwQY MBaAFJXoExHvHTbsxtEl42yCwm+RWw33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGVnVEVlOGROdXpHMFNYamJJTENiNUZiRGZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC81YzA2YmMtOGNhMS00MDkxLTk0MTgt NzM0ZmFiNmZlYzZmLzEvbGVnVEVlOGROdXpHMFNYamJJTENiNUZiRGZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC81YzA2YmMtOGNhMS00MDkxLTk0MTgtNzM0ZmFiNmZlYzZm LzEvbGVnVEVlOGROdXpHMFNYamJJTENiNUZiRGZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdicxvLFG 9TXwTVyGkYaK/dEqk7x+Wuhm29OXJpfGb74L5LlYGdLZOhXLOSHEa75HC4/ZqYQ7 IZhHxU2ncz5GQfLhyXi/bUpgZGj7sitpx8+6cNuby5Zvj9txEQEZBeY+hEvANXD2 aA0Ni/pea+fW/qiAp7iwE+sQ1d1/otU60+Pxwp93teN/QuigB4enmbbHq3z5K1hv MrimGxutCbypmSWGminJ2uHIoBPB+dr3To+5M2F9XQTORzpZdNzz4iZE9aOq3mFC ZL1LATfsJ2jq0FqN1o9CRoGCVp35WtSENERLw6D+B9yBctV1joRat/dQMSRVwNZC er7uSZMhZHTTaQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:05 2026 by rpki-client