This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft File: cEq5aIQnBz_34XneWvAC4J8jYBM.mft (raw, json) Hash identifier: q5gY1/vU37+uEmddH+mw8m8ECdimNkz6BQVsyVQ8Ifk= Subject key identifier: B5:71:3B:D6:86:F3:7F:59:76:7E:F7:99:22:11:D4:1F:C9:0F:93:BD Authority key identifier: 70:4A:B9:68:84:27:07:3F:F7:E1:79:DE:5A:F0:02:E0:9F:23:60:13 Certificate issuer: /CN=704ab9688427073ff7e179de5af002e09f236013 Certificate serial: 019C446C431169A3A58169D2BA28EE38BD37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cEq5aIQnBz_34XneWvAC4J8jYBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft Manifest number: 1817 Signing time: Mon 09 Feb 2026 22:01:11 +0000 Manifest this update: Mon 09 Feb 2026 22:01:11 +0000 Manifest next update: Tue 10 Feb 2026 22:01:11 +0000 Files and hashes: 1: 1-Ri_hsGkr3yDmEKmoOv0YIZXLG4.roa (hash: 56KjRsURL02cJfN9ZbBPqkJyvGYvGYVoP3tBohTeEsI=) 2: cEq5aIQnBz_34XneWvAC4J8jYBM.crl (hash: F9HDvo4IBJZbslNDsw3TKERWuBpxWDYfNQIBLrPsRTU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.crl rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft rsync://rpki.ripe.net/repository/DEFAULT/cEq5aIQnBz_34XneWvAC4J8jYBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6c:43:11:69:a3:a5:81:69:d2:ba:28:ee:38:bd:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=704ab9688427073ff7e179de5af002e09f236013 Validity Not Before: Feb 9 22:01:11 2026 GMT Not After : Feb 10 22:01:11 2026 GMT Subject: CN=b5713bd686f37f59767ef7992211d41fc90f93bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a9:07:f0:0f:71:04:ed:38:f9:0b:5c:ea:a1: ca:ed:3c:2f:c2:66:2b:0d:32:b9:1f:34:19:29:35: 7b:f4:aa:09:8d:d6:40:ae:df:00:79:d9:af:8d:0e: 16:65:a3:85:6f:0f:9e:2f:ed:b1:91:76:88:11:71: 00:3f:d3:7b:22:5d:19:2c:18:d1:b4:50:cd:3a:67: d0:a3:83:c5:5f:35:12:3a:15:1f:04:7d:1d:92:87: 26:5d:0a:f5:b6:80:d5:d6:ef:66:30:ec:91:3f:94: 96:3e:23:9b:77:62:7e:bd:55:25:85:08:c8:78:e3: d7:19:90:a4:95:df:80:7f:f0:74:2e:c5:80:6f:4b: e0:f6:dc:87:12:e0:36:9d:2a:93:95:45:ce:03:60: ae:67:78:f1:b6:09:be:64:15:c7:53:33:f4:85:87: 79:02:be:5b:0a:f9:aa:f1:77:41:a0:f3:62:39:e7: f3:11:3d:bc:f3:a2:68:fa:c1:fd:f3:d7:b0:69:eb: bb:a1:79:1b:1b:6d:35:67:4d:19:54:a0:9c:92:df: 76:2e:9a:99:49:22:d9:99:0b:2f:23:b8:8b:84:6a: b8:75:58:df:ae:28:27:f4:78:7f:a5:71:d8:40:42: 3b:86:c9:fd:26:84:74:c6:62:af:32:54:d2:55:71: 6d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:71:3B:D6:86:F3:7F:59:76:7E:F7:99:22:11:D4:1F:C9:0F:93:BD X509v3 Authority Key Identifier: keyid:70:4A:B9:68:84:27:07:3F:F7:E1:79:DE:5A:F0:02:E0:9F:23:60:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cEq5aIQnBz_34XneWvAC4J8jYBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:8b:97:66:ab:18:63:1c:a0:5e:eb:8e:97:fa:1f:90:b6:39: 35:d3:0c:d0:73:80:9e:66:46:f2:3b:e4:dc:3a:0c:3b:e5:6b: c4:75:40:9f:8f:3f:13:d2:2a:7a:fd:79:cd:d1:8c:55:e9:4d: 07:fe:4e:08:e7:64:c2:b0:6f:68:2b:9f:8a:3e:d8:08:2d:3f: 18:e9:ab:99:8e:d0:b9:d7:a5:aa:3a:e0:90:74:94:52:66:18: 54:bb:25:ae:19:8b:80:25:f6:38:3d:47:1d:63:94:9e:42:2a: 03:3e:08:09:7f:f9:94:8c:d6:a7:06:20:3e:55:89:7f:7f:38: 94:5e:93:ab:d2:1e:52:f8:5c:e9:ae:97:c9:73:a3:23:85:01: ee:f9:90:52:71:b5:ed:11:a8:7e:4d:12:89:40:48:cf:3f:ea: 8f:cf:12:b0:43:e9:36:ee:0c:0e:54:25:5f:bc:15:92:b0:69: a5:1b:87:50:a2:46:e7:78:d7:3b:1d:db:0a:c1:a4:4e:a6:74: 59:c4:5c:27:23:8b:6b:59:2c:94:47:e1:91:6f:9b:b0:52:45: 49:74:87:a6:4e:73:e7:d7:30:72:8b:fe:64:c8:a1:4b:62:87: 23:b7:6f:f6:7a:8e:ce:63:60:30:b1:82:5f:ce:9b:87:b6:9f: e4:b7:e8:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEbEMRaaOlgWnSuijuOL03MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNGFiOTY4ODQyNzA3M2ZmN2UxNzlkZTVhZjAwMmUwOWYy MzYwMTMwHhcNMjYwMjA5MjIwMTExWhcNMjYwMjEwMjIwMTExWjAzMTEwLwYDVQQD EyhiNTcxM2JkNjg2ZjM3ZjU5NzY3ZWY3OTkyMjExZDQxZmM5MGY5M2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKkH8A9xBO04+Qtc6qHK7TwvwmYr DTK5HzQZKTV79KoJjdZArt8AedmvjQ4WZaOFbw+eL+2xkXaIEXEAP9N7Il0ZLBjR tFDNOmfQo4PFXzUSOhUfBH0dkocmXQr1toDV1u9mMOyRP5SWPiObd2J+vVUlhQjI eOPXGZCkld+Af/B0LsWAb0vg9tyHEuA2nSqTlUXOA2CuZ3jxtgm+ZBXHUzP0hYd5 Ar5bCvmq8XdBoPNiOefzET2886Jo+sH989ewaeu7oXkbG201Z00ZVKCckt92LpqZ SSLZmQsvI7iLhGq4dVjfrign9Hh/pXHYQEI7hsn9JoR0xmKvMlTSVXFt2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLVxO9aG839Zdn73mSIR1B/JD5O9MB8GA1UdIwQY MBaAFHBKuWiEJwc/9+F53lrwAuCfI2ATMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0VxNWFJUW5Cel8zNFhuZVd2QUM0SjhqWUJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jMjQ0YjMtOGZjMS00Njg1LThmYjIt NDZhOGIxOTFhMzc0LzEvY0VxNWFJUW5Cel8zNFhuZVd2QUM0SjhqWUJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9jMjQ0YjMtOGZjMS00Njg1LThmYjItNDZhOGIxOTFhMzc0 LzEvY0VxNWFJUW5Cel8zNFhuZVd2QUM0SjhqWUJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMIuXZqsY YxygXuuOl/ofkLY5NdMM0HOAnmZG8jvk3DoMO+VrxHVAn48/E9Iqev15zdGMVelN B/5OCOdkwrBvaCufij7YCC0/GOmrmY7QudelqjrgkHSUUmYYVLslrhmLgCX2OD1H HWOUnkIqAz4ICX/5lIzWpwYgPlWJf384lF6Tq9IeUvhc6a6XyXOjI4UB7vmQUnG1 7RGofk0SiUBIzz/qj88SsEPpNu4MDlQlX7wVkrBppRuHUKJG53jXOx3bCsGkTqZ0 WcRcJyOLa1kslEfhkW+bsFJFSXSHpk5z59cwcov+ZMihS2KHI7dv9nqOzmNgMLGC X86bh7af5Lfo+w== -----END CERTIFICATE-----Generated at Tue Feb 10 01:37:47 2026 by rpki-client