This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7747b0-2f95-478a-b2e3-677cb6044563/1/ewaHDJH1QM3TCqWVmLd78pONhNQ.mft File: ewaHDJH1QM3TCqWVmLd78pONhNQ.mft (raw, json) Hash identifier: b/U9hPhm8piyWTBiPvYfhqlejtltc/5dWUsdf8XnYXw= Subject key identifier: 75:42:A0:5F:4A:03:EE:EE:0C:17:B8:94:CB:BA:64:67:52:38:3F:A6 Authority key identifier: 7B:06:87:0C:91:F5:40:CD:D3:0A:A5:95:98:B7:7B:F2:93:8D:84:D4 Certificate issuer: /CN=7b06870c91f540cdd30aa59598b77bf2938d84d4 Certificate serial: 019C40FD49387D73319009020AAACC7710A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewaHDJH1QM3TCqWVmLd78pONhNQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/7747b0-2f95-478a-b2e3-677cb6044563/1/ewaHDJH1QM3TCqWVmLd78pONhNQ.mft Manifest number: 021A Signing time: Mon 09 Feb 2026 06:01:07 +0000 Manifest this update: Mon 09 Feb 2026 06:01:07 +0000 Manifest next update: Tue 10 Feb 2026 06:01:07 +0000 Files and hashes: 1: COlPjvzoiLOPREU6Xl4JmzPhARs.roa (hash: 5C49uxVNsaO0/i4gZlUTQ3BJ2tqns4mMti2FLTSC2o4=) 2: ewaHDJH1QM3TCqWVmLd78pONhNQ.crl (hash: 6hausWTU/5VF1Gn+1fll1w2c5kornKNMuBOGB2U29Oc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/7747b0-2f95-478a-b2e3-677cb6044563/1/ewaHDJH1QM3TCqWVmLd78pONhNQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/7747b0-2f95-478a-b2e3-677cb6044563/1/ewaHDJH1QM3TCqWVmLd78pONhNQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ewaHDJH1QM3TCqWVmLd78pONhNQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:40:fd:49:38:7d:73:31:90:09:02:0a:aa:cc:77:10:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b06870c91f540cdd30aa59598b77bf2938d84d4 Validity Not Before: Feb 9 06:01:07 2026 GMT Not After : Feb 10 06:01:07 2026 GMT Subject: CN=7542a05f4a03eeee0c17b894cbba646752383fa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:62:ba:78:36:0a:e1:f6:9c:85:fa:27:30:23: 46:be:8a:52:54:e0:b5:a4:7b:67:b3:de:e0:2d:c7: 34:0f:e5:fc:74:6c:f2:82:6a:b6:7f:6d:b7:3e:bf: 39:66:28:e6:62:43:e4:ac:58:27:47:80:bb:56:d0: d3:fa:06:40:06:ac:ae:ea:c4:35:eb:76:eb:02:44: c7:32:73:de:ba:42:d1:06:ba:33:39:15:f5:c5:d6: dd:c1:2d:f1:cc:29:44:ff:98:2d:7c:20:5e:5a:69: 8b:6c:e2:3a:1e:64:d3:6b:34:e8:e3:55:a8:06:c4: 61:38:bd:b2:f7:ba:37:e2:a6:15:e0:6e:1d:2d:d8: bd:00:ba:40:a7:0b:b6:69:cd:8d:6a:e7:d6:7d:38: b4:ba:86:5f:22:a3:6a:cc:7c:dd:9d:07:34:7f:87: 4c:22:c1:65:ba:b5:bb:13:bc:02:24:53:d2:e4:18: 31:07:d6:8b:f3:4d:01:86:cb:ac:06:53:94:b7:2b: 10:49:56:b7:22:04:cf:0a:bb:ec:38:72:1c:a2:6a: d5:8f:b6:84:79:0e:d3:9a:76:19:79:d2:2f:33:79: 6d:25:90:67:79:cd:e9:a7:33:1f:9b:cf:78:e5:2a: 53:d7:4c:26:aa:dc:fa:40:95:92:9f:98:37:13:1c: da:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:42:A0:5F:4A:03:EE:EE:0C:17:B8:94:CB:BA:64:67:52:38:3F:A6 X509v3 Authority Key Identifier: keyid:7B:06:87:0C:91:F5:40:CD:D3:0A:A5:95:98:B7:7B:F2:93:8D:84:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewaHDJH1QM3TCqWVmLd78pONhNQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7747b0-2f95-478a-b2e3-677cb6044563/1/ewaHDJH1QM3TCqWVmLd78pONhNQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7747b0-2f95-478a-b2e3-677cb6044563/1/ewaHDJH1QM3TCqWVmLd78pONhNQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:c9:b9:40:f5:a4:9b:2b:d3:6d:c7:91:4f:76:0a:6a:d4:e7: ac:b5:df:dd:bd:d6:7a:6b:3e:4f:13:4d:33:b4:5d:65:54:b3: 6a:92:2c:9a:4d:93:87:7c:0c:00:84:b4:21:ac:61:a8:41:c6: 93:da:82:65:39:54:3a:af:37:06:dd:46:11:c5:37:df:21:42: a7:21:93:68:d5:d5:99:2a:ed:7d:5c:70:2b:51:96:eb:a0:ea: e7:c6:00:03:a7:e8:93:3a:bf:21:7b:54:71:b6:98:1a:5e:ab: 16:e1:00:cf:9b:6b:d8:c0:4a:5b:e6:a4:55:a5:fd:25:b6:2c: db:3f:f6:a0:5d:68:dc:87:d1:c5:e4:7b:f2:c9:16:5d:aa:ac: 84:5b:be:09:65:73:bb:41:c1:99:bb:ac:7e:86:11:f1:36:aa: 7b:52:a8:fe:4a:5f:8a:d0:03:87:74:9a:38:8f:cb:99:e6:da: a1:cd:ca:8f:1f:34:07:4a:39:68:6f:b7:89:71:8d:a1:25:31: e0:30:56:8a:9d:44:eb:66:b9:a8:3e:5b:8a:16:85:e0:c3:5a: cc:2d:56:74:22:66:8c:40:13:4b:db:99:46:ab:93:72:f1:38: 02:b9:34:e9:7a:5b:71:cf:42:18:1a:df:6c:93:86:bb:cc:f4: ed:87:2c:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxA/Uk4fXMxkAkCCqrMdxCmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMDY4NzBjOTFmNTQwY2RkMzBhYTU5NTk4Yjc3YmYyOTM4 ZDg0ZDQwHhcNMjYwMjA5MDYwMTA3WhcNMjYwMjEwMDYwMTA3WjAzMTEwLwYDVQQD Eyg3NTQyYTA1ZjRhMDNlZWVlMGMxN2I4OTRjYmJhNjQ2NzUyMzgzZmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWK6eDYK4fachfonMCNGvopSVOC1 pHtns97gLcc0D+X8dGzygmq2f223Pr85ZijmYkPkrFgnR4C7VtDT+gZABqyu6sQ1 63brAkTHMnPeukLRBrozORX1xdbdwS3xzClE/5gtfCBeWmmLbOI6HmTTazTo41Wo BsRhOL2y97o34qYV4G4dLdi9ALpApwu2ac2NaufWfTi0uoZfIqNqzHzdnQc0f4dM IsFlurW7E7wCJFPS5BgxB9aL800BhsusBlOUtysQSVa3IgTPCrvsOHIcomrVj7aE eQ7TmnYZedIvM3ltJZBnec3ppzMfm8945SpT10wmqtz6QJWSn5g3ExzagwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHVCoF9KA+7uDBe4lMu6ZGdSOD+mMB8GA1UdIwQY MBaAFHsGhwyR9UDN0wqllZi3e/KTjYTUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXdhSERKSDFRTTNUQ3FXVm1MZDc4cE9OaE5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy83NzQ3YjAtMmY5NS00NzhhLWIyZTMt Njc3Y2I2MDQ0NTYzLzEvZXdhSERKSDFRTTNUQ3FXVm1MZDc4cE9OaE5RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy83NzQ3YjAtMmY5NS00NzhhLWIyZTMtNjc3Y2I2MDQ0NTYz LzEvZXdhSERKSDFRTTNUQ3FXVm1MZDc4cE9OaE5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAncm5QPWk myvTbceRT3YKatTnrLXf3b3Wems+TxNNM7RdZVSzapIsmk2Th3wMAIS0IaxhqEHG k9qCZTlUOq83Bt1GEcU33yFCpyGTaNXVmSrtfVxwK1GW66Dq58YAA6fokzq/IXtU cbaYGl6rFuEAz5tr2MBKW+akVaX9JbYs2z/2oF1o3IfRxeR78skWXaqshFu+CWVz u0HBmbusfoYR8Taqe1Ko/kpfitADh3SaOI/Lmebaoc3Kjx80B0o5aG+3iXGNoSUx 4DBWip1E62a5qD5bihaF4MNazC1WdCJmjEATS9uZRquTcvE4Ark06Xpbcc9CGBrf bJOGu8z07Ycssg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:38 2026 by rpki-client