This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.mft File: EagjxkJx95aUakaCWW5zKDXMTsg.mft (raw, json) Hash identifier: 7hCx1YmH4S9jfMBznrXAohFs10KsT7uzknVQYY9IDU4= Subject key identifier: 74:BF:19:6C:16:83:2C:4C:57:9B:27:75:E1:3C:15:AC:F7:BD:EB:17 Authority key identifier: 11:A8:23:C6:42:71:F7:96:94:6A:46:82:59:6E:73:28:35:CC:4E:C8 Certificate issuer: /CN=11a823c64271f796946a4682596e732835cc4ec8 Certificate serial: 019C4322A91B55F8F064360B30F230EA0635 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EagjxkJx95aUakaCWW5zKDXMTsg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.mft Manifest number: 0EB7 Signing time: Mon 09 Feb 2026 16:01:10 +0000 Manifest this update: Mon 09 Feb 2026 16:01:10 +0000 Manifest next update: Tue 10 Feb 2026 16:01:10 +0000 Files and hashes: 1: EagjxkJx95aUakaCWW5zKDXMTsg.crl (hash: lRjQRnqTZ3glVnL6PcALnSpqo8Z1nRIHioKCD9/xPSo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.mft rsync://rpki.ripe.net/repository/DEFAULT/EagjxkJx95aUakaCWW5zKDXMTsg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:a9:1b:55:f8:f0:64:36:0b:30:f2:30:ea:06:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11a823c64271f796946a4682596e732835cc4ec8 Validity Not Before: Feb 9 16:01:10 2026 GMT Not After : Feb 10 16:01:10 2026 GMT Subject: CN=74bf196c16832c4c579b2775e13c15acf7bdeb17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:fe:d2:6a:00:bd:fc:70:96:25:3f:d5:ab:e9: 9c:08:b1:d0:88:40:c2:9d:43:a7:21:d6:3d:7b:f5: dd:81:91:2e:ef:ea:52:1e:6c:c6:5d:1b:31:82:b1: cb:90:04:31:d2:75:e7:cb:de:0a:79:06:8c:2f:3f: 3d:4a:5a:28:96:78:33:a6:6f:c5:fa:25:e1:83:2f: 33:3a:9a:a7:25:4e:b6:b0:2b:41:a7:c6:cf:94:bb: 5a:aa:b6:81:45:f4:5d:f3:58:07:00:64:7d:2c:bb: 82:2b:5a:84:12:05:21:92:f1:ea:e6:cd:3f:11:58: 01:f6:f3:f0:8a:e3:79:4b:c6:d2:d6:d6:2a:eb:f8: 0c:33:67:32:a6:e7:df:9e:dc:34:8d:3e:6b:9d:f8: df:67:2f:af:c6:b4:5a:80:d7:cd:dc:a8:69:dc:7f: 5f:92:25:4c:c6:68:9a:27:bc:c4:59:4e:d9:7b:42: 05:78:ff:10:5c:bb:bd:a6:08:9d:5b:ff:02:f6:9a: 45:97:bf:9e:d1:0e:8f:ca:4e:7f:4c:73:68:90:92: 3c:a2:6b:26:ec:df:61:ac:db:fe:3b:d8:ae:c9:cb: c1:f7:3b:ca:4c:5f:0d:dd:90:6d:69:64:28:8e:b4: 43:b8:fb:2c:20:3a:f0:53:fd:c5:e2:c9:40:1c:e8: 46:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:BF:19:6C:16:83:2C:4C:57:9B:27:75:E1:3C:15:AC:F7:BD:EB:17 X509v3 Authority Key Identifier: keyid:11:A8:23:C6:42:71:F7:96:94:6A:46:82:59:6E:73:28:35:CC:4E:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EagjxkJx95aUakaCWW5zKDXMTsg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:ad:89:e6:43:28:cb:06:8a:81:64:65:14:37:29:92:f5:4b: 2d:3a:c8:85:1d:67:92:6f:4b:18:da:b1:81:0e:bf:cb:65:b7: aa:c0:9f:d2:05:26:91:66:95:ae:69:b0:a3:31:96:51:3e:76: 5f:d9:82:07:6a:d3:8b:8f:f3:81:a6:75:4e:86:47:74:50:4d: 76:fa:bb:11:7c:74:ee:2e:ae:f7:68:c0:2d:ba:49:84:81:64: 14:e1:e5:a4:4d:d7:c8:c7:8b:d4:40:f2:4f:ac:2c:10:21:05: da:b0:4c:d2:ee:e3:84:c7:64:5c:11:2f:7d:35:c5:4f:98:9e: 50:57:d1:e1:76:42:31:49:af:80:8f:50:43:87:59:3c:58:1c: 2f:8a:d0:7e:4e:a5:ca:0f:08:71:a3:ba:64:3d:47:c3:ca:30: 85:57:24:f3:cf:63:33:03:6e:94:03:e3:84:94:c9:a8:d8:ba: e2:0d:a9:b2:3a:d0:fd:fd:ac:5a:45:f1:ee:3a:c5:c7:d2:58: e0:25:21:c8:f9:ba:e4:87:b3:46:9c:ed:23:6c:25:50:d1:03: e6:ab:e3:0e:24:49:e6:4d:35:70:22:54:7d:a7:8e:55:5b:fb: 22:c8:c0:da:7f:06:16:f5:50:3a:0e:b6:32:20:d9:7e:0f:7b: a5:04:7c:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIqkbVfjwZDYLMPIw6gY1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYTgyM2M2NDI3MWY3OTY5NDZhNDY4MjU5NmU3MzI4MzVj YzRlYzgwHhcNMjYwMjA5MTYwMTEwWhcNMjYwMjEwMTYwMTEwWjAzMTEwLwYDVQQD Eyg3NGJmMTk2YzE2ODMyYzRjNTc5YjI3NzVlMTNjMTVhY2Y3YmRlYjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2f7SagC9/HCWJT/Vq+mcCLHQiEDC nUOnIdY9e/XdgZEu7+pSHmzGXRsxgrHLkAQx0nXny94KeQaMLz89Sloolngzpm/F +iXhgy8zOpqnJU62sCtBp8bPlLtaqraBRfRd81gHAGR9LLuCK1qEEgUhkvHq5s0/ EVgB9vPwiuN5S8bS1tYq6/gMM2cypuffntw0jT5rnfjfZy+vxrRagNfN3Khp3H9f kiVMxmiaJ7zEWU7Ze0IFeP8QXLu9pgidW/8C9ppFl7+e0Q6Pyk5/THNokJI8omsm 7N9hrNv+O9iuycvB9zvKTF8N3ZBtaWQojrRDuPssIDrwU/3F4slAHOhGdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHS/GWwWgyxMV5sndeE8Faz3vesXMB8GA1UdIwQY MBaAFBGoI8ZCcfeWlGpGgllucyg1zE7IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWFnanhrSng5NWFVYWthQ1dXNXpLRFhNVHNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8yM2RkZGMtYWQ0YS00ZTMyLTk5YzAt MjRmYjI0YjVhZTViLzEvRWFnanhrSng5NWFVYWthQ1dXNXpLRFhNVHNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8yM2RkZGMtYWQ0YS00ZTMyLTk5YzAtMjRmYjI0YjVhZTVi LzEvRWFnanhrSng5NWFVYWthQ1dXNXpLRFhNVHNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg62J5kMo ywaKgWRlFDcpkvVLLTrIhR1nkm9LGNqxgQ6/y2W3qsCf0gUmkWaVrmmwozGWUT52 X9mCB2rTi4/zgaZ1ToZHdFBNdvq7EXx07i6u92jALbpJhIFkFOHlpE3XyMeL1EDy T6wsECEF2rBM0u7jhMdkXBEvfTXFT5ieUFfR4XZCMUmvgI9QQ4dZPFgcL4rQfk6l yg8IcaO6ZD1Hw8owhVck889jMwNulAPjhJTJqNi64g2psjrQ/f2sWkXx7jrFx9JY 4CUhyPm65IezRpztI2wlUNED5qvjDiRJ5k01cCJUfaeOVVv7IsjA2n8GFvVQOg62 MiDZfg97pQR8dw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:51 2026 by rpki-client