This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.mft File: sEAqOILi-MUlQrB73sCypQ1ZgNs.mft (raw, json) Hash identifier: e4KYM3n4hnSWGFa3+enQluRxENzN+xvoPwbHYT1b7yE= Subject key identifier: CA:BF:82:62:71:C9:62:FB:24:20:F8:14:DF:2E:62:21:95:38:CB:12 Authority key identifier: B0:40:2A:38:82:E2:F8:C5:25:42:B0:7B:DE:C0:B2:A5:0D:59:80:DB Certificate issuer: /CN=b0402a3882e2f8c52542b07bdec0b2a50d5980db Certificate serial: 019C41A1ED9A523F13CFE6658A04346FD267 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sEAqOILi-MUlQrB73sCypQ1ZgNs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.mft Manifest number: 10E8 Signing time: Mon 09 Feb 2026 09:00:56 +0000 Manifest this update: Mon 09 Feb 2026 09:00:56 +0000 Manifest next update: Tue 10 Feb 2026 09:00:56 +0000 Files and hashes: 1: sEAqOILi-MUlQrB73sCypQ1ZgNs.crl (hash: UNFq1ma+vU6kayAENd7hfJiIgLMI9uwknlpr8KjHaWo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.mft rsync://rpki.ripe.net/repository/DEFAULT/sEAqOILi-MUlQrB73sCypQ1ZgNs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:ed:9a:52:3f:13:cf:e6:65:8a:04:34:6f:d2:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0402a3882e2f8c52542b07bdec0b2a50d5980db Validity Not Before: Feb 9 09:00:56 2026 GMT Not After : Feb 10 09:00:56 2026 GMT Subject: CN=cabf826271c962fb2420f814df2e62219538cb12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5d:81:fa:d6:8c:e3:6e:3c:77:0f:97:76:8a: f6:60:cd:13:78:26:a7:87:9b:5d:4d:1a:0a:f0:9e: ea:d4:c8:61:4c:6b:9a:8f:ea:92:d4:0a:83:4d:fc: a1:19:96:54:64:29:10:0f:62:b1:ec:3b:a7:19:c1: 63:ac:85:6c:9a:fd:3e:4e:f8:0a:3b:7b:e2:8e:b7: b6:74:07:b9:25:84:85:ac:30:aa:11:6d:c5:59:03: c7:c8:05:c8:a5:a9:44:ae:5c:21:e1:3b:ff:3f:cc: e8:e0:48:01:db:77:7e:d0:3c:6e:5a:eb:77:11:f8: 8c:1e:d8:8b:48:68:fb:70:6f:c3:fb:6b:93:8a:79: ef:05:33:e5:09:dd:70:2c:b9:66:f6:a8:6e:f9:35: 2d:99:23:53:1a:35:19:eb:c6:e4:b3:35:6f:dc:06: 6c:7a:1b:b2:ac:19:fd:7b:85:13:44:73:cc:9a:ad: df:33:0e:9e:b4:ce:3e:dd:77:1e:f5:27:53:d2:8e: 1c:66:d8:b2:ff:a8:c1:e4:a5:c4:2c:2c:35:8c:57: 7e:e1:60:5b:47:de:b1:5f:fd:74:1e:88:db:28:ca: e9:68:d7:4a:b7:ee:5e:5f:12:18:cf:0a:2b:e5:10: 45:fb:f4:ac:7d:9f:ab:c0:ad:81:30:e4:56:aa:ae: 7a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:BF:82:62:71:C9:62:FB:24:20:F8:14:DF:2E:62:21:95:38:CB:12 X509v3 Authority Key Identifier: keyid:B0:40:2A:38:82:E2:F8:C5:25:42:B0:7B:DE:C0:B2:A5:0D:59:80:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sEAqOILi-MUlQrB73sCypQ1ZgNs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:09:e6:aa:81:84:b1:72:70:9b:6c:d5:d2:83:8b:af:42:04: 70:fb:c8:d3:6b:ab:89:ce:1a:77:9c:39:11:31:fb:4a:ce:fc: 19:86:3c:29:02:e9:90:c1:ab:61:a6:51:98:ee:76:5a:34:21: 6b:9b:e6:53:1c:1b:31:05:6c:f6:b2:af:d3:3b:d2:be:1d:3c: 03:f0:5b:03:97:71:f8:b0:28:c0:ac:14:a5:be:08:0b:f0:b0: 64:08:2c:62:89:6b:96:68:5a:fd:bd:bf:39:95:67:50:ff:47: dc:9f:05:d9:d3:72:7a:06:23:5c:dc:a1:d3:b5:be:04:5f:01: a9:53:1e:4e:f1:e5:c0:42:ee:ec:01:4d:ea:f2:78:ca:62:41: 6c:06:91:83:10:1a:b4:c6:2a:28:97:8b:62:78:1a:e5:c4:6e: d4:b6:43:4c:b0:12:e2:0f:e9:ba:8c:e4:d2:92:bc:93:32:24: 78:91:cf:b0:2d:c3:10:50:c5:3c:86:9a:cc:22:7a:fd:1d:5a: 9e:35:1d:12:11:74:82:87:16:e9:bd:3d:b6:4e:27:54:a0:df: 5a:51:4c:ba:ee:0a:2f:01:94:62:20:60:45:ec:c3:9f:d7:42: 48:5d:b7:e5:dd:8a:b1:67:2c:b1:66:89:37:3d:2a:a0:d6:d6: f5:5c:7a:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoe2aUj8Tz+ZligQ0b9JnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNDAyYTM4ODJlMmY4YzUyNTQyYjA3YmRlYzBiMmE1MGQ1 OTgwZGIwHhcNMjYwMjA5MDkwMDU2WhcNMjYwMjEwMDkwMDU2WjAzMTEwLwYDVQQD EyhjYWJmODI2MjcxYzk2MmZiMjQyMGY4MTRkZjJlNjIyMTk1MzhjYjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA012B+taM4248dw+Xdor2YM0TeCan h5tdTRoK8J7q1MhhTGuaj+qS1AqDTfyhGZZUZCkQD2Kx7DunGcFjrIVsmv0+TvgK O3vijre2dAe5JYSFrDCqEW3FWQPHyAXIpalErlwh4Tv/P8zo4EgB23d+0DxuWut3 EfiMHtiLSGj7cG/D+2uTinnvBTPlCd1wLLlm9qhu+TUtmSNTGjUZ68bkszVv3AZs ehuyrBn9e4UTRHPMmq3fMw6etM4+3Xce9SdT0o4cZtiy/6jB5KXELCw1jFd+4WBb R96xX/10HojbKMrpaNdKt+5eXxIYzwor5RBF+/SsfZ+rwK2BMORWqq56SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMq/gmJxyWL7JCD4FN8uYiGVOMsSMB8GA1UdIwQY MBaAFLBAKjiC4vjFJUKwe97AsqUNWYDbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0VBcU9JTGktTVVsUXJCNzNzQ3lwUTFaZ05zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iOTc0ZDktNjc0MS00MjlkLTlmMWMt ODJjNzkyMWQwMjA4LzEvc0VBcU9JTGktTVVsUXJCNzNzQ3lwUTFaZ05zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iOTc0ZDktNjc0MS00MjlkLTlmMWMtODJjNzkyMWQwMjA4 LzEvc0VBcU9JTGktTVVsUXJCNzNzQ3lwUTFaZ05zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABAnmqoGE sXJwm2zV0oOLr0IEcPvI02uric4ad5w5ETH7Ss78GYY8KQLpkMGrYaZRmO52WjQh a5vmUxwbMQVs9rKv0zvSvh08A/BbA5dx+LAowKwUpb4IC/CwZAgsYolrlmha/b2/ OZVnUP9H3J8F2dNyegYjXNyh07W+BF8BqVMeTvHlwELu7AFN6vJ4ymJBbAaRgxAa tMYqKJeLYnga5cRu1LZDTLAS4g/puozk0pK8kzIkeJHPsC3DEFDFPIaazCJ6/R1a njUdEhF0gocW6b09tk4nVKDfWlFMuu4KLwGUYiBgRezDn9dCSF235d2KsWcssWaJ Nz0qoNbW9Vx6Fg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:57:14 2026 by rpki-client