This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft File: e8DFmvgYqB1_53rx-3MC5LQRflE.mft (raw, json) Hash identifier: NgkfeMyVJl0iMVsYvForgh8QoNJnquS3UANyu/KWRIQ= Subject key identifier: E8:A5:D7:3E:B8:DA:81:FF:D8:8A:E8:61:44:0A:F9:49:7B:8A:CE:A0 Authority key identifier: 7B:C0:C5:9A:F8:18:A8:1D:7F:E7:7A:F1:FB:73:02:E4:B4:11:7E:51 Certificate issuer: /CN=7bc0c59af818a81d7fe77af1fb7302e4b4117e51 Certificate serial: 019C4134543B78BAAA7EAC06FBD6E16FEECC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8DFmvgYqB1_53rx-3MC5LQRflE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft Manifest number: 1809 Signing time: Mon 09 Feb 2026 07:01:14 +0000 Manifest this update: Mon 09 Feb 2026 07:01:14 +0000 Manifest next update: Tue 10 Feb 2026 07:01:14 +0000 Files and hashes: 1: e8DFmvgYqB1_53rx-3MC5LQRflE.crl (hash: 4Hi/ocDKg9SxoRZ9IqGziJ5ea933Gh4b4L67P1DCoe8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.crl rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft rsync://rpki.ripe.net/repository/DEFAULT/e8DFmvgYqB1_53rx-3MC5LQRflE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:34:54:3b:78:ba:aa:7e:ac:06:fb:d6:e1:6f:ee:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bc0c59af818a81d7fe77af1fb7302e4b4117e51 Validity Not Before: Feb 9 07:01:14 2026 GMT Not After : Feb 10 07:01:14 2026 GMT Subject: CN=e8a5d73eb8da81ffd88ae861440af9497b8acea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3c:81:c7:10:34:af:75:d2:31:66:72:bd:42: a2:82:2d:d3:df:48:7e:d9:75:e2:b1:8a:38:29:b3: a1:39:b0:60:20:3f:8b:95:fd:c8:96:8c:91:7d:88: 5b:63:78:4f:dd:2e:70:74:66:fb:56:0e:9c:6c:ac: 6d:5d:e1:46:d7:7c:9e:78:ae:e4:61:5d:99:6f:fd: 89:48:61:1c:cd:73:78:38:df:05:f4:95:e0:ea:12: d0:eb:b6:e3:8d:44:33:f7:5f:56:bd:23:00:9c:2a: c9:88:29:14:ff:fa:7e:66:41:92:07:48:8c:aa:37: 9b:a6:c0:74:f3:a2:a8:d9:c5:64:a7:40:3e:48:37: 26:40:d2:dd:b3:c9:a6:c7:44:83:ea:30:72:b1:d1: d1:5a:71:7d:6a:69:10:fb:45:17:64:49:5c:e2:25: 12:db:97:63:56:48:15:dc:f8:e1:b8:3c:5e:62:bd: 1f:03:6a:b3:68:ef:7e:9e:09:4d:2d:31:71:ec:64: cd:2a:24:30:e3:72:a9:4f:64:9a:d4:48:4c:3e:aa: 8b:fe:95:05:ab:69:49:4a:a9:84:05:be:2a:2c:b9: bc:6d:8f:5f:e2:8e:f0:eb:99:77:ab:86:9d:7a:02: cc:09:24:ac:e2:49:eb:20:63:91:85:14:c4:ea:5b: 25:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:A5:D7:3E:B8:DA:81:FF:D8:8A:E8:61:44:0A:F9:49:7B:8A:CE:A0 X509v3 Authority Key Identifier: keyid:7B:C0:C5:9A:F8:18:A8:1D:7F:E7:7A:F1:FB:73:02:E4:B4:11:7E:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8DFmvgYqB1_53rx-3MC5LQRflE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:69:b2:0a:bb:95:5c:8a:a0:92:28:2c:da:d2:c5:2e:02:a6: 0b:00:03:09:4e:70:36:47:97:fe:31:23:d8:63:0f:37:a9:72: da:5a:28:36:5d:ee:4c:17:ba:eb:d1:dd:6e:ec:48:b2:e0:7c: 4e:99:bb:fa:be:de:7d:22:ac:b6:7a:de:87:23:36:1f:b7:58: 3c:0c:ad:a4:55:04:5d:6b:eb:ef:0e:1f:05:fe:40:2a:5d:eb: 37:2b:75:da:4a:19:3b:3c:38:db:e1:b6:7c:61:ec:da:8a:eb: 18:8d:da:82:bb:5b:f1:69:5f:54:6e:44:8c:6c:be:e3:13:5b: 00:48:0f:c7:ca:a4:de:b8:a5:8f:8b:63:19:62:d7:62:33:9f: d3:90:8e:bf:09:5c:a9:dc:2b:4f:04:00:95:4e:48:69:e8:ab: 61:a4:f7:a9:2c:82:2c:3c:1d:b1:3a:b7:08:dc:d0:fb:0a:01: f3:1b:99:1a:c3:5c:17:38:74:d4:b4:b9:3c:b3:8f:38:f9:5a: 15:80:8d:3e:1f:14:3d:e7:d2:7a:bd:da:01:7f:93:8e:45:d6: 39:6d:e6:af:ea:3d:e5:40:7f:fe:17:30:ae:10:87:f9:9a:50: eb:71:85:53:ed:1e:23:20:b7:15:d8:9a:d9:d5:68:4f:63:07: 13:d3:fe:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBNFQ7eLqqfqwG+9bhb+7MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiYzBjNTlhZjgxOGE4MWQ3ZmU3N2FmMWZiNzMwMmU0YjQx MTdlNTEwHhcNMjYwMjA5MDcwMTE0WhcNMjYwMjEwMDcwMTE0WjAzMTEwLwYDVQQD EyhlOGE1ZDczZWI4ZGE4MWZmZDg4YWU4NjE0NDBhZjk0OTdiOGFjZWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijyBxxA0r3XSMWZyvUKigi3T30h+ 2XXisYo4KbOhObBgID+Llf3IloyRfYhbY3hP3S5wdGb7Vg6cbKxtXeFG13yeeK7k YV2Zb/2JSGEczXN4ON8F9JXg6hLQ67bjjUQz919WvSMAnCrJiCkU//p+ZkGSB0iM qjebpsB086Ko2cVkp0A+SDcmQNLds8mmx0SD6jBysdHRWnF9amkQ+0UXZElc4iUS 25djVkgV3PjhuDxeYr0fA2qzaO9+nglNLTFx7GTNKiQw43KpT2Sa1EhMPqqL/pUF q2lJSqmEBb4qLLm8bY9f4o7w65l3q4adegLMCSSs4knrIGORhRTE6lslmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOil1z642oH/2IroYUQK+Ul7is6gMB8GA1UdIwQY MBaAFHvAxZr4GKgdf+d68ftzAuS0EX5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZThERm12Z1lxQjFfNTNyeC0zTUM1TFFSZmxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zZmUwODctYTM1MC00MTNkLTg3YTEt OWFiYTU1YzllYjVmLzEvZThERm12Z1lxQjFfNTNyeC0zTUM1TFFSZmxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zZmUwODctYTM1MC00MTNkLTg3YTEtOWFiYTU1YzllYjVm LzEvZThERm12Z1lxQjFfNTNyeC0zTUM1TFFSZmxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALmmyCruV XIqgkigs2tLFLgKmCwADCU5wNkeX/jEj2GMPN6ly2looNl3uTBe669HdbuxIsuB8 Tpm7+r7efSKstnrehyM2H7dYPAytpFUEXWvr7w4fBf5AKl3rNyt12koZOzw42+G2 fGHs2orrGI3agrtb8WlfVG5EjGy+4xNbAEgPx8qk3rilj4tjGWLXYjOf05COvwlc qdwrTwQAlU5IaeirYaT3qSyCLDwdsTq3CNzQ+woB8xuZGsNcFzh01LS5PLOPOPla FYCNPh8UPefSer3aAX+TjkXWOW3mr+o95UB//hcwrhCH+ZpQ63GFU+0eIyC3Fdia 2dVoT2MHE9P+vg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:41 2026 by rpki-client