This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft File: ekv_XNLhHQT3U92itntNhy9shEE.mft (raw, json) Hash identifier: Kz/AFY3KXfM1YVKXLT5ao7yW/1jFiZlBBOiMTgER+JQ= Subject key identifier: 77:7D:AF:0C:18:92:56:97:E8:88:8D:81:3F:69:EB:04:36:1D:88:60 Authority key identifier: 7A:4B:FF:5C:D2:E1:1D:04:F7:53:DD:A2:B6:7B:4D:87:2F:6C:84:41 Certificate issuer: /CN=7a4bff5cd2e11d04f753dda2b67b4d872f6c8441 Certificate serial: 019C427DFDE9D65FC21A9BD732B544AFB7AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft Manifest number: 028E Signing time: Mon 09 Feb 2026 13:01:19 +0000 Manifest this update: Mon 09 Feb 2026 13:01:19 +0000 Manifest next update: Tue 10 Feb 2026 13:01:19 +0000 Files and hashes: 1: VaU_FJNN0SPug5fmKDhZ2YZw5wQ.roa (hash: tXVOE7siNlB3oT+rp3t9G6RC5d1jo+/FpEUK7TJG8wU=) 2: ekv_XNLhHQT3U92itntNhy9shEE.crl (hash: yAMLmsPOURvoEwpQW90kt1huKuBe6OC7wx+yfv1YHas=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.crl rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:fd:e9:d6:5f:c2:1a:9b:d7:32:b5:44:af:b7:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a4bff5cd2e11d04f753dda2b67b4d872f6c8441 Validity Not Before: Feb 9 13:01:19 2026 GMT Not After : Feb 10 13:01:19 2026 GMT Subject: CN=777daf0c18925697e8888d813f69eb04361d8860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5b:91:96:e0:ca:70:be:51:64:f8:55:97:f3: 66:c8:6d:d1:70:3d:e6:56:24:02:48:60:fb:be:5c: 6b:b6:cc:4a:b5:dd:b0:88:18:93:f1:5a:7c:93:55: f7:cd:cb:43:ae:20:0d:8d:88:2b:bd:d3:17:ca:0f: 77:72:f7:8b:ae:5a:03:42:51:ba:bf:52:e0:bd:49: f3:cb:26:20:4a:53:1b:f9:08:75:3f:4b:25:21:f6: 38:40:86:f4:03:ea:6c:2c:b9:d8:42:b0:21:bf:c1: 92:d4:79:06:87:1e:3b:87:24:cb:74:91:39:07:cb: 54:6f:cf:74:38:60:21:81:5b:2a:07:78:e6:29:9e: 39:0f:92:59:bd:28:93:52:20:6a:9b:a1:f5:05:f9: 1d:14:cd:da:88:e5:b8:6c:11:fa:cc:9c:d9:1c:f5: d8:1f:4f:5d:e3:4c:99:00:c5:7c:ff:40:5a:8e:96: 97:75:50:15:69:db:fa:4a:66:af:58:45:c4:ed:64: 61:35:54:88:55:69:e9:8e:fb:f6:58:aa:70:e6:fe: a0:df:05:84:2f:ee:6d:52:3d:f3:b2:ae:f7:fb:08: cf:ba:4e:86:55:9a:7d:a6:60:e4:27:fa:3b:11:4c: 90:9f:73:ca:fd:af:3e:e9:17:85:8f:58:90:da:91: 15:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:7D:AF:0C:18:92:56:97:E8:88:8D:81:3F:69:EB:04:36:1D:88:60 X509v3 Authority Key Identifier: keyid:7A:4B:FF:5C:D2:E1:1D:04:F7:53:DD:A2:B6:7B:4D:87:2F:6C:84:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:1e:31:1e:58:be:43:6b:6e:ad:a0:d8:b0:f1:f6:bc:1a:df: d8:b0:fe:8d:42:b2:38:66:e8:22:09:4f:8c:63:a6:14:03:bd: b4:46:f9:2e:fc:49:14:5a:5b:c7:6e:b2:6a:1a:52:1c:5a:28: 1f:d8:5b:62:ae:4a:74:18:62:01:48:56:3c:7f:8f:d2:86:f2: 74:68:b9:ac:ab:5e:1f:4b:2f:96:ba:d9:e0:fc:f4:b9:fd:17: 66:4c:0a:b4:47:3a:37:0c:a1:7e:11:e7:e3:26:50:da:f0:63: 71:f4:e6:f0:4d:7a:b6:86:b8:eb:33:a9:6d:e9:28:4a:e0:4c: f4:6a:75:b0:6c:64:59:4f:76:5b:28:bb:91:0f:ad:f2:70:49: c2:d1:69:23:23:57:b1:ae:71:e9:4b:38:4b:9a:0b:6f:b7:12: 91:55:0b:c9:fc:82:ce:4c:51:0d:16:a4:56:68:28:cc:3f:4b: 64:2d:ca:00:f0:0d:3d:cc:ef:73:ba:5e:b3:ac:47:8c:b8:b1: 97:70:bc:0e:9a:fe:5c:82:5c:ea:43:14:de:11:44:85:22:87: 3f:b9:f8:63:96:31:c6:05:21:8e:2f:d3:8b:50:17:ae:d7:65: d0:9e:ce:f9:4d:ca:bd:e3:2d:c2:a7:69:d4:b2:dc:0b:10:86: 71:ec:83:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCff3p1l/CGpvXMrVEr7erMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhNGJmZjVjZDJlMTFkMDRmNzUzZGRhMmI2N2I0ZDg3MmY2 Yzg0NDEwHhcNMjYwMjA5MTMwMTE5WhcNMjYwMjEwMTMwMTE5WjAzMTEwLwYDVQQD Eyg3NzdkYWYwYzE4OTI1Njk3ZTg4ODhkODEzZjY5ZWIwNDM2MWQ4ODYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFuRluDKcL5RZPhVl/NmyG3RcD3m ViQCSGD7vlxrtsxKtd2wiBiT8Vp8k1X3zctDriANjYgrvdMXyg93cveLrloDQlG6 v1LgvUnzyyYgSlMb+Qh1P0slIfY4QIb0A+psLLnYQrAhv8GS1HkGhx47hyTLdJE5 B8tUb890OGAhgVsqB3jmKZ45D5JZvSiTUiBqm6H1BfkdFM3aiOW4bBH6zJzZHPXY H09d40yZAMV8/0BajpaXdVAVadv6SmavWEXE7WRhNVSIVWnpjvv2WKpw5v6g3wWE L+5tUj3zsq73+wjPuk6GVZp9pmDkJ/o7EUyQn3PK/a8+6ReFj1iQ2pEV5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHd9rwwYklaX6IiNgT9p6wQ2HYhgMB8GA1UdIwQY MBaAFHpL/1zS4R0E91PdorZ7TYcvbIRBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWt2X1hOTGhIUVQzVTkyaXRudE5oeTlzaEVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8wMGI3NjQtYTFiOS00MDY2LWE2NTMt NzA0MWU5NTg1ZGViLzEvZWt2X1hOTGhIUVQzVTkyaXRudE5oeTlzaEVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8wMGI3NjQtYTFiOS00MDY2LWE2NTMtNzA0MWU5NTg1ZGVi LzEvZWt2X1hOTGhIUVQzVTkyaXRudE5oeTlzaEVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqB4xHli+ Q2turaDYsPH2vBrf2LD+jUKyOGboIglPjGOmFAO9tEb5LvxJFFpbx26yahpSHFoo H9hbYq5KdBhiAUhWPH+P0obydGi5rKteH0svlrrZ4Pz0uf0XZkwKtEc6NwyhfhHn 4yZQ2vBjcfTm8E16toa46zOpbekoSuBM9Gp1sGxkWU92Wyi7kQ+t8nBJwtFpIyNX sa5x6Us4S5oLb7cSkVULyfyCzkxRDRakVmgozD9LZC3KAPANPczvc7pes6xHjLix l3C8Dpr+XIJc6kMU3hFEhSKHP7n4Y5YxxgUhji/Ti1AXrtdl0J7O+U3KveMtwqdp 1LLcCxCGceyDYA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:08:24 2026 by rpki-client