This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft File: E9g7Il3TOGDFHcRKqI218D3BWnQ.mft (raw, json) Hash identifier: LlJNnwUn19fvRIDVLdV32piCKk+Ftj2n7wLLRVc67uM= Subject key identifier: C5:92:E3:C4:D6:79:09:01:8F:C8:84:3B:C9:8A:3B:4B:5D:A8:2A:D5 Authority key identifier: 13:D8:3B:22:5D:D3:38:60:C5:1D:C4:4A:A8:8D:B5:F0:3D:C1:5A:74 Certificate issuer: /CN=13d83b225dd33860c51dc44aa88db5f03dc15a74 Certificate serial: 019C4434F8CF84E8EEBA77D49134F6000A45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9g7Il3TOGDFHcRKqI218D3BWnQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft Manifest number: 17A2 Signing time: Mon 09 Feb 2026 21:00:47 +0000 Manifest this update: Mon 09 Feb 2026 21:00:47 +0000 Manifest next update: Tue 10 Feb 2026 21:00:47 +0000 Files and hashes: 1: 4QtQ4JO4bCdyuS9fUme9C3LxdRc.roa (hash: R6o6h7FPQ78N3YyiGkBHhpV10pWrv1sif+o6N3TYJMg=) 2: E9g7Il3TOGDFHcRKqI218D3BWnQ.crl (hash: 6l0Y4lmG/8vp3T/H8VK1xpfJZ6d2bkkPTTiDv5dk+kM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.crl rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft rsync://rpki.ripe.net/repository/DEFAULT/E9g7Il3TOGDFHcRKqI218D3BWnQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:34:f8:cf:84:e8:ee:ba:77:d4:91:34:f6:00:0a:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13d83b225dd33860c51dc44aa88db5f03dc15a74 Validity Not Before: Feb 9 21:00:47 2026 GMT Not After : Feb 10 21:00:47 2026 GMT Subject: CN=c592e3c4d67909018fc8843bc98a3b4b5da82ad5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:72:1e:97:d5:65:80:72:9c:54:d9:bc:39:16: 61:f2:ce:c5:69:62:dd:42:5a:a9:ab:1f:73:6e:3e: 82:d0:9f:c8:9d:96:22:53:27:32:d9:1b:1b:8b:27: a6:7a:2a:ab:cf:a1:4b:ff:4b:15:b0:a6:6c:4b:7d: 25:44:1e:24:f5:b5:f1:ad:bf:12:7a:95:bc:d0:e0: 7e:35:72:0b:71:78:c7:d9:bf:4a:b9:98:23:d6:cf: ac:fa:49:60:4d:5b:84:b8:2d:79:03:27:52:54:df: 9f:34:54:79:85:0c:43:74:81:7f:42:7c:28:a7:a7: c9:22:1f:f5:77:5e:80:cc:ba:bb:0d:11:a0:43:fe: 1a:9c:58:65:17:e4:e2:52:6e:41:ba:a5:db:4d:d4: 7b:3f:57:77:db:8a:95:0a:25:bf:f4:44:1e:9b:71: d8:89:f5:65:83:a3:6d:dd:b4:cd:f0:76:80:b1:2a: 9a:29:57:ef:53:ea:24:75:d0:36:32:98:c1:cd:39: a7:ab:5f:0c:dc:3b:03:63:6c:47:12:f4:21:d7:7d: 44:f8:e5:50:2a:ff:b8:64:6f:fd:56:60:fd:36:48: c9:f2:c4:bd:c7:08:a6:c1:65:5f:b2:65:36:3e:b9: 36:c7:a2:88:42:48:47:fd:c9:ae:72:f8:b7:86:d5: 6e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:92:E3:C4:D6:79:09:01:8F:C8:84:3B:C9:8A:3B:4B:5D:A8:2A:D5 X509v3 Authority Key Identifier: keyid:13:D8:3B:22:5D:D3:38:60:C5:1D:C4:4A:A8:8D:B5:F0:3D:C1:5A:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9g7Il3TOGDFHcRKqI218D3BWnQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:b8:78:e0:c3:46:17:b3:b0:8e:0d:82:1f:12:e2:37:34:ca: c8:88:89:e9:ea:a6:9e:57:a3:78:12:8a:dc:64:41:68:3a:15: 30:e2:f3:19:cb:7a:66:65:cf:10:6c:c9:df:d9:ba:c5:5f:55: a7:e5:f0:9e:df:94:ea:c4:38:b5:be:31:05:ae:65:ad:62:6a: df:07:ac:95:3a:77:bb:86:21:4b:d2:88:e7:d3:9c:6e:9e:45: 9e:26:b6:a1:2e:c9:25:63:49:ab:55:10:5e:9b:aa:76:a6:59: cb:d8:4e:4b:43:ae:8d:58:b1:92:f2:48:b7:57:e1:f3:78:e9: 3e:d3:7e:cf:da:4f:bf:14:2b:16:10:70:e2:f4:95:23:58:a5: c8:a8:91:24:52:2f:4f:c7:84:dd:86:c9:0a:7a:e3:a8:eb:92: e9:3c:98:18:76:07:77:47:7f:10:16:01:ac:65:11:f9:25:21: d4:3d:8c:7e:31:02:e0:59:dc:5a:3b:0a:4c:05:81:59:6e:0f: 73:0c:b0:e8:08:8c:5d:67:20:44:56:51:72:9b:f0:87:2b:2d: a3:ae:95:c5:0d:0b:75:0a:6a:0d:f3:37:2e:e0:8e:cb:f3:2b: 87:ca:79:06:6b:72:cc:e3:37:6c:8c:c8:9d:ca:51:2a:65:b5: e8:a4:90:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxENPjPhOjuunfUkTT2AApFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZDgzYjIyNWRkMzM4NjBjNTFkYzQ0YWE4OGRiNWYwM2Rj MTVhNzQwHhcNMjYwMjA5MjEwMDQ3WhcNMjYwMjEwMjEwMDQ3WjAzMTEwLwYDVQQD EyhjNTkyZTNjNGQ2NzkwOTAxOGZjODg0M2JjOThhM2I0YjVkYTgyYWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinIel9VlgHKcVNm8ORZh8s7FaWLd Qlqpqx9zbj6C0J/InZYiUycy2Rsbiyemeiqrz6FL/0sVsKZsS30lRB4k9bXxrb8S epW80OB+NXILcXjH2b9KuZgj1s+s+klgTVuEuC15AydSVN+fNFR5hQxDdIF/Qnwo p6fJIh/1d16AzLq7DRGgQ/4anFhlF+TiUm5BuqXbTdR7P1d324qVCiW/9EQem3HY ifVlg6Nt3bTN8HaAsSqaKVfvU+okddA2MpjBzTmnq18M3DsDY2xHEvQh131E+OVQ Kv+4ZG/9VmD9NkjJ8sS9xwimwWVfsmU2Prk2x6KIQkhH/cmucvi3htVuLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMWS48TWeQkBj8iEO8mKO0tdqCrVMB8GA1UdIwQY MBaAFBPYOyJd0zhgxR3ESqiNtfA9wVp0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTlnN0lsM1RPR0RGSGNSS3FJMjE4RDNCV25RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9mMjExMWEtM2Y0Ny00ZmYwLWE1MWQt YjI1MTM3N2FkZDg2LzEvRTlnN0lsM1RPR0RGSGNSS3FJMjE4RDNCV25RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9mMjExMWEtM2Y0Ny00ZmYwLWE1MWQtYjI1MTM3N2FkZDg2 LzEvRTlnN0lsM1RPR0RGSGNSS3FJMjE4RDNCV25RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg7h44MNG F7Owjg2CHxLiNzTKyIiJ6eqmnlejeBKK3GRBaDoVMOLzGct6ZmXPEGzJ39m6xV9V p+Xwnt+U6sQ4tb4xBa5lrWJq3weslTp3u4YhS9KI59Ocbp5Fnia2oS7JJWNJq1UQ XpuqdqZZy9hOS0OujVixkvJIt1fh83jpPtN+z9pPvxQrFhBw4vSVI1ilyKiRJFIv T8eE3YbJCnrjqOuS6TyYGHYHd0d/EBYBrGUR+SUh1D2MfjEC4FncWjsKTAWBWW4P cwyw6AiMXWcgRFZRcpvwhysto66VxQ0LdQpqDfM3LuCOy/Mrh8p5BmtyzOM3bIzI ncpRKmW16KSQrg== -----END CERTIFICATE-----Generated at Tue Feb 10 04:19:39 2026 by rpki-client