This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.mft File: ewGNKlH-8tdsYmAFVsZtV8t-knA.mft (raw, json) Hash identifier: 70M/pNd5G521w4hL6ruIbnxwQuu7mC3tD3j8I0Y72PM= Subject key identifier: 8B:39:34:8A:4E:A1:5C:97:53:FE:D2:2E:0E:62:AF:A7:46:6F:38:83 Authority key identifier: 7B:01:8D:2A:51:FE:F2:D7:6C:62:60:05:56:C6:6D:57:CB:7E:92:70 Certificate issuer: /CN=7b018d2a51fef2d76c62600556c66d57cb7e9270 Certificate serial: 019C42B496A96A503FA986A82FFA796D41A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewGNKlH-8tdsYmAFVsZtV8t-knA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.mft Manifest number: 0831 Signing time: Mon 09 Feb 2026 14:00:57 +0000 Manifest this update: Mon 09 Feb 2026 14:00:57 +0000 Manifest next update: Tue 10 Feb 2026 14:00:57 +0000 Files and hashes: 1: YpzL7xrF0dIqaxjKKmFd_QnzOiQ.roa (hash: Shositwz7oGoRnr0DWHzQSqq+ccsryBZJdt4q3rcze0=) 2: ewGNKlH-8tdsYmAFVsZtV8t-knA.crl (hash: KeAuvovVsH3hElB16iCZTr48q5ZYN+bIfrLUJz5mr7U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.crl rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.mft rsync://rpki.ripe.net/repository/DEFAULT/ewGNKlH-8tdsYmAFVsZtV8t-knA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:96:a9:6a:50:3f:a9:86:a8:2f:fa:79:6d:41:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b018d2a51fef2d76c62600556c66d57cb7e9270 Validity Not Before: Feb 9 14:00:57 2026 GMT Not After : Feb 10 14:00:57 2026 GMT Subject: CN=8b39348a4ea15c9753fed22e0e62afa7466f3883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:9e:b0:7e:8e:ab:08:79:1b:af:34:f3:79:2e: 3b:9a:6c:8d:29:9c:6c:5b:2b:31:d3:b9:fd:bc:09: b7:3a:0f:f7:41:45:b9:b3:8a:04:06:f8:ff:17:ea: 67:e4:35:83:f4:30:3e:54:82:c9:db:c2:5c:b6:11: b2:c7:be:9c:24:a0:0e:41:c2:2d:57:32:b3:45:34: 83:d6:23:f6:b7:bf:d5:5b:c8:35:cd:fe:c0:e2:87: 25:14:78:d1:e4:f6:5e:fa:79:3b:7e:1a:72:20:0c: 89:63:88:39:4b:69:ef:aa:9c:8c:fe:14:99:02:2b: a5:44:38:ab:c3:ab:63:b3:39:c2:fc:d4:ac:05:49: 4f:15:2c:10:98:b5:63:cf:d0:5e:b9:2e:5e:d5:5e: cd:f3:ca:27:97:8e:b8:42:41:db:45:1c:f1:02:14: 76:26:50:c8:54:a3:ae:48:e8:39:96:22:ce:35:16: 0f:c0:c8:1d:d1:53:df:50:d7:9f:8d:32:b3:c2:1c: a7:72:47:05:13:d6:9c:c0:00:d7:80:09:1e:b5:db: 07:bc:42:fe:1c:83:c4:2d:36:32:8b:e1:c1:c6:fe: d8:54:2c:a4:2f:ec:38:7d:cc:94:c0:dd:b0:ac:4a: e0:08:b4:37:c7:e9:1d:4f:a2:98:64:2d:0c:38:62: 1d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:39:34:8A:4E:A1:5C:97:53:FE:D2:2E:0E:62:AF:A7:46:6F:38:83 X509v3 Authority Key Identifier: keyid:7B:01:8D:2A:51:FE:F2:D7:6C:62:60:05:56:C6:6D:57:CB:7E:92:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewGNKlH-8tdsYmAFVsZtV8t-knA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:31:6e:ea:4c:19:0d:bf:c7:32:d8:66:fe:93:9d:9a:a0:04: bb:27:c5:19:fe:01:fe:94:6a:56:fb:ff:df:5d:bd:8b:1d:53: 71:d6:31:b5:20:52:2b:a3:96:25:30:10:92:5e:f9:d3:7e:0d: 72:8f:4d:2b:f0:93:ce:9f:4d:52:e3:34:d4:f2:5c:34:47:87: 96:09:69:66:65:21:13:1f:1d:1d:14:7d:ce:36:ae:e0:21:77: 94:47:35:f8:1c:76:50:44:38:7c:dc:bf:bc:07:52:8f:a4:af: 9a:66:c4:bf:34:56:25:f4:61:39:bf:63:c4:49:9f:fa:7d:2e: 72:0f:1f:7e:e2:82:6e:73:21:e0:b8:8a:20:c6:b1:8f:52:74: 13:e0:14:e7:18:65:fc:82:9c:ed:55:82:18:84:d5:67:3f:f4: 72:fb:69:10:a0:81:e2:94:bb:09:72:70:0e:13:5e:6e:2f:0d: cc:f9:ed:05:da:fe:b0:0c:4f:1d:3e:28:1d:03:b8:71:cc:95: 9a:54:dd:14:34:8c:d7:46:1d:ac:27:76:33:ef:5a:a0:db:05: e4:eb:01:82:f2:aa:43:c2:3a:1c:b4:91:dc:a3:5e:2a:99:e2: 33:31:8a:35:01:4c:20:74:a8:98:bf:ec:49:fe:2b:55:0f:e3: 6c:7a:49:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtJapalA/qYaoL/p5bUGgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMDE4ZDJhNTFmZWYyZDc2YzYyNjAwNTU2YzY2ZDU3Y2I3 ZTkyNzAwHhcNMjYwMjA5MTQwMDU3WhcNMjYwMjEwMTQwMDU3WjAzMTEwLwYDVQQD Eyg4YjM5MzQ4YTRlYTE1Yzk3NTNmZWQyMmUwZTYyYWZhNzQ2NmYzODgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Z6wfo6rCHkbrzTzeS47mmyNKZxs Wysx07n9vAm3Og/3QUW5s4oEBvj/F+pn5DWD9DA+VILJ28JcthGyx76cJKAOQcIt VzKzRTSD1iP2t7/VW8g1zf7A4oclFHjR5PZe+nk7fhpyIAyJY4g5S2nvqpyM/hSZ AiulRDirw6tjsznC/NSsBUlPFSwQmLVjz9BeuS5e1V7N88onl464QkHbRRzxAhR2 JlDIVKOuSOg5liLONRYPwMgd0VPfUNefjTKzwhynckcFE9acwADXgAketdsHvEL+ HIPELTYyi+HBxv7YVCykL+w4fcyUwN2wrErgCLQ3x+kdT6KYZC0MOGIdlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIs5NIpOoVyXU/7SLg5ir6dGbziDMB8GA1UdIwQY MBaAFHsBjSpR/vLXbGJgBVbGbVfLfpJwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXdHTktsSC04dGRzWW1BRlZzWnRWOHQta25BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9lNmZkMGQtYTAyYi00OWMyLTlhMmMt NGRjMmRkNTZkNTdmLzEvZXdHTktsSC04dGRzWW1BRlZzWnRWOHQta25BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9lNmZkMGQtYTAyYi00OWMyLTlhMmMtNGRjMmRkNTZkNTdm LzEvZXdHTktsSC04dGRzWW1BRlZzWnRWOHQta25BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhjFu6kwZ Db/HMthm/pOdmqAEuyfFGf4B/pRqVvv/3129ix1TcdYxtSBSK6OWJTAQkl75034N co9NK/CTzp9NUuM01PJcNEeHlglpZmUhEx8dHRR9zjau4CF3lEc1+Bx2UEQ4fNy/ vAdSj6SvmmbEvzRWJfRhOb9jxEmf+n0ucg8ffuKCbnMh4LiKIMaxj1J0E+AU5xhl /IKc7VWCGITVZz/0cvtpEKCB4pS7CXJwDhNebi8NzPntBdr+sAxPHT4oHQO4ccyV mlTdFDSM10YdrCd2M+9aoNsF5OsBgvKqQ8I6HLSR3KNeKpniMzGKNQFMIHSomL/s Sf4rVQ/jbHpJ7A== -----END CERTIFICATE-----Generated at Mon Feb 9 16:59:37 2026 by rpki-client