This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c96cef-fbdd-44de-b13d-4fc7b6c7a4c2/1/eIW8vdwL57G92jasnwzsQn8Tey4.mft File: eIW8vdwL57G92jasnwzsQn8Tey4.mft (raw, json) Hash identifier: YmFc9tOYQQGcQn55nIZWPQgngRKriKeCvJfctsi8pHU= Subject key identifier: 7D:A9:81:DA:CD:32:E1:A7:2A:0F:60:E3:76:41:46:AE:B4:27:BC:DB Authority key identifier: 78:85:BC:BD:DC:0B:E7:B1:BD:DA:36:AC:9F:0C:EC:42:7F:13:7B:2E Certificate issuer: /CN=7885bcbddc0be7b1bdda36ac9f0cec427f137b2e Certificate serial: 019C1B38DFD175BD0BC9418766861057EEC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIW8vdwL57G92jasnwzsQn8Tey4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c96cef-fbdd-44de-b13d-4fc7b6c7a4c2/1/eIW8vdwL57G92jasnwzsQn8Tey4.mft Manifest number: 20 Signing time: Sun 01 Feb 2026 22:00:37 +0000 Manifest this update: Sun 01 Feb 2026 22:00:37 +0000 Manifest next update: Mon 02 Feb 2026 22:00:37 +0000 Files and hashes: 1: W03Dmlw1Ww-cFIp9vkfsWC5L8jY.asa (hash: tgVo7GEFMdcLKeWoqIyQC9dBMhmbDoLL5DmLM5lP/iU=) 2: eIW8vdwL57G92jasnwzsQn8Tey4.crl (hash: EwQ25cEyYVNnNtbmtthmlkXS+h0oIZkdwXb2sfAQrPo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/c96cef-fbdd-44de-b13d-4fc7b6c7a4c2/1/eIW8vdwL57G92jasnwzsQn8Tey4.crl rsync://rpki.ripe.net/repository/DEFAULT/82/c96cef-fbdd-44de-b13d-4fc7b6c7a4c2/1/eIW8vdwL57G92jasnwzsQn8Tey4.mft rsync://rpki.ripe.net/repository/DEFAULT/eIW8vdwL57G92jasnwzsQn8Tey4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1b:38:df:d1:75:bd:0b:c9:41:87:66:86:10:57:ee:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7885bcbddc0be7b1bdda36ac9f0cec427f137b2e Validity Not Before: Feb 1 22:00:37 2026 GMT Not After : Feb 2 22:00:37 2026 GMT Subject: CN=7da981dacd32e1a72a0f60e3764146aeb427bcdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9f:54:02:c9:6c:f9:3a:2d:d1:a8:48:c3:1e: 7f:e1:29:f4:68:6a:b0:29:79:0b:da:39:46:2b:70: 98:3f:a9:b0:5c:3b:37:99:16:cf:4e:2c:86:2e:08: 93:7d:11:27:d8:22:cc:61:be:9a:36:cc:e2:91:30: 9e:4c:8e:55:84:eb:60:fa:8c:da:a8:6d:2a:f3:36: b3:15:e4:c7:24:d7:47:4f:cc:85:1f:f2:79:83:38: 48:b5:1e:28:e3:f5:6e:23:96:12:5e:53:67:b6:56: 29:34:11:98:b9:5d:46:e5:31:09:e2:fa:31:76:c4: 13:1d:3d:ed:30:b9:74:8f:09:d2:ec:7e:57:af:d9: b6:de:02:fe:f3:2d:59:af:87:c0:2c:4d:ba:c8:63: f4:bb:97:eb:a2:a3:5c:92:b6:b5:7e:d7:e9:15:4f: 8e:ed:f5:3c:32:02:c5:24:81:83:52:c6:c6:bc:e9: 21:50:e5:f8:8b:88:9f:95:58:d2:a9:32:ee:56:96: c5:51:30:1e:d0:cb:05:6c:1e:f0:19:d5:cf:8c:e9: d9:bd:1f:bf:15:53:9c:d0:16:80:1b:4a:89:22:e7: 10:2e:22:d2:02:8a:eb:57:18:15:ca:e1:3e:62:aa: 05:91:84:7e:ac:9c:7e:ea:08:a8:e8:59:61:59:a2: 8a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A9:81:DA:CD:32:E1:A7:2A:0F:60:E3:76:41:46:AE:B4:27:BC:DB X509v3 Authority Key Identifier: keyid:78:85:BC:BD:DC:0B:E7:B1:BD:DA:36:AC:9F:0C:EC:42:7F:13:7B:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIW8vdwL57G92jasnwzsQn8Tey4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c96cef-fbdd-44de-b13d-4fc7b6c7a4c2/1/eIW8vdwL57G92jasnwzsQn8Tey4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c96cef-fbdd-44de-b13d-4fc7b6c7a4c2/1/eIW8vdwL57G92jasnwzsQn8Tey4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:a8:dc:a8:47:d8:f9:73:41:65:b4:ac:a5:b9:60:7a:5d:f5: 5e:a9:03:02:27:18:b8:77:aa:66:4e:31:c3:01:34:63:73:b3: d3:0c:6e:77:09:91:f3:bd:c9:83:cf:d7:81:c3:63:ec:82:10: 7b:d7:cb:db:4c:5a:bb:2d:fa:7a:c4:5e:c0:c9:00:9a:4a:22: cd:18:89:6a:a7:72:48:e5:c1:75:d8:d2:df:02:1a:f9:0d:af: ab:41:0c:5c:39:af:49:ea:d3:c9:04:49:05:ea:07:44:1b:65: 66:08:45:08:9f:85:37:c4:f6:61:de:72:74:c0:91:8b:8a:8b: bd:f4:62:b7:22:d9:e8:49:9d:ed:c6:86:24:97:ab:a2:c3:18: a4:3b:c7:25:e0:e4:9e:3e:66:28:66:7b:c7:82:a7:bd:98:79: cf:5c:74:a3:bf:36:2a:24:7d:9c:9a:06:d8:fa:3c:5e:2d:de: 9c:71:08:4a:9b:cb:d7:f0:da:c2:bb:eb:5d:cc:bb:aa:51:4d: 31:a9:1e:8a:a3:23:ea:28:41:4a:9b:2b:54:57:c8:47:ad:91: 6e:d1:19:f9:06:00:66:fe:95:d2:eb:8c:ad:84:85:e3:f7:2b: ca:0f:ec:04:a9:09:13:ca:11:8e:1d:41:ec:54:84:79:b2:cc: 5d:b2:9b:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwbON/Rdb0LyUGHZoYQV+7CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ODViY2JkZGMwYmU3YjFiZGRhMzZhYzlmMGNlYzQyN2Yx MzdiMmUwHhcNMjYwMjAxMjIwMDM3WhcNMjYwMjAyMjIwMDM3WjAzMTEwLwYDVQQD Eyg3ZGE5ODFkYWNkMzJlMWE3MmEwZjYwZTM3NjQxNDZhZWI0MjdiY2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqp9UAsls+Tot0ahIwx5/4Sn0aGqw KXkL2jlGK3CYP6mwXDs3mRbPTiyGLgiTfREn2CLMYb6aNszikTCeTI5VhOtg+oza qG0q8zazFeTHJNdHT8yFH/J5gzhItR4o4/VuI5YSXlNntlYpNBGYuV1G5TEJ4vox dsQTHT3tMLl0jwnS7H5Xr9m23gL+8y1Zr4fALE26yGP0u5froqNckra1ftfpFU+O 7fU8MgLFJIGDUsbGvOkhUOX4i4iflVjSqTLuVpbFUTAe0MsFbB7wGdXPjOnZvR+/ FVOc0BaAG0qJIucQLiLSAorrVxgVyuE+YqoFkYR+rJx+6gio6FlhWaKKKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH2pgdrNMuGnKg9g43ZBRq60J7zbMB8GA1UdIwQY MBaAFHiFvL3cC+exvdo2rJ8M7EJ/E3suMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUlXOHZkd0w1N0c5Mmphc253enNRbjhUZXk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9jOTZjZWYtZmJkZC00NGRlLWIxM2Qt NGZjN2I2YzdhNGMyLzEvZUlXOHZkd0w1N0c5Mmphc253enNRbjhUZXk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9jOTZjZWYtZmJkZC00NGRlLWIxM2QtNGZjN2I2YzdhNGMy LzEvZUlXOHZkd0w1N0c5Mmphc253enNRbjhUZXk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb6jcqEfY +XNBZbSspblgel31XqkDAicYuHeqZk4xwwE0Y3Oz0wxudwmR873Jg8/XgcNj7IIQ e9fL20xauy36esRewMkAmkoizRiJaqdySOXBddjS3wIa+Q2vq0EMXDmvSerTyQRJ BeoHRBtlZghFCJ+FN8T2Yd5ydMCRi4qLvfRityLZ6Emd7caGJJerosMYpDvHJeDk nj5mKGZ7x4KnvZh5z1x0o782KiR9nJoG2Po8Xi3enHEISpvL1/DawrvrXcy7qlFN MakeiqMj6ihBSpsrVFfIR62RbtEZ+QYAZv6V0uuMrYSF4/cryg/sBKkJE8oRjh1B 7FSEebLMXbKbBw== -----END CERTIFICATE-----Generated at Mon Feb 2 08:06:39 2026 by rpki-client