This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft File: ER2JVJLtS2nVqm7aX3Av52Oie6A.mft (raw, json) Hash identifier: /duYbPGaywqF3Gzw7ipiy6eExgfwop8/fT0S6EFrvOA= Subject key identifier: CF:5D:0C:EC:AA:A3:E4:FC:5D:4F:DE:3B:80:76:CB:0A:95:82:72:06 Authority key identifier: 11:1D:89:54:92:ED:4B:69:D5:AA:6E:DA:5F:70:2F:E7:63:A2:7B:A0 Certificate issuer: /CN=111d895492ed4b69d5aa6eda5f702fe763a27ba0 Certificate serial: 019C420F67448A00C77F4F82174FFA80532B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER2JVJLtS2nVqm7aX3Av52Oie6A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 11:00:31 +0000 Manifest this update: Mon 09 Feb 2026 11:00:31 +0000 Manifest next update: Tue 10 Feb 2026 11:00:31 +0000 Files and hashes: 1: E2AOd0Jh_dYbYDRq_Fys0q9Nt0w.roa (hash: yqgah2GA26MOXyfwuZn4WBUcims7Z93O2Dzh5WOdCaA=) 2: ER2JVJLtS2nVqm7aX3Av52Oie6A.crl (hash: OcxHXAVcj0Vj7oM2k++x5UqR5KBtCPWUxV1lrE01zsA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.crl rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft rsync://rpki.ripe.net/repository/DEFAULT/ER2JVJLtS2nVqm7aX3Av52Oie6A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:67:44:8a:00:c7:7f:4f:82:17:4f:fa:80:53:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=111d895492ed4b69d5aa6eda5f702fe763a27ba0 Validity Not Before: Feb 9 11:00:31 2026 GMT Not After : Feb 10 11:00:31 2026 GMT Subject: CN=cf5d0cecaaa3e4fc5d4fde3b8076cb0a95827206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:82:33:ec:40:f0:67:0c:47:4b:1d:f8:a7:3b: 2d:37:a6:45:82:59:a1:03:6d:5d:6b:86:be:09:32: 48:e4:b4:7e:07:bc:a4:53:3d:ca:d9:65:d5:7a:55: 5c:cf:ce:4d:e9:96:eb:9e:a8:29:f1:22:29:3f:d4: 40:6b:e2:3d:49:9d:54:47:0e:ad:1e:b2:7f:4b:52: 8a:44:16:e3:4d:4f:7d:b9:57:28:c0:d9:13:62:26: ca:84:f7:19:ce:c3:bb:26:a1:5c:7a:c4:c0:2b:7e: 6e:a7:80:90:ef:0c:ad:93:86:58:3c:72:ed:95:d9: 98:fb:f5:06:61:7c:f8:d7:e6:69:b2:4a:2d:40:ac: 68:52:d1:4d:aa:89:89:34:03:82:48:e3:6a:e2:ca: 4d:5a:57:e1:2d:8d:91:a1:7c:08:f4:95:f5:a9:3d: 97:1e:75:43:fa:81:be:fa:27:0a:d5:12:c0:99:6a: 26:f5:8b:1c:1d:55:f4:bb:c1:1d:7e:83:09:4e:76: 71:4b:30:53:b6:81:b6:10:ba:f8:75:94:b4:0a:85: 8c:f6:5f:3b:48:55:37:de:9b:ac:97:8e:b0:fd:66: 53:06:50:28:cf:8f:c1:53:25:39:b9:ab:f3:67:84: 2a:3a:92:1a:02:4b:fd:22:d9:e5:93:cf:b6:c0:9f: e4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:5D:0C:EC:AA:A3:E4:FC:5D:4F:DE:3B:80:76:CB:0A:95:82:72:06 X509v3 Authority Key Identifier: keyid:11:1D:89:54:92:ED:4B:69:D5:AA:6E:DA:5F:70:2F:E7:63:A2:7B:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER2JVJLtS2nVqm7aX3Av52Oie6A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:24:9b:25:76:fc:43:46:06:4e:29:85:bb:9d:06:d8:c4:56: 6f:f7:18:63:0c:3b:6b:ef:d7:74:0d:ad:ab:df:54:b5:89:4e: 86:6b:f3:7e:93:02:02:9b:4d:c5:a0:cf:03:d8:ae:6f:1d:58: 07:9b:bf:38:c4:5d:59:9e:9d:64:33:3e:e7:68:c9:6b:a5:07: 4b:28:a7:17:81:bf:62:b8:45:62:f4:c0:c8:b6:b1:af:06:92: ca:a2:4a:a8:ca:d5:01:03:97:4b:b8:79:c2:c4:c6:a2:29:93: 3f:7c:ee:0b:77:9e:0b:85:56:ea:9e:fc:28:80:50:c7:29:ec: 4a:46:88:73:3a:e9:c4:71:25:82:a5:8e:d6:53:92:d0:57:81: 2a:73:2b:98:4e:37:ad:c8:b5:be:97:69:3e:ac:02:2a:8b:f1: 86:4a:d3:73:95:13:8f:a5:4f:68:4a:b5:db:d2:8f:72:12:07: b9:14:58:e9:3d:28:bf:b1:c4:c3:28:e9:58:06:8b:6b:98:a0: 53:fe:e1:d8:ef:1e:a1:26:62:a9:d6:02:36:02:6e:be:68:62: 10:30:80:f9:eb:b6:e1:fa:0e:a3:f8:7e:9a:23:16:c0:f1:eb: 76:08:46:ec:a7:50:08:4e:49:25:ac:4a:89:bc:4e:80:a0:76: d4:ad:42:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD2dEigDHf0+CF0/6gFMrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMWQ4OTU0OTJlZDRiNjlkNWFhNmVkYTVmNzAyZmU3NjNh MjdiYTAwHhcNMjYwMjA5MTEwMDMxWhcNMjYwMjEwMTEwMDMxWjAzMTEwLwYDVQQD EyhjZjVkMGNlY2FhYTNlNGZjNWQ0ZmRlM2I4MDc2Y2IwYTk1ODI3MjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYIz7EDwZwxHSx34pzstN6ZFglmh A21da4a+CTJI5LR+B7ykUz3K2WXVelVcz85N6Zbrnqgp8SIpP9RAa+I9SZ1URw6t HrJ/S1KKRBbjTU99uVcowNkTYibKhPcZzsO7JqFcesTAK35up4CQ7wytk4ZYPHLt ldmY+/UGYXz41+ZpskotQKxoUtFNqomJNAOCSONq4spNWlfhLY2RoXwI9JX1qT2X HnVD+oG++icK1RLAmWom9YscHVX0u8EdfoMJTnZxSzBTtoG2ELr4dZS0CoWM9l87 SFU33pusl46w/WZTBlAoz4/BUyU5uavzZ4QqOpIaAkv9Itnlk8+2wJ/kOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM9dDOyqo+T8XU/eO4B2ywqVgnIGMB8GA1UdIwQY MBaAFBEdiVSS7Utp1apu2l9wL+djonugMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVIySlZKTHRTMm5WcW03YVgzQXY1Mk9pZTZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny84MGQxY2MtNDUzZi00MmUzLTlmZDQt ODdiZWNmNzRkNTY0LzEvRVIySlZKTHRTMm5WcW03YVgzQXY1Mk9pZTZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny84MGQxY2MtNDUzZi00MmUzLTlmZDQtODdiZWNmNzRkNTY0 LzEvRVIySlZKTHRTMm5WcW03YVgzQXY1Mk9pZTZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXCSbJXb8 Q0YGTimFu50G2MRWb/cYYww7a+/XdA2tq99UtYlOhmvzfpMCAptNxaDPA9iubx1Y B5u/OMRdWZ6dZDM+52jJa6UHSyinF4G/YrhFYvTAyLaxrwaSyqJKqMrVAQOXS7h5 wsTGoimTP3zuC3eeC4VW6p78KIBQxynsSkaIczrpxHElgqWO1lOS0FeBKnMrmE43 rci1vpdpPqwCKovxhkrTc5UTj6VPaEq129KPchIHuRRY6T0ov7HEwyjpWAaLa5ig U/7h2O8eoSZiqdYCNgJuvmhiEDCA+eu24foOo/h+miMWwPHrdghG7KdQCE5JJaxK ibxOgKB21K1C1A== -----END CERTIFICATE-----Generated at Mon Feb 9 18:40:36 2026 by rpki-client