This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft File: _ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft (raw, json) Hash identifier: efkwtNU1HnC0Mo0PX2q0ut18kx6hMCMe+2DM935CGOY= Subject key identifier: 87:E5:35:FE:88:F5:BA:AE:D9:DB:A6:8A:A8:91:97:D1:DB:C3:18:F2 Authority key identifier: FC:4C:51:2F:E2:88:AC:6A:63:10:7D:00:41:44:34:32:9C:43:A2:84 Certificate issuer: /CN=fc4c512fe288ac6a63107d00414434329c43a284 Certificate serial: 019C43902F9A4B81BE958FDFD067776F65E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft Manifest number: 1402 Signing time: Mon 09 Feb 2026 18:00:48 +0000 Manifest this update: Mon 09 Feb 2026 18:00:48 +0000 Manifest next update: Tue 10 Feb 2026 18:00:48 +0000 Files and hashes: 1: RtGphWb-n-NKPg4VsQrMZNJw1YQ.roa (hash: 34EHgphrwj4YxmqwBGDa+7QYhkgQ4fOpOeCf2tXVnG4=) 2: _ExRL-KIrGpjEH0AQUQ0MpxDooQ.crl (hash: ARjRgVqxHEdGqyml3bc/Wnhvl8roNMk9l0ysUmPl9Ak=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.crl rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft rsync://rpki.ripe.net/repository/DEFAULT/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:2f:9a:4b:81:be:95:8f:df:d0:67:77:6f:65:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc4c512fe288ac6a63107d00414434329c43a284 Validity Not Before: Feb 9 18:00:48 2026 GMT Not After : Feb 10 18:00:48 2026 GMT Subject: CN=87e535fe88f5baaed9dba68aa89197d1dbc318f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a2:f6:90:6b:9b:de:18:18:a2:1a:df:28:97: 12:23:c6:57:c8:72:b2:fd:82:e1:1b:71:2d:0e:41: 38:af:5b:f1:64:39:c8:d7:89:1f:2b:7d:6a:99:1f: 1b:22:f5:7d:52:9c:44:da:7d:83:75:ad:de:0f:8d: 7e:50:fc:a9:f5:42:f8:f7:62:c1:eb:26:d9:2b:8c: 8d:63:66:8d:2f:bf:d1:14:dc:6f:c9:13:b6:34:83: 30:8d:2d:3d:b9:1c:64:e6:f6:20:23:ea:fd:94:b6: 44:4f:a2:ee:54:13:05:cc:86:3e:89:cd:60:18:e1: 37:68:b6:40:74:87:32:bf:17:91:d6:f7:65:1c:e5: 45:a4:87:13:20:53:36:d3:56:b5:d8:48:35:4e:d5: c5:ce:50:f1:48:d1:3e:3f:57:cb:76:78:32:d8:d0: 20:c8:f9:9a:85:1e:11:46:a7:84:62:c7:5e:13:b6: f0:43:0f:36:93:fd:36:30:a5:80:69:4a:16:1d:3e: 25:98:0b:d7:df:77:34:fe:1c:7e:94:7c:b0:6b:7b: 2d:85:9b:03:42:ac:c8:a5:53:12:d5:62:49:ec:70: 18:d8:4c:00:9a:86:7c:75:cc:11:56:85:14:b6:3a: 50:93:e1:de:f9:09:6e:37:ed:b4:97:0b:59:fb:bf: 9e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:E5:35:FE:88:F5:BA:AE:D9:DB:A6:8A:A8:91:97:D1:DB:C3:18:F2 X509v3 Authority Key Identifier: keyid:FC:4C:51:2F:E2:88:AC:6A:63:10:7D:00:41:44:34:32:9C:43:A2:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:85:63:1e:10:0a:69:17:10:bc:3d:55:70:c4:77:ef:52:e2: da:77:1c:82:43:de:a3:2c:1b:94:a6:58:47:f2:e0:e3:23:e6: b5:68:07:c2:14:a3:55:db:8c:a2:e7:8d:b6:f0:b7:2c:5f:be: 0f:c7:1d:3e:cf:7e:53:9b:fc:f5:11:7f:8d:d7:45:44:a9:b9: 01:5c:62:82:9a:1f:a6:29:2d:3a:cb:5f:31:ca:1f:05:46:45: 9c:c2:38:7f:2f:b9:3f:81:e3:71:55:0f:ab:d5:92:be:8a:2a: 98:7f:f1:42:f4:f9:41:69:8d:3b:4f:dc:4c:6f:63:5b:37:04: b8:13:4e:fa:d2:c0:f6:73:c2:1b:6c:10:19:47:97:20:de:ce: 43:17:93:e2:79:cc:bb:0d:77:15:39:26:f5:dd:22:07:bd:41: 93:fe:df:3b:ff:2d:01:6a:dc:3f:ef:e5:a1:d5:9a:89:00:56: 49:e6:48:65:d5:09:3f:4b:1c:2e:de:24:d4:47:e4:58:b0:87: 0c:a9:91:0d:05:6a:49:9c:73:6e:d1:f2:a0:bc:03:5c:ce:cc: 71:e2:13:ca:ec:b4:f0:c6:ec:a4:6c:71:11:27:58:c5:37:b0: 1c:90:53:21:0d:8e:7a:a3:43:dc:8e:d1:e8:7c:d3:75:a8:5b: ac:9c:1b:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkC+aS4G+lY/f0Gd3b2XmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjNGM1MTJmZTI4OGFjNmE2MzEwN2QwMDQxNDQzNDMyOWM0 M2EyODQwHhcNMjYwMjA5MTgwMDQ4WhcNMjYwMjEwMTgwMDQ4WjAzMTEwLwYDVQQD Eyg4N2U1MzVmZTg4ZjViYWFlZDlkYmE2OGFhODkxOTdkMWRiYzMxOGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qL2kGub3hgYohrfKJcSI8ZXyHKy /YLhG3EtDkE4r1vxZDnI14kfK31qmR8bIvV9UpxE2n2Dda3eD41+UPyp9UL492LB 6ybZK4yNY2aNL7/RFNxvyRO2NIMwjS09uRxk5vYgI+r9lLZET6LuVBMFzIY+ic1g GOE3aLZAdIcyvxeR1vdlHOVFpIcTIFM201a12Eg1TtXFzlDxSNE+P1fLdngy2NAg yPmahR4RRqeEYsdeE7bwQw82k/02MKWAaUoWHT4lmAvX33c0/hx+lHywa3sthZsD QqzIpVMS1WJJ7HAY2EwAmoZ8dcwRVoUUtjpQk+He+QluN+20lwtZ+7+eHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIflNf6I9bqu2dumiqiRl9HbwxjyMB8GA1UdIwQY MBaAFPxMUS/iiKxqYxB9AEFENDKcQ6KEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0V4UkwtS0lyR3BqRUgwQVFVUTBNcHhEb29RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yMDFlNDUtYjE2Yy00Nzc5LTg3NGEt MzE1YzAyYTU5ZmE1LzEvX0V4UkwtS0lyR3BqRUgwQVFVUTBNcHhEb29RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8yMDFlNDUtYjE2Yy00Nzc5LTg3NGEtMzE1YzAyYTU5ZmE1 LzEvX0V4UkwtS0lyR3BqRUgwQVFVUTBNcHhEb29RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVIVjHhAK aRcQvD1VcMR371Li2nccgkPeoywblKZYR/Lg4yPmtWgHwhSjVduMoueNtvC3LF++ D8cdPs9+U5v89RF/jddFRKm5AVxigpofpiktOstfMcofBUZFnMI4fy+5P4HjcVUP q9WSvooqmH/xQvT5QWmNO0/cTG9jWzcEuBNO+tLA9nPCG2wQGUeXIN7OQxeT4nnM uw13FTkm9d0iB71Bk/7fO/8tAWrcP+/lodWaiQBWSeZIZdUJP0scLt4k1EfkWLCH DKmRDQVqSZxzbtHyoLwDXM7MceITyuy08MbspGxxESdYxTewHJBTIQ2OeqND3I7R 6HzTdahbrJwb+g== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:14 2026 by rpki-client