This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.mft File: EmL32o_uXSp7zdQBSnCpJ9tJn6Q.mft (raw, json) Hash identifier: WutiKXnRS4VuN9WOxOmCJro4uKQwOk8Kk4fYmEV0cnw= Subject key identifier: 9D:B8:8E:0B:7B:38:BB:D5:21:A5:96:DB:36:BE:1C:D8:69:D0:FF:C6 Authority key identifier: 12:62:F7:DA:8F:EE:5D:2A:7B:CD:D4:01:4A:70:A9:27:DB:49:9F:A4 Certificate issuer: /CN=1262f7da8fee5d2a7bcdd4014a70a927db499fa4 Certificate serial: 019C42B4327CF0C3AD64BE57CA1377B77C40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.mft Manifest number: 1654 Signing time: Mon 09 Feb 2026 14:00:31 +0000 Manifest this update: Mon 09 Feb 2026 14:00:31 +0000 Manifest next update: Tue 10 Feb 2026 14:00:31 +0000 Files and hashes: 1: EmL32o_uXSp7zdQBSnCpJ9tJn6Q.crl (hash: GpsBZIy1BHyivftuGr/LVyAyfAbxF2cNMLPG2XATTYE=) 2: uTl0JvlxYYPXSlWv5UjY4JUTXms.roa (hash: vAyl07+E7ZfATYQNzl4ukqmCla5aJ3MshRD6eW95zyg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:32:7c:f0:c3:ad:64:be:57:ca:13:77:b7:7c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1262f7da8fee5d2a7bcdd4014a70a927db499fa4 Validity Not Before: Feb 9 14:00:31 2026 GMT Not After : Feb 10 14:00:31 2026 GMT Subject: CN=9db88e0b7b38bbd521a596db36be1cd869d0ffc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:14:0b:a8:fe:ec:d2:2a:0b:b0:4b:b2:5a:f9: 10:64:32:3f:99:73:f8:b9:40:ad:ae:fb:2e:37:1c: d2:6a:95:32:52:ff:fb:09:01:5c:36:a6:6b:36:40: 67:c1:bf:30:42:4b:41:43:1b:84:42:ee:d7:0c:e9: 83:70:4b:27:28:fe:2f:92:9d:c1:1f:1d:c7:9d:18: 3a:c7:15:15:36:0a:9c:a0:df:73:94:d3:aa:68:aa: e0:a3:1d:69:90:c4:35:08:16:79:9b:51:14:80:b3: eb:a4:3a:4b:e6:d6:76:10:91:21:5d:c2:06:93:9c: af:ef:44:45:2a:3d:59:22:c5:4a:e9:d2:cd:94:c1: 1f:a4:1d:b2:29:e8:6e:b8:17:2b:e8:38:58:24:48: 81:f4:81:ab:fb:c0:9a:d1:ac:f2:7a:a0:cc:1d:dd: ed:aa:5b:9a:ca:3b:c8:ad:03:68:72:7b:36:87:f7: 35:17:a5:aa:00:e9:ad:28:05:6b:3f:24:73:67:f4: f2:90:d0:17:ce:89:33:d2:77:4e:85:2a:17:a9:c9: 12:94:9f:05:12:90:1d:76:61:13:da:c9:f0:99:e1: e4:3d:36:3f:a2:47:bb:92:24:51:46:0b:ec:c8:49: b8:fb:e4:1c:29:cf:4e:2b:a9:5e:58:96:66:18:bd: a1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B8:8E:0B:7B:38:BB:D5:21:A5:96:DB:36:BE:1C:D8:69:D0:FF:C6 X509v3 Authority Key Identifier: keyid:12:62:F7:DA:8F:EE:5D:2A:7B:CD:D4:01:4A:70:A9:27:DB:49:9F:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:c4:3e:3a:d1:76:1d:84:37:f6:2f:ca:4a:df:b4:cd:6c:52: 64:04:38:b7:57:c5:b5:0d:62:11:a4:3c:ca:00:8e:06:d0:96: 1f:76:e1:48:0b:a9:02:65:eb:01:9f:04:42:64:bf:3d:97:48: c4:5c:23:9a:75:14:0d:db:c1:93:aa:6f:be:97:60:c9:06:48: bc:47:12:9f:8a:ed:7b:63:e5:a8:03:9e:4e:50:cb:79:01:7e: 46:db:28:a2:fe:6b:ab:83:32:e9:16:23:a8:c2:25:64:6c:49: 74:24:0b:0e:ff:17:12:54:3d:13:85:c4:09:4f:4f:18:5f:86: e9:b8:43:fd:ad:ee:16:14:d0:9a:9a:f4:1e:bd:77:bf:c9:b7: 00:26:15:2a:02:c5:3e:ac:80:a7:95:8e:fd:80:5b:d7:ab:ba: d7:2f:b9:79:b1:90:88:3e:61:81:5c:c7:fd:46:86:cb:cc:f1: 3a:64:36:8f:ca:cc:c2:9f:18:eb:ad:15:b0:df:3d:54:6c:17: 4f:80:48:9f:79:9d:0f:6a:d2:88:c0:f0:6a:af:90:bd:91:a7: 11:bb:4f:f8:6e:51:f9:a7:57:59:f4:ac:8a:ed:22:fd:ef:c0: db:67:79:70:80:15:d5:90:09:07:70:2f:ba:5f:78:b1:d0:a9: 4a:3d:46:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtDJ88MOtZL5XyhN3t3xAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNjJmN2RhOGZlZTVkMmE3YmNkZDQwMTRhNzBhOTI3ZGI0 OTlmYTQwHhcNMjYwMjA5MTQwMDMxWhcNMjYwMjEwMTQwMDMxWjAzMTEwLwYDVQQD Eyg5ZGI4OGUwYjdiMzhiYmQ1MjFhNTk2ZGIzNmJlMWNkODY5ZDBmZmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxQLqP7s0ioLsEuyWvkQZDI/mXP4 uUCtrvsuNxzSapUyUv/7CQFcNqZrNkBnwb8wQktBQxuEQu7XDOmDcEsnKP4vkp3B Hx3HnRg6xxUVNgqcoN9zlNOqaKrgox1pkMQ1CBZ5m1EUgLPrpDpL5tZ2EJEhXcIG k5yv70RFKj1ZIsVK6dLNlMEfpB2yKehuuBcr6DhYJEiB9IGr+8Ca0azyeqDMHd3t qluayjvIrQNocns2h/c1F6WqAOmtKAVrPyRzZ/TykNAXzokz0ndOhSoXqckSlJ8F EpAddmET2snwmeHkPTY/oke7kiRRRgvsyEm4++QcKc9OK6leWJZmGL2hEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ24jgt7OLvVIaWW2za+HNhp0P/GMB8GA1UdIwQY MBaAFBJi99qP7l0qe83UAUpwqSfbSZ+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW1MMzJvX3VYU3A3emRRQlNuQ3BKOXRKbjZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8zNWE4MDctYjI4ZC00NDJkLWJhYjAt YTYxMGQ3NWMzMmUyLzEvRW1MMzJvX3VYU3A3emRRQlNuQ3BKOXRKbjZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8zNWE4MDctYjI4ZC00NDJkLWJhYjAtYTYxMGQ3NWMzMmUy LzEvRW1MMzJvX3VYU3A3emRRQlNuQ3BKOXRKbjZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAacQ+OtF2 HYQ39i/KSt+0zWxSZAQ4t1fFtQ1iEaQ8ygCOBtCWH3bhSAupAmXrAZ8EQmS/PZdI xFwjmnUUDdvBk6pvvpdgyQZIvEcSn4rte2PlqAOeTlDLeQF+Rtsoov5rq4My6RYj qMIlZGxJdCQLDv8XElQ9E4XECU9PGF+G6bhD/a3uFhTQmpr0Hr13v8m3ACYVKgLF PqyAp5WO/YBb16u61y+5ebGQiD5hgVzH/UaGy8zxOmQ2j8rMwp8Y660VsN89VGwX T4BIn3mdD2rSiMDwaq+QvZGnEbtP+G5R+adXWfSsiu0i/e/A22d5cIAV1ZAJB3Av ul94sdCpSj1GMw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:45 2026 by rpki-client