This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft File: e8kubfMbNUWhlv4DW8taJTBqf1Q.mft (raw, json) Hash identifier: XrishLWye8Un9O5cL51jK0++wiGeceDhteu4wMx6SfI= Subject key identifier: 09:A1:48:49:3A:A2:ED:98:C3:EB:69:5C:E0:C6:D9:E5:AB:EA:2E:59 Authority key identifier: 7B:C9:2E:6D:F3:1B:35:45:A1:96:FE:03:5B:CB:5A:25:30:6A:7F:54 Certificate issuer: /CN=7bc92e6df31b3545a196fe035bcb5a25306a7f54 Certificate serial: 019C43226D83B782DC3A1C99AEF7F523EAC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8kubfMbNUWhlv4DW8taJTBqf1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft Manifest number: 0896 Signing time: Mon 09 Feb 2026 16:00:55 +0000 Manifest this update: Mon 09 Feb 2026 16:00:55 +0000 Manifest next update: Tue 10 Feb 2026 16:00:55 +0000 Files and hashes: 1: e8kubfMbNUWhlv4DW8taJTBqf1Q.crl (hash: tRfNKaWBkkMQLNtLf1Stk7M+5kopeVUDwZ3czpzANYA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/e8kubfMbNUWhlv4DW8taJTBqf1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:6d:83:b7:82:dc:3a:1c:99:ae:f7:f5:23:ea:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bc92e6df31b3545a196fe035bcb5a25306a7f54 Validity Not Before: Feb 9 16:00:55 2026 GMT Not After : Feb 10 16:00:55 2026 GMT Subject: CN=09a148493aa2ed98c3eb695ce0c6d9e5abea2e59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:74:4c:c5:f4:d0:8e:27:c4:13:ea:fa:ea:fb: 81:fd:45:9a:94:84:ac:2f:61:03:49:1b:58:52:2a: 90:1e:3b:3c:6e:2c:83:c8:92:76:85:8b:7d:de:5f: 8b:58:5b:13:f8:de:8a:c5:f8:cb:c1:f4:30:46:4b: a3:d5:26:b9:36:e3:7d:d6:f4:aa:ab:a0:36:8c:b2: fb:25:a3:4b:ce:1f:aa:c5:5f:19:c5:bc:7c:c5:71: d3:7f:96:94:cc:cc:2a:d0:75:44:22:9f:1d:c7:5b: 72:58:77:2b:52:e2:b6:e9:f3:8f:c3:90:9f:76:0f: 62:b5:4f:1d:ff:e6:37:6a:ef:b8:e1:6c:98:7b:e6: 7a:a5:72:c4:f3:31:17:8c:1f:48:9c:21:50:54:f4: 2a:74:a0:e5:56:82:03:4b:f1:7b:9d:c5:af:4b:61: f9:53:da:5c:24:dc:af:9a:d2:6d:dd:41:5e:8c:68: 62:32:52:43:19:7e:7b:dd:35:98:b8:0d:bf:6b:8f: 1a:fa:60:e9:d7:9c:40:dd:e8:3f:6c:74:0d:6a:d8: 60:8d:98:75:3b:45:11:46:e4:3a:3d:50:7a:04:89: db:a1:58:78:43:57:be:1a:06:21:c0:80:88:0b:b1: d7:f1:48:ec:31:2e:b6:82:91:7e:05:8d:32:58:ff: 70:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A1:48:49:3A:A2:ED:98:C3:EB:69:5C:E0:C6:D9:E5:AB:EA:2E:59 X509v3 Authority Key Identifier: keyid:7B:C9:2E:6D:F3:1B:35:45:A1:96:FE:03:5B:CB:5A:25:30:6A:7F:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8kubfMbNUWhlv4DW8taJTBqf1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:85:81:e8:17:4a:0f:9d:c9:4b:b6:10:7d:25:b6:21:0e:c8: 2e:d1:2a:62:de:47:c7:a7:ad:50:17:c0:a6:6f:9b:3f:76:31: aa:d9:79:03:bb:17:ab:dd:a9:58:45:e5:10:30:71:83:6c:4d: 1c:f2:1f:7a:02:a8:72:0d:ef:61:4b:46:59:8b:b0:e6:3d:cd: d6:8c:61:70:22:c3:e3:c2:33:0e:32:e4:04:0f:63:07:58:c5: d3:7c:e6:ef:43:9f:d3:98:0b:dd:a6:0a:45:c2:d9:97:1d:8c: c0:11:a4:eb:88:28:d7:1b:ff:28:60:ae:fb:1d:dd:51:07:54: 9c:00:e0:92:db:55:3d:33:37:19:05:95:d0:2a:ed:06:b1:20: 60:80:de:a9:f0:15:5d:9e:1f:83:39:13:d1:ab:fa:ec:e6:18: d0:df:4c:9d:da:35:ac:4e:63:6c:9e:73:27:a6:44:4b:ce:3c: 88:65:ab:5b:40:7d:e6:3d:b9:27:97:7b:aa:2e:a2:66:e5:f0: a6:39:a1:6b:77:73:1d:74:4e:18:72:8d:48:1b:26:f2:8a:4f: 5e:c6:52:3c:16:a2:79:df:3e:22:90:e5:37:d5:19:88:0a:c9: a3:3c:99:fc:f2:16:26:ab:8c:ad:8b:73:7c:94:5d:29:fa:28: 97:1b:3a:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIm2Dt4LcOhyZrvf1I+rAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiYzkyZTZkZjMxYjM1NDVhMTk2ZmUwMzViY2I1YTI1MzA2 YTdmNTQwHhcNMjYwMjA5MTYwMDU1WhcNMjYwMjEwMTYwMDU1WjAzMTEwLwYDVQQD EygwOWExNDg0OTNhYTJlZDk4YzNlYjY5NWNlMGM2ZDllNWFiZWEyZTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6XRMxfTQjifEE+r66vuB/UWalISs L2EDSRtYUiqQHjs8biyDyJJ2hYt93l+LWFsT+N6KxfjLwfQwRkuj1Sa5NuN91vSq q6A2jLL7JaNLzh+qxV8Zxbx8xXHTf5aUzMwq0HVEIp8dx1tyWHcrUuK26fOPw5Cf dg9itU8d/+Y3au+44WyYe+Z6pXLE8zEXjB9InCFQVPQqdKDlVoIDS/F7ncWvS2H5 U9pcJNyvmtJt3UFejGhiMlJDGX573TWYuA2/a48a+mDp15xA3eg/bHQNathgjZh1 O0URRuQ6PVB6BInboVh4Q1e+GgYhwICIC7HX8UjsMS62gpF+BY0yWP9wOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAmhSEk6ou2Yw+tpXODG2eWr6i5ZMB8GA1UdIwQY MBaAFHvJLm3zGzVFoZb+A1vLWiUwan9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZThrdWJmTWJOVVdobHY0RFc4dGFKVEJxZjFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9jMTkwYjEtNTYyZi00NWIxLTlhMDct NGJkYjU4ODEyMDg2LzEvZThrdWJmTWJOVVdobHY0RFc4dGFKVEJxZjFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9jMTkwYjEtNTYyZi00NWIxLTlhMDctNGJkYjU4ODEyMDg2 LzEvZThrdWJmTWJOVVdobHY0RFc4dGFKVEJxZjFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZIWB6BdK D53JS7YQfSW2IQ7ILtEqYt5Hx6etUBfApm+bP3Yxqtl5A7sXq92pWEXlEDBxg2xN HPIfegKocg3vYUtGWYuw5j3N1oxhcCLD48IzDjLkBA9jB1jF03zm70Of05gL3aYK RcLZlx2MwBGk64go1xv/KGCu+x3dUQdUnADgkttVPTM3GQWV0CrtBrEgYIDeqfAV XZ4fgzkT0av67OYY0N9Mndo1rE5jbJ5zJ6ZES848iGWrW0B95j25J5d7qi6iZuXw pjmha3dzHXROGHKNSBsm8opPXsZSPBaied8+IpDlN9UZiArJozyZ/PIWJquMrYtz fJRdKfoolxs6WQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:53 2026 by rpki-client