This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.mft File: eX87nykJe6W_ddRkbgJZ9RxCGlg.mft (raw, json) Hash identifier: lk8PdPrHDJjv8a9ACgFj55O69MEQkZfFdIaGYKhNxGc= Subject key identifier: DD:F4:45:55:70:C2:98:24:53:15:85:68:CB:E6:12:78:D2:39:98:91 Authority key identifier: 79:7F:3B:9F:29:09:7B:A5:BF:75:D4:64:6E:02:59:F5:1C:42:1A:58 Certificate issuer: /CN=797f3b9f29097ba5bf75d4646e0259f51c421a58 Certificate serial: 019C4133F9C79034FB3C4111A31E91521282 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eX87nykJe6W_ddRkbgJZ9RxCGlg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.mft Manifest number: 0EE0 Signing time: Mon 09 Feb 2026 07:00:51 +0000 Manifest this update: Mon 09 Feb 2026 07:00:51 +0000 Manifest next update: Tue 10 Feb 2026 07:00:51 +0000 Files and hashes: 1: eX87nykJe6W_ddRkbgJZ9RxCGlg.crl (hash: YXo8X71GiDouG34IK8JcuujMuls2dT2otr5lDxnb+fA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.mft rsync://rpki.ripe.net/repository/DEFAULT/eX87nykJe6W_ddRkbgJZ9RxCGlg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:33:f9:c7:90:34:fb:3c:41:11:a3:1e:91:52:12:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=797f3b9f29097ba5bf75d4646e0259f51c421a58 Validity Not Before: Feb 9 07:00:51 2026 GMT Not After : Feb 10 07:00:51 2026 GMT Subject: CN=ddf4455570c2982453158568cbe61278d2399891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a8:7a:88:10:6a:90:ad:9d:ae:2f:86:69:02: bd:52:92:be:0b:9a:da:ec:8f:97:b5:46:70:a5:eb: c2:8b:91:93:38:e4:e1:a5:4c:c5:74:80:a3:19:9d: 7c:9a:d9:5d:eb:43:a5:c8:1d:c9:27:a8:11:76:89: fc:58:10:2e:4e:ed:1d:3b:78:54:53:41:0f:01:73: 63:14:a5:71:dc:cc:a5:6d:7e:86:ba:77:7e:6b:60: 56:7d:0e:71:a7:36:25:3b:47:85:47:c9:39:d4:63: 50:94:87:1c:6b:7c:43:2e:c4:61:9e:bc:e7:9f:b5: 14:fa:bb:15:ca:d8:ac:9a:3f:c2:5a:ce:a5:c9:cb: 25:19:e9:b5:ce:04:3d:f3:d9:5f:c2:69:6a:dd:b9: cd:63:b6:24:af:1e:63:f6:c8:02:48:0d:c4:d0:21: 4c:d9:ce:1c:d4:ac:b4:dd:ca:7f:45:29:88:a4:16: 08:de:f2:70:c6:54:ef:7c:34:bf:09:c3:e7:22:bf: 0b:ab:8a:3c:5d:52:59:d3:ea:ed:6e:5c:fe:7b:cb: 13:ad:96:66:96:ea:43:14:09:d9:c8:cd:45:19:8a: ab:b0:73:f6:2e:3c:d7:2d:2e:19:04:b4:5b:d7:14: eb:32:18:f4:dd:d3:15:13:37:8b:e8:05:62:bb:52: cd:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:F4:45:55:70:C2:98:24:53:15:85:68:CB:E6:12:78:D2:39:98:91 X509v3 Authority Key Identifier: keyid:79:7F:3B:9F:29:09:7B:A5:BF:75:D4:64:6E:02:59:F5:1C:42:1A:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eX87nykJe6W_ddRkbgJZ9RxCGlg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:34:f2:e2:27:f3:20:01:bf:e0:42:af:15:5b:66:0c:42:32: 19:1b:bc:a2:89:67:fa:6e:50:cb:6e:5f:c9:a3:5d:04:6c:db: 5b:4c:d8:2c:a1:41:76:1c:40:5f:3b:da:51:a4:ef:09:e4:28: 7d:38:c8:f0:aa:16:19:30:39:ca:4d:d3:29:3e:f6:b8:ec:13: 98:4c:5e:d7:cc:a7:70:9c:3c:0f:29:7e:28:a3:86:d1:98:2d: bb:04:bd:af:e4:f6:f4:7d:6c:7b:c5:42:72:fe:e5:40:c2:6e: 04:8c:61:72:a0:ad:9f:68:a0:8e:43:cd:6b:88:2d:ba:0d:6a: 42:ab:2d:58:6e:c7:52:46:a8:7a:66:f1:d5:f2:38:44:00:8e: 46:54:8e:7e:da:c2:0a:c5:c1:4d:6e:91:a3:26:a3:90:40:6c: 2d:d3:3f:c9:98:6e:8e:e5:8b:6d:7d:40:67:f2:74:9f:d7:3d: fb:75:b2:42:e5:b5:95:60:65:13:99:56:af:ff:04:c6:0e:8a: 36:7e:40:9b:da:57:99:f1:84:d8:c4:9b:81:53:60:95:c1:43: fb:fd:d8:66:da:a1:0f:ce:a9:4c:eb:59:fd:73:4d:fa:44:b2: bb:0c:e6:73:87:16:63:3a:db:e3:65:b3:7c:7e:61:ba:13:b1: 27:90:93:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBM/nHkDT7PEERox6RUhKCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5N2YzYjlmMjkwOTdiYTViZjc1ZDQ2NDZlMDI1OWY1MWM0 MjFhNTgwHhcNMjYwMjA5MDcwMDUxWhcNMjYwMjEwMDcwMDUxWjAzMTEwLwYDVQQD EyhkZGY0NDU1NTcwYzI5ODI0NTMxNTg1NjhjYmU2MTI3OGQyMzk5ODkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6h6iBBqkK2dri+GaQK9UpK+C5ra 7I+XtUZwpevCi5GTOOThpUzFdICjGZ18mtld60OlyB3JJ6gRdon8WBAuTu0dO3hU U0EPAXNjFKVx3MylbX6Gund+a2BWfQ5xpzYlO0eFR8k51GNQlIcca3xDLsRhnrzn n7UU+rsVytismj/CWs6lycslGem1zgQ989lfwmlq3bnNY7Ykrx5j9sgCSA3E0CFM 2c4c1Ky03cp/RSmIpBYI3vJwxlTvfDS/CcPnIr8Lq4o8XVJZ0+rtblz+e8sTrZZm lupDFAnZyM1FGYqrsHP2LjzXLS4ZBLRb1xTrMhj03dMVEzeL6AViu1LN2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN30RVVwwpgkUxWFaMvmEnjSOZiRMB8GA1UdIwQY MBaAFHl/O58pCXulv3XUZG4CWfUcQhpYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVg4N255a0plNldfZGRSa2JnSlo5UnhDR2xnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9lNjMzMjgtNDVhNS00Nzk4LWJjZjQt YzFhY2YwMTJiOWJjLzEvZVg4N255a0plNldfZGRSa2JnSlo5UnhDR2xnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9lNjMzMjgtNDVhNS00Nzk4LWJjZjQtYzFhY2YwMTJiOWJj LzEvZVg4N255a0plNldfZGRSa2JnSlo5UnhDR2xnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApDTy4ifz IAG/4EKvFVtmDEIyGRu8ooln+m5Qy25fyaNdBGzbW0zYLKFBdhxAXzvaUaTvCeQo fTjI8KoWGTA5yk3TKT72uOwTmExe18yncJw8Dyl+KKOG0ZgtuwS9r+T29H1se8VC cv7lQMJuBIxhcqCtn2igjkPNa4gtug1qQqstWG7HUkaoembx1fI4RACORlSOftrC CsXBTW6RoyajkEBsLdM/yZhujuWLbX1AZ/J0n9c9+3WyQuW1lWBlE5lWr/8Exg6K Nn5Am9pXmfGE2MSbgVNglcFD+/3YZtqhD86pTOtZ/XNN+kSyuwzmc4cWYzrb42Wz fH5huhOxJ5CTpw== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:55 2026 by rpki-client