This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft File: ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft (raw, json) Hash identifier: aFpiBtrMzwx8jMDwnCg2IzpWR3dMs7j/y90qwsViewc= Subject key identifier: D5:7F:98:1F:77:E0:C3:CB:54:6D:2E:47:91:44:87:15:DC:4D:E5:4B Authority key identifier: 12:B3:00:8E:DB:7C:C9:D6:1D:AF:65:F0:02:26:88:AC:73:25:F0:3A Certificate issuer: /CN=12b3008edb7cc9d61daf65f0022688ac7325f03a Certificate serial: 019C432275189C1C9E61EE3A72F13EB44892 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErMAjtt8ydYdr2XwAiaIrHMl8Do.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft Manifest number: 0B95 Signing time: Mon 09 Feb 2026 16:00:57 +0000 Manifest this update: Mon 09 Feb 2026 16:00:57 +0000 Manifest next update: Tue 10 Feb 2026 16:00:57 +0000 Files and hashes: 1: ErMAjtt8ydYdr2XwAiaIrHMl8Do.crl (hash: v9g/W6h12FSj2j7uunoh3pZfZ1M/sZ7rJtdPxCwhqyg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft rsync://rpki.ripe.net/repository/DEFAULT/ErMAjtt8ydYdr2XwAiaIrHMl8Do.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:75:18:9c:1c:9e:61:ee:3a:72:f1:3e:b4:48:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12b3008edb7cc9d61daf65f0022688ac7325f03a Validity Not Before: Feb 9 16:00:57 2026 GMT Not After : Feb 10 16:00:57 2026 GMT Subject: CN=d57f981f77e0c3cb546d2e4791448715dc4de54b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b7:69:34:96:f0:7f:d6:a4:c9:e8:e5:f5:78: ea:4e:3b:67:c8:60:6b:58:a0:aa:7c:29:0e:07:70: a1:ab:00:0e:e5:20:18:80:38:29:ee:71:4f:48:1d: 77:fa:bb:5b:d4:d1:08:81:16:e3:39:c2:07:06:43: 55:bf:6a:36:45:ef:9b:d9:67:79:e3:c7:13:50:ff: 03:cb:de:8a:7d:76:6f:24:05:97:ef:ab:8a:e6:d0: c1:61:b8:63:a8:ce:25:f5:90:8e:3e:1b:d9:f2:03: a4:d5:8d:60:2f:15:e3:11:da:de:df:aa:19:8c:d3: 5d:ff:af:d3:cb:2d:43:52:34:12:ff:39:46:1c:d0: 12:a1:d3:62:28:84:4a:0f:b1:18:31:17:c4:66:3c: 05:d0:1b:ab:fb:d7:4a:ac:41:71:8a:7c:47:7b:77: f5:7b:4f:5f:f3:e1:19:0c:b7:15:0d:a7:3a:57:da: 44:76:29:9d:0d:47:02:83:2d:3b:d1:3a:1e:f5:6b: d8:a1:d8:c5:81:fc:01:4d:f4:3e:d9:43:8c:2b:1c: 90:9a:f4:1a:d5:28:45:79:01:79:1c:bf:05:cf:2d: 3f:25:47:30:f4:f2:0e:b2:7e:65:10:8c:f6:f4:62: fb:f2:2c:55:78:0d:b1:ff:7c:00:98:c2:f7:64:a8: 30:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:7F:98:1F:77:E0:C3:CB:54:6D:2E:47:91:44:87:15:DC:4D:E5:4B X509v3 Authority Key Identifier: keyid:12:B3:00:8E:DB:7C:C9:D6:1D:AF:65:F0:02:26:88:AC:73:25:F0:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErMAjtt8ydYdr2XwAiaIrHMl8Do.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:3f:0c:d3:78:f0:63:0a:50:dc:77:27:83:d5:9a:8e:29:af: 6b:3c:95:92:0c:99:a7:2d:a4:e2:85:c8:78:08:53:39:9b:39: 2e:12:62:97:ce:06:6b:8f:bb:0a:18:bc:11:08:66:8a:f7:2f: 33:b8:92:35:d5:58:58:f9:0a:9f:34:b1:34:dd:a3:42:3d:af: f9:af:ab:d3:13:d8:6a:74:07:d9:ca:97:7b:1b:cf:81:68:05: 8a:8c:f2:c4:75:d6:6f:a8:c2:61:b5:26:2a:f7:5a:a5:50:be: ad:2f:6d:6e:15:e1:0e:43:7b:d7:80:ba:a0:0d:8b:a6:2c:aa: ec:df:1f:b4:1b:cf:6b:9a:28:f3:7f:c0:02:9c:4f:23:e0:74: 14:f0:f2:03:c1:68:20:92:5b:7d:a0:07:3b:80:d2:56:9a:4e: 3b:4b:49:37:b0:8c:92:6a:57:38:cb:25:9a:79:c8:6a:77:19: fb:bb:45:b0:44:a5:cc:b1:09:34:eb:0e:7d:54:22:8a:95:88: ee:43:91:29:06:e6:f2:5d:2b:d1:aa:92:9f:89:f7:98:3f:d2: c8:46:8d:07:42:97:10:03:f5:a3:c5:ed:44:0b:28:a0:9a:97: 47:97:62:5a:9c:7c:e6:cb:d5:02:60:cb:22:c2:a1:4a:42:52: 75:69:1a:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDInUYnByeYe46cvE+tEiSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYjMwMDhlZGI3Y2M5ZDYxZGFmNjVmMDAyMjY4OGFjNzMy NWYwM2EwHhcNMjYwMjA5MTYwMDU3WhcNMjYwMjEwMTYwMDU3WjAzMTEwLwYDVQQD EyhkNTdmOTgxZjc3ZTBjM2NiNTQ2ZDJlNDc5MTQ0ODcxNWRjNGRlNTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrdpNJbwf9akyejl9XjqTjtnyGBr WKCqfCkOB3ChqwAO5SAYgDgp7nFPSB13+rtb1NEIgRbjOcIHBkNVv2o2Re+b2Wd5 48cTUP8Dy96KfXZvJAWX76uK5tDBYbhjqM4l9ZCOPhvZ8gOk1Y1gLxXjEdre36oZ jNNd/6/Tyy1DUjQS/zlGHNASodNiKIRKD7EYMRfEZjwF0Bur+9dKrEFxinxHe3f1 e09f8+EZDLcVDac6V9pEdimdDUcCgy070Toe9WvYodjFgfwBTfQ+2UOMKxyQmvQa 1ShFeQF5HL8Fzy0/JUcw9PIOsn5lEIz29GL78ixVeA2x/3wAmML3ZKgwpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNV/mB934MPLVG0uR5FEhxXcTeVLMB8GA1UdIwQY MBaAFBKzAI7bfMnWHa9l8AImiKxzJfA6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXJNQWp0dDh5ZFlkcjJYd0FpYUlySE1sOERvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kMDg5M2EtMTUyNi00Yzc4LTlkODkt MDhhY2RlMzJlNjY0LzEvRXJNQWp0dDh5ZFlkcjJYd0FpYUlySE1sOERvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9kMDg5M2EtMTUyNi00Yzc4LTlkODktMDhhY2RlMzJlNjY0 LzEvRXJNQWp0dDh5ZFlkcjJYd0FpYUlySE1sOERvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFj8M03jw YwpQ3Hcng9WajimvazyVkgyZpy2k4oXIeAhTOZs5LhJil84Ga4+7Chi8EQhmivcv M7iSNdVYWPkKnzSxNN2jQj2v+a+r0xPYanQH2cqXexvPgWgFiozyxHXWb6jCYbUm KvdapVC+rS9tbhXhDkN714C6oA2Lpiyq7N8ftBvPa5oo83/AApxPI+B0FPDyA8Fo IJJbfaAHO4DSVppOO0tJN7CMkmpXOMslmnnIancZ+7tFsESlzLEJNOsOfVQiipWI 7kORKQbm8l0r0aqSn4n3mD/SyEaNB0KXEAP1o8XtRAsooJqXR5diWpx85svVAmDL IsKhSkJSdWkaZA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:29 2026 by rpki-client