This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.mft File: eQ7eZiID9FnpsZbSM4esKeSnxOU.mft (raw, json) Hash identifier: 99bXzWoMjwHbDXQhfqA2OJLoLn1MEGSNiDMUJuHtMKU= Subject key identifier: 36:51:FA:7E:18:53:47:A7:44:73:BA:9B:1A:E1:CA:1D:30:E8:74:55 Authority key identifier: 79:0E:DE:66:22:03:F4:59:E9:B1:96:D2:33:87:AC:29:E4:A7:C4:E5 Certificate issuer: /CN=790ede662203f459e9b196d23387ac29e4a7c4e5 Certificate serial: 019C435930748298A05D6466DBB26F9C1D62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQ7eZiID9FnpsZbSM4esKeSnxOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.mft Manifest number: 04DF Signing time: Mon 09 Feb 2026 17:00:44 +0000 Manifest this update: Mon 09 Feb 2026 17:00:44 +0000 Manifest next update: Tue 10 Feb 2026 17:00:44 +0000 Files and hashes: 1: eQ7eZiID9FnpsZbSM4esKeSnxOU.crl (hash: 7YsJWCYk+UNSdJIUA+LGg4eC2r0dcgrmuXqaZVVNrRs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.mft rsync://rpki.ripe.net/repository/DEFAULT/eQ7eZiID9FnpsZbSM4esKeSnxOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:30:74:82:98:a0:5d:64:66:db:b2:6f:9c:1d:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=790ede662203f459e9b196d23387ac29e4a7c4e5 Validity Not Before: Feb 9 17:00:44 2026 GMT Not After : Feb 10 17:00:44 2026 GMT Subject: CN=3651fa7e185347a74473ba9b1ae1ca1d30e87455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:97:4b:b2:9d:6b:98:24:b4:cb:7f:76:af:c6: de:af:f1:0a:41:ce:6e:a9:cc:10:7c:25:ed:8a:5f: ae:88:45:dd:94:41:b0:1b:f9:42:6c:f6:c2:8b:b0: 6a:d1:3e:3a:8d:74:39:f9:30:9a:e6:55:9a:a8:0a: 16:20:08:0d:53:23:93:40:c0:57:65:be:fb:b8:72: 62:fd:fd:83:a7:0e:3b:82:8a:8c:2b:e3:12:ae:e8: 2a:19:3d:88:99:1e:d7:3a:4e:cf:67:d7:c2:8a:d2: eb:b5:4f:64:ec:a4:79:51:7f:18:7d:c4:99:04:85: 1c:90:75:61:5a:64:bc:e8:c0:0a:db:e9:20:13:60: af:2b:fb:f0:cc:ea:b3:71:8f:93:e1:08:fd:e6:a3: 86:42:d6:b5:1e:d9:d4:70:25:70:1a:02:55:06:4b: 74:26:88:90:d2:b9:b2:ea:07:08:55:d4:cc:b9:22: 8e:50:c4:e2:51:06:c5:4b:e6:23:f8:b6:27:7b:2d: 07:40:d3:eb:46:af:1d:c8:e6:35:83:2c:d8:27:d4: 26:ab:a9:89:7a:52:7d:93:27:c1:7b:7a:c5:91:8e: 90:01:e1:2d:46:6b:21:90:6e:77:d5:7d:f1:75:26: 6f:9e:e8:17:79:3f:77:e4:48:30:fd:c0:f9:2b:e8: 10:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:51:FA:7E:18:53:47:A7:44:73:BA:9B:1A:E1:CA:1D:30:E8:74:55 X509v3 Authority Key Identifier: keyid:79:0E:DE:66:22:03:F4:59:E9:B1:96:D2:33:87:AC:29:E4:A7:C4:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ7eZiID9FnpsZbSM4esKeSnxOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:89:2d:b3:e7:a9:d8:ad:d6:5a:55:e1:5e:b4:f0:2b:1d:c8: 92:74:b1:d7:c8:47:67:45:cd:f9:3d:e7:8f:62:2e:eb:34:eb: 6c:d8:5a:d2:4b:4d:80:c9:6b:ca:15:c1:2e:8e:20:83:d2:6b: e1:9e:e3:92:55:1e:b9:d3:ff:ff:0c:3d:f5:37:1b:22:14:b6: ce:2f:7f:4e:aa:50:2c:7a:71:3c:18:a2:3d:7b:7f:8d:6d:ac: de:c4:ff:ac:89:12:57:d3:7d:00:b7:b6:04:2b:3f:77:5c:99: 30:b4:a8:9f:ae:75:42:d3:a0:4a:bc:7a:19:86:8f:11:b9:cc: 98:cc:61:53:85:69:26:bd:32:fd:50:5a:41:a7:8e:06:fe:13: 99:4e:dd:cd:0d:8f:73:7d:fa:a4:ab:d1:bb:48:f6:3c:ab:6c: 36:90:97:4f:1c:e5:c7:38:78:d4:d7:5e:2a:a9:27:f1:fb:2b: 38:f2:89:49:88:cd:05:7e:95:b3:5e:f8:b0:e3:96:42:71:78: 9f:8c:aa:bc:d2:ca:0a:5b:99:9d:f0:4c:91:46:ef:be:81:3b: ec:25:53:b1:76:0f:cc:7d:19:8c:23:63:c2:66:04:96:8a:f5: 59:2c:1d:5f:64:b2:d1:b9:22:3b:3d:ec:c7:5d:79:a8:66:ed: bd:d9:11:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWTB0gpigXWRm27JvnB1iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5MGVkZTY2MjIwM2Y0NTllOWIxOTZkMjMzODdhYzI5ZTRh N2M0ZTUwHhcNMjYwMjA5MTcwMDQ0WhcNMjYwMjEwMTcwMDQ0WjAzMTEwLwYDVQQD EygzNjUxZmE3ZTE4NTM0N2E3NDQ3M2JhOWIxYWUxY2ExZDMwZTg3NDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JdLsp1rmCS0y392r8ber/EKQc5u qcwQfCXtil+uiEXdlEGwG/lCbPbCi7Bq0T46jXQ5+TCa5lWaqAoWIAgNUyOTQMBX Zb77uHJi/f2Dpw47goqMK+MSrugqGT2ImR7XOk7PZ9fCitLrtU9k7KR5UX8YfcSZ BIUckHVhWmS86MAK2+kgE2CvK/vwzOqzcY+T4Qj95qOGQta1HtnUcCVwGgJVBkt0 JoiQ0rmy6gcIVdTMuSKOUMTiUQbFS+Yj+LYney0HQNPrRq8dyOY1gyzYJ9Qmq6mJ elJ9kyfBe3rFkY6QAeEtRmshkG531X3xdSZvnugXeT935Egw/cD5K+gQ3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDZR+n4YU0enRHO6mxrhyh0w6HRVMB8GA1UdIwQY MBaAFHkO3mYiA/RZ6bGW0jOHrCnkp8TlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVE3ZVppSUQ5Rm5wc1piU000ZXNLZVNueE9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS84MDM0MzEtYTc2Mi00ZmViLWJkZDMt YzVkNGMxNzhlY2I1LzEvZVE3ZVppSUQ5Rm5wc1piU000ZXNLZVNueE9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS84MDM0MzEtYTc2Mi00ZmViLWJkZDMtYzVkNGMxNzhlY2I1 LzEvZVE3ZVppSUQ5Rm5wc1piU000ZXNLZVNueE9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIIkts+ep 2K3WWlXhXrTwKx3IknSx18hHZ0XN+T3nj2Iu6zTrbNha0ktNgMlryhXBLo4gg9Jr 4Z7jklUeudP//ww99TcbIhS2zi9/TqpQLHpxPBiiPXt/jW2s3sT/rIkSV9N9ALe2 BCs/d1yZMLSon651QtOgSrx6GYaPEbnMmMxhU4VpJr0y/VBaQaeOBv4TmU7dzQ2P c336pKvRu0j2PKtsNpCXTxzlxzh41NdeKqkn8fsrOPKJSYjNBX6Vs174sOOWQnF4 n4yqvNLKCluZnfBMkUbvvoE77CVTsXYPzH0ZjCNjwmYElor1WSwdX2Sy0bkiOz3s x115qGbtvdkRsQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:53:33 2026 by rpki-client