This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft File: eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft (raw, json) Hash identifier: yqbsWoRjD6RVtx2QwMqQ6VhBRn9udQU+jxU124yCiSc= Subject key identifier: 81:7D:C9:0D:45:37:71:41:E9:D9:4F:CD:A6:F2:A5:30:9F:A2:D0:49 Authority key identifier: 79:61:AD:73:1C:4C:75:25:F8:85:C5:D3:76:4D:4C:E0:F0:E8:C9:8F Certificate issuer: /CN=7961ad731c4c7525f885c5d3764d4ce0f0e8c98f Certificate serial: 019C36425F43205ACEC56CA0C5C26F91DCA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWGtcxxMdSX4hcXTdk1M4PDoyY8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft Manifest number: 0BA9 Signing time: Sat 07 Feb 2026 04:00:45 +0000 Manifest this update: Sat 07 Feb 2026 04:00:45 +0000 Manifest next update: Sun 08 Feb 2026 04:00:45 +0000 Files and hashes: 1: eWGtcxxMdSX4hcXTdk1M4PDoyY8.crl (hash: RGeR2ilrbf116MOlGo0sl6soWxEtN7qa6DE03I5Lu94=) 2: xd8WtTpNSiw3OPvDq9rsEjInsvA.roa (hash: fZ0V/o/vI20M9OPDqf1/6QRLbpnmYCprw2uInkjQ1rQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft rsync://rpki.ripe.net/repository/DEFAULT/eWGtcxxMdSX4hcXTdk1M4PDoyY8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Feb 2026 04:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:36:42:5f:43:20:5a:ce:c5:6c:a0:c5:c2:6f:91:dc:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7961ad731c4c7525f885c5d3764d4ce0f0e8c98f Validity Not Before: Feb 7 04:00:45 2026 GMT Not After : Feb 8 04:00:45 2026 GMT Subject: CN=817dc90d45377141e9d94fcda6f2a5309fa2d049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3b:76:78:22:58:77:e1:10:8d:49:2e:e1:0b: 63:bc:0f:4d:16:0f:b2:81:1d:3e:03:da:89:d4:60: 04:49:56:75:6c:70:bd:89:d7:5c:0f:61:a2:8b:d8: d0:5c:04:7c:24:28:f5:6c:c1:f8:e4:3d:06:d7:db: 9c:df:3f:e0:d4:04:e0:a9:33:6f:d1:4e:13:c3:b4: 71:b1:aa:a6:c2:3c:a6:5d:8a:f8:a0:00:6e:d7:24: 26:da:9f:2d:5c:79:62:8f:8e:e6:7f:24:99:2f:5a: 53:5d:12:2a:bb:39:b3:1c:ef:11:6e:6b:52:b9:ca: a5:24:66:0c:fc:56:48:9b:8f:0f:b6:db:04:62:88: 64:15:58:1d:68:88:5a:cf:27:5d:9e:50:7d:4e:47: 52:2f:02:e4:e3:a5:73:f8:17:6c:93:ee:21:ed:10: b1:c7:f4:d6:2e:f4:aa:e1:f5:42:64:68:d7:4c:15: 93:c2:bf:5b:88:61:14:e0:1e:46:f1:05:07:e5:cb: 20:d4:87:ef:8b:0b:3c:37:a2:bd:6d:12:ad:4a:4d: 27:6b:0e:b6:37:cd:e5:68:ba:87:5d:8e:59:c3:d5: 90:6a:9b:10:82:f5:fa:c6:f6:0f:ae:7b:75:0e:a7: a2:c2:b8:c7:1c:55:e2:55:83:9a:04:85:ea:28:b6: 86:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:7D:C9:0D:45:37:71:41:E9:D9:4F:CD:A6:F2:A5:30:9F:A2:D0:49 X509v3 Authority Key Identifier: keyid:79:61:AD:73:1C:4C:75:25:F8:85:C5:D3:76:4D:4C:E0:F0:E8:C9:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWGtcxxMdSX4hcXTdk1M4PDoyY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:f9:a5:9f:8d:87:02:97:f6:98:35:b0:9b:10:c8:25:c5:b3: 88:6f:b1:9b:49:50:d5:ca:df:5e:0f:db:bf:a7:38:37:ad:27: c1:31:88:b1:f3:b5:0b:60:4a:3d:22:9e:d9:f1:13:0c:21:46: 0c:c6:82:1e:a8:99:a9:ff:f6:5f:0c:a9:f0:07:67:3e:86:f8: 13:42:b4:c9:49:75:fc:ed:f7:b9:94:e3:6c:e0:ba:b3:8a:f2: 8f:16:11:c2:3b:b7:ce:6c:b1:eb:70:2d:3e:30:6a:bd:f7:dc: 62:c5:f0:78:25:63:9b:33:de:21:08:64:a8:45:58:db:34:d0: f4:72:36:74:58:9d:b1:75:fe:5c:44:fc:11:05:9f:49:22:ad: b3:01:87:ad:0b:87:46:a7:58:8d:f6:45:b5:ca:46:b5:05:ee: 03:2f:77:da:06:23:8e:e6:a8:06:c6:78:a5:f8:ae:77:16:8e: b8:17:97:7b:36:fc:0a:7f:b6:05:5a:cc:ce:4b:d0:97:2a:9e: 91:f3:a5:f9:99:67:33:91:ca:84:7c:c1:25:a8:bf:0e:cf:ba: ca:ee:ff:76:79:cf:83:ae:69:74:c1:eb:26:f0:15:62:52:a3: 89:00:81:f2:94:62:ce:54:59:36:52:37:b3:ef:7c:8b:04:19: e7:68:1c:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZw2Ql9DIFrOxWygxcJvkdynMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5NjFhZDczMWM0Yzc1MjVmODg1YzVkMzc2NGQ0Y2UwZjBl OGM5OGYwHhcNMjYwMjA3MDQwMDQ1WhcNMjYwMjA4MDQwMDQ1WjAzMTEwLwYDVQQD Eyg4MTdkYzkwZDQ1Mzc3MTQxZTlkOTRmY2RhNmYyYTUzMDlmYTJkMDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzt2eCJYd+EQjUku4QtjvA9NFg+y gR0+A9qJ1GAESVZ1bHC9iddcD2Gii9jQXAR8JCj1bMH45D0G19uc3z/g1ATgqTNv 0U4Tw7RxsaqmwjymXYr4oABu1yQm2p8tXHlij47mfySZL1pTXRIquzmzHO8RbmtS ucqlJGYM/FZIm48PttsEYohkFVgdaIhazyddnlB9TkdSLwLk46Vz+Bdsk+4h7RCx x/TWLvSq4fVCZGjXTBWTwr9biGEU4B5G8QUH5csg1Ifviws8N6K9bRKtSk0naw62 N83laLqHXY5Zw9WQapsQgvX6xvYPrnt1DqeiwrjHHFXiVYOaBIXqKLaGSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIF9yQ1FN3FB6dlPzabypTCfotBJMB8GA1UdIwQY MBaAFHlhrXMcTHUl+IXF03ZNTODw6MmPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVdHdGN4eE1kU1g0aGNYVGRrMU00UERveVk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9jYjE3Y2EtZDAyZi00MDIyLWFkMDYt OGFhY2MxZjQ4MTA4LzEvZVdHdGN4eE1kU1g0aGNYVGRrMU00UERveVk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9jYjE3Y2EtZDAyZi00MDIyLWFkMDYtOGFhY2MxZjQ4MTA4 LzEvZVdHdGN4eE1kU1g0aGNYVGRrMU00UERveVk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtPmln42H Apf2mDWwmxDIJcWziG+xm0lQ1crfXg/bv6c4N60nwTGIsfO1C2BKPSKe2fETDCFG DMaCHqiZqf/2Xwyp8AdnPob4E0K0yUl1/O33uZTjbOC6s4ryjxYRwju3zmyx63At PjBqvffcYsXweCVjmzPeIQhkqEVY2zTQ9HI2dFidsXX+XET8EQWfSSKtswGHrQuH RqdYjfZFtcpGtQXuAy932gYjjuaoBsZ4pfiudxaOuBeXezb8Cn+2BVrMzkvQlyqe kfOl+ZlnM5HKhHzBJai/Ds+6yu7/dnnPg65pdMHrJvAVYlKjiQCB8pRizlRZNlI3 s+98iwQZ52gcpA== -----END CERTIFICATE-----Generated at Sat Feb 7 13:09:08 2026 by rpki-client