This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft File: 95u9TEfb9fza_nkDH2kCWgI-W7s.mft (raw, json) Hash identifier: SuLyw7tPaJFOewyrwdqn/wi0enKNU7DDXaknEcCTp2Y= Subject key identifier: 1C:74:65:25:8D:16:1A:DB:1B:F5:03:39:AA:20:BE:80:E5:06:B6:A1 Authority key identifier: F7:9B:BD:4C:47:DB:F5:FC:DA:FE:79:03:1F:69:02:5A:02:3E:5B:BB Certificate issuer: /CN=f79bbd4c47dbf5fcdafe79031f69025a023e5bbb Certificate serial: 019C4358C7474ED52B131A16A1CB9CD2605D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95u9TEfb9fza_nkDH2kCWgI-W7s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft Manifest number: 28 Signing time: Mon 09 Feb 2026 17:00:17 +0000 Manifest this update: Mon 09 Feb 2026 17:00:17 +0000 Manifest next update: Tue 10 Feb 2026 17:00:17 +0000 Files and hashes: 1: 95u9TEfb9fza_nkDH2kCWgI-W7s.crl (hash: EABKky/QOD6WQro5H9sxDot+enEPfddONlejLTWKKi8=) 2: by0eY8jt_L5fx9W87L3CZluMFdU.roa (hash: hRQTXarZIjD/2yMGzFBr+0z1wRW53BZA15ZD3Lfkxvk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft rsync://rpki.ripe.net/repository/DEFAULT/95u9TEfb9fza_nkDH2kCWgI-W7s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:c7:47:4e:d5:2b:13:1a:16:a1:cb:9c:d2:60:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f79bbd4c47dbf5fcdafe79031f69025a023e5bbb Validity Not Before: Feb 9 17:00:17 2026 GMT Not After : Feb 10 17:00:17 2026 GMT Subject: CN=1c7465258d161adb1bf50339aa20be80e506b6a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:14:38:90:7a:0f:5f:46:39:99:fe:15:c5:d8: 44:13:ba:f6:44:44:05:c7:b1:c0:8e:86:c5:89:22: 83:8f:5d:c9:03:08:9c:b7:b4:62:3c:28:bb:ae:73: 54:f0:bc:7d:9a:f8:91:a9:4c:ae:9b:d7:34:be:c8: 02:f1:76:61:e0:9c:c1:89:b3:4d:79:40:09:48:07: 82:e4:13:5d:1a:47:ae:57:39:31:fa:2c:5d:b6:10: dd:f2:41:b1:cc:27:6f:e1:ec:1e:a4:66:41:98:73: 7d:b8:fd:81:b7:77:b0:3c:5b:3f:07:f3:2b:ac:1a: db:f3:27:42:e7:e4:5d:39:b7:01:ab:0d:96:11:21: 67:5d:97:83:c7:ac:de:de:e4:20:91:b8:25:43:90: b6:03:77:f0:99:f1:bd:45:59:c3:c1:6e:a4:9d:a6: 83:97:a6:42:4b:b6:60:8b:35:08:bd:4b:cc:6f:96: b3:f0:c6:66:2a:6b:9e:44:4a:8e:26:d5:70:ef:d4: 0d:af:bb:5d:01:9e:39:b1:18:43:5e:2a:aa:23:c6: 1b:64:eb:4e:1b:cf:4e:15:d7:3a:d2:cf:83:99:a0: 9a:ea:5f:de:6f:75:70:a0:a8:de:be:b9:2e:80:10: 78:4e:8a:94:96:48:a1:36:c9:83:a3:ed:5c:14:89: d2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:74:65:25:8D:16:1A:DB:1B:F5:03:39:AA:20:BE:80:E5:06:B6:A1 X509v3 Authority Key Identifier: keyid:F7:9B:BD:4C:47:DB:F5:FC:DA:FE:79:03:1F:69:02:5A:02:3E:5B:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95u9TEfb9fza_nkDH2kCWgI-W7s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:62:ed:78:ae:b6:7b:c6:35:fb:53:45:d8:e1:6f:e3:87:21: 2e:26:21:92:fe:d3:46:27:2b:40:fc:98:f7:cc:d6:de:a3:61: f2:7a:36:c4:a5:f9:24:82:ef:7c:5c:1a:ea:36:aa:b2:6b:16: a8:ce:3a:b2:4f:18:53:e6:c7:e0:84:c5:66:3d:24:aa:39:32: 15:7d:08:a8:5d:fc:42:35:70:91:42:70:7d:13:66:b6:cb:af: 3b:59:93:90:df:88:7a:4c:11:cf:96:34:b6:61:49:f8:c4:4b: 36:70:8e:f7:ea:42:8c:42:b9:dd:81:c3:d9:c8:d1:6b:2a:a1: 54:29:4d:99:23:49:83:3e:f6:b3:f7:f3:8d:ba:a7:f6:00:aa: f2:8a:97:26:fd:20:2a:67:f2:c2:28:6d:d0:d7:8b:2f:20:ea: 65:84:53:42:3f:41:cf:0f:a3:be:ed:7e:36:91:63:fa:19:ae: 2b:b6:e5:61:50:24:b8:d4:11:09:4e:e9:a2:60:7c:b8:22:12: ee:e1:56:e7:2e:d1:92:3b:fc:05:21:10:6a:73:57:b6:84:15: 15:e1:ac:59:ac:fc:a5:b6:20:77:47:f5:42:e4:d3:f3:20:70: ed:e9:fe:92:2f:67:33:d2:d0:b1:4f:10:aa:e4:b0:67:76:5c: 86:2a:70:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWMdHTtUrExoWocuc0mBdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3OWJiZDRjNDdkYmY1ZmNkYWZlNzkwMzFmNjkwMjVhMDIz ZTViYmIwHhcNMjYwMjA5MTcwMDE3WhcNMjYwMjEwMTcwMDE3WjAzMTEwLwYDVQQD EygxYzc0NjUyNThkMTYxYWRiMWJmNTAzMzlhYTIwYmU4MGU1MDZiNmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhQ4kHoPX0Y5mf4VxdhEE7r2REQF x7HAjobFiSKDj13JAwict7RiPCi7rnNU8Lx9mviRqUyum9c0vsgC8XZh4JzBibNN eUAJSAeC5BNdGkeuVzkx+ixdthDd8kGxzCdv4ewepGZBmHN9uP2Bt3ewPFs/B/Mr rBrb8ydC5+RdObcBqw2WESFnXZeDx6ze3uQgkbglQ5C2A3fwmfG9RVnDwW6knaaD l6ZCS7ZgizUIvUvMb5az8MZmKmueREqOJtVw79QNr7tdAZ45sRhDXiqqI8YbZOtO G89OFdc60s+DmaCa6l/eb3VwoKjevrkugBB4ToqUlkihNsmDo+1cFInStQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBx0ZSWNFhrbG/UDOaogvoDlBrahMB8GA1UdIwQY MBaAFPebvUxH2/X82v55Ax9pAloCPlu7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTV1OVRFZmI5ZnphX25rREgya0NXZ0ktVzdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS83MjUzNmYtNzQzYS00MjZlLWIwZWIt Y2ZlNGNiMzQ2MTExLzEvOTV1OVRFZmI5ZnphX25rREgya0NXZ0ktVzdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS83MjUzNmYtNzQzYS00MjZlLWIwZWItY2ZlNGNiMzQ2MTEx LzEvOTV1OVRFZmI5ZnphX25rREgya0NXZ0ktVzdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp2LteK62 e8Y1+1NF2OFv44chLiYhkv7TRicrQPyY98zW3qNh8no2xKX5JILvfFwa6jaqsmsW qM46sk8YU+bH4ITFZj0kqjkyFX0IqF38QjVwkUJwfRNmtsuvO1mTkN+IekwRz5Y0 tmFJ+MRLNnCO9+pCjEK53YHD2cjRayqhVClNmSNJgz72s/fzjbqn9gCq8oqXJv0g Kmfywiht0NeLLyDqZYRTQj9Bzw+jvu1+NpFj+hmuK7blYVAkuNQRCU7pomB8uCIS 7uFW5y7Rkjv8BSEQanNXtoQVFeGsWaz8pbYgd0f1QuTT8yBw7en+ki9nM9LQsU8Q quSwZ3ZchipwRQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:45:35 2026 by rpki-client