This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.mft File: fqigEMxtfJMg4BLqHR424KdhwTg.mft (raw, json) Hash identifier: oRSgSpKlddR8xSZheFoNZyVSRHxpw23B61wY1F1TZOM= Subject key identifier: DB:13:94:79:68:53:42:04:4A:07:A0:A9:FC:C9:EF:FF:E5:6C:D6:06 Authority key identifier: 7E:A8:A0:10:CC:6D:7C:93:20:E0:12:EA:1D:1E:36:E0:A7:61:C1:38 Certificate issuer: /CN=7ea8a010cc6d7c9320e012ea1d1e36e0a761c138 Certificate serial: 019C41D8E6FC840D01EED3119F65425CFF8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqigEMxtfJMg4BLqHR424KdhwTg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.mft Manifest number: 07EE Signing time: Mon 09 Feb 2026 10:00:59 +0000 Manifest this update: Mon 09 Feb 2026 10:00:59 +0000 Manifest next update: Tue 10 Feb 2026 10:00:59 +0000 Files and hashes: 1: fqigEMxtfJMg4BLqHR424KdhwTg.crl (hash: eC8eBJwIpFCzWMS3OwRQgQX6u+UjIfu0nVuQTgkZKSo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.mft rsync://rpki.ripe.net/repository/DEFAULT/fqigEMxtfJMg4BLqHR424KdhwTg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:e6:fc:84:0d:01:ee:d3:11:9f:65:42:5c:ff:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ea8a010cc6d7c9320e012ea1d1e36e0a761c138 Validity Not Before: Feb 9 10:00:59 2026 GMT Not After : Feb 10 10:00:59 2026 GMT Subject: CN=db139479685342044a07a0a9fcc9efffe56cd606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:87:64:23:b5:c2:9a:03:2f:a4:d8:8f:41:b1: ae:70:e7:b8:61:a2:eb:7f:0f:c5:36:f3:b5:d3:3f: 79:e5:3e:36:54:f5:26:8a:70:a2:01:dd:ec:e1:d3: 0b:0a:f4:a6:8e:04:6f:00:5a:50:6f:2c:0f:92:88: c7:71:a9:43:67:86:c6:d9:1b:73:52:2c:c4:52:0c: 02:07:9b:76:ff:38:49:87:53:58:d9:97:b5:0d:ae: 84:39:87:32:52:7b:23:f6:5b:2e:a8:28:7a:80:eb: d7:21:2e:0d:64:5d:32:da:25:38:69:af:51:15:d0: c0:58:03:97:9e:0a:86:84:cd:9e:00:6a:91:a1:5e: 72:ef:47:89:9c:10:7e:01:e0:bb:bd:dc:ac:ac:22: bc:87:44:69:1f:87:ec:4f:57:d6:2a:dd:f6:b6:af: e6:00:cb:7f:58:f0:9a:1f:a8:b6:24:60:76:d4:84: ea:fc:98:f3:c7:57:e6:18:f4:1d:4f:d3:cc:e8:00: 79:ac:85:3f:fb:e0:9c:57:cf:e8:54:1d:ad:c1:06: 81:c8:a1:4d:0e:55:84:48:f1:39:05:a5:12:2c:96: c6:1b:f9:be:d7:32:85:f6:09:55:70:c8:6f:0a:87: e6:7d:45:c7:96:83:e4:a1:ad:a9:6e:cd:77:34:98: 37:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:13:94:79:68:53:42:04:4A:07:A0:A9:FC:C9:EF:FF:E5:6C:D6:06 X509v3 Authority Key Identifier: keyid:7E:A8:A0:10:CC:6D:7C:93:20:E0:12:EA:1D:1E:36:E0:A7:61:C1:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqigEMxtfJMg4BLqHR424KdhwTg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:ca:f3:a9:55:ed:62:c1:14:df:08:52:2e:99:73:24:86:49: a7:84:4e:7b:91:c7:a8:1d:c3:9d:7e:2d:bb:05:b4:2b:54:f5: d6:44:1d:41:f6:c5:b5:39:f3:c1:bd:b0:04:4a:b1:52:87:78: 3a:07:75:12:f1:42:23:98:84:00:40:a9:bc:07:e0:a6:6a:e6: 52:d1:7d:a1:be:31:01:3a:97:00:fc:a1:08:53:8d:06:57:41: ff:68:0e:6f:05:a3:3c:fc:17:aa:48:d6:af:78:44:82:29:ac: cd:1b:1e:e5:3a:28:28:fe:92:44:d6:07:8f:fe:28:ed:78:fd: fe:fd:83:bd:64:ba:69:e4:d2:77:0a:36:21:0d:e2:4c:2c:73: 33:84:dc:3e:7c:78:4b:51:bb:67:1a:4c:f4:f0:3b:fb:9f:05: 17:3e:74:d2:0c:c3:ff:33:02:51:97:44:33:39:ea:a3:f2:13: 2e:36:c7:d4:94:17:18:4a:90:e4:05:e3:cf:4e:ab:45:56:3c: f7:a7:a1:92:80:d0:25:d7:0e:dc:be:65:0d:1b:f4:2d:6e:89: f5:6d:e1:56:ee:d0:b3:3b:0f:e0:33:c8:11:0f:17:dd:ec:ed: 84:43:07:45:18:1b:da:b9:d7:e9:37:9e:14:69:c9:b3:38:c5: 8d:60:b5:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2Ob8hA0B7tMRn2VCXP+NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlYThhMDEwY2M2ZDdjOTMyMGUwMTJlYTFkMWUzNmUwYTc2 MWMxMzgwHhcNMjYwMjA5MTAwMDU5WhcNMjYwMjEwMTAwMDU5WjAzMTEwLwYDVQQD EyhkYjEzOTQ3OTY4NTM0MjA0NGEwN2EwYTlmY2M5ZWZmZmU1NmNkNjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIdkI7XCmgMvpNiPQbGucOe4YaLr fw/FNvO10z955T42VPUminCiAd3s4dMLCvSmjgRvAFpQbywPkojHcalDZ4bG2Rtz UizEUgwCB5t2/zhJh1NY2Ze1Da6EOYcyUnsj9lsuqCh6gOvXIS4NZF0y2iU4aa9R FdDAWAOXngqGhM2eAGqRoV5y70eJnBB+AeC7vdysrCK8h0RpH4fsT1fWKt32tq/m AMt/WPCaH6i2JGB21ITq/Jjzx1fmGPQdT9PM6AB5rIU/++CcV8/oVB2twQaByKFN DlWESPE5BaUSLJbGG/m+1zKF9glVcMhvCofmfUXHloPkoa2pbs13NJg3UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNsTlHloU0IESgegqfzJ7//lbNYGMB8GA1UdIwQY MBaAFH6ooBDMbXyTIOAS6h0eNuCnYcE4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnFpZ0VNeHRmSk1nNEJMcUhSNDI0S2Rod1RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iYWE4NmUtN2ZjNi00NDJmLWFkZTEt NDViZWZiZjFlZjdmLzEvZnFpZ0VNeHRmSk1nNEJMcUhSNDI0S2Rod1RnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9iYWE4NmUtN2ZjNi00NDJmLWFkZTEtNDViZWZiZjFlZjdm LzEvZnFpZ0VNeHRmSk1nNEJMcUhSNDI0S2Rod1RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj8rzqVXt YsEU3whSLplzJIZJp4ROe5HHqB3DnX4tuwW0K1T11kQdQfbFtTnzwb2wBEqxUod4 Ogd1EvFCI5iEAECpvAfgpmrmUtF9ob4xATqXAPyhCFONBldB/2gObwWjPPwXqkjW r3hEgimszRse5TooKP6SRNYHj/4o7Xj9/v2DvWS6aeTSdwo2IQ3iTCxzM4TcPnx4 S1G7ZxpM9PA7+58FFz500gzD/zMCUZdEMznqo/ITLjbH1JQXGEqQ5AXjz06rRVY8 96ehkoDQJdcO3L5lDRv0LW6J9W3hVu7QszsP4DPIEQ8X3ezthEMHRRgb2rnX6Tee FGnJszjFjWC12A== -----END CERTIFICATE-----Generated at Mon Feb 9 18:31:26 2026 by rpki-client