This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/06358d-170c-439a-9b80-43698bf966a2/1/eAI7X0QaTFhcaMnDvYj50Z1lTMk.mft File: eAI7X0QaTFhcaMnDvYj50Z1lTMk.mft (raw, json) Hash identifier: Eq9Pm3zTqS0u0sIfQtx+rCkxfAQvYw6N8kRUaDa6BuA= Subject key identifier: DC:4D:F6:53:F6:BB:4F:8C:E2:F2:DA:5A:24:CE:D1:3A:26:06:37:3D Authority key identifier: 78:02:3B:5F:44:1A:4C:58:5C:68:C9:C3:BD:88:F9:D1:9D:65:4C:C9 Certificate issuer: /CN=78023b5f441a4c585c68c9c3bd88f9d19d654cc9 Certificate serial: 019C4321E88F1E668E53161D86375565F9D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eAI7X0QaTFhcaMnDvYj50Z1lTMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/06358d-170c-439a-9b80-43698bf966a2/1/eAI7X0QaTFhcaMnDvYj50Z1lTMk.mft Manifest number: 027C Signing time: Mon 09 Feb 2026 16:00:21 +0000 Manifest this update: Mon 09 Feb 2026 16:00:21 +0000 Manifest next update: Tue 10 Feb 2026 16:00:21 +0000 Files and hashes: 1: eAI7X0QaTFhcaMnDvYj50Z1lTMk.crl (hash: 9XmxsIk1AdqfsT/7HsGiDpiVKEW9pfe1R9tqmd5HAt0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/06358d-170c-439a-9b80-43698bf966a2/1/eAI7X0QaTFhcaMnDvYj50Z1lTMk.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/06358d-170c-439a-9b80-43698bf966a2/1/eAI7X0QaTFhcaMnDvYj50Z1lTMk.mft rsync://rpki.ripe.net/repository/DEFAULT/eAI7X0QaTFhcaMnDvYj50Z1lTMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:e8:8f:1e:66:8e:53:16:1d:86:37:55:65:f9:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78023b5f441a4c585c68c9c3bd88f9d19d654cc9 Validity Not Before: Feb 9 16:00:21 2026 GMT Not After : Feb 10 16:00:21 2026 GMT Subject: CN=dc4df653f6bb4f8ce2f2da5a24ced13a2606373d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c6:b3:27:f0:83:5d:f7:79:7e:48:4c:60:1c: 62:85:30:99:e5:2f:9d:ee:1a:be:25:40:d5:f8:04: a5:25:38:f7:81:0b:92:82:4d:a9:be:6f:7d:e9:96: b3:23:36:9f:81:63:e8:10:dc:9b:f7:e3:a3:69:24: 12:68:6e:dd:4b:f0:a8:68:80:59:cf:ee:29:2b:cb: 74:23:c3:f8:e4:36:f7:df:a1:95:23:ae:5f:4e:3a: ad:93:a7:a0:2e:c4:0b:a0:d7:da:97:1e:2c:1c:63: b7:73:37:65:22:24:99:78:d1:af:34:2b:ae:2e:c8: f2:ad:52:44:36:af:f4:9e:09:1a:17:fd:42:5e:45: bd:ed:a6:48:3a:8d:48:e5:4d:9b:24:6b:50:a7:37: c0:c5:66:26:d7:42:aa:18:f9:08:98:a8:71:1d:80: f6:ff:ab:01:04:d8:ab:c7:da:37:14:87:2a:08:df: da:4e:57:df:b7:85:ad:95:56:06:a9:9d:16:53:14: 51:c8:25:c8:17:85:f4:52:7a:3c:6d:a6:3c:9f:f0: b5:c3:c7:b0:67:99:0e:84:7b:5a:4b:3d:fd:9a:7f: bc:f7:68:ce:02:b7:67:e7:52:de:4b:4d:d2:72:0b: 14:6f:64:32:1a:87:4a:c0:fb:95:67:5f:da:f9:b2: c0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:4D:F6:53:F6:BB:4F:8C:E2:F2:DA:5A:24:CE:D1:3A:26:06:37:3D X509v3 Authority Key Identifier: keyid:78:02:3B:5F:44:1A:4C:58:5C:68:C9:C3:BD:88:F9:D1:9D:65:4C:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eAI7X0QaTFhcaMnDvYj50Z1lTMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06358d-170c-439a-9b80-43698bf966a2/1/eAI7X0QaTFhcaMnDvYj50Z1lTMk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06358d-170c-439a-9b80-43698bf966a2/1/eAI7X0QaTFhcaMnDvYj50Z1lTMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:5f:44:76:6b:ef:b6:13:43:83:47:e8:f7:92:29:c7:08:43: fa:91:e3:61:73:50:25:8c:49:d2:63:6a:22:f1:2d:6c:3a:f7: e6:69:85:fb:3b:d9:d5:6c:27:95:01:e4:84:63:40:fb:97:82: 33:eb:19:51:58:ee:7f:2e:37:9b:a8:23:b7:e2:ea:ae:08:8c: 7b:34:aa:33:01:13:d8:bc:5d:6e:53:8c:8f:d0:74:ff:a8:87: 46:c2:3b:ec:1c:bd:54:5f:b5:eb:e7:36:3b:d1:d7:61:f6:8b: 10:2c:db:a7:aa:52:a4:52:ad:80:a6:50:3e:72:3e:1c:d3:ca: a1:50:15:73:6d:9e:a5:4b:2a:ed:23:26:6b:34:c2:42:2e:73: b7:5f:e6:ed:d5:e6:d7:5b:83:57:b1:9b:38:fa:8f:44:e2:37: af:ee:a5:f6:39:73:4e:eb:ee:8a:27:f4:56:3b:fe:a2:b8:7d: 79:b5:6c:d5:4b:5b:25:f5:85:c1:df:c0:7f:87:62:bd:60:58: 75:79:d0:b1:4e:6a:26:31:b6:1c:ae:8b:67:0f:81:16:9c:69: 5a:ef:25:89:dd:26:95:0f:eb:64:74:18:db:4f:1b:d1:a6:b4: c2:ff:7c:6e:1e:32:c2:89:12:51:e6:0a:f3:bc:45:db:f5:98: 57:d5:46:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIeiPHmaOUxYdhjdVZfnUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4MDIzYjVmNDQxYTRjNTg1YzY4YzljM2JkODhmOWQxOWQ2 NTRjYzkwHhcNMjYwMjA5MTYwMDIxWhcNMjYwMjEwMTYwMDIxWjAzMTEwLwYDVQQD EyhkYzRkZjY1M2Y2YmI0ZjhjZTJmMmRhNWEyNGNlZDEzYTI2MDYzNzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssazJ/CDXfd5fkhMYBxihTCZ5S+d 7hq+JUDV+ASlJTj3gQuSgk2pvm996ZazIzafgWPoENyb9+OjaSQSaG7dS/CoaIBZ z+4pK8t0I8P45Db336GVI65fTjqtk6egLsQLoNfalx4sHGO3czdlIiSZeNGvNCuu LsjyrVJENq/0ngkaF/1CXkW97aZIOo1I5U2bJGtQpzfAxWYm10KqGPkImKhxHYD2 /6sBBNirx9o3FIcqCN/aTlfft4WtlVYGqZ0WUxRRyCXIF4X0Uno8baY8n/C1w8ew Z5kOhHtaSz39mn+892jOArdn51LeS03ScgsUb2QyGodKwPuVZ1/a+bLAMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNxN9lP2u0+M4vLaWiTO0TomBjc9MB8GA1UdIwQY MBaAFHgCO19EGkxYXGjJw72I+dGdZUzJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUFJN1gwUWFURmhjYU1uRHZZajUwWjFsVE1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8wNjM1OGQtMTcwYy00MzlhLTliODAt NDM2OThiZjk2NmEyLzEvZUFJN1gwUWFURmhjYU1uRHZZajUwWjFsVE1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi8wNjM1OGQtMTcwYy00MzlhLTliODAtNDM2OThiZjk2NmEy LzEvZUFJN1gwUWFURmhjYU1uRHZZajUwWjFsVE1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjV9Edmvv thNDg0fo95IpxwhD+pHjYXNQJYxJ0mNqIvEtbDr35mmF+zvZ1WwnlQHkhGNA+5eC M+sZUVjufy43m6gjt+LqrgiMezSqMwET2LxdblOMj9B0/6iHRsI77By9VF+16+c2 O9HXYfaLECzbp6pSpFKtgKZQPnI+HNPKoVAVc22epUsq7SMmazTCQi5zt1/m7dXm 11uDV7GbOPqPROI3r+6l9jlzTuvuiif0Vjv+orh9ebVs1UtbJfWFwd/Af4divWBY dXnQsU5qJjG2HK6LZw+BFpxpWu8lid0mlQ/rZHQY208b0aa0wv98bh4ywokSUeYK 87xF2/WYV9VGoQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:46:57 2026 by rpki-client