This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft File: eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft (raw, json) Hash identifier: Zet+ho3rZcTFODsxL1dbBGLl/Vj+ThYM3n9Iq7UOc1E= Subject key identifier: 88:83:75:C0:E2:1E:A9:17:C4:21:70:F9:A2:70:25:9F:B2:CF:71:15 Authority key identifier: 78:D4:03:D9:38:D7:1B:DC:5A:3A:CB:07:6D:32:AF:82:83:BE:62:7C Certificate issuer: /CN=78d403d938d71bdc5a3acb076d32af8283be627c Certificate serial: 019C4321CB3B3E89E2C6D1E9D12397A6B92D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNQD2TjXG9xaOssHbTKvgoO-Ynw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft Manifest number: 092D Signing time: Mon 09 Feb 2026 16:00:14 +0000 Manifest this update: Mon 09 Feb 2026 16:00:14 +0000 Manifest next update: Tue 10 Feb 2026 16:00:14 +0000 Files and hashes: 1: eNQD2TjXG9xaOssHbTKvgoO-Ynw.crl (hash: VZLUZiPDd2L8/ZkySbS96dRbFOJox8x1yuUddjk+o6w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft rsync://rpki.ripe.net/repository/DEFAULT/eNQD2TjXG9xaOssHbTKvgoO-Ynw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:cb:3b:3e:89:e2:c6:d1:e9:d1:23:97:a6:b9:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78d403d938d71bdc5a3acb076d32af8283be627c Validity Not Before: Feb 9 16:00:14 2026 GMT Not After : Feb 10 16:00:14 2026 GMT Subject: CN=888375c0e21ea917c42170f9a270259fb2cf7115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c0:bc:db:a8:f8:0e:c1:4c:77:38:2f:23:41: d0:fd:9d:04:0c:30:b3:73:14:6f:c0:ed:29:de:cd: a8:9c:dd:e0:06:9c:c7:3f:b8:42:36:c6:36:ef:09: 21:16:5b:63:9b:69:0b:7e:c2:2a:41:6c:b0:e3:8b: 41:1f:52:22:c0:c1:16:0a:b1:50:f2:98:d3:c1:88: b8:09:23:6b:90:48:44:4f:b2:68:40:17:eb:1e:0d: 40:4f:15:d4:4b:24:65:6a:69:97:7e:5f:96:f2:c3: f7:a8:cd:dc:b6:2b:df:52:15:a4:d3:65:e8:df:f9: da:e1:2b:47:34:0c:9a:24:15:07:68:b6:08:c8:da: 6e:de:ed:16:76:ad:eb:65:f3:36:27:ed:e5:b0:3a: 4d:76:32:d5:93:23:17:7a:73:20:cd:cb:0d:c4:a0: b1:ff:cb:bc:63:fc:cd:57:df:ff:da:02:c5:ce:c2: 2f:c5:47:bc:77:b9:3c:8f:7f:1c:14:7d:a1:e9:e9: 94:fe:a9:15:b6:96:0e:49:11:9f:da:07:f2:70:a3: 8f:e9:6f:ce:7f:81:c1:4a:cc:34:25:50:d4:c8:99: 39:23:1f:ec:c4:58:40:91:6c:f3:94:e8:df:e7:11: 8c:64:6c:66:d4:99:96:78:b7:43:d2:6a:0a:c8:7a: 22:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:83:75:C0:E2:1E:A9:17:C4:21:70:F9:A2:70:25:9F:B2:CF:71:15 X509v3 Authority Key Identifier: keyid:78:D4:03:D9:38:D7:1B:DC:5A:3A:CB:07:6D:32:AF:82:83:BE:62:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNQD2TjXG9xaOssHbTKvgoO-Ynw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:15:7d:90:31:0e:76:b9:3c:89:2f:d4:3d:dc:d8:ea:86:37: 2d:f2:0a:3b:47:d3:fd:2f:cc:32:c9:e2:3a:ac:e2:39:12:97: 54:03:b3:94:09:90:a4:9a:f1:49:0d:0f:9d:8d:25:80:f0:bf: b7:b7:f0:09:b6:43:11:5c:05:0f:ec:c6:20:ba:1a:3c:4a:77: 05:48:e9:cb:7e:70:a1:74:d7:29:cb:04:e3:df:16:b1:be:31: 56:13:e3:a8:39:9b:db:21:66:4c:af:30:3f:9c:45:93:9d:22: 54:44:f3:91:97:55:58:e9:7d:b6:47:13:bd:09:f7:cb:e4:ac: d9:10:a4:14:b8:d9:3c:80:07:4f:07:8e:00:91:d5:b4:64:bc: 65:9d:b4:30:b6:0c:6a:65:93:e5:ef:c1:99:cb:62:24:8f:89: cc:91:a3:d5:17:47:36:98:5e:ae:a5:c9:ca:3e:bd:96:cb:3a: d2:25:ec:63:9b:e4:88:80:58:8c:61:99:97:8d:97:70:0d:1d: f1:0e:85:10:cf:f2:3e:8a:4b:d8:3e:7d:8b:04:9a:f8:32:67: 74:d9:f8:02:9a:c7:52:d0:64:6e:84:89:f4:67:da:2c:3a:f4: 04:a3:9d:a1:55:23:96:c1:27:22:b6:95:1e:2f:63:0b:0e:0f: 4e:3b:78:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIcs7PonixtHp0SOXprktMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ZDQwM2Q5MzhkNzFiZGM1YTNhY2IwNzZkMzJhZjgyODNi ZTYyN2MwHhcNMjYwMjA5MTYwMDE0WhcNMjYwMjEwMTYwMDE0WjAzMTEwLwYDVQQD Eyg4ODgzNzVjMGUyMWVhOTE3YzQyMTcwZjlhMjcwMjU5ZmIyY2Y3MTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MC826j4DsFMdzgvI0HQ/Z0EDDCz cxRvwO0p3s2onN3gBpzHP7hCNsY27wkhFltjm2kLfsIqQWyw44tBH1IiwMEWCrFQ 8pjTwYi4CSNrkEhET7JoQBfrHg1ATxXUSyRlammXfl+W8sP3qM3ctivfUhWk02Xo 3/na4StHNAyaJBUHaLYIyNpu3u0Wdq3rZfM2J+3lsDpNdjLVkyMXenMgzcsNxKCx /8u8Y/zNV9//2gLFzsIvxUe8d7k8j38cFH2h6emU/qkVtpYOSRGf2gfycKOP6W/O f4HBSsw0JVDUyJk5Ix/sxFhAkWzzlOjf5xGMZGxm1JmWeLdD0moKyHoiRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIiDdcDiHqkXxCFw+aJwJZ+yz3EVMB8GA1UdIwQY MBaAFHjUA9k41xvcWjrLB20yr4KDvmJ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZU5RRDJUalhHOXhhT3NzSGJUS3Znb08tWW53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jNGM0OGQtZTBlNy00OGVhLTliZTct YTFhNzcxOWY5ODhiLzEvZU5RRDJUalhHOXhhT3NzSGJUS3Znb08tWW53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9jNGM0OGQtZTBlNy00OGVhLTliZTctYTFhNzcxOWY5ODhi LzEvZU5RRDJUalhHOXhhT3NzSGJUS3Znb08tWW53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADhV9kDEO drk8iS/UPdzY6oY3LfIKO0fT/S/MMsniOqziORKXVAOzlAmQpJrxSQ0PnY0lgPC/ t7fwCbZDEVwFD+zGILoaPEp3BUjpy35woXTXKcsE498Wsb4xVhPjqDmb2yFmTK8w P5xFk50iVETzkZdVWOl9tkcTvQn3y+Ss2RCkFLjZPIAHTweOAJHVtGS8ZZ20MLYM amWT5e/BmctiJI+JzJGj1RdHNpherqXJyj69lss60iXsY5vkiIBYjGGZl42XcA0d 8Q6FEM/yPopL2D59iwSa+DJndNn4AprHUtBkboSJ9GfaLDr0BKOdoVUjlsEnIraV Hi9jCw4PTjt4lA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:58 2026 by rpki-client