This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft File: CEoFdH74ii68ny-u9iAZ3IfRolM.mft (raw, json) Hash identifier: xIYc8w4SItC6VaUTyhas0kj+GWGVJ4WrTVImIvr/QN4= Subject key identifier: EA:6C:87:6A:23:45:D2:66:96:19:BB:DC:9C:7F:39:0E:B8:B3:39:F7 Authority key identifier: 08:4A:05:74:7E:F8:8A:2E:BC:9F:2F:AE:F6:20:19:DC:87:D1:A2:53 Certificate issuer: /CN=084a05747ef88a2ebc9f2faef62019dc87d1a253 Certificate serial: 019C43FE138B09183F34763D3A3A50E79ED6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft Manifest number: 14EC Signing time: Mon 09 Feb 2026 20:00:50 +0000 Manifest this update: Mon 09 Feb 2026 20:00:50 +0000 Manifest next update: Tue 10 Feb 2026 20:00:50 +0000 Files and hashes: 1: CEoFdH74ii68ny-u9iAZ3IfRolM.crl (hash: QYCtxpP/20LUMZz0J8rVPWhMuA/YLdti+abD+4+MJto=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.crl rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:13:8b:09:18:3f:34:76:3d:3a:3a:50:e7:9e:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=084a05747ef88a2ebc9f2faef62019dc87d1a253 Validity Not Before: Feb 9 20:00:50 2026 GMT Not After : Feb 10 20:00:50 2026 GMT Subject: CN=ea6c876a2345d2669619bbdc9c7f390eb8b339f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a3:09:1d:53:c1:1a:86:d9:ed:3f:d8:c2:be: c2:52:02:0a:de:2f:18:75:3c:38:c8:a8:03:73:83: 7b:5d:bc:04:47:af:6d:37:73:80:61:d3:de:da:94: bf:0e:ff:53:cf:3d:7e:26:0e:72:6d:e1:7a:fb:0a: 87:4c:2d:c4:0a:7f:f4:3b:db:3c:fd:89:35:f2:fb: 64:00:0d:89:40:b1:8c:c5:e7:aa:90:56:56:70:3e: ac:27:a6:34:9e:5e:6b:05:7f:5a:85:1e:d8:5f:ff: 2b:da:e5:cf:86:93:2a:9f:05:bd:b6:36:44:95:76: 5c:35:e2:7a:d9:dc:f2:e9:a8:d8:62:7a:d9:80:38: ad:e5:43:9f:ef:f9:10:15:91:ea:09:3d:1c:f9:20: 37:5e:3c:51:da:0f:2f:80:87:7e:ea:58:ed:ef:db: a1:d5:46:81:70:b8:6e:73:ce:a7:b0:10:c9:86:23: 0c:03:55:f7:28:90:0e:18:27:f9:cb:65:4a:2e:5d: c7:30:a9:60:5f:79:a8:a7:be:f6:3a:9d:92:27:44: 51:28:0d:7e:07:82:2f:2b:eb:f9:6e:ab:df:09:97: db:3f:31:56:4f:c6:c2:24:15:78:a9:a8:bf:c8:5a: 5e:3b:d9:7f:d9:aa:87:e3:78:d5:d5:55:65:50:67: fa:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:6C:87:6A:23:45:D2:66:96:19:BB:DC:9C:7F:39:0E:B8:B3:39:F7 X509v3 Authority Key Identifier: keyid:08:4A:05:74:7E:F8:8A:2E:BC:9F:2F:AE:F6:20:19:DC:87:D1:A2:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:26:1a:44:31:f8:70:bd:36:0a:d9:73:42:6c:f0:54:d8:7e: 06:7c:4f:4f:6c:bb:e8:39:4d:df:c7:87:a4:2b:b3:50:07:ec: 2e:db:f6:4d:0e:74:f6:a9:9e:15:2d:ce:38:dd:5a:81:d3:96: e4:cc:0c:ba:57:28:cb:42:1f:f4:25:68:4b:e2:7e:4f:2a:85: 11:92:9d:57:3b:69:5f:c8:05:a0:25:ef:f6:d6:d3:c4:4f:4f: 99:8e:29:c1:96:c9:f5:a9:0c:4d:47:9a:35:a7:63:74:59:47: 89:2f:94:9c:01:ec:1e:fd:79:18:39:56:0e:57:8b:af:4a:7a: 5f:d3:7d:02:f3:2e:c2:33:56:01:09:60:c5:56:95:2f:9d:e0: 94:a1:88:8e:be:4c:18:a0:ea:61:e2:37:a0:c4:d3:c2:ea:7c: 75:45:66:c5:26:1f:dd:93:14:8b:d4:7f:38:3b:96:b4:9b:74: f6:fe:ea:87:89:26:f2:4b:a0:c6:e7:49:47:c7:fd:21:c4:ca: 09:35:62:d6:2e:15:52:29:90:77:ec:48:61:fd:fd:6b:6a:0c: bd:9c:5f:8e:a9:d7:a3:b3:81:69:0d:6b:bf:76:87:1d:5b:76: b7:e0:22:58:03:57:aa:c3:0e:c7:34:8b:c6:0b:0f:ff:b0:93: dc:00:31:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/hOLCRg/NHY9OjpQ557WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4NGEwNTc0N2VmODhhMmViYzlmMmZhZWY2MjAxOWRjODdk MWEyNTMwHhcNMjYwMjA5MjAwMDUwWhcNMjYwMjEwMjAwMDUwWjAzMTEwLwYDVQQD EyhlYTZjODc2YTIzNDVkMjY2OTYxOWJiZGM5YzdmMzkwZWI4YjMzOWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKMJHVPBGobZ7T/Ywr7CUgIK3i8Y dTw4yKgDc4N7XbwER69tN3OAYdPe2pS/Dv9Tzz1+Jg5ybeF6+wqHTC3ECn/0O9s8 /Yk18vtkAA2JQLGMxeeqkFZWcD6sJ6Y0nl5rBX9ahR7YX/8r2uXPhpMqnwW9tjZE lXZcNeJ62dzy6ajYYnrZgDit5UOf7/kQFZHqCT0c+SA3XjxR2g8vgId+6ljt79uh 1UaBcLhuc86nsBDJhiMMA1X3KJAOGCf5y2VKLl3HMKlgX3mop772Op2SJ0RRKA1+ B4IvK+v5bqvfCZfbPzFWT8bCJBV4qai/yFpeO9l/2aqH43jV1VVlUGf6eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOpsh2ojRdJmlhm73Jx/OQ64szn3MB8GA1UdIwQY MBaAFAhKBXR++IouvJ8vrvYgGdyH0aJTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0VvRmRINzRpaTY4bnktdTlpQVozSWZSb2xNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8zMGE2OTAtY2QzMS00OWJiLWE5YTAt M2JkM2UzZTRhNDBiLzEvQ0VvRmRINzRpaTY4bnktdTlpQVozSWZSb2xNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC8zMGE2OTAtY2QzMS00OWJiLWE5YTAtM2JkM2UzZTRhNDBi LzEvQ0VvRmRINzRpaTY4bnktdTlpQVozSWZSb2xNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARyYaRDH4 cL02CtlzQmzwVNh+BnxPT2y76DlN38eHpCuzUAfsLtv2TQ509qmeFS3OON1agdOW 5MwMulcoy0If9CVoS+J+TyqFEZKdVztpX8gFoCXv9tbTxE9PmY4pwZbJ9akMTUea NadjdFlHiS+UnAHsHv15GDlWDleLr0p6X9N9AvMuwjNWAQlgxVaVL53glKGIjr5M GKDqYeI3oMTTwup8dUVmxSYf3ZMUi9R/ODuWtJt09v7qh4km8kugxudJR8f9IcTK CTVi1i4VUimQd+xIYf39a2oMvZxfjqnXo7OBaQ1rv3aHHVt2t+AiWANXqsMOxzSL xgsP/7CT3AAxSw== -----END CERTIFICATE-----Generated at Tue Feb 10 02:55:02 2026 by rpki-client