This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft File: 1ehGG6CEVcNE_HU6TZZtsbXexdU.mft (raw, json) Hash identifier: o9ljUXSTdRUkzWJCl6AXc0jDPAnQ9rdmRlGO+y2iucM= Subject key identifier: 8B:35:39:15:72:AA:BD:FC:AD:9A:EB:38:9A:A2:04:33:06:29:57:8D Authority key identifier: D5:E8:46:1B:A0:84:55:C3:44:FC:75:3A:4D:96:6D:B1:B5:DE:C5:D5 Certificate issuer: /CN=d5e8461ba08455c344fc753a4d966db1b5dec5d5 Certificate serial: 019C43906060E84B289138EE4C05FA25701C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ehGG6CEVcNE_HU6TZZtsbXexdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft Manifest number: 0CCD Signing time: Mon 09 Feb 2026 18:01:01 +0000 Manifest this update: Mon 09 Feb 2026 18:01:01 +0000 Manifest next update: Tue 10 Feb 2026 18:01:01 +0000 Files and hashes: 1: 1ehGG6CEVcNE_HU6TZZtsbXexdU.crl (hash: JxkYofuFoLCMuyn7NPOUwswNg4WRpSbPjHczggjxfKI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft rsync://rpki.ripe.net/repository/DEFAULT/1ehGG6CEVcNE_HU6TZZtsbXexdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:60:60:e8:4b:28:91:38:ee:4c:05:fa:25:70:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5e8461ba08455c344fc753a4d966db1b5dec5d5 Validity Not Before: Feb 9 18:01:01 2026 GMT Not After : Feb 10 18:01:01 2026 GMT Subject: CN=8b35391572aabdfcad9aeb389aa204330629578d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9e:58:c6:ef:89:01:60:6f:f0:4d:28:d7:c7: 2b:1d:d1:bb:61:ca:83:7a:31:01:eb:d0:dd:c9:59: 00:21:ca:0d:e3:31:33:50:f5:05:5b:2c:3d:96:97: 99:4e:b1:83:55:7e:e9:fa:43:23:1d:0b:05:8d:7e: 29:10:ed:b6:09:b2:2d:7f:77:c3:b0:e3:df:e8:49: ef:f1:ec:97:83:1f:ce:3b:4b:d8:c4:6c:ac:db:8e: 05:db:48:d4:c3:87:56:85:46:83:9d:0c:dd:54:3a: 53:02:8d:fd:21:de:4a:9c:3f:06:7f:43:d1:55:b5: 7f:8c:90:ef:27:c7:10:9f:e0:f9:43:50:42:b0:57: 06:12:08:8e:f1:ae:51:3e:ba:ed:72:fa:56:54:a1: e4:db:6f:29:bc:fc:e3:a6:9b:42:df:72:75:67:b7: f3:f6:27:ef:bf:af:68:0e:2e:65:03:c2:12:9e:d2: e8:f9:04:be:56:0c:c7:85:9c:b7:89:1f:58:c9:e5: 9b:48:c7:92:89:b8:b3:f2:b2:39:e1:5e:36:d6:e5: 10:bf:b7:05:3c:4c:5c:b3:e4:20:1f:20:00:6b:ce: 1c:c8:db:14:63:77:2d:8c:0e:da:0f:4e:19:bb:ab: 54:fb:df:0e:fe:a2:ea:9d:35:1d:c1:18:9a:a6:18: a0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:35:39:15:72:AA:BD:FC:AD:9A:EB:38:9A:A2:04:33:06:29:57:8D X509v3 Authority Key Identifier: keyid:D5:E8:46:1B:A0:84:55:C3:44:FC:75:3A:4D:96:6D:B1:B5:DE:C5:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ehGG6CEVcNE_HU6TZZtsbXexdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:7f:2c:15:30:35:7a:33:41:3d:04:7b:91:6a:98:8c:72:28: af:b9:6a:b4:be:d2:07:9d:93:03:61:57:35:85:da:b6:77:a4: ce:69:ef:b8:56:0b:93:36:fb:98:ae:cc:21:f9:c5:30:61:32: a0:f7:2e:32:d0:f6:6f:f3:51:9a:c5:69:5b:f9:82:2e:c7:6b: 96:f6:a0:ab:4f:fb:45:f4:c2:b2:fc:ea:14:5b:d8:dc:0f:a6: 52:9e:59:86:63:c9:9a:bd:93:0c:61:6a:36:00:99:63:f3:db: 4b:0a:a6:57:cc:ad:42:f7:e8:a3:8c:21:42:18:80:4d:5a:79: 2a:49:34:a3:8b:25:d2:c3:c3:4c:48:5f:da:07:c0:8e:d4:b3: 8f:a8:55:02:3e:5f:43:5a:fe:fe:cd:db:c1:7b:0c:af:3a:29: 23:84:e5:1e:19:55:99:c2:6c:bc:ea:b6:02:c3:5c:13:22:51: df:a8:a5:7b:c4:96:f9:9c:46:fd:00:b0:83:ca:7e:e7:54:a9: b5:b2:16:89:d4:d2:dc:dc:fe:b8:10:77:23:d9:f0:ee:2f:33: 5d:10:1f:08:67:58:22:b8:cd:50:bf:fb:fd:4f:50:aa:ef:a0: 36:4c:df:cb:f0:d4:da:0d:72:2c:b0:bb:ef:15:85:9e:1f:02: 1b:2b:fb:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkGBg6EsokTjuTAX6JXAcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZTg0NjFiYTA4NDU1YzM0NGZjNzUzYTRkOTY2ZGIxYjVk ZWM1ZDUwHhcNMjYwMjA5MTgwMTAxWhcNMjYwMjEwMTgwMTAxWjAzMTEwLwYDVQQD Eyg4YjM1MzkxNTcyYWFiZGZjYWQ5YWViMzg5YWEyMDQzMzA2Mjk1NzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZ5Yxu+JAWBv8E0o18crHdG7YcqD ejEB69DdyVkAIcoN4zEzUPUFWyw9lpeZTrGDVX7p+kMjHQsFjX4pEO22CbItf3fD sOPf6Env8eyXgx/OO0vYxGys244F20jUw4dWhUaDnQzdVDpTAo39Id5KnD8Gf0PR VbV/jJDvJ8cQn+D5Q1BCsFcGEgiO8a5RPrrtcvpWVKHk228pvPzjpptC33J1Z7fz 9ifvv69oDi5lA8ISntLo+QS+VgzHhZy3iR9YyeWbSMeSibiz8rI54V421uUQv7cF PExcs+QgHyAAa84cyNsUY3ctjA7aD04Zu6tU+98O/qLqnTUdwRiaphig3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIs1ORVyqr38rZrrOJqiBDMGKVeNMB8GA1UdIwQY MBaAFNXoRhughFXDRPx1Ok2WbbG13sXVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWVoR0c2Q0VWY05FX0hVNlRaWnRzYlhleGRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9jNWE0ZDgtZjBhYS00OGJiLThiMTIt Y2Q3NWY5Njk5YjMwLzEvMWVoR0c2Q0VWY05FX0hVNlRaWnRzYlhleGRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC9jNWE0ZDgtZjBhYS00OGJiLThiMTItY2Q3NWY5Njk5YjMw LzEvMWVoR0c2Q0VWY05FX0hVNlRaWnRzYlhleGRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVX8sFTA1 ejNBPQR7kWqYjHIor7lqtL7SB52TA2FXNYXatnekzmnvuFYLkzb7mK7MIfnFMGEy oPcuMtD2b/NRmsVpW/mCLsdrlvagq0/7RfTCsvzqFFvY3A+mUp5ZhmPJmr2TDGFq NgCZY/PbSwqmV8ytQvfoo4whQhiATVp5Kkk0o4sl0sPDTEhf2gfAjtSzj6hVAj5f Q1r+/s3bwXsMrzopI4TlHhlVmcJsvOq2AsNcEyJR36ile8SW+ZxG/QCwg8p+51Sp tbIWidTS3Nz+uBB3I9nw7i8zXRAfCGdYIrjNUL/7/U9Qqu+gNkzfy/DU2g1yLLC7 7xWFnh8CGyv7ow== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:33 2026 by rpki-client