This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft File: 1eKDzL8RaYtvIuwXtfY-OlPkESA.mft (raw, json) Hash identifier: /qu84a6FiyzRF1CQbCxH0f7shG6Sdrf+2lTB0xYOfGw= Subject key identifier: D0:78:F7:8F:8E:B8:B0:FD:D1:4D:8F:AA:81:3F:14:4C:DB:1E:35:2D Authority key identifier: D5:E2:83:CC:BF:11:69:8B:6F:22:EC:17:B5:F6:3E:3A:53:E4:11:20 Certificate issuer: /CN=d5e283ccbf11698b6f22ec17b5f63e3a53e41120 Certificate serial: 019C43220CBDC526B9E16713E50836521AD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft Manifest number: 180C Signing time: Mon 09 Feb 2026 16:00:30 +0000 Manifest this update: Mon 09 Feb 2026 16:00:30 +0000 Manifest next update: Tue 10 Feb 2026 16:00:30 +0000 Files and hashes: 1: 1eKDzL8RaYtvIuwXtfY-OlPkESA.crl (hash: oaJ+EddcEBY4bpCEczTLm91+WVh20CP9kiu19AVBL/M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:0c:bd:c5:26:b9:e1:67:13:e5:08:36:52:1a:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5e283ccbf11698b6f22ec17b5f63e3a53e41120 Validity Not Before: Feb 9 16:00:30 2026 GMT Not After : Feb 10 16:00:30 2026 GMT Subject: CN=d078f78f8eb8b0fdd14d8faa813f144cdb1e352d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:8d:66:6d:3b:9e:1c:2d:8d:cd:00:3e:89:32: 6f:1e:27:b3:cf:27:26:8b:46:1b:16:4a:3d:52:a3: 51:9d:e9:2c:15:9d:13:41:c9:f0:34:a7:0e:95:66: 1f:cd:7f:28:d6:50:b7:a8:88:1f:a2:fa:d1:ce:21: 49:ea:aa:d5:ea:3c:1a:00:54:a8:6f:7d:5d:b2:13: 87:f5:ac:bb:67:d6:eb:d2:01:3b:20:bb:1c:0d:17: 0b:c9:9f:68:78:31:d4:3a:d4:d0:33:1c:92:4f:75: 1a:3a:3e:9d:56:e1:19:9e:82:53:f6:b1:4c:cf:5a: 45:6c:cd:be:0a:ac:51:79:2c:99:d1:01:d5:1e:f3: d0:8d:62:69:66:72:25:8d:27:31:61:70:ee:38:59: 7a:83:fb:6b:35:7c:6a:37:ac:f7:6e:89:a3:9d:47: 68:21:67:c7:4c:3f:72:a8:ee:b1:00:d3:50:dd:72: 0d:d6:4a:30:19:d0:99:75:6d:99:49:a2:51:45:59: 01:ad:9b:dc:13:5b:4b:92:dc:c3:8e:67:2e:eb:ea: fe:a9:99:2c:09:92:70:86:ad:b0:0a:6d:da:da:c1: a0:c7:61:f5:d1:ab:10:4e:0d:4f:26:f5:eb:81:3e: 94:e0:ed:1b:52:c7:b7:93:98:fb:b2:0a:5c:fa:f7: 4e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:78:F7:8F:8E:B8:B0:FD:D1:4D:8F:AA:81:3F:14:4C:DB:1E:35:2D X509v3 Authority Key Identifier: keyid:D5:E2:83:CC:BF:11:69:8B:6F:22:EC:17:B5:F6:3E:3A:53:E4:11:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:ed:93:3d:92:df:76:86:84:bd:e2:32:01:ff:b1:f0:ce:59: ea:10:4a:fd:31:15:a4:11:bd:76:29:56:41:40:5c:7f:cd:7e: 15:3e:ea:96:24:da:b3:54:19:bf:74:35:cb:ce:3f:17:e2:10: 18:86:b5:11:f9:c0:31:ec:11:8a:d8:63:30:56:12:ef:32:cb: 88:8a:bc:6c:f2:60:0f:d3:a5:cc:2f:fb:99:25:ff:24:ea:a9: fc:07:0f:4c:8a:6b:c4:08:73:1c:58:b0:f8:13:f8:25:8e:47: d7:bc:c5:bf:8f:b5:2e:56:80:8b:c4:1f:5a:c6:07:f3:ba:1e: 5f:af:d4:9c:7f:3e:2b:33:0d:f8:d0:55:ea:99:62:5e:04:f8: 86:74:ad:d1:99:f8:92:dd:60:eb:a3:e8:b4:59:69:f8:cf:3e: 6f:fc:fd:01:f5:9a:01:12:18:df:d8:18:36:b9:ee:82:d7:14: a6:b0:bb:47:d4:b2:bf:f4:63:41:7a:e7:ed:4d:24:ac:95:f8: fa:a9:cd:16:b8:4b:0a:ff:4d:df:ae:f0:cf:e0:fe:ad:5a:07: d7:d6:6f:81:c9:55:5d:3d:90:c1:78:a5:ed:44:c8:ac:31:30: 74:95:04:b9:40:98:89:64:fc:0f:65:1a:55:29:70:8c:72:9d: 49:74:0e:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIgy9xSa54WcT5Qg2UhrSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZTI4M2NjYmYxMTY5OGI2ZjIyZWMxN2I1ZjYzZTNhNTNl NDExMjAwHhcNMjYwMjA5MTYwMDMwWhcNMjYwMjEwMTYwMDMwWjAzMTEwLwYDVQQD EyhkMDc4Zjc4ZjhlYjhiMGZkZDE0ZDhmYWE4MTNmMTQ0Y2RiMWUzNTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4I1mbTueHC2NzQA+iTJvHiezzycm i0YbFko9UqNRneksFZ0TQcnwNKcOlWYfzX8o1lC3qIgfovrRziFJ6qrV6jwaAFSo b31dshOH9ay7Z9br0gE7ILscDRcLyZ9oeDHUOtTQMxyST3UaOj6dVuEZnoJT9rFM z1pFbM2+CqxReSyZ0QHVHvPQjWJpZnIljScxYXDuOFl6g/trNXxqN6z3bomjnUdo IWfHTD9yqO6xANNQ3XIN1kowGdCZdW2ZSaJRRVkBrZvcE1tLktzDjmcu6+r+qZks CZJwhq2wCm3a2sGgx2H10asQTg1PJvXrgT6U4O0bUse3k5j7sgpc+vdOFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNB494+OuLD90U2PqoE/FEzbHjUtMB8GA1UdIwQY MBaAFNXig8y/EWmLbyLsF7X2PjpT5BEgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWVLRHpMOFJhWXR2SXV3WHRmWS1PbFBrRVNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi82ZGFiZDAtNTU2NS00OTI1LWE3MDIt MGY2MmJiZDliNTY4LzEvMWVLRHpMOFJhWXR2SXV3WHRmWS1PbFBrRVNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi82ZGFiZDAtNTU2NS00OTI1LWE3MDItMGY2MmJiZDliNTY4 LzEvMWVLRHpMOFJhWXR2SXV3WHRmWS1PbFBrRVNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdu2TPZLf doaEveIyAf+x8M5Z6hBK/TEVpBG9dilWQUBcf81+FT7qliTas1QZv3Q1y84/F+IQ GIa1EfnAMewRithjMFYS7zLLiIq8bPJgD9OlzC/7mSX/JOqp/AcPTIprxAhzHFiw +BP4JY5H17zFv4+1LlaAi8QfWsYH87oeX6/UnH8+KzMN+NBV6pliXgT4hnSt0Zn4 kt1g66PotFlp+M8+b/z9AfWaARIY39gYNrnugtcUprC7R9Syv/RjQXrn7U0krJX4 +qnNFrhLCv9N367wz+D+rVoH19ZvgclVXT2QwXil7UTIrDEwdJUEuUCYiWT8D2Ua VSlwjHKdSXQOuA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:12 2026 by rpki-client