This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft File: Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft (raw, json) Hash identifier: 89emKB2CjlIcvlq9qA1iNOQHbq6w6V4EGTtKSYofYb0= Subject key identifier: EF:8D:23:14:53:B0:9E:F9:E1:03:D0:6C:8F:44:5D:A3:3D:49:D2:11 Authority key identifier: 12:FB:E4:AA:DE:4A:7E:A8:C0:23:7F:CB:F4:02:74:86:0A:40:EC:57 Certificate issuer: /CN=12fbe4aade4a7ea8c0237fcbf40274860a40ec57 Certificate serial: 019C427D8C58542C7A978616D12F22D21CB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft Manifest number: 0EEF Signing time: Mon 09 Feb 2026 13:00:49 +0000 Manifest this update: Mon 09 Feb 2026 13:00:49 +0000 Manifest next update: Tue 10 Feb 2026 13:00:49 +0000 Files and hashes: 1: Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.crl (hash: L2INk8olL3cdHQYMKB2JujTJeYYJP+bC3/UqAA7T3x0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.crl rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft rsync://rpki.ripe.net/repository/DEFAULT/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:8c:58:54:2c:7a:97:86:16:d1:2f:22:d2:1c:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12fbe4aade4a7ea8c0237fcbf40274860a40ec57 Validity Not Before: Feb 9 13:00:49 2026 GMT Not After : Feb 10 13:00:49 2026 GMT Subject: CN=ef8d231453b09ef9e103d06c8f445da33d49d211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:24:a2:9c:79:26:00:2e:4a:31:d2:57:87:22: d1:95:90:b9:a5:bf:2d:0e:3c:93:ff:17:ab:49:5c: ca:3b:59:cd:0b:c3:3e:f4:4d:fb:28:da:2e:c1:8a: fe:49:ed:36:c0:24:2c:15:7d:61:db:2f:07:4b:17: 54:69:65:4e:e1:d3:53:0f:0a:25:39:3b:0b:8d:11: ed:53:41:9f:91:e6:ec:b2:17:73:79:ea:9b:5e:4a: 83:21:7b:9a:bb:15:e0:bf:7f:d8:5c:77:e5:59:46: ad:72:22:a0:bd:08:9f:ea:83:83:97:90:54:ba:bb: 28:e1:93:26:55:73:04:1d:dd:69:df:bc:0f:cd:2f: 9e:4a:0e:24:95:db:31:24:dc:8b:ea:e9:d1:fd:15: c1:6a:f6:a5:23:2f:41:6e:8e:e6:ab:b4:76:7d:dc: 95:a9:7f:4e:c4:3a:2f:7d:bc:46:61:af:de:cf:72: 27:e3:47:e9:0e:30:16:4b:31:d1:59:93:8f:6f:1a: d2:d3:dd:a1:2a:a2:1e:a7:cc:3a:ce:14:84:45:03: 55:55:a6:cc:d6:50:6f:47:0e:02:ac:55:8e:ce:a2: b9:d2:f5:28:6d:41:c2:44:a5:26:d4:d6:09:78:ad: bf:36:2e:a8:8e:56:f6:cd:6f:6c:83:ca:27:e2:12: 38:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:8D:23:14:53:B0:9E:F9:E1:03:D0:6C:8F:44:5D:A3:3D:49:D2:11 X509v3 Authority Key Identifier: keyid:12:FB:E4:AA:DE:4A:7E:A8:C0:23:7F:CB:F4:02:74:86:0A:40:EC:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:c6:45:8d:7a:10:bf:2d:51:92:2b:2a:35:9a:6d:1c:cc:57: d7:90:aa:9b:a3:9e:28:aa:76:30:23:f1:d4:d3:d9:ea:03:1c: f6:9c:c7:31:7f:f0:13:7b:d3:f3:fd:36:ae:5f:21:86:ac:f9: a5:cd:8c:52:d3:f3:75:5d:6b:6c:cd:e6:b2:a3:25:80:ff:66: 1f:2b:b6:32:c6:3e:2a:1e:66:39:5c:1a:e5:b8:59:cd:17:e7: 1b:35:21:12:49:92:5a:53:3f:11:98:11:91:ed:df:83:31:2b: 14:46:2b:29:52:3b:50:0f:2f:fb:ca:c0:2d:6c:98:0a:90:95: 3a:1e:1e:81:e9:93:70:3c:55:61:15:64:57:a4:36:62:ca:f6: 1a:d8:a3:81:9d:b2:1a:ef:f6:51:07:b2:e4:41:75:53:37:04: 91:7e:95:2c:16:f8:fa:ef:4b:e8:10:35:01:71:ae:dc:b3:5a: a9:b2:c3:a8:88:f4:68:03:3b:d3:27:fd:d3:2c:be:d7:c7:63: b4:bd:49:49:3d:0d:48:8a:61:31:ce:43:15:87:fa:ba:36:1c: 37:70:fc:b5:c2:fe:d7:ef:40:77:15:7b:fb:db:4a:2f:53:aa: 3c:1f:45:8d:4f:04:31:bc:62:7b:76:ec:51:35:8e:7b:63:0f: cf:e4:f7:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfYxYVCx6l4YW0S8i0hy5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyZmJlNGFhZGU0YTdlYThjMDIzN2ZjYmY0MDI3NDg2MGE0 MGVjNTcwHhcNMjYwMjA5MTMwMDQ5WhcNMjYwMjEwMTMwMDQ5WjAzMTEwLwYDVQQD EyhlZjhkMjMxNDUzYjA5ZWY5ZTEwM2QwNmM4ZjQ0NWRhMzNkNDlkMjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCSinHkmAC5KMdJXhyLRlZC5pb8t DjyT/xerSVzKO1nNC8M+9E37KNouwYr+Se02wCQsFX1h2y8HSxdUaWVO4dNTDwol OTsLjRHtU0GfkebsshdzeeqbXkqDIXuauxXgv3/YXHflWUatciKgvQif6oODl5BU urso4ZMmVXMEHd1p37wPzS+eSg4kldsxJNyL6unR/RXBavalIy9Bbo7mq7R2fdyV qX9OxDovfbxGYa/ez3In40fpDjAWSzHRWZOPbxrS092hKqIep8w6zhSERQNVVabM 1lBvRw4CrFWOzqK50vUobUHCRKUm1NYJeK2/Ni6ojlb2zW9sg8on4hI44QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO+NIxRTsJ754QPQbI9EXaM9SdIRMB8GA1UdIwQY MBaAFBL75KreSn6owCN/y/QCdIYKQOxXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXZ2a3F0NUtmcWpBSTNfTDlBSjBoZ3BBN0ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9iZmRjNTYtOTUwZS00OTljLTg4NmQt NGJhOGQ2ZTJkOGRlLzEvRXZ2a3F0NUtmcWpBSTNfTDlBSjBoZ3BBN0ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9iZmRjNTYtOTUwZS00OTljLTg4NmQtNGJhOGQ2ZTJkOGRl LzEvRXZ2a3F0NUtmcWpBSTNfTDlBSjBoZ3BBN0ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADsZFjXoQ vy1RkisqNZptHMxX15Cqm6OeKKp2MCPx1NPZ6gMc9pzHMX/wE3vT8/02rl8hhqz5 pc2MUtPzdV1rbM3msqMlgP9mHyu2MsY+Kh5mOVwa5bhZzRfnGzUhEkmSWlM/EZgR ke3fgzErFEYrKVI7UA8v+8rALWyYCpCVOh4egemTcDxVYRVkV6Q2Ysr2GtijgZ2y Gu/2UQey5EF1UzcEkX6VLBb4+u9L6BA1AXGu3LNaqbLDqIj0aAM70yf90yy+18dj tL1JST0NSIphMc5DFYf6ujYcN3D8tcL+1+9AdxV7+9tKL1OqPB9FjU8EMbxie3bs UTWOe2MPz+T39Q== -----END CERTIFICATE-----Generated at Mon Feb 9 23:59:23 2026 by rpki-client