This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft File: S-EpiiFeXkt9HgWoX7xZHDifnd0.mft (raw, json) Hash identifier: LvEulxUb24+kBFwcqoY18p25fBIh4qYBoohy1V0U7jo= Subject key identifier: 07:66:AD:62:8B:D9:99:A6:28:7F:7D:98:41:19:37:88:6E:F9:05:71 Authority key identifier: 4B:E1:29:8A:21:5E:5E:4B:7D:1E:05:A8:5F:BC:59:1C:38:9F:9D:DD Certificate issuer: /CN=4be1298a215e5e4b7d1e05a85fbc591c389f9ddd Certificate serial: 019C439069C85BC58AD9DE6837801405C6D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-EpiiFeXkt9HgWoX7xZHDifnd0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft Manifest number: 14E9 Signing time: Mon 09 Feb 2026 18:01:03 +0000 Manifest this update: Mon 09 Feb 2026 18:01:03 +0000 Manifest next update: Tue 10 Feb 2026 18:01:03 +0000 Files and hashes: 1: S-EpiiFeXkt9HgWoX7xZHDifnd0.crl (hash: 101/FYiQXv54mL49Zbz4SCCsFNGzJP73AJje5e0dsdE=) 2: ckaCM0ljBckHax5w4M6j9Dmi6Rc.roa (hash: D3AXy9P3YTGg9/JH6jTq3HL+lqbCncKHq8NI3RwK6m0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft rsync://rpki.ripe.net/repository/DEFAULT/S-EpiiFeXkt9HgWoX7xZHDifnd0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:69:c8:5b:c5:8a:d9:de:68:37:80:14:05:c6:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4be1298a215e5e4b7d1e05a85fbc591c389f9ddd Validity Not Before: Feb 9 18:01:03 2026 GMT Not After : Feb 10 18:01:03 2026 GMT Subject: CN=0766ad628bd999a6287f7d98411937886ef90571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:80:3f:a4:a4:6b:ee:6d:a3:f5:8f:dc:b7:0c: 69:84:d2:8e:70:fa:f4:e5:cc:5f:b4:3a:64:c1:23: c1:01:12:c3:15:b2:10:8d:e2:02:6a:4e:38:53:ef: dd:12:2c:6c:eb:6b:35:f3:f0:86:c4:03:91:59:a7: 96:bc:f3:97:d9:d8:0b:29:6c:40:67:f8:f5:60:2a: d4:59:e8:29:d8:7d:f4:9f:e8:f4:d4:e3:31:0f:96: b2:9b:84:24:d4:7c:2e:50:76:a1:97:ea:90:0c:87: 07:77:7a:11:ee:38:d9:9b:4e:c0:df:40:b5:31:64: 9f:d1:32:cd:46:94:8f:c0:c0:3b:d1:84:d8:9b:d9: d0:6a:ff:02:3b:84:41:ff:1c:b3:3a:1d:d4:46:72: 18:ad:83:3b:e1:1b:55:36:d0:67:0f:2c:08:d5:8a: 59:07:9f:75:62:f6:cb:15:65:96:85:4b:98:38:03: 86:22:40:f4:82:e0:ce:b1:02:3d:e9:2e:0e:4e:c5: 31:e2:8f:3a:b4:e7:8d:f4:b2:b1:ac:aa:1d:fd:15: 46:fa:2b:c0:63:bd:6b:1a:59:c6:12:8f:1c:64:c6: f0:61:3a:b5:59:61:8d:fa:9d:db:a3:97:b3:db:c1: fb:fc:1c:4e:94:2f:b0:25:ed:e6:04:c8:e4:07:bb: 80:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:66:AD:62:8B:D9:99:A6:28:7F:7D:98:41:19:37:88:6E:F9:05:71 X509v3 Authority Key Identifier: keyid:4B:E1:29:8A:21:5E:5E:4B:7D:1E:05:A8:5F:BC:59:1C:38:9F:9D:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-EpiiFeXkt9HgWoX7xZHDifnd0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:63:70:d7:a4:49:00:0c:00:5c:35:a9:af:0c:2b:8c:7a:f2: f9:9b:66:86:f2:d5:48:31:b1:22:67:8a:ec:65:4d:74:af:2d: d6:cf:ff:6e:58:59:de:1a:71:40:40:b2:5b:5b:30:c0:57:30: 47:3c:d3:f2:05:6e:94:8f:a4:df:06:68:5f:18:95:38:d8:10: 95:c5:eb:4a:e0:d7:2e:5c:6d:49:6f:85:1f:87:33:4e:c7:aa: 6f:5a:85:e1:8e:67:bc:19:fa:14:a5:5c:ee:c2:93:99:5b:13: 51:7c:f3:c8:64:61:cf:e4:cf:88:fc:ba:cc:81:e3:5b:e0:3c: dc:51:78:07:66:77:b2:7a:8d:54:cd:ec:52:31:e7:b0:a0:3a: 71:34:90:1c:b0:2b:2c:c1:64:04:10:ee:ce:48:48:76:a3:b7: 99:5f:6f:d2:86:51:0b:c5:20:1a:8a:51:e1:89:46:9e:57:03: ed:92:b9:15:71:7b:6a:e3:87:24:7b:18:6f:7b:29:dd:df:82: d4:d4:3f:b6:35:c2:e5:51:e8:87:77:9b:32:7d:a7:ae:d3:d8: f4:40:6e:94:38:dc:8d:fb:bd:28:f5:6e:dd:0a:6a:24:cf:dc: c9:c1:08:39:e3:b6:f8:90:0f:a7:16:4a:36:a8:a8:8a:18:21: 7f:8f:63:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkGnIW8WK2d5oN4AUBcbVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZTEyOThhMjE1ZTVlNGI3ZDFlMDVhODVmYmM1OTFjMzg5 ZjlkZGQwHhcNMjYwMjA5MTgwMTAzWhcNMjYwMjEwMTgwMTAzWjAzMTEwLwYDVQQD EygwNzY2YWQ2MjhiZDk5OWE2Mjg3ZjdkOTg0MTE5Mzc4ODZlZjkwNTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4A/pKRr7m2j9Y/ctwxphNKOcPr0 5cxftDpkwSPBARLDFbIQjeICak44U+/dEixs62s18/CGxAORWaeWvPOX2dgLKWxA Z/j1YCrUWegp2H30n+j01OMxD5aym4Qk1HwuUHahl+qQDIcHd3oR7jjZm07A30C1 MWSf0TLNRpSPwMA70YTYm9nQav8CO4RB/xyzOh3URnIYrYM74RtVNtBnDywI1YpZ B591YvbLFWWWhUuYOAOGIkD0guDOsQI96S4OTsUx4o86tOeN9LKxrKod/RVG+ivA Y71rGlnGEo8cZMbwYTq1WWGN+p3bo5ez28H7/BxOlC+wJe3mBMjkB7uAxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAdmrWKL2ZmmKH99mEEZN4hu+QVxMB8GA1UdIwQY MBaAFEvhKYohXl5LfR4FqF+8WRw4n53dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUy1FcGlpRmVYa3Q5SGdXb1g3eFpIRGlmbmQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8zOTkyNzEtNWQ0YS00MzIwLTgyZWQt YWFkNjE2MzlkOWQ2LzEvUy1FcGlpRmVYa3Q5SGdXb1g3eFpIRGlmbmQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8zOTkyNzEtNWQ0YS00MzIwLTgyZWQtYWFkNjE2MzlkOWQ2 LzEvUy1FcGlpRmVYa3Q5SGdXb1g3eFpIRGlmbmQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1WNw16RJ AAwAXDWprwwrjHry+ZtmhvLVSDGxImeK7GVNdK8t1s//blhZ3hpxQECyW1swwFcw RzzT8gVulI+k3wZoXxiVONgQlcXrSuDXLlxtSW+FH4czTseqb1qF4Y5nvBn6FKVc 7sKTmVsTUXzzyGRhz+TPiPy6zIHjW+A83FF4B2Z3snqNVM3sUjHnsKA6cTSQHLAr LMFkBBDuzkhIdqO3mV9v0oZRC8UgGopR4YlGnlcD7ZK5FXF7auOHJHsYb3sp3d+C 1NQ/tjXC5VHoh3ebMn2nrtPY9EBulDjcjfu9KPVu3QpqJM/cycEIOeO2+JAPpxZK Nqioihghf49jOg== -----END CERTIFICATE-----Generated at Mon Feb 9 21:08:29 2026 by rpki-client