This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft File: ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft (raw, json) Hash identifier: V4oAFjjRwLuGLzFb1vtIp1pnr7Y4fyFZpDYM1AlaMHY= Subject key identifier: B9:8A:03:39:B8:09:7A:8B:2A:E3:B4:A2:D8:22:EC:09:9D:D9:96:DF Authority key identifier: 11:30:A1:D5:E5:C0:90:1D:19:B4:B7:07:A7:3D:17:CA:E0:E3:B6:60 Certificate issuer: /CN=1130a1d5e5c0901d19b4b707a73d17cae0e3b660 Certificate serial: 019C43FE14CDED293FA2D4A3F9581E9D298C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 20:00:50 +0000 Manifest this update: Mon 09 Feb 2026 20:00:50 +0000 Manifest next update: Tue 10 Feb 2026 20:00:50 +0000 Files and hashes: 1: ETCh1eXAkB0ZtLcHpz0XyuDjtmA.crl (hash: BvbBdyZNz8HBky+hGWO+pwJ1t/FdTWFlJR95eHduhMU=) 2: e1jQd52gcA6yXLGjiuknB8JEOwo.roa (hash: XJANgx0hjgIGKYki1Gh7IwsZwbbuxC+ryDXFWZXhAuQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.crl rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:14:cd:ed:29:3f:a2:d4:a3:f9:58:1e:9d:29:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1130a1d5e5c0901d19b4b707a73d17cae0e3b660 Validity Not Before: Feb 9 20:00:50 2026 GMT Not After : Feb 10 20:00:50 2026 GMT Subject: CN=b98a0339b8097a8b2ae3b4a2d822ec099dd996df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:29:f6:f1:88:ff:7c:e9:a4:60:af:d4:88:3c: de:e6:9e:5b:f9:6f:97:cc:e4:ca:8e:b7:42:ab:d5: 1b:3f:4d:a9:12:58:df:47:82:43:63:3d:3c:7c:1a: 5c:27:42:67:d5:99:f5:49:0b:42:25:3e:e5:00:df: 6e:f8:7f:ce:74:52:9c:34:84:11:67:ee:25:cc:1d: 6b:7c:d9:54:7d:c7:b0:50:15:a4:e5:7a:7e:50:68: 3e:f1:f5:d2:30:70:fc:e2:ba:25:bf:ab:6e:3e:5a: 30:ab:01:cc:24:f8:d8:51:23:70:a6:32:9d:38:e6: 50:76:6b:de:b1:79:6c:f4:19:ad:2e:b2:c0:c3:ce: 4c:d4:62:58:44:74:6c:0d:d5:d7:b5:44:28:09:fc: 0a:84:ec:13:f9:0e:25:45:79:d6:10:6d:d6:15:5b: 7c:0a:b6:bc:8a:5f:f5:66:b0:fa:67:6f:cd:80:bb: ec:a5:2d:43:d1:29:a9:a6:90:98:a1:5f:81:78:41: 64:c6:51:a5:67:7b:99:1b:e3:41:d4:57:6f:36:8c: ef:74:a9:f4:10:33:64:22:f4:d3:c4:15:c5:fa:59: 68:aa:bf:02:f0:0a:04:75:4e:3d:cc:1f:e5:f7:67: dc:f1:1d:fc:fe:9f:80:36:00:dc:ee:5a:ea:39:f8: f7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:8A:03:39:B8:09:7A:8B:2A:E3:B4:A2:D8:22:EC:09:9D:D9:96:DF X509v3 Authority Key Identifier: keyid:11:30:A1:D5:E5:C0:90:1D:19:B4:B7:07:A7:3D:17:CA:E0:E3:B6:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:64:c9:d6:d9:47:37:87:81:90:e1:44:4c:6e:e7:0a:54:7c: 62:1a:8f:5b:55:43:4c:69:bb:0b:ab:c0:6c:00:bf:d1:96:01: c9:fe:32:90:e7:05:f6:98:c4:ff:92:d2:df:e0:81:15:53:0f: f5:31:0b:58:65:31:8c:5f:5f:f5:70:2c:12:f6:f3:3a:71:1f: ee:1e:74:88:f7:83:62:7b:76:19:b9:ff:06:43:9a:b2:2c:68: dd:5c:b1:0f:76:99:1e:c7:94:22:d4:d5:a3:f1:32:2e:50:fc: 30:5c:1e:c8:ce:40:c5:d9:05:03:a5:35:f2:65:99:44:92:e8: 5d:a3:27:2c:19:8e:5e:21:8e:2d:4a:90:a4:67:4a:00:54:b8: 7a:73:d3:66:33:d7:41:e9:e3:f0:e9:c5:48:e6:39:60:10:37: 02:fe:0d:40:38:7f:8a:d3:40:e0:66:8d:d8:d2:ab:26:9d:d7: e6:b4:39:0b:78:c0:32:5c:80:f5:3d:f4:ca:be:7b:98:7f:02: 1a:41:f6:68:61:cf:eb:55:14:7d:a7:10:06:84:32:1f:2d:f8: 79:29:cd:8e:2e:69:f5:a2:dd:60:04:66:78:73:43:b4:1d:62: d5:67:ff:40:af:64:d9:3e:cf:51:05:10:66:6a:bc:7e:fb:cd: fb:d6:04:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/hTN7Sk/otSj+VgenSmMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMzBhMWQ1ZTVjMDkwMWQxOWI0YjcwN2E3M2QxN2NhZTBl M2I2NjAwHhcNMjYwMjA5MjAwMDUwWhcNMjYwMjEwMjAwMDUwWjAzMTEwLwYDVQQD EyhiOThhMDMzOWI4MDk3YThiMmFlM2I0YTJkODIyZWMwOTlkZDk5NmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSn28Yj/fOmkYK/UiDze5p5b+W+X zOTKjrdCq9UbP02pEljfR4JDYz08fBpcJ0Jn1Zn1SQtCJT7lAN9u+H/OdFKcNIQR Z+4lzB1rfNlUfcewUBWk5Xp+UGg+8fXSMHD84rolv6tuPlowqwHMJPjYUSNwpjKd OOZQdmvesXls9BmtLrLAw85M1GJYRHRsDdXXtUQoCfwKhOwT+Q4lRXnWEG3WFVt8 Cra8il/1ZrD6Z2/NgLvspS1D0SmpppCYoV+BeEFkxlGlZ3uZG+NB1FdvNozvdKn0 EDNkIvTTxBXF+lloqr8C8AoEdU49zB/l92fc8R38/p+ANgDc7lrqOfj30QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLmKAzm4CXqLKuO0otgi7Amd2ZbfMB8GA1UdIwQY MBaAFBEwodXlwJAdGbS3B6c9F8rg47ZgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVRDaDFlWEFrQjBadExjSHB6MFh5dURqdG1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8xN2ZiZjktMDlhZS00NmExLThmNjQt NmQ0MTliNzE3ZDBhLzEvRVRDaDFlWEFrQjBadExjSHB6MFh5dURqdG1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS8xN2ZiZjktMDlhZS00NmExLThmNjQtNmQ0MTliNzE3ZDBh LzEvRVRDaDFlWEFrQjBadExjSHB6MFh5dURqdG1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdmTJ1tlH N4eBkOFETG7nClR8YhqPW1VDTGm7C6vAbAC/0ZYByf4ykOcF9pjE/5LS3+CBFVMP 9TELWGUxjF9f9XAsEvbzOnEf7h50iPeDYnt2Gbn/BkOasixo3VyxD3aZHseUItTV o/EyLlD8MFweyM5AxdkFA6U18mWZRJLoXaMnLBmOXiGOLUqQpGdKAFS4enPTZjPX Qenj8OnFSOY5YBA3Av4NQDh/itNA4GaN2NKrJp3X5rQ5C3jAMlyA9T30yr57mH8C GkH2aGHP61UUfacQBoQyHy34eSnNji5p9aLdYARmeHNDtB1i1Wf/QK9k2T7PUQUQ Zmq8fvvN+9YEBA== -----END CERTIFICATE-----Generated at Tue Feb 10 00:30:26 2026 by rpki-client