This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft File: eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft (raw, json) Hash identifier: JdO34GatgPN4e/BbhPF6zyJnDdaLBU1o6Ep/2f6TRPg= Subject key identifier: 41:4E:17:8C:AC:EA:0F:E1:56:CB:FC:8F:E9:E3:79:07:0C:93:A0:E7 Authority key identifier: 78:B0:DE:4B:52:C3:17:22:E6:2B:93:96:D8:7A:1E:A8:D5:1A:08:E5 Certificate issuer: /CN=78b0de4b52c31722e62b9396d87a1ea8d51a08e5 Certificate serial: 019C41A1887C56F104EE871C4FE7F1360227 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eLDeS1LDFyLmK5OW2HoeqNUaCOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft Manifest number: 180A Signing time: Mon 09 Feb 2026 09:00:30 +0000 Manifest this update: Mon 09 Feb 2026 09:00:30 +0000 Manifest next update: Tue 10 Feb 2026 09:00:30 +0000 Files and hashes: 1: eLDeS1LDFyLmK5OW2HoeqNUaCOU.crl (hash: VwVLK+nNFuIhsh9Qf8zu17PiXfb7TWGuhq8mg3H2QOg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.crl rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft rsync://rpki.ripe.net/repository/DEFAULT/eLDeS1LDFyLmK5OW2HoeqNUaCOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:88:7c:56:f1:04:ee:87:1c:4f:e7:f1:36:02:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78b0de4b52c31722e62b9396d87a1ea8d51a08e5 Validity Not Before: Feb 9 09:00:30 2026 GMT Not After : Feb 10 09:00:30 2026 GMT Subject: CN=414e178cacea0fe156cbfc8fe9e379070c93a0e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3e:d4:67:fe:a0:a6:82:ed:ed:16:a6:78:73: dc:ad:ba:b1:f0:41:18:c5:fb:4f:16:af:ba:71:1d: d9:51:2c:fd:37:19:49:2f:d0:58:67:9b:43:d6:51: 92:8d:c4:98:05:95:5b:98:a1:1a:57:da:21:9d:ef: 7a:9c:ff:b9:2e:14:70:a4:24:e6:6a:36:ac:1e:68: 99:8e:16:0c:d1:92:cf:cb:24:54:81:6f:12:32:38: 42:c9:22:eb:05:89:06:73:81:b8:7c:f1:78:03:c3: 86:d5:39:f4:e4:21:e6:13:37:c1:f2:a9:c0:9d:8c: 8c:47:34:24:ef:af:36:3c:8e:4b:f9:1b:a0:83:5b: c1:a9:09:a4:2e:b3:61:82:cb:13:52:4b:92:d7:d4: d6:34:98:9c:fc:f8:f6:b7:1e:03:07:7a:06:82:2f: 4d:25:67:9b:c8:e7:13:c8:2b:92:1b:25:d4:fa:9f: 22:3f:b6:6d:26:c7:0b:05:0d:21:1b:1d:64:1a:9e: c9:60:cc:c6:c3:ce:e6:93:ce:93:ee:d7:64:91:14: e6:f5:13:01:15:39:5e:c4:b5:12:f2:55:81:29:72: 20:e0:57:d6:e9:37:0c:2a:6b:22:1c:58:63:da:0d: dc:a1:8d:75:3a:ae:59:d8:69:e9:b6:7c:6d:cc:7d: 46:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:4E:17:8C:AC:EA:0F:E1:56:CB:FC:8F:E9:E3:79:07:0C:93:A0:E7 X509v3 Authority Key Identifier: keyid:78:B0:DE:4B:52:C3:17:22:E6:2B:93:96:D8:7A:1E:A8:D5:1A:08:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLDeS1LDFyLmK5OW2HoeqNUaCOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:8c:b3:ea:bd:ce:3d:c9:48:e9:3f:07:37:3c:64:74:ac:55: 7f:79:a3:90:e7:30:98:fb:cb:6a:42:36:03:f2:c8:0f:f2:ee: 15:64:98:05:06:0d:ad:a5:40:d7:bf:1b:b9:aa:a3:2a:c5:3c: 94:06:78:dd:3e:03:16:33:5f:0a:77:9d:2c:61:c5:f5:18:b8: b8:58:33:0d:28:d9:8f:3f:cf:71:a6:30:85:e2:53:06:08:d7: 63:f8:42:a5:34:39:37:36:13:33:11:60:48:66:3a:27:1c:7a: 4f:2f:41:f2:bb:e5:eb:78:a9:6d:13:cd:a4:52:5e:71:de:68: f3:85:92:d6:a5:0a:4b:02:3f:55:09:9c:0e:79:8e:2d:c5:58: 99:ec:e9:73:c0:6e:03:4c:31:6a:78:13:99:64:7b:7e:d9:89: 09:c1:80:20:39:e2:ff:a9:67:b2:ef:55:26:fc:82:53:fe:22: bf:47:a8:e6:4e:98:c7:ca:73:c4:77:fc:ff:b1:96:3f:b0:b8: 66:cf:8f:12:2d:9d:ce:19:06:b6:62:42:5d:0e:22:7d:b4:24: 48:b2:dd:18:32:63:fa:87:fa:10:2a:1c:93:dd:02:c5:3b:02: 77:78:75:f3:1a:e2:53:2a:fd:db:fb:a2:d1:49:cc:35:67:b5: 64:6a:63:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoYh8VvEE7occT+fxNgInMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4YjBkZTRiNTJjMzE3MjJlNjJiOTM5NmQ4N2ExZWE4ZDUx YTA4ZTUwHhcNMjYwMjA5MDkwMDMwWhcNMjYwMjEwMDkwMDMwWjAzMTEwLwYDVQQD Eyg0MTRlMTc4Y2FjZWEwZmUxNTZjYmZjOGZlOWUzNzkwNzBjOTNhMGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqD7UZ/6gpoLt7RameHPcrbqx8EEY xftPFq+6cR3ZUSz9NxlJL9BYZ5tD1lGSjcSYBZVbmKEaV9ohne96nP+5LhRwpCTm ajasHmiZjhYM0ZLPyyRUgW8SMjhCySLrBYkGc4G4fPF4A8OG1Tn05CHmEzfB8qnA nYyMRzQk7682PI5L+Rugg1vBqQmkLrNhgssTUkuS19TWNJic/Pj2tx4DB3oGgi9N JWebyOcTyCuSGyXU+p8iP7ZtJscLBQ0hGx1kGp7JYMzGw87mk86T7tdkkRTm9RMB FTlexLUS8lWBKXIg4FfW6TcMKmsiHFhj2g3coY11Oq5Z2GnptnxtzH1GpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEFOF4ys6g/hVsv8j+njeQcMk6DnMB8GA1UdIwQY MBaAFHiw3ktSwxci5iuTlth6HqjVGgjlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUxEZVMxTERGeUxtSzVPVzJIb2VxTlVhQ09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9iNTlkN2ItNTFiNi00MTY0LTg5YmEt NDc0ODBmZWQwOWIwLzEvZUxEZVMxTERGeUxtSzVPVzJIb2VxTlVhQ09VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9iNTlkN2ItNTFiNi00MTY0LTg5YmEtNDc0ODBmZWQwOWIw LzEvZUxEZVMxTERGeUxtSzVPVzJIb2VxTlVhQ09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb4yz6r3O PclI6T8HNzxkdKxVf3mjkOcwmPvLakI2A/LID/LuFWSYBQYNraVA178buaqjKsU8 lAZ43T4DFjNfCnedLGHF9Ri4uFgzDSjZjz/PcaYwheJTBgjXY/hCpTQ5NzYTMxFg SGY6Jxx6Ty9B8rvl63ipbRPNpFJecd5o84WS1qUKSwI/VQmcDnmOLcVYmezpc8Bu A0wxangTmWR7ftmJCcGAIDni/6lnsu9VJvyCU/4iv0eo5k6Yx8pzxHf8/7GWP7C4 Zs+PEi2dzhkGtmJCXQ4ifbQkSLLdGDJj+of6ECock90CxTsCd3h18xriUyr92/ui 0UnMNWe1ZGpjLw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:43 2026 by rpki-client