This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/afde34-b688-4fbd-bfdd-39b1106cc9f1/1/ElaCoB4i5CM4yoXHJVubP54q6jA.mft File: ElaCoB4i5CM4yoXHJVubP54q6jA.mft (raw, json) Hash identifier: YN2zWOKqbmBBU9k8P/yOLDH7rpKu5iFW6WA5/XX8q84= Subject key identifier: 87:E4:E4:19:6E:E0:D8:6C:4E:BE:4E:DA:CA:D2:00:A5:D3:C9:C8:18 Authority key identifier: 12:56:82:A0:1E:22:E4:23:38:CA:85:C7:25:5B:9B:3F:9E:2A:EA:30 Certificate issuer: /CN=125682a01e22e42338ca85c7255b9b3f9e2aea30 Certificate serial: 019C439023B6040D1F4429789AE663284D2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ElaCoB4i5CM4yoXHJVubP54q6jA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/afde34-b688-4fbd-bfdd-39b1106cc9f1/1/ElaCoB4i5CM4yoXHJVubP54q6jA.mft Manifest number: 0646 Signing time: Mon 09 Feb 2026 18:00:45 +0000 Manifest this update: Mon 09 Feb 2026 18:00:45 +0000 Manifest next update: Tue 10 Feb 2026 18:00:45 +0000 Files and hashes: 1: ElaCoB4i5CM4yoXHJVubP54q6jA.crl (hash: kVPisynLwIZuhx4IcVziGEyn+NH9RPxbZMaJZ2g0T3k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/afde34-b688-4fbd-bfdd-39b1106cc9f1/1/ElaCoB4i5CM4yoXHJVubP54q6jA.crl rsync://rpki.ripe.net/repository/DEFAULT/50/afde34-b688-4fbd-bfdd-39b1106cc9f1/1/ElaCoB4i5CM4yoXHJVubP54q6jA.mft rsync://rpki.ripe.net/repository/DEFAULT/ElaCoB4i5CM4yoXHJVubP54q6jA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:23:b6:04:0d:1f:44:29:78:9a:e6:63:28:4d:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=125682a01e22e42338ca85c7255b9b3f9e2aea30 Validity Not Before: Feb 9 18:00:45 2026 GMT Not After : Feb 10 18:00:45 2026 GMT Subject: CN=87e4e4196ee0d86c4ebe4edacad200a5d3c9c818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cc:22:67:e9:81:25:08:38:d0:80:aa:d4:29: 27:b2:d5:0c:7f:ea:40:c1:8d:62:a7:6c:da:fc:f0: 4f:3d:13:d2:36:1c:84:87:83:89:96:3b:77:47:6c: 83:42:99:8f:8f:b2:47:b5:87:d6:01:94:79:12:f3: a6:ab:75:6c:bf:11:d8:d4:85:9e:45:e4:9b:50:1d: 3e:16:0e:12:0c:31:f9:3f:fb:0e:46:83:30:55:3a: 81:43:95:c2:5b:06:8b:d0:df:9f:04:4d:67:2f:42: 6a:e1:aa:dc:e0:0f:95:fb:33:1a:97:b6:d8:bd:3e: 85:ac:c0:35:82:d9:f1:ea:27:40:6c:35:8f:cc:ea: b5:9d:bb:c4:a6:70:e8:4e:7e:bc:b7:6c:fe:c5:f4: d5:75:7b:ef:b4:9a:49:56:45:83:04:df:c4:3f:ba: 26:29:e8:ad:df:f2:3f:f3:f5:b0:69:40:6a:d2:eb: 24:c7:92:0a:41:fd:91:ff:b1:b5:fd:57:b9:c5:07: 5f:b6:a4:7e:4d:81:c9:85:5f:2f:62:41:31:84:5a: fb:58:2f:26:46:ba:af:9b:50:9f:cb:ad:8e:1f:aa: 2c:18:19:77:80:1c:12:4c:10:fb:74:e8:89:6e:ea: a9:a7:23:75:c4:2e:df:e1:d8:c5:81:7a:db:a1:a8: 9b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:E4:E4:19:6E:E0:D8:6C:4E:BE:4E:DA:CA:D2:00:A5:D3:C9:C8:18 X509v3 Authority Key Identifier: keyid:12:56:82:A0:1E:22:E4:23:38:CA:85:C7:25:5B:9B:3F:9E:2A:EA:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ElaCoB4i5CM4yoXHJVubP54q6jA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/afde34-b688-4fbd-bfdd-39b1106cc9f1/1/ElaCoB4i5CM4yoXHJVubP54q6jA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/afde34-b688-4fbd-bfdd-39b1106cc9f1/1/ElaCoB4i5CM4yoXHJVubP54q6jA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption df:31:1a:8b:95:22:b2:91:ad:53:d3:a1:5b:ab:ea:77:db:8b: 8b:37:f8:cf:81:ab:7b:8c:89:16:c8:ac:8f:76:b1:21:c4:27: 9a:c3:d8:5d:89:90:54:a5:31:c4:56:3b:ea:a5:24:25:5f:5c: dc:4c:37:33:e2:ee:fb:64:7c:0b:13:50:bc:48:7f:63:1e:be: d6:45:c6:6b:23:61:f0:04:c8:20:7d:10:65:5d:68:a4:65:6c: 17:58:e8:46:5b:c7:fc:e5:38:fa:e4:f6:3e:10:9d:73:26:88: b4:ed:d7:ab:5d:3c:d5:dc:5f:73:30:78:d1:57:fc:4a:19:aa: 90:5e:88:ad:95:ac:20:4a:66:ce:ad:0a:51:54:8d:1b:23:6f: 1f:82:f7:c3:48:bf:55:84:c9:5f:fc:cb:16:f8:91:eb:b6:77: ba:b2:f2:0f:f9:0d:3c:18:1b:f2:80:69:a5:b5:68:85:66:37: 21:0c:cf:53:69:91:76:c7:10:03:9f:c8:0b:1f:60:ed:c9:f7: b7:91:2b:b1:28:34:a7:11:14:86:60:0c:cd:1a:9e:ea:29:c3: 3f:d1:4d:a9:bb:bc:18:30:88:d1:bf:3f:d2:04:51:c4:8e:02: b5:12:b2:c0:7d:b7:32:5f:3d:b7:59:3e:85:4b:d7:f9:13:90: 25:4c:29:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkCO2BA0fRCl4muZjKE0sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNTY4MmEwMWUyMmU0MjMzOGNhODVjNzI1NWI5YjNmOWUy YWVhMzAwHhcNMjYwMjA5MTgwMDQ1WhcNMjYwMjEwMTgwMDQ1WjAzMTEwLwYDVQQD Eyg4N2U0ZTQxOTZlZTBkODZjNGViZTRlZGFjYWQyMDBhNWQzYzljODE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuswiZ+mBJQg40ICq1CknstUMf+pA wY1ip2za/PBPPRPSNhyEh4OJljt3R2yDQpmPj7JHtYfWAZR5EvOmq3VsvxHY1IWe ReSbUB0+Fg4SDDH5P/sORoMwVTqBQ5XCWwaL0N+fBE1nL0Jq4arc4A+V+zMal7bY vT6FrMA1gtnx6idAbDWPzOq1nbvEpnDoTn68t2z+xfTVdXvvtJpJVkWDBN/EP7om Keit3/I/8/WwaUBq0uskx5IKQf2R/7G1/Ve5xQdftqR+TYHJhV8vYkExhFr7WC8m Rrqvm1Cfy62OH6osGBl3gBwSTBD7dOiJbuqppyN1xC7f4djFgXrboaibzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIfk5Blu4NhsTr5O2srSAKXTycgYMB8GA1UdIwQY MBaAFBJWgqAeIuQjOMqFxyVbmz+eKuowMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWxhQ29CNGk1Q000eW9YSEpWdWJQNTRxNmpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9hZmRlMzQtYjY4OC00ZmJkLWJmZGQt MzliMTEwNmNjOWYxLzEvRWxhQ29CNGk1Q000eW9YSEpWdWJQNTRxNmpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9hZmRlMzQtYjY4OC00ZmJkLWJmZGQtMzliMTEwNmNjOWYx LzEvRWxhQ29CNGk1Q000eW9YSEpWdWJQNTRxNmpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3zEai5Ui spGtU9OhW6vqd9uLizf4z4Gre4yJFsisj3axIcQnmsPYXYmQVKUxxFY76qUkJV9c 3Ew3M+Lu+2R8CxNQvEh/Yx6+1kXGayNh8ATIIH0QZV1opGVsF1joRlvH/OU4+uT2 PhCdcyaItO3Xq1081dxfczB40Vf8ShmqkF6IrZWsIEpmzq0KUVSNGyNvH4L3w0i/ VYTJX/zLFviR67Z3urLyD/kNPBgb8oBppbVohWY3IQzPU2mRdscQA5/ICx9g7cn3 t5ErsSg0pxEUhmAMzRqe6inDP9FNqbu8GDCI0b8/0gRRxI4CtRKywH23Ml89t1k+ hUvX+ROQJUwpRA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:08:54 2026 by rpki-client