This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft File: _EeASzKQyJovwgWF9BpGgM3Y3zE.mft (raw, json) Hash identifier: tZSOqziZYY//UWHQtdZAxADDsOJB3VZ+VfHi0xGhvSQ= Subject key identifier: CF:26:88:90:F4:28:3A:B8:34:24:75:CA:22:7F:A2:93:3A:F8:79:AD Authority key identifier: FC:47:80:4B:32:90:C8:9A:2F:C2:05:85:F4:1A:46:80:CD:D8:DF:31 Certificate issuer: /CN=fc47804b3290c89a2fc20585f41a4680cdd8df31 Certificate serial: 019C427DAE1E55101DC1C6D5FA84F799A513 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EeASzKQyJovwgWF9BpGgM3Y3zE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft Manifest number: 1575 Signing time: Mon 09 Feb 2026 13:00:58 +0000 Manifest this update: Mon 09 Feb 2026 13:00:58 +0000 Manifest next update: Tue 10 Feb 2026 13:00:58 +0000 Files and hashes: 1: _EeASzKQyJovwgWF9BpGgM3Y3zE.crl (hash: IYYfeL03Ajykms5kp5bHhnZblM7YFuIWAcDIYqTV270=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.crl rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft rsync://rpki.ripe.net/repository/DEFAULT/_EeASzKQyJovwgWF9BpGgM3Y3zE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:ae:1e:55:10:1d:c1:c6:d5:fa:84:f7:99:a5:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc47804b3290c89a2fc20585f41a4680cdd8df31 Validity Not Before: Feb 9 13:00:58 2026 GMT Not After : Feb 10 13:00:58 2026 GMT Subject: CN=cf268890f4283ab8342475ca227fa2933af879ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c6:74:da:05:e1:09:5d:aa:e8:59:76:59:89: 25:8c:5e:d5:15:f4:96:e8:05:38:8d:79:af:8e:85: 44:98:1c:af:e5:d6:7c:4e:3f:55:0f:21:b7:56:16: 17:09:bb:b7:d1:eb:87:f4:5c:30:87:53:8c:84:e0: 35:75:9c:13:3b:de:9f:07:51:f9:46:36:ae:b2:27: 27:24:a9:e7:6d:63:43:63:da:5d:d7:e1:44:11:2c: c4:0f:1c:db:37:b0:91:8e:1c:19:0f:93:97:d2:79: 67:30:b6:ff:93:4c:b8:b3:03:34:d8:b8:4c:5a:5a: 26:2f:40:0d:ad:55:0e:d7:48:f0:6f:4a:4b:c8:0e: 60:0a:c1:1c:d9:81:9a:ea:b9:9f:0d:e4:e9:23:ab: 4d:3c:c6:11:44:39:a2:f5:93:fd:9b:86:c8:9d:1a: 37:63:c4:53:c0:97:df:b7:07:1c:1d:9a:35:c9:2d: 87:32:31:43:89:94:31:a9:a9:78:9d:dc:0c:a5:1b: 40:15:42:4f:55:12:65:e0:23:c4:b0:3b:1d:58:cc: aa:43:ca:c1:6e:e9:21:25:f0:02:2e:2a:37:c9:2c: 21:09:11:5b:95:c3:72:04:4f:4d:21:44:36:aa:59: 7e:60:e8:b7:24:e8:27:58:67:34:15:ca:f7:37:e2: 2b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:26:88:90:F4:28:3A:B8:34:24:75:CA:22:7F:A2:93:3A:F8:79:AD X509v3 Authority Key Identifier: keyid:FC:47:80:4B:32:90:C8:9A:2F:C2:05:85:F4:1A:46:80:CD:D8:DF:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EeASzKQyJovwgWF9BpGgM3Y3zE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:a3:99:ae:c7:f0:62:1b:6b:d6:cf:4e:b3:ad:5a:54:87:a7: 2b:b0:39:5b:4f:59:e9:25:77:3d:b2:94:88:6a:8e:4b:13:11: c2:f5:c9:52:1d:b8:c1:26:f0:f2:1e:64:ec:29:18:cf:ca:85: 96:22:ba:99:65:bc:b9:77:37:ed:69:39:51:b7:b0:0f:41:3d: 2f:18:d7:85:ab:d7:40:55:15:20:34:83:75:2a:7c:e8:1f:99: cb:51:a1:31:47:68:54:9b:6c:1f:a3:15:5c:b7:30:49:83:d3: 3f:04:fc:5e:38:76:ca:ac:58:ce:d0:fc:99:15:1c:d9:bc:d8: 5f:a2:97:88:41:8d:38:62:c0:84:4b:a2:fd:85:78:a6:ec:bb: 0d:16:6c:4b:b1:72:e5:ba:f1:69:c4:65:0c:89:6f:da:36:48: 94:86:4f:f7:01:60:6d:a3:65:a8:b4:98:2a:b1:8a:b3:6b:11: 31:39:95:3c:9d:7f:68:18:dd:f6:7e:1a:61:46:00:e3:51:07: 7a:e3:92:44:d0:80:5e:e1:c4:b6:d7:48:8f:4d:75:c9:87:0c: f4:45:27:9f:d2:b8:5f:f5:bd:ff:df:0e:58:a7:db:a7:ef:ea: 65:4b:00:42:34:05:c7:c6:6b:c9:ce:21:33:0a:58:e1:81:46: 58:a9:a9:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfa4eVRAdwcbV+oT3maUTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjNDc4MDRiMzI5MGM4OWEyZmMyMDU4NWY0MWE0NjgwY2Rk OGRmMzEwHhcNMjYwMjA5MTMwMDU4WhcNMjYwMjEwMTMwMDU4WjAzMTEwLwYDVQQD EyhjZjI2ODg5MGY0MjgzYWI4MzQyNDc1Y2EyMjdmYTI5MzNhZjg3OWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocZ02gXhCV2q6Fl2WYkljF7VFfSW 6AU4jXmvjoVEmByv5dZ8Tj9VDyG3VhYXCbu30euH9Fwwh1OMhOA1dZwTO96fB1H5 RjausicnJKnnbWNDY9pd1+FEESzEDxzbN7CRjhwZD5OX0nlnMLb/k0y4swM02LhM WlomL0ANrVUO10jwb0pLyA5gCsEc2YGa6rmfDeTpI6tNPMYRRDmi9ZP9m4bInRo3 Y8RTwJfftwccHZo1yS2HMjFDiZQxqal4ndwMpRtAFUJPVRJl4CPEsDsdWMyqQ8rB bukhJfACLio3ySwhCRFblcNyBE9NIUQ2qll+YOi3JOgnWGc0Fcr3N+IrXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM8miJD0KDq4NCR1yiJ/opM6+HmtMB8GA1UdIwQY MBaAFPxHgEsykMiaL8IFhfQaRoDN2N8xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0VlQVN6S1F5Sm92d2dXRjlCcEdnTTNZM3pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8wMjdkM2ItZjM2OC00ZjU0LTg0NWQt MTkxOTQ4Mjg4MzMwLzEvX0VlQVN6S1F5Sm92d2dXRjlCcEdnTTNZM3pFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny8wMjdkM2ItZjM2OC00ZjU0LTg0NWQtMTkxOTQ4Mjg4MzMw LzEvX0VlQVN6S1F5Sm92d2dXRjlCcEdnTTNZM3pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoaOZrsfw Yhtr1s9Os61aVIenK7A5W09Z6SV3PbKUiGqOSxMRwvXJUh24wSbw8h5k7CkYz8qF liK6mWW8uXc37Wk5UbewD0E9LxjXhavXQFUVIDSDdSp86B+Zy1GhMUdoVJtsH6MV XLcwSYPTPwT8Xjh2yqxYztD8mRUc2bzYX6KXiEGNOGLAhEui/YV4puy7DRZsS7Fy 5brxacRlDIlv2jZIlIZP9wFgbaNlqLSYKrGKs2sRMTmVPJ1/aBjd9n4aYUYA41EH euOSRNCAXuHEttdIj011yYcM9EUnn9K4X/W9/98OWKfbp+/qZUsAQjQFx8Zryc4h MwpY4YFGWKmpYg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:01:13 2026 by rpki-client