This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft File: eSttblvaBSZfwM6XGaYzvgSm6Xk.mft (raw, json) Hash identifier: 35LFoxeCzAxZjfafEnTbcHZAEeXWAb8/tJUYZnLIafc= Subject key identifier: 1F:BB:04:8E:B7:89:AF:D2:ED:4D:56:0A:98:B3:DE:9C:06:A0:60:5C Authority key identifier: 79:2B:6D:6E:5B:DA:05:26:5F:C0:CE:97:19:A6:33:BE:04:A6:E9:79 Certificate issuer: /CN=792b6d6e5bda05265fc0ce9719a633be04a6e979 Certificate serial: 019C43225C7F4ACECB8E41FF1BBE301D625E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eSttblvaBSZfwM6XGaYzvgSm6Xk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft Manifest number: 180C Signing time: Mon 09 Feb 2026 16:00:51 +0000 Manifest this update: Mon 09 Feb 2026 16:00:51 +0000 Manifest next update: Tue 10 Feb 2026 16:00:51 +0000 Files and hashes: 1: eSttblvaBSZfwM6XGaYzvgSm6Xk.crl (hash: XJt5ZH0dVoqfmx0UOdnQ2ooe/fKU+Bq84fYPxfyD7kk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.crl rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft rsync://rpki.ripe.net/repository/DEFAULT/eSttblvaBSZfwM6XGaYzvgSm6Xk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:5c:7f:4a:ce:cb:8e:41:ff:1b:be:30:1d:62:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=792b6d6e5bda05265fc0ce9719a633be04a6e979 Validity Not Before: Feb 9 16:00:51 2026 GMT Not After : Feb 10 16:00:51 2026 GMT Subject: CN=1fbb048eb789afd2ed4d560a98b3de9c06a0605c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4d:c8:bf:f5:ec:91:02:97:6e:cd:43:0d:3c: f9:2f:41:8d:92:7c:1a:62:20:64:1e:9a:f5:64:2f: 22:1d:20:a9:26:fb:79:3b:2e:54:95:e2:21:1c:40: 78:28:d8:74:ee:ff:2c:69:bd:fd:dc:99:b4:06:0a: f2:8a:83:4c:de:69:18:5b:b5:80:6a:04:79:eb:42: d5:9a:33:43:80:1b:dd:b7:c5:58:fe:f8:97:56:00: 13:66:d2:46:1f:d4:28:63:d0:d4:a5:25:a0:96:50: 03:31:cf:11:5a:76:e8:45:bf:a8:e1:9d:f2:67:9b: 34:4e:04:75:64:d7:8b:3b:7a:c6:09:e8:69:c6:1c: fe:a5:35:86:96:a9:ad:4e:d8:4e:47:74:c3:fb:bf: a4:70:c9:d3:dd:ed:71:cb:15:0e:aa:c0:2a:b7:d0: d0:9d:10:76:71:a5:eb:37:1d:90:16:4e:53:fc:a6: 5f:cb:08:a2:85:f6:38:e4:56:66:d1:f1:79:94:c5: cb:46:46:08:99:00:b3:b4:a5:28:96:12:78:af:10: 65:86:b2:73:f8:d5:46:0c:c3:12:06:15:fa:c1:be: 62:9d:a5:22:37:80:e5:45:ef:07:78:bf:ec:fc:b0: 8e:52:85:5d:f5:0c:d3:f9:53:da:e2:ca:53:a6:de: 0e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:BB:04:8E:B7:89:AF:D2:ED:4D:56:0A:98:B3:DE:9C:06:A0:60:5C X509v3 Authority Key Identifier: keyid:79:2B:6D:6E:5B:DA:05:26:5F:C0:CE:97:19:A6:33:BE:04:A6:E9:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSttblvaBSZfwM6XGaYzvgSm6Xk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:64:02:4b:47:9e:92:ab:c1:f9:23:e0:b6:a3:5f:6b:46:7e: ed:ac:cb:2f:ce:e6:ab:57:91:84:ab:43:d6:57:2e:37:8c:26: 21:07:91:73:27:00:0f:57:11:0a:a3:3b:98:ae:c0:f2:b5:3d: 2d:ae:53:2e:62:26:95:b7:e5:26:36:86:59:de:d8:9f:fa:44: 88:82:b1:b7:59:c1:fa:e0:d8:2b:04:ca:18:ad:ed:b8:cc:9f: 43:dd:a2:16:3a:8e:1d:f1:f8:46:32:36:bb:c8:f1:1f:59:b6: 9e:e7:47:8a:47:3b:bb:9b:3f:89:ef:f3:83:45:0b:aa:ac:42: c2:87:c1:9d:35:97:1b:47:87:00:18:eb:74:f3:18:8f:54:e2: 0f:12:d6:6d:64:70:8c:69:39:df:77:76:ec:ac:76:55:8f:46: 57:2b:4e:d8:53:01:8a:9b:a5:cb:5c:06:18:3f:cc:de:5d:78: de:73:fd:b3:86:79:d6:82:d7:34:ab:e1:fd:56:5f:f8:4c:78: 08:e8:48:ea:06:d5:34:23:7a:f3:2d:2d:45:e6:c9:e5:a9:5d: 05:06:38:db:0e:25:9b:a8:f1:b6:4b:d1:e3:3d:d1:16:ec:3c: 29:86:2a:4d:c6:33:01:b0:e4:f9:fb:2b:74:e1:99:82:89:bd: 7c:19:8d:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIlx/Ss7LjkH/G74wHWJeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5MmI2ZDZlNWJkYTA1MjY1ZmMwY2U5NzE5YTYzM2JlMDRh NmU5NzkwHhcNMjYwMjA5MTYwMDUxWhcNMjYwMjEwMTYwMDUxWjAzMTEwLwYDVQQD EygxZmJiMDQ4ZWI3ODlhZmQyZWQ0ZDU2MGE5OGIzZGU5YzA2YTA2MDVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnk3Iv/XskQKXbs1DDTz5L0GNknwa YiBkHpr1ZC8iHSCpJvt5Oy5UleIhHEB4KNh07v8sab393Jm0BgryioNM3mkYW7WA agR560LVmjNDgBvdt8VY/viXVgATZtJGH9QoY9DUpSWgllADMc8RWnboRb+o4Z3y Z5s0TgR1ZNeLO3rGCehpxhz+pTWGlqmtTthOR3TD+7+kcMnT3e1xyxUOqsAqt9DQ nRB2caXrNx2QFk5T/KZfywiihfY45FZm0fF5lMXLRkYImQCztKUolhJ4rxBlhrJz +NVGDMMSBhX6wb5inaUiN4DlRe8HeL/s/LCOUoVd9QzT+VPa4spTpt4OvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB+7BI63ia/S7U1WCpiz3pwGoGBcMB8GA1UdIwQY MBaAFHkrbW5b2gUmX8DOlxmmM74Epul5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVN0dGJsdmFCU1pmd002WEdhWXp2Z1NtNlhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9kYWMxZTUtMWZkOS00M2Q0LTg5MjYt MjEzZGMzOTliZTZmLzEvZVN0dGJsdmFCU1pmd002WEdhWXp2Z1NtNlhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9kYWMxZTUtMWZkOS00M2Q0LTg5MjYtMjEzZGMzOTliZTZm LzEvZVN0dGJsdmFCU1pmd002WEdhWXp2Z1NtNlhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFWQCS0ee kqvB+SPgtqNfa0Z+7azLL87mq1eRhKtD1lcuN4wmIQeRcycAD1cRCqM7mK7A8rU9 La5TLmImlbflJjaGWd7Yn/pEiIKxt1nB+uDYKwTKGK3tuMyfQ92iFjqOHfH4RjI2 u8jxH1m2nudHikc7u5s/ie/zg0ULqqxCwofBnTWXG0eHABjrdPMYj1TiDxLWbWRw jGk533d27Kx2VY9GVytO2FMBipuly1wGGD/M3l143nP9s4Z51oLXNKvh/VZf+Ex4 COhI6gbVNCN68y0tRebJ5aldBQY42w4lm6jxtkvR4z3RFuw8KYYqTcYzAbDk+fsr dOGZgom9fBmNsQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:03 2026 by rpki-client