This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft File: EdGf2unFPY0oseQcqROcM1VrpiU.mft (raw, json) Hash identifier: thBpyKi55qXOeT+5Hjwy+FmEBVWgD0RSaMSQ6O2UovU= Subject key identifier: ED:58:C0:09:60:F6:5E:08:42:E7:C5:E0:12:DD:D1:BE:3B:34:19:92 Authority key identifier: 11:D1:9F:DA:E9:C5:3D:8D:28:B1:E4:1C:A9:13:9C:33:55:6B:A6:25 Certificate issuer: /CN=11d19fdae9c53d8d28b1e41ca9139c33556ba625 Certificate serial: 019C43909B12B494BB6BD68DB7DC6399F965 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdGf2unFPY0oseQcqROcM1VrpiU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft Manifest number: 0C70 Signing time: Mon 09 Feb 2026 18:01:15 +0000 Manifest this update: Mon 09 Feb 2026 18:01:15 +0000 Manifest next update: Tue 10 Feb 2026 18:01:15 +0000 Files and hashes: 1: EdGf2unFPY0oseQcqROcM1VrpiU.crl (hash: jhEmf5NDmd6lviBxM3S5EeTu0btGifrCJHQM1IhuZLc=) 2: _cYlNrPZ4aNJF3IHILF10hUz1QE.roa (hash: 055GVfTacul6sO6E7JP7r8Y/ZviD+fN14ITbu8RYmeg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft rsync://rpki.ripe.net/repository/DEFAULT/EdGf2unFPY0oseQcqROcM1VrpiU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:9b:12:b4:94:bb:6b:d6:8d:b7:dc:63:99:f9:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11d19fdae9c53d8d28b1e41ca9139c33556ba625 Validity Not Before: Feb 9 18:01:15 2026 GMT Not After : Feb 10 18:01:15 2026 GMT Subject: CN=ed58c00960f65e0842e7c5e012ddd1be3b341992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:73:f6:d8:57:6e:ba:e0:0e:da:a3:2c:0e:1d: 56:b6:f0:17:89:6e:ce:d1:83:1d:a8:bb:96:be:50: ef:9c:3e:1c:5d:d8:cb:02:ff:95:8d:6f:5d:78:22: a1:9e:ae:db:e9:c1:85:3f:ed:c2:a8:db:cb:a2:68: 56:1e:31:62:87:80:d6:00:d3:57:48:d2:12:2c:e0: b2:50:2c:3f:e5:7b:04:f1:0f:3b:2b:e1:df:30:ff: 7d:7f:95:5c:0a:9e:2e:93:66:47:d6:3f:57:3f:43: 70:8e:b7:3a:dd:cc:8b:06:4f:94:35:35:6e:85:57: cd:d7:9f:c0:eb:df:fd:2c:91:ba:a2:bb:70:34:59: c1:50:4e:37:25:7d:c8:a7:c6:36:1c:42:83:fb:99: 1d:3a:b0:3c:9c:a8:c3:51:f6:40:bc:32:7a:bd:2e: f1:7d:10:19:ef:a4:ce:78:40:10:8b:34:69:37:8d: 44:5c:71:a3:ea:3e:33:9b:69:42:40:af:55:0e:57: bd:1d:d0:a8:19:5b:e2:f8:b7:cb:59:a8:7b:ff:b5: bb:f2:32:32:e0:62:57:6d:ed:74:66:d7:6f:12:da: a8:0e:57:e7:47:5e:32:70:06:6b:94:c6:a4:5f:d2: f8:03:77:3a:30:b3:fe:ec:86:21:3c:75:5f:e1:90: cb:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:58:C0:09:60:F6:5E:08:42:E7:C5:E0:12:DD:D1:BE:3B:34:19:92 X509v3 Authority Key Identifier: keyid:11:D1:9F:DA:E9:C5:3D:8D:28:B1:E4:1C:A9:13:9C:33:55:6B:A6:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdGf2unFPY0oseQcqROcM1VrpiU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:00:36:fb:ec:13:f1:fa:c6:fc:83:92:b9:75:69:ed:fa:e4: ae:a3:2e:42:68:f9:8d:e1:5f:ed:51:93:79:8b:0a:b4:f9:cb: 06:76:71:44:fa:f7:80:56:90:36:30:74:1a:f8:a1:7b:3b:e8: 80:97:5d:24:06:b5:48:b3:21:53:e0:61:64:4f:13:1e:50:8f: 20:f8:fb:a5:45:b7:63:00:45:fc:6f:0d:1b:e7:f5:d3:02:98: 81:b7:d6:e1:8e:2f:7f:a5:4d:7d:86:19:8b:3c:54:18:e9:22: dc:68:14:67:48:fd:c3:89:5b:e1:95:cc:08:e8:c4:63:63:66: af:21:23:5d:43:ce:90:ef:f9:02:3a:81:a2:35:3e:32:c0:93: f0:d7:71:22:8a:54:b4:16:f6:ee:8d:64:cd:00:02:73:b2:6b: b5:3d:57:2a:a3:29:c2:98:dc:be:85:58:69:8e:56:4a:15:a3: e0:3e:46:ed:f9:b7:7b:51:d4:f4:00:d8:50:c4:9a:dc:2a:24: 28:58:1c:ef:f3:24:e7:57:54:74:68:98:73:36:fb:f8:f0:69: a2:28:53:5b:a2:f1:fe:3a:92:bb:52:9c:ff:1a:e6:2a:44:f4: 09:4e:4a:24:36:ab:1b:b8:3b:91:1b:9f:3b:76:01:95:e2:02: be:61:91:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkJsStJS7a9aNt9xjmfllMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExZDE5ZmRhZTljNTNkOGQyOGIxZTQxY2E5MTM5YzMzNTU2 YmE2MjUwHhcNMjYwMjA5MTgwMTE1WhcNMjYwMjEwMTgwMTE1WjAzMTEwLwYDVQQD EyhlZDU4YzAwOTYwZjY1ZTA4NDJlN2M1ZTAxMmRkZDFiZTNiMzQxOTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXP22FduuuAO2qMsDh1WtvAXiW7O 0YMdqLuWvlDvnD4cXdjLAv+VjW9deCKhnq7b6cGFP+3CqNvLomhWHjFih4DWANNX SNISLOCyUCw/5XsE8Q87K+HfMP99f5VcCp4uk2ZH1j9XP0Nwjrc63cyLBk+UNTVu hVfN15/A69/9LJG6ortwNFnBUE43JX3Ip8Y2HEKD+5kdOrA8nKjDUfZAvDJ6vS7x fRAZ76TOeEAQizRpN41EXHGj6j4zm2lCQK9VDle9HdCoGVvi+LfLWah7/7W78jIy 4GJXbe10ZtdvEtqoDlfnR14ycAZrlMakX9L4A3c6MLP+7IYhPHVf4ZDLGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO1YwAlg9l4IQufF4BLd0b47NBmSMB8GA1UdIwQY MBaAFBHRn9rpxT2NKLHkHKkTnDNVa6YlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWRHZjJ1bkZQWTBvc2VRY3FST2NNMVZycGlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YzQ2ZDItOTgxOC00YWZjLTg4MGUt MWNjNWZkMjU0NGU5LzEvRWRHZjJ1bkZQWTBvc2VRY3FST2NNMVZycGlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81YzQ2ZDItOTgxOC00YWZjLTg4MGUtMWNjNWZkMjU0NGU5 LzEvRWRHZjJ1bkZQWTBvc2VRY3FST2NNMVZycGlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtwA2++wT 8frG/IOSuXVp7frkrqMuQmj5jeFf7VGTeYsKtPnLBnZxRPr3gFaQNjB0Gvihezvo gJddJAa1SLMhU+BhZE8THlCPIPj7pUW3YwBF/G8NG+f10wKYgbfW4Y4vf6VNfYYZ izxUGOki3GgUZ0j9w4lb4ZXMCOjEY2NmryEjXUPOkO/5AjqBojU+MsCT8NdxIopU tBb27o1kzQACc7JrtT1XKqMpwpjcvoVYaY5WShWj4D5G7fm3e1HU9ADYUMSa3Cok KFgc7/Mk51dUdGiYczb7+PBpoihTW6Lx/jqSu1Kc/xrmKkT0CU5KJDarG7g7kRuf O3YBleICvmGRdg== -----END CERTIFICATE-----Generated at Tue Feb 10 01:46:59 2026 by rpki-client