This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft File: 1EZzVsX7atsuunE8gBkUsvTX860.mft (raw, json) Hash identifier: kwk0MhM3J1zjAbFZaVoDsJ6LoTjrHObitKf1H5TaumU= Subject key identifier: 27:58:26:CB:EB:31:E7:24:31:95:C3:24:9B:1D:8D:5D:91:FF:50:48 Authority key identifier: D4:46:73:56:C5:FB:6A:DB:2E:BA:71:3C:80:19:14:B2:F4:D7:F3:AD Certificate issuer: /CN=d4467356c5fb6adb2eba713c801914b2f4d7f3ad Certificate serial: 019C416AFCAC6422942A0CD105F26196750B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EZzVsX7atsuunE8gBkUsvTX860.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft Manifest number: 0321 Signing time: Mon 09 Feb 2026 08:00:56 +0000 Manifest this update: Mon 09 Feb 2026 08:00:56 +0000 Manifest next update: Tue 10 Feb 2026 08:00:56 +0000 Files and hashes: 1: 1EZzVsX7atsuunE8gBkUsvTX860.crl (hash: aJZJdHag3uyHVwg2a4A1j6GORnq+cZq1krT/4NdcSUY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.crl rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft rsync://rpki.ripe.net/repository/DEFAULT/1EZzVsX7atsuunE8gBkUsvTX860.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:6a:fc:ac:64:22:94:2a:0c:d1:05:f2:61:96:75:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4467356c5fb6adb2eba713c801914b2f4d7f3ad Validity Not Before: Feb 9 08:00:56 2026 GMT Not After : Feb 10 08:00:56 2026 GMT Subject: CN=275826cbeb31e7243195c3249b1d8d5d91ff5048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:9f:02:0d:dc:ad:6b:76:f1:a8:d0:1f:07:ae: b3:ea:c4:bb:c1:be:e9:dd:a7:95:95:28:63:66:43: 5f:77:9d:91:01:41:85:ea:37:fc:f5:6c:5b:73:7f: 33:3f:b6:35:2f:3e:ac:4a:aa:da:30:81:cb:ea:f3: bb:96:91:d7:90:b4:20:c1:a3:4b:29:a1:15:a0:96: 68:5a:fa:aa:9d:58:3d:7f:f0:02:81:a4:17:9a:4a: f3:1d:ff:ab:8e:09:a2:ef:ed:08:20:e9:a7:02:d9: 0f:a7:ad:db:b2:6b:7b:e4:3b:83:95:eb:a5:7b:ca: 73:1f:d8:c1:cf:d7:f2:a6:d7:c9:aa:30:74:09:5d: 93:d0:f5:ca:3d:73:e7:a3:2c:dc:4c:d5:9b:10:20: 10:ef:a9:54:12:64:b6:38:50:19:40:59:27:32:9e: 22:3c:db:f8:fc:ea:82:4a:91:67:c5:43:70:b6:ed: 8a:93:db:a1:04:93:cb:0b:c5:ee:33:46:f6:10:40: 94:55:12:44:fe:2d:33:23:a3:27:3a:a9:34:61:95: be:73:55:f3:43:b6:58:cb:6b:57:d4:4e:f4:66:71: b5:2a:72:2b:77:60:49:31:cf:74:a1:e1:ac:1d:76: 79:0b:75:81:59:96:ee:2f:10:8c:81:c6:06:8e:5e: 01:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:58:26:CB:EB:31:E7:24:31:95:C3:24:9B:1D:8D:5D:91:FF:50:48 X509v3 Authority Key Identifier: keyid:D4:46:73:56:C5:FB:6A:DB:2E:BA:71:3C:80:19:14:B2:F4:D7:F3:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EZzVsX7atsuunE8gBkUsvTX860.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:91:20:f0:4a:82:c6:5e:57:c6:d4:57:08:bc:73:48:07:99: ff:cf:1f:b4:9c:5f:25:3e:e1:45:f5:34:77:d1:fe:e1:0f:ab: fa:93:ca:9f:03:b9:95:90:73:ee:78:a9:12:c1:8e:96:3c:53: 64:c5:ac:e2:4a:ae:65:65:43:61:8d:17:4c:11:7a:66:84:81: 5c:a6:b0:2b:02:0d:43:2f:be:b4:28:25:6e:25:98:97:a5:f3: ce:11:57:0a:98:23:c5:7e:6a:e7:db:7d:d9:ca:13:f9:7e:78: 8e:d2:59:3d:1d:65:0e:c8:ea:e2:f8:fd:d5:74:e5:4a:94:4e: 7e:b2:8a:c1:b1:df:1c:25:bf:a6:39:88:d1:f2:33:a0:c8:91: a9:5d:d4:fc:0b:4d:d3:0d:09:d8:e2:36:1c:d0:9c:48:b6:5b: b8:f6:c9:e5:df:77:34:9c:c3:34:8c:46:94:05:d5:6b:f6:57: 99:3e:db:62:9e:ba:54:1e:e8:70:fe:2c:de:d3:d3:6c:08:ea: 97:08:8f:15:54:76:41:e3:8b:5c:73:a3:7f:ab:12:60:4f:77: 21:c9:0a:03:90:96:8a:da:ef:da:2e:1c:2a:5f:2d:66:9e:0c: 47:50:0d:c9:a0:f7:f4:6c:22:30:c4:fe:e9:5c:70:f2:fd:ad: 6a:f3:27:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBavysZCKUKgzRBfJhlnULMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NDY3MzU2YzVmYjZhZGIyZWJhNzEzYzgwMTkxNGIyZjRk N2YzYWQwHhcNMjYwMjA5MDgwMDU2WhcNMjYwMjEwMDgwMDU2WjAzMTEwLwYDVQQD EygyNzU4MjZjYmViMzFlNzI0MzE5NWMzMjQ5YjFkOGQ1ZDkxZmY1MDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9J8CDdyta3bxqNAfB66z6sS7wb7p 3aeVlShjZkNfd52RAUGF6jf89Wxbc38zP7Y1Lz6sSqraMIHL6vO7lpHXkLQgwaNL KaEVoJZoWvqqnVg9f/ACgaQXmkrzHf+rjgmi7+0IIOmnAtkPp63bsmt75DuDleul e8pzH9jBz9fyptfJqjB0CV2T0PXKPXPnoyzcTNWbECAQ76lUEmS2OFAZQFknMp4i PNv4/OqCSpFnxUNwtu2Kk9uhBJPLC8XuM0b2EECUVRJE/i0zI6MnOqk0YZW+c1Xz Q7ZYy2tX1E70ZnG1KnIrd2BJMc90oeGsHXZ5C3WBWZbuLxCMgcYGjl4BpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCdYJsvrMeckMZXDJJsdjV2R/1BIMB8GA1UdIwQY MBaAFNRGc1bF+2rbLrpxPIAZFLL01/OtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUVaelZzWDdhdHN1dW5FOGdCa1VzdlRYODYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9lN2QyZTItNTZjOS00MDE5LWFmOWUt NTk3YjQ3ZDQyZGIwLzEvMUVaelZzWDdhdHN1dW5FOGdCa1VzdlRYODYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9lN2QyZTItNTZjOS00MDE5LWFmOWUtNTk3YjQ3ZDQyZGIw LzEvMUVaelZzWDdhdHN1dW5FOGdCa1VzdlRYODYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD5Eg8EqC xl5XxtRXCLxzSAeZ/88ftJxfJT7hRfU0d9H+4Q+r+pPKnwO5lZBz7nipEsGOljxT ZMWs4kquZWVDYY0XTBF6ZoSBXKawKwINQy++tCglbiWYl6XzzhFXCpgjxX5q59t9 2coT+X54jtJZPR1lDsjq4vj91XTlSpROfrKKwbHfHCW/pjmI0fIzoMiRqV3U/AtN 0w0J2OI2HNCcSLZbuPbJ5d93NJzDNIxGlAXVa/ZXmT7bYp66VB7ocP4s3tPTbAjq lwiPFVR2QeOLXHOjf6sSYE93IckKA5CWitrv2i4cKl8tZp4MR1ANyaD39GwiMMT+ 6Vxw8v2tavMnEg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:30 2026 by rpki-client