This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9f77a4-3bbb-43dd-bbc0-7c935b5d972e/1/De-ewcAwfGBzzor4PwmWjKt6u-8.mft File: De-ewcAwfGBzzor4PwmWjKt6u-8.mft (raw, json) Hash identifier: NihBeey4bO3k4nLz92iJzETWQNinqAS4rhmVvzcdPis= Subject key identifier: 2C:AB:BA:C2:97:B0:F6:DF:2D:29:43:CC:16:24:3F:48:C5:1F:7D:C0 Authority key identifier: 0D:EF:9E:C1:C0:30:7C:60:73:CE:8A:F8:3F:09:96:8C:AB:7A:BB:EF Certificate issuer: /CN=0def9ec1c0307c6073ce8af83f09968cab7abbef Certificate serial: 019C43C72CEDD0267411A1E24F5B40E568AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/De-ewcAwfGBzzor4PwmWjKt6u-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9f77a4-3bbb-43dd-bbc0-7c935b5d972e/1/De-ewcAwfGBzzor4PwmWjKt6u-8.mft Manifest number: 1352 Signing time: Mon 09 Feb 2026 19:00:52 +0000 Manifest this update: Mon 09 Feb 2026 19:00:52 +0000 Manifest next update: Tue 10 Feb 2026 19:00:52 +0000 Files and hashes: 1: De-ewcAwfGBzzor4PwmWjKt6u-8.crl (hash: KHkk4PvYpsQjbWTLM9B73ZIjE9NOz5HZ+exP0nNPfqg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9f77a4-3bbb-43dd-bbc0-7c935b5d972e/1/De-ewcAwfGBzzor4PwmWjKt6u-8.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/9f77a4-3bbb-43dd-bbc0-7c935b5d972e/1/De-ewcAwfGBzzor4PwmWjKt6u-8.mft rsync://rpki.ripe.net/repository/DEFAULT/De-ewcAwfGBzzor4PwmWjKt6u-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c7:2c:ed:d0:26:74:11:a1:e2:4f:5b:40:e5:68:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0def9ec1c0307c6073ce8af83f09968cab7abbef Validity Not Before: Feb 9 19:00:52 2026 GMT Not After : Feb 10 19:00:52 2026 GMT Subject: CN=2cabbac297b0f6df2d2943cc16243f48c51f7dc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:dd:d7:ec:7e:13:79:09:5a:21:39:07:8c:86: 31:a5:56:ec:53:53:d2:ed:09:dc:27:93:5a:9c:23: ea:d7:85:5c:45:f1:97:c1:f5:97:b6:a5:21:21:56: 23:4c:b4:95:83:2e:f8:96:44:1d:ba:69:1d:0e:6c: 95:d0:cc:4b:e7:d0:a6:d4:73:01:fd:ad:85:8d:e2: f7:7e:8b:53:e4:c2:3d:70:d3:58:ea:fe:0a:df:41: ba:56:8d:be:38:67:70:c9:04:6f:25:2f:c4:93:95: 40:95:b4:10:63:74:d9:1e:d1:27:ab:47:e3:e6:a8: fe:6f:67:5c:dd:5f:97:cb:cf:8c:1a:28:08:33:1a: 36:e6:1e:0e:87:19:a7:4d:9f:56:82:b8:97:35:68: cd:95:87:59:b7:3e:9a:6a:de:47:b3:9c:83:92:29: 76:45:23:28:43:c5:df:15:94:e3:c4:25:0c:a2:61: a7:01:48:41:40:cc:f9:26:ca:e6:17:ba:9a:75:75: 98:15:60:9d:b1:62:13:f6:5b:f4:b2:2c:76:ee:45: 07:8a:09:60:20:2f:e4:bc:95:c2:fe:8c:e7:fd:23: 91:e3:82:4f:8d:70:5b:4e:be:13:a8:ad:fb:1e:c9: 3b:e6:96:7a:ef:e5:93:4a:8d:f0:f7:2a:1d:2c:6b: 40:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:AB:BA:C2:97:B0:F6:DF:2D:29:43:CC:16:24:3F:48:C5:1F:7D:C0 X509v3 Authority Key Identifier: keyid:0D:EF:9E:C1:C0:30:7C:60:73:CE:8A:F8:3F:09:96:8C:AB:7A:BB:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/De-ewcAwfGBzzor4PwmWjKt6u-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9f77a4-3bbb-43dd-bbc0-7c935b5d972e/1/De-ewcAwfGBzzor4PwmWjKt6u-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9f77a4-3bbb-43dd-bbc0-7c935b5d972e/1/De-ewcAwfGBzzor4PwmWjKt6u-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:17:06:c4:11:5a:13:6a:0c:13:03:8b:43:c5:53:dd:54:14: 4e:96:30:77:f8:39:17:68:92:eb:dc:66:b6:95:99:74:d9:da: fc:51:40:da:a8:0e:11:e8:81:ca:68:98:ac:50:ef:84:a0:6e: 98:9d:73:51:46:49:ca:fb:3c:c6:86:d3:9c:be:e4:9b:e8:70: 99:f0:2a:ac:f7:81:60:65:ce:72:93:71:69:6b:f0:bb:9d:70: 84:d1:0b:b8:14:a0:d2:21:e5:4e:3d:28:10:01:dc:38:79:b7: 23:5c:c3:bb:8e:4d:b8:03:d5:34:cd:05:c1:c8:89:87:a0:be: cb:a8:e6:bb:80:64:44:30:4d:27:b0:26:67:7b:96:ef:c9:a7: f0:5f:17:df:8a:08:e7:71:39:94:d4:53:42:e5:e4:1a:e9:a3: 43:57:45:25:07:c6:a5:be:19:74:63:cc:5a:dd:3c:d5:fb:12: ef:b7:14:22:27:40:7a:f7:7f:2c:ae:b9:65:99:9c:e5:4d:f5: 67:fe:cb:e1:05:73:c3:94:51:6c:85:53:2b:57:01:eb:59:42: b6:5e:d8:1e:ee:79:f1:ea:75:53:49:55:36:ae:9e:02:a6:82: 64:48:99:5d:a5:6b:76:5f:9c:17:74:0f:17:d4:db:dd:7d:f7: b7:f9:8b:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxyzt0CZ0EaHiT1tA5WivMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZWY5ZWMxYzAzMDdjNjA3M2NlOGFmODNmMDk5NjhjYWI3 YWJiZWYwHhcNMjYwMjA5MTkwMDUyWhcNMjYwMjEwMTkwMDUyWjAzMTEwLwYDVQQD EygyY2FiYmFjMjk3YjBmNmRmMmQyOTQzY2MxNjI0M2Y0OGM1MWY3ZGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxt3X7H4TeQlaITkHjIYxpVbsU1PS 7QncJ5NanCPq14VcRfGXwfWXtqUhIVYjTLSVgy74lkQdumkdDmyV0MxL59Cm1HMB /a2FjeL3fotT5MI9cNNY6v4K30G6Vo2+OGdwyQRvJS/Ek5VAlbQQY3TZHtEnq0fj 5qj+b2dc3V+Xy8+MGigIMxo25h4OhxmnTZ9WgriXNWjNlYdZtz6aat5Hs5yDkil2 RSMoQ8XfFZTjxCUMomGnAUhBQMz5JsrmF7qadXWYFWCdsWIT9lv0six27kUHiglg IC/kvJXC/ozn/SOR44JPjXBbTr4TqK37Hsk75pZ67+WTSo3w9yodLGtAswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCyrusKXsPbfLSlDzBYkP0jFH33AMB8GA1UdIwQY MBaAFA3vnsHAMHxgc86K+D8JloyrervvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGUtZXdjQXdmR0J6em9yNFB3bVdqS3Q2dS04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85Zjc3YTQtM2JiYi00M2RkLWJiYzAt N2M5MzViNWQ5NzJlLzEvRGUtZXdjQXdmR0J6em9yNFB3bVdqS3Q2dS04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS85Zjc3YTQtM2JiYi00M2RkLWJiYzAtN2M5MzViNWQ5NzJl LzEvRGUtZXdjQXdmR0J6em9yNFB3bVdqS3Q2dS04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMhcGxBFa E2oMEwOLQ8VT3VQUTpYwd/g5F2iS69xmtpWZdNna/FFA2qgOEeiBymiYrFDvhKBu mJ1zUUZJyvs8xobTnL7km+hwmfAqrPeBYGXOcpNxaWvwu51whNELuBSg0iHlTj0o EAHcOHm3I1zDu45NuAPVNM0FwciJh6C+y6jmu4BkRDBNJ7AmZ3uW78mn8F8X34oI 53E5lNRTQuXkGumjQ1dFJQfGpb4ZdGPMWt081fsS77cUIidAevd/LK65ZZmc5U31 Z/7L4QVzw5RRbIVTK1cB61lCtl7YHu558ep1U0lVNq6eAqaCZEiZXaVrdl+cF3QP F9Tb3X33t/mL7A== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:58 2026 by rpki-client