This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/fbce4a-b6a2-44e5-83fa-0d671d470078/1/deEJHTju5ZeWM68nco7pUjGv9tM.mft File: deEJHTju5ZeWM68nco7pUjGv9tM.mft (raw, json) Hash identifier: +f4VsaygHznE5GX0LDI7CFr/c7zwIyH2JCCihanRR3A= Subject key identifier: 1C:CF:86:10:11:1C:84:82:D9:45:C3:EB:1E:D3:44:51:8A:11:1A:95 Authority key identifier: 75:E1:09:1D:38:EE:E5:97:96:33:AF:27:72:8E:E9:52:31:AF:F6:D3 Certificate issuer: /CN=75e1091d38eee5979633af27728ee95231aff6d3 Certificate serial: 019C42B45778933C39666A1169E5954ACC97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/deEJHTju5ZeWM68nco7pUjGv9tM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/fbce4a-b6a2-44e5-83fa-0d671d470078/1/deEJHTju5ZeWM68nco7pUjGv9tM.mft Manifest number: 05D5 Signing time: Mon 09 Feb 2026 14:00:40 +0000 Manifest this update: Mon 09 Feb 2026 14:00:40 +0000 Manifest next update: Tue 10 Feb 2026 14:00:40 +0000 Files and hashes: 1: deEJHTju5ZeWM68nco7pUjGv9tM.crl (hash: Op0Id9ed3TeW+q/dKdoAD74lHeZAVRoPnAlrXNX+W4k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/fbce4a-b6a2-44e5-83fa-0d671d470078/1/deEJHTju5ZeWM68nco7pUjGv9tM.crl rsync://rpki.ripe.net/repository/DEFAULT/84/fbce4a-b6a2-44e5-83fa-0d671d470078/1/deEJHTju5ZeWM68nco7pUjGv9tM.mft rsync://rpki.ripe.net/repository/DEFAULT/deEJHTju5ZeWM68nco7pUjGv9tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:57:78:93:3c:39:66:6a:11:69:e5:95:4a:cc:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75e1091d38eee5979633af27728ee95231aff6d3 Validity Not Before: Feb 9 14:00:40 2026 GMT Not After : Feb 10 14:00:40 2026 GMT Subject: CN=1ccf8610111c8482d945c3eb1ed344518a111a95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ea:80:d7:a7:a6:f0:d6:a4:8d:d7:3c:9c:bd: bb:37:62:ca:ca:a8:93:bc:61:0f:68:2e:1f:f0:c4: a4:72:c7:cc:78:bb:61:50:ca:50:28:fd:91:89:7b: 33:ba:75:a9:92:e7:e4:d0:66:2d:b4:81:a7:58:50: 43:62:a5:2b:1d:2a:90:9e:1d:a8:6d:ca:49:43:a8: 78:fa:aa:6b:19:8e:e1:e2:67:8e:d3:7e:35:2a:dd: 33:41:be:ee:23:d5:d7:10:41:1e:cf:d0:7d:99:af: 4d:60:9e:96:99:5c:30:2a:26:0d:f8:8c:32:10:9a: 93:22:0b:c0:94:8e:04:24:dc:94:6c:20:71:78:cf: 92:a2:d6:88:a5:ae:5b:c5:6b:70:64:24:a7:54:89: 7c:33:e7:19:25:72:dd:78:a0:d5:b1:9d:32:5d:bc: 34:55:2b:78:24:f3:47:d0:17:a0:cf:5a:94:3d:fb: 4a:f0:a7:79:7e:89:90:47:97:ea:28:9e:de:48:b5: 73:bf:09:9d:66:1c:d0:25:87:72:b9:4a:ac:bb:2b: 45:e6:b2:66:d0:0f:80:b2:73:da:e0:87:86:55:31: da:6c:73:22:55:5a:ae:fa:48:82:ae:28:e5:af:ae: 40:29:b1:77:e3:a0:6f:2b:38:71:25:3b:c5:11:a4: 8f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:CF:86:10:11:1C:84:82:D9:45:C3:EB:1E:D3:44:51:8A:11:1A:95 X509v3 Authority Key Identifier: keyid:75:E1:09:1D:38:EE:E5:97:96:33:AF:27:72:8E:E9:52:31:AF:F6:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deEJHTju5ZeWM68nco7pUjGv9tM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/fbce4a-b6a2-44e5-83fa-0d671d470078/1/deEJHTju5ZeWM68nco7pUjGv9tM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/fbce4a-b6a2-44e5-83fa-0d671d470078/1/deEJHTju5ZeWM68nco7pUjGv9tM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:36:ec:82:41:55:18:7f:2b:da:29:a8:81:34:8a:be:7b:7a: f0:dc:f3:64:bf:7d:49:bc:ee:2b:6f:76:b7:f2:eb:a6:30:d7: 4b:ae:1d:fd:46:8b:71:c6:d3:ed:34:51:12:ba:25:fe:89:5c: 72:39:7e:0d:9f:3b:56:5a:7e:e3:50:22:1a:01:6e:4c:26:8c: 67:19:e4:01:f4:a1:68:cf:b2:8a:f6:23:a5:b4:c5:86:cb:bc: 0a:ee:dd:37:60:b5:c1:6c:44:03:a9:35:3d:ce:59:fa:20:32: 76:b3:f1:f7:62:06:d4:d5:d2:85:25:c8:a3:e1:96:a8:a4:6e: 23:82:b5:49:d0:b6:5f:91:af:e0:37:aa:6f:c4:6f:63:53:6b: 27:86:1d:88:c3:82:62:db:06:15:7a:a7:d5:8d:88:c7:07:37: 3f:bb:b3:b1:a4:7e:2b:fc:2f:04:9c:dd:e6:97:79:7e:71:7c: 76:c3:9a:ae:35:d4:49:40:71:08:1c:f4:45:49:db:12:11:f1: 80:d2:e4:ca:a4:c7:03:77:0c:41:0d:4d:d1:25:d8:8f:11:12: a6:0e:c1:6a:36:b2:43:e7:d8:56:6b:40:70:fb:cf:93:6c:9a: 24:ef:93:32:18:ba:cf:3a:10:d5:19:35:4b:8d:18:4e:8c:95: 64:db:3e:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtFd4kzw5ZmoRaeWVSsyXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1ZTEwOTFkMzhlZWU1OTc5NjMzYWYyNzcyOGVlOTUyMzFh ZmY2ZDMwHhcNMjYwMjA5MTQwMDQwWhcNMjYwMjEwMTQwMDQwWjAzMTEwLwYDVQQD EygxY2NmODYxMDExMWM4NDgyZDk0NWMzZWIxZWQzNDQ1MThhMTExYTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+qA16em8Nakjdc8nL27N2LKyqiT vGEPaC4f8MSkcsfMeLthUMpQKP2RiXszunWpkufk0GYttIGnWFBDYqUrHSqQnh2o bcpJQ6h4+qprGY7h4meO0341Kt0zQb7uI9XXEEEez9B9ma9NYJ6WmVwwKiYN+Iwy EJqTIgvAlI4EJNyUbCBxeM+SotaIpa5bxWtwZCSnVIl8M+cZJXLdeKDVsZ0yXbw0 VSt4JPNH0Begz1qUPftK8Kd5fomQR5fqKJ7eSLVzvwmdZhzQJYdyuUqsuytF5rJm 0A+AsnPa4IeGVTHabHMiVVqu+kiCrijlr65AKbF346BvKzhxJTvFEaSPvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBzPhhARHISC2UXD6x7TRFGKERqVMB8GA1UdIwQY MBaAFHXhCR047uWXljOvJ3KO6VIxr/bTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGVFSkhUanU1WmVXTTY4bmNvN3BVakd2OXRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9mYmNlNGEtYjZhMi00NGU1LTgzZmEt MGQ2NzFkNDcwMDc4LzEvZGVFSkhUanU1WmVXTTY4bmNvN3BVakd2OXRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9mYmNlNGEtYjZhMi00NGU1LTgzZmEtMGQ2NzFkNDcwMDc4 LzEvZGVFSkhUanU1WmVXTTY4bmNvN3BVakd2OXRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWTbsgkFV GH8r2imogTSKvnt68NzzZL99SbzuK292t/LrpjDXS64d/UaLccbT7TRRErol/olc cjl+DZ87Vlp+41AiGgFuTCaMZxnkAfShaM+yivYjpbTFhsu8Cu7dN2C1wWxEA6k1 Pc5Z+iAydrPx92IG1NXShSXIo+GWqKRuI4K1SdC2X5Gv4Deqb8RvY1NrJ4YdiMOC YtsGFXqn1Y2Ixwc3P7uzsaR+K/wvBJzd5pd5fnF8dsOarjXUSUBxCBz0RUnbEhHx gNLkyqTHA3cMQQ1N0SXYjxESpg7BajayQ+fYVmtAcPvPk2yaJO+TMhi6zzoQ1Rk1 S40YToyVZNs++A== -----END CERTIFICATE-----Generated at Mon Feb 9 18:31:04 2026 by rpki-client