This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.mft File: 1-eS-AUv4OU5M185shKT6hPLln18.mft (raw, json) Hash identifier: Z1RwDXOwKr4p9eHQWSIwmMp+pDQqSIDTw5bMhqMfQ/o= Subject key identifier: DD:43:21:FD:42:1A:4C:90:A4:E0:C9:83:A0:DA:0A:B1:0E:27:22:98 Authority key identifier: F9:E4:BE:01:4B:F8:39:4E:4C:D7:CE:6C:84:A4:FA:84:F2:E5:9F:5F Certificate issuer: /CN=f9e4be014bf8394e4cd7ce6c84a4fa84f2e59f5f Certificate serial: 019C42B4A3BAB8E70AEB3147D968D896451C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eS-AUv4OU5M185shKT6hPLln18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.mft Manifest number: 026D Signing time: Mon 09 Feb 2026 14:01:00 +0000 Manifest this update: Mon 09 Feb 2026 14:01:00 +0000 Manifest next update: Tue 10 Feb 2026 14:01:00 +0000 Files and hashes: 1: 1-eS-AUv4OU5M185shKT6hPLln18.crl (hash: j2fq3mnRwYNJBIzWjfYj1s7bMhbtwQF56i1zDNL8Bow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.crl rsync://rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.mft rsync://rpki.ripe.net/repository/DEFAULT/1-eS-AUv4OU5M185shKT6hPLln18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:a3:ba:b8:e7:0a:eb:31:47:d9:68:d8:96:45:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9e4be014bf8394e4cd7ce6c84a4fa84f2e59f5f Validity Not Before: Feb 9 14:01:00 2026 GMT Not After : Feb 10 14:01:00 2026 GMT Subject: CN=dd4321fd421a4c90a4e0c983a0da0ab10e272298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:30:9c:70:22:7e:74:f1:e2:15:3b:b9:7c:14: e0:22:53:fc:b4:1a:66:d3:e8:b6:bb:25:6b:62:60: 87:f3:f5:46:4f:58:bd:c0:bf:60:56:94:00:c7:50: 80:ec:f8:55:e0:8e:92:89:85:17:93:12:89:42:9f: 51:6a:5e:4c:7f:28:22:99:2a:54:d6:71:28:70:5a: 8f:3e:35:c3:2b:9c:b7:9e:cf:ea:d3:03:5e:59:c0: 32:7e:0e:9b:9b:71:99:76:b5:92:9c:d2:52:b5:96: 64:b5:54:65:fa:28:e4:ad:bc:75:04:46:d0:2b:a1: 71:c9:6f:f6:e5:30:09:64:18:f0:69:c6:78:cb:03: 98:57:5a:11:6d:08:92:96:c9:63:d2:57:5f:f9:02: 24:2d:4b:1f:5a:6c:eb:c3:ce:e9:d5:aa:93:8c:dc: c6:3d:c3:59:8a:71:35:42:51:e0:f9:da:5f:1e:f0: ac:89:82:d7:93:b2:8f:4d:42:29:6c:40:58:f0:65: 6c:ec:a3:f3:29:bf:35:c4:55:d9:34:ba:0a:72:45: 89:03:57:e9:19:82:5b:03:b2:be:aa:c7:05:42:d3: e7:2c:86:91:7f:4b:98:71:de:f2:c1:11:f9:17:87: 70:3b:a3:a2:1b:5b:df:f2:6d:1e:9b:b6:b8:38:13: b2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:43:21:FD:42:1A:4C:90:A4:E0:C9:83:A0:DA:0A:B1:0E:27:22:98 X509v3 Authority Key Identifier: keyid:F9:E4:BE:01:4B:F8:39:4E:4C:D7:CE:6C:84:A4:FA:84:F2:E5:9F:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eS-AUv4OU5M185shKT6hPLln18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:5e:c3:e1:e8:d2:8e:66:e8:4b:23:7d:a8:07:79:16:8b:3a: 45:7f:66:79:36:cc:07:0d:da:aa:33:f1:dd:34:c4:9b:0c:8d: 73:2f:ec:e2:ab:07:45:3b:35:c7:cd:18:35:64:57:e7:fe:a5: c0:01:7d:60:fe:47:f8:ca:2e:5c:22:fd:d2:1b:20:f8:38:94: 20:7e:a7:6b:eb:67:b9:aa:9a:0f:5e:ea:cf:cf:5a:44:c5:29: 79:bb:07:72:e6:53:b4:1c:90:c5:4b:89:3a:5f:9f:92:2b:50: 1e:58:8c:d9:d7:12:9d:1e:18:ef:6b:54:2a:27:a1:0e:92:65: 10:56:be:43:85:dc:1c:eb:4f:08:ea:5e:8c:72:e5:fa:2c:21: fb:1d:dd:65:6e:6c:8a:70:53:01:a1:9d:5c:d7:13:78:98:db: 1f:e9:79:56:6d:36:fd:46:9e:3f:fe:5b:b8:8a:5e:bf:2d:5c: 2e:e7:05:57:32:d6:d0:2c:da:56:4d:05:7e:34:2c:91:41:bf: b2:54:33:57:cb:56:7d:71:69:d9:59:5c:2b:e5:24:99:a0:b3: 17:03:ac:9d:6d:bc:d2:8c:a2:bc:c1:47:4c:b7:e0:2f:bf:92: ad:fd:e2:64:76:fb:9d:5b:0f:40:74:e6:e3:75:1b:3b:bf:58: 2e:c3:48:bd -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZxCtKO6uOcK6zFH2WjYlkUcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5ZTRiZTAxNGJmODM5NGU0Y2Q3Y2U2Yzg0YTRmYTg0ZjJl NTlmNWYwHhcNMjYwMjA5MTQwMTAwWhcNMjYwMjEwMTQwMTAwWjAzMTEwLwYDVQQD EyhkZDQzMjFmZDQyMWE0YzkwYTRlMGM5ODNhMGRhMGFiMTBlMjcyMjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTCccCJ+dPHiFTu5fBTgIlP8tBpm 0+i2uyVrYmCH8/VGT1i9wL9gVpQAx1CA7PhV4I6SiYUXkxKJQp9Ral5MfygimSpU 1nEocFqPPjXDK5y3ns/q0wNeWcAyfg6bm3GZdrWSnNJStZZktVRl+ijkrbx1BEbQ K6FxyW/25TAJZBjwacZ4ywOYV1oRbQiSlslj0ldf+QIkLUsfWmzrw87p1aqTjNzG PcNZinE1QlHg+dpfHvCsiYLXk7KPTUIpbEBY8GVs7KPzKb81xFXZNLoKckWJA1fp GYJbA7K+qscFQtPnLIaRf0uYcd7ywRH5F4dwO6OiG1vf8m0em7a4OBOyfQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFN1DIf1CGkyQpODJg6DaCrEOJyKYMB8GA1UdIwQY MBaAFPnkvgFL+DlOTNfObISk+oTy5Z9fMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1lUy1BVXY0T1U1TTE4NXNoS1Q2aFBMbG4xOC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYvNGQ1ODlmLTJkNTAtNDI0Yy05YjQ5 LWFjMzZkODIwNDQzNi8xLzEtZVMtQVV2NE9VNU0xODVzaEtUNmhQTGxuMTgubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzg2LzRkNTg5Zi0yZDUwLTQyNGMtOWI0OS1hYzM2ZDgyMDQ0 MzYvMS8xLWVTLUFVdjRPVTVNMTg1c2hLVDZoUExsbjE4LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHF7D 4ejSjmboSyN9qAd5Fos6RX9meTbMBw3aqjPx3TTEmwyNcy/s4qsHRTs1x80YNWRX 5/6lwAF9YP5H+MouXCL90hsg+DiUIH6na+tnuaqaD17qz89aRMUpebsHcuZTtByQ xUuJOl+fkitQHliM2dcSnR4Y72tUKiehDpJlEFa+Q4XcHOtPCOpejHLl+iwh+x3d ZW5sinBTAaGdXNcTeJjbH+l5Vm02/UaeP/5buIpevy1cLucFVzLW0CzaVk0FfjQs kUG/slQzV8tWfXFp2VlcK+UkmaCzFwOsnW280oyivMFHTLfgL7+Srf3iZHb7nVsP QHTm43UbO79YLsNIvQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:14 2026 by rpki-client