This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/551a1f-1542-443b-a5f4-b06dac357966/1/EmCsDOT0xtDo2rrIOva4aYvEjpw.mft File: EmCsDOT0xtDo2rrIOva4aYvEjpw.mft (raw, json) Hash identifier: atWmYLcLrVMhc7wBZ8iDaM+yiP8J4fHV4ND0Qamh0XQ= Subject key identifier: 5A:FA:2A:CF:71:B6:A1:10:45:CE:3F:80:59:71:E5:04:F6:42:F5:7F Authority key identifier: 12:60:AC:0C:E4:F4:C6:D0:E8:DA:BA:C8:3A:F6:B8:69:8B:C4:8E:9C Certificate issuer: /CN=1260ac0ce4f4c6d0e8dabac83af6b8698bc48e9c Certificate serial: 019C42B44D05C3A98C6EA9AAB98359EF3F57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmCsDOT0xtDo2rrIOva4aYvEjpw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/551a1f-1542-443b-a5f4-b06dac357966/1/EmCsDOT0xtDo2rrIOva4aYvEjpw.mft Manifest number: 022B Signing time: Mon 09 Feb 2026 14:00:38 +0000 Manifest this update: Mon 09 Feb 2026 14:00:38 +0000 Manifest next update: Tue 10 Feb 2026 14:00:38 +0000 Files and hashes: 1: EmCsDOT0xtDo2rrIOva4aYvEjpw.crl (hash: KwjDskA+fSe+iE0QfyE3uTKwyBzZVtmt+8oqLVdLlJo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/551a1f-1542-443b-a5f4-b06dac357966/1/EmCsDOT0xtDo2rrIOva4aYvEjpw.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/551a1f-1542-443b-a5f4-b06dac357966/1/EmCsDOT0xtDo2rrIOva4aYvEjpw.mft rsync://rpki.ripe.net/repository/DEFAULT/EmCsDOT0xtDo2rrIOva4aYvEjpw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:4d:05:c3:a9:8c:6e:a9:aa:b9:83:59:ef:3f:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1260ac0ce4f4c6d0e8dabac83af6b8698bc48e9c Validity Not Before: Feb 9 14:00:38 2026 GMT Not After : Feb 10 14:00:38 2026 GMT Subject: CN=5afa2acf71b6a11045ce3f805971e504f642f57f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cf:17:4e:14:d3:8c:f9:b5:b7:70:e1:b8:73: 1c:b0:50:3a:9c:da:32:1b:64:9d:33:fa:6a:f2:ae: dc:f6:3b:43:38:3b:f2:75:5f:ff:f0:ed:25:56:29: d6:d0:97:42:76:7a:54:a1:7e:8d:32:74:53:78:04: 50:ef:4c:1f:c3:a5:40:f4:6e:24:3b:9f:46:6c:9f: 63:ae:9b:1a:4a:52:2f:bc:81:a2:bd:1c:9c:93:b2: 4f:26:17:08:d4:2a:64:d2:7d:23:58:0b:4f:9b:12: b0:ab:ab:ae:93:11:a0:1c:4c:e6:36:b2:8d:a9:07: 0f:20:80:5f:70:63:a3:4a:5b:26:b2:20:66:9b:34: 86:87:27:63:fb:9c:69:b6:0b:34:48:58:54:bc:36: 53:65:75:99:68:e6:10:dd:ec:d3:52:3b:42:a7:53: f0:9c:67:00:57:d1:16:61:f2:e4:02:fe:0e:97:8a: 18:7a:c0:fa:da:2b:92:46:95:f3:0f:ca:54:39:2a: 7d:0c:50:d2:0c:25:59:28:34:03:f0:c4:29:ba:21: 1a:7d:ce:c2:eb:47:e1:f2:9b:ca:9a:cd:80:06:b1: 59:2e:5b:cf:7b:d7:0c:c4:11:68:cd:59:dd:44:13: ee:85:8f:72:2a:5e:87:d0:38:87:46:30:6c:56:b7: aa:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:FA:2A:CF:71:B6:A1:10:45:CE:3F:80:59:71:E5:04:F6:42:F5:7F X509v3 Authority Key Identifier: keyid:12:60:AC:0C:E4:F4:C6:D0:E8:DA:BA:C8:3A:F6:B8:69:8B:C4:8E:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmCsDOT0xtDo2rrIOva4aYvEjpw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/551a1f-1542-443b-a5f4-b06dac357966/1/EmCsDOT0xtDo2rrIOva4aYvEjpw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/551a1f-1542-443b-a5f4-b06dac357966/1/EmCsDOT0xtDo2rrIOva4aYvEjpw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:7e:0b:06:73:f7:c1:4d:c8:22:43:29:60:dd:7d:2d:1c:bf: 75:e6:cf:7b:88:10:54:3e:25:da:31:92:63:24:77:71:13:b7: f8:af:89:25:2c:89:13:ce:d1:cb:5e:f9:00:fa:63:7d:a3:6d: 59:92:45:38:24:2d:4c:ab:a7:da:59:df:1d:fc:57:17:35:b2: 92:07:f5:25:ab:bc:67:bc:45:9e:9c:57:d5:56:e0:ba:9b:3f: 1f:a3:79:3c:29:10:5c:74:fb:44:b8:63:fa:1c:75:14:37:85: a9:e1:03:e9:4b:f1:0f:82:36:c5:e0:94:b5:e0:24:da:4c:31: c7:ea:03:92:6f:cd:6f:d5:7e:d1:ee:a8:8a:a5:dd:b2:d1:1c: 39:88:e0:86:f3:47:8c:ca:a0:ff:78:4a:2d:45:94:ac:64:53: ed:7f:6e:79:4f:35:e9:94:56:86:62:43:40:0f:f1:1a:3c:e4: 23:cd:44:9d:ca:c8:8a:86:ed:bc:85:81:bf:83:5b:c5:06:c4: ce:94:3d:34:f3:fe:d6:e7:3a:a2:da:ae:84:95:69:b2:89:cd: e6:aa:d2:7f:ea:0f:8e:9b:40:7f:9d:da:23:b1:17:7a:e8:d1: 31:48:5a:03:34:55:bc:50:0d:68:d3:b9:bf:f7:b3:be:30:b3: 87:b1:90:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtE0Fw6mMbqmquYNZ7z9XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNjBhYzBjZTRmNGM2ZDBlOGRhYmFjODNhZjZiODY5OGJj NDhlOWMwHhcNMjYwMjA5MTQwMDM4WhcNMjYwMjEwMTQwMDM4WjAzMTEwLwYDVQQD Eyg1YWZhMmFjZjcxYjZhMTEwNDVjZTNmODA1OTcxZTUwNGY2NDJmNTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAts8XThTTjPm1t3DhuHMcsFA6nNoy G2SdM/pq8q7c9jtDODvydV//8O0lVinW0JdCdnpUoX6NMnRTeARQ70wfw6VA9G4k O59GbJ9jrpsaSlIvvIGivRyck7JPJhcI1Cpk0n0jWAtPmxKwq6uukxGgHEzmNrKN qQcPIIBfcGOjSlsmsiBmmzSGhydj+5xptgs0SFhUvDZTZXWZaOYQ3ezTUjtCp1Pw nGcAV9EWYfLkAv4Ol4oYesD62iuSRpXzD8pUOSp9DFDSDCVZKDQD8MQpuiEafc7C 60fh8pvKms2ABrFZLlvPe9cMxBFozVndRBPuhY9yKl6H0DiHRjBsVreqVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFr6Ks9xtqEQRc4/gFlx5QT2QvV/MB8GA1UdIwQY MBaAFBJgrAzk9MbQ6Nq6yDr2uGmLxI6cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW1Dc0RPVDB4dERvMnJySU92YTRhWXZFanB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi81NTFhMWYtMTU0Mi00NDNiLWE1ZjQt YjA2ZGFjMzU3OTY2LzEvRW1Dc0RPVDB4dERvMnJySU92YTRhWXZFanB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi81NTFhMWYtMTU0Mi00NDNiLWE1ZjQtYjA2ZGFjMzU3OTY2 LzEvRW1Dc0RPVDB4dERvMnJySU92YTRhWXZFanB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL34LBnP3 wU3IIkMpYN19LRy/debPe4gQVD4l2jGSYyR3cRO3+K+JJSyJE87Ry175APpjfaNt WZJFOCQtTKun2lnfHfxXFzWykgf1Jau8Z7xFnpxX1Vbgups/H6N5PCkQXHT7RLhj +hx1FDeFqeED6UvxD4I2xeCUteAk2kwxx+oDkm/Nb9V+0e6oiqXdstEcOYjghvNH jMqg/3hKLUWUrGRT7X9ueU816ZRWhmJDQA/xGjzkI81EncrIiobtvIWBv4NbxQbE zpQ9NPP+1uc6otquhJVpsonN5qrSf+oPjptAf53aI7EXeujRMUhaAzRVvFANaNO5 v/ezvjCzh7GQ7A== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:46 2026 by rpki-client