This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft File: EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft (raw, json) Hash identifier: vH5UNWl+sjDcob/tpN0/4Q49Mmzfrxr7mq+bHDv7YHk= Subject key identifier: B3:7E:02:12:E3:B8:A8:8C:A6:64:43:BB:15:76:2C:1A:2E:AA:90:05 Authority key identifier: 10:93:0D:00:49:BA:87:00:4C:CC:9E:5B:E5:26:C3:50:CC:83:FA:8D Certificate issuer: /CN=10930d0049ba87004ccc9e5be526c350cc83fa8d Certificate serial: 019C41D8F016D0E5035B0B732E5C1427EEFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft Manifest number: 180B Signing time: Mon 09 Feb 2026 10:01:01 +0000 Manifest this update: Mon 09 Feb 2026 10:01:01 +0000 Manifest next update: Tue 10 Feb 2026 10:01:01 +0000 Files and hashes: 1: EJMNAEm6hwBMzJ5b5SbDUMyD-o0.crl (hash: 1lMLk9rx2KXbJS+mTsK05rykrMTvkla1WFoJFwxBpPI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft rsync://rpki.ripe.net/repository/DEFAULT/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:f0:16:d0:e5:03:5b:0b:73:2e:5c:14:27:ee:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10930d0049ba87004ccc9e5be526c350cc83fa8d Validity Not Before: Feb 9 10:01:01 2026 GMT Not After : Feb 10 10:01:01 2026 GMT Subject: CN=b37e0212e3b8a88ca66443bb15762c1a2eaa9005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0b:65:ec:d3:b9:e1:1e:3b:f6:74:72:99:ce: a8:11:ef:e2:8e:8b:ad:6f:6a:21:ff:e3:1c:aa:78: 0e:12:65:1f:97:12:76:27:29:5b:e0:72:67:43:e7: 20:0e:28:03:28:c4:43:e7:3b:be:a9:de:7f:eb:64: 51:39:07:ec:15:68:10:b5:56:9a:38:36:a2:67:52: 01:67:26:75:e4:8e:e1:9d:aa:09:30:d4:1a:fb:03: aa:08:d5:82:a4:7e:ea:f1:71:0d:10:5b:af:b7:e9: ff:a3:a9:00:ac:ed:ea:fe:93:1a:5e:48:30:8e:09: 78:74:0b:84:43:30:d8:bc:eb:e8:1c:a2:46:d9:e1: d4:7d:87:e6:f1:c1:09:2b:71:54:33:d4:88:8d:86: 2d:39:56:22:e1:e1:3d:84:b7:cd:1c:fd:87:5b:cc: df:8b:ea:fa:af:92:9f:2c:6e:41:23:19:81:1b:b1: c9:59:05:c9:5f:cc:af:3a:7f:ab:cc:01:16:67:03: 18:d1:62:a4:bb:9c:5e:1c:85:b9:16:ae:ba:89:74: 85:9d:95:a4:32:48:f4:bb:63:df:a5:ae:e3:f9:ea: 45:dc:10:a0:7f:9d:ba:98:71:07:96:99:54:aa:78: d5:c7:3d:7d:17:1e:e2:7a:b2:0a:ca:85:df:19:21: 1c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:7E:02:12:E3:B8:A8:8C:A6:64:43:BB:15:76:2C:1A:2E:AA:90:05 X509v3 Authority Key Identifier: keyid:10:93:0D:00:49:BA:87:00:4C:CC:9E:5B:E5:26:C3:50:CC:83:FA:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:05:28:f1:fb:d2:a9:d4:27:36:ef:5a:a2:ae:fe:64:cf:84: 9e:a2:c4:57:c8:19:d4:38:82:ec:65:82:c9:29:94:96:c0:18: 62:07:e9:b9:a5:1e:fa:a8:ec:52:42:ac:33:f8:6b:ce:ed:0c: 41:9d:33:23:f0:09:e5:07:d5:b2:70:65:94:bc:5f:de:88:73: 2d:59:ab:44:26:67:2c:fb:b2:6e:2e:1c:11:fb:53:7f:ef:f4: 61:5a:49:0f:43:15:05:65:e9:42:d8:4d:de:8b:7b:5f:15:88: 14:4d:9b:3b:00:db:38:83:7d:c2:02:10:72:d9:14:b7:57:cf: 5c:c2:cd:fe:40:02:18:51:30:f9:13:22:50:0b:af:5c:59:5e: c5:e0:7b:de:ca:af:41:b8:bd:83:b9:4e:1d:d5:75:fa:68:13: 3e:62:ec:09:86:b5:b5:ad:8e:4d:db:4f:a9:96:21:fd:48:ae: d0:0f:01:7c:25:1a:c5:69:31:3f:e4:51:2c:7c:bc:6c:c0:ad: 34:07:3e:c9:b4:fd:33:68:fa:ce:cc:ee:3b:1c:f3:da:d4:b1: c0:61:7c:ad:3a:06:1a:44:81:0e:55:2e:af:ba:60:53:90:9a: ea:f1:34:94:d6:6a:b0:97:d2:b2:65:9f:62:43:ff:b0:a8:67: d7:08:b6:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2PAW0OUDWwtzLlwUJ+79MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwOTMwZDAwNDliYTg3MDA0Y2NjOWU1YmU1MjZjMzUwY2M4 M2ZhOGQwHhcNMjYwMjA5MTAwMTAxWhcNMjYwMjEwMTAwMTAxWjAzMTEwLwYDVQQD EyhiMzdlMDIxMmUzYjhhODhjYTY2NDQzYmIxNTc2MmMxYTJlYWE5MDA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgtl7NO54R479nRymc6oEe/ijout b2oh/+McqngOEmUflxJ2Jylb4HJnQ+cgDigDKMRD5zu+qd5/62RROQfsFWgQtVaa ODaiZ1IBZyZ15I7hnaoJMNQa+wOqCNWCpH7q8XENEFuvt+n/o6kArO3q/pMaXkgw jgl4dAuEQzDYvOvoHKJG2eHUfYfm8cEJK3FUM9SIjYYtOVYi4eE9hLfNHP2HW8zf i+r6r5KfLG5BIxmBG7HJWQXJX8yvOn+rzAEWZwMY0WKku5xeHIW5Fq66iXSFnZWk Mkj0u2Pfpa7j+epF3BCgf526mHEHlplUqnjVxz19Fx7ierIKyoXfGSEc/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLN+AhLjuKiMpmRDuxV2LBouqpAFMB8GA1UdIwQY MBaAFBCTDQBJuocATMyeW+Umw1DMg/qNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUpNTkFFbTZod0JNeko1YjVTYkRVTXlELW8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8yZGEyOTAtNGViZS00MmFkLWJjNDYt NTcyZWRiNTcwZjdlLzEvRUpNTkFFbTZod0JNeko1YjVTYkRVTXlELW8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8yZGEyOTAtNGViZS00MmFkLWJjNDYtNTcyZWRiNTcwZjdl LzEvRUpNTkFFbTZod0JNeko1YjVTYkRVTXlELW8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPAUo8fvS qdQnNu9aoq7+ZM+EnqLEV8gZ1DiC7GWCySmUlsAYYgfpuaUe+qjsUkKsM/hrzu0M QZ0zI/AJ5QfVsnBllLxf3ohzLVmrRCZnLPuybi4cEftTf+/0YVpJD0MVBWXpQthN 3ot7XxWIFE2bOwDbOIN9wgIQctkUt1fPXMLN/kACGFEw+RMiUAuvXFlexeB73sqv Qbi9g7lOHdV1+mgTPmLsCYa1ta2OTdtPqZYh/Uiu0A8BfCUaxWkxP+RRLHy8bMCt NAc+ybT9M2j6zszuOxzz2tSxwGF8rToGGkSBDlUur7pgU5Ca6vE0lNZqsJfSsmWf YkP/sKhn1wi2NQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:52 2026 by rpki-client