This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft File: EkSUR-va8tRKSYs9rlJaL1In8Yo.mft (raw, json) Hash identifier: uBAGia0ycWBRwFAAVGHVx+jCHFvdV0Ju8H8f67uFGHE= Subject key identifier: 02:12:DE:CD:CF:F5:5A:7D:87:97:71:4C:9F:7C:4F:6A:C7:06:DA:8E Authority key identifier: 12:44:94:47:EB:DA:F2:D4:4A:49:8B:3D:AE:52:5A:2F:52:27:F1:8A Certificate issuer: /CN=12449447ebdaf2d44a498b3dae525a2f5227f18a Certificate serial: 019C42B3FC8B20CACD4656EE676C74CCEF38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkSUR-va8tRKSYs9rlJaL1In8Yo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft Manifest number: 1423 Signing time: Mon 09 Feb 2026 14:00:17 +0000 Manifest this update: Mon 09 Feb 2026 14:00:17 +0000 Manifest next update: Tue 10 Feb 2026 14:00:17 +0000 Files and hashes: 1: EkSUR-va8tRKSYs9rlJaL1In8Yo.crl (hash: QBQjqblylUbBVA+IaagOXBQ2MuRV+09ivcXPAz/lDCM=) 2: SEttK_pcv2aq3Iiguo8_bemc6-U.roa (hash: +3wPIQDk6DYoI3/eEecxeYyyRYGqp5dlounM53Kj3wo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft rsync://rpki.ripe.net/repository/DEFAULT/EkSUR-va8tRKSYs9rlJaL1In8Yo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b3:fc:8b:20:ca:cd:46:56:ee:67:6c:74:cc:ef:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12449447ebdaf2d44a498b3dae525a2f5227f18a Validity Not Before: Feb 9 14:00:17 2026 GMT Not After : Feb 10 14:00:17 2026 GMT Subject: CN=0212decdcff55a7d8797714c9f7c4f6ac706da8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:2d:c3:a9:32:89:24:8f:24:ba:4c:93:e1:99: 25:bf:bd:fe:84:85:62:12:76:cf:a7:50:90:09:fd: e9:bd:0e:38:72:fd:c3:4d:72:e9:64:50:d1:bc:7f: 48:18:ce:63:51:59:30:97:0c:7c:ce:34:e0:b2:78: cf:9a:e1:96:87:67:64:46:50:24:1c:e8:18:19:c0: 80:3b:00:da:60:8a:65:4b:20:60:54:16:98:6b:66: 87:aa:0f:a5:76:c1:a8:f3:3e:c3:45:41:78:49:d4: ad:b0:8c:57:ce:2a:8d:b3:f6:68:5c:95:07:46:b0: 84:2a:6c:e9:db:3f:2b:81:15:00:f1:92:62:9b:04: 6e:53:fc:d9:f4:18:bf:6d:64:04:13:ee:42:da:fb: 9c:64:85:6f:1b:da:e6:2c:21:88:ec:dd:17:40:60: ba:f6:d0:da:51:b5:ab:f4:e8:6f:fd:a9:39:d9:e4: c9:c9:83:f5:df:db:99:57:1c:cd:ae:3d:e5:bb:14: 2e:79:8a:0d:b5:f0:bb:e7:fd:70:f7:74:52:41:38: 34:24:99:d5:c3:5d:8f:39:5d:eb:13:f4:01:1b:19: 17:1c:a9:54:d4:81:07:d9:32:39:2d:fc:0f:04:e6: c2:6e:d0:2d:86:62:27:6c:3b:b9:e7:9a:7a:e7:56: 08:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:12:DE:CD:CF:F5:5A:7D:87:97:71:4C:9F:7C:4F:6A:C7:06:DA:8E X509v3 Authority Key Identifier: keyid:12:44:94:47:EB:DA:F2:D4:4A:49:8B:3D:AE:52:5A:2F:52:27:F1:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkSUR-va8tRKSYs9rlJaL1In8Yo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:01:1b:6e:70:09:0a:9b:f2:40:db:da:c4:6c:7b:ae:ef:03: e0:23:26:d7:28:f0:fc:06:0e:ce:52:6f:a1:c3:45:27:14:91: 60:46:3d:c5:47:b5:66:d4:51:23:71:0e:72:38:01:f1:21:63: eb:7a:8c:ac:7c:3d:63:50:f7:de:6a:77:ff:4d:91:bc:74:4d: 3e:95:a2:b8:d9:69:c1:fa:9b:2d:81:b1:c9:7f:71:64:44:43: b8:af:89:61:35:f0:76:59:be:dc:3b:75:89:c7:66:0d:9c:86: 1c:20:9c:d4:a0:56:41:1b:d1:75:94:5d:54:ea:b7:fc:8b:ad: 2e:45:a5:06:44:09:92:f3:80:e8:1d:43:16:51:d0:2a:30:ff: 05:19:1c:4e:97:49:3a:48:0a:8f:83:d1:72:34:96:b9:a8:1e: 7d:82:be:0c:34:16:bf:13:89:a9:3b:c9:c2:b2:fc:c4:ab:d7: fc:e1:a1:a3:e4:c1:ba:d5:af:aa:cf:7b:54:45:6a:11:71:f9: 19:de:6c:ed:fc:d8:0b:a7:34:d8:3a:ff:fe:8a:fe:4f:34:28: 3c:de:33:36:c3:d5:9d:f1:84:3e:3c:26:56:f9:fb:3b:f7:4b: 61:53:77:be:c0:bc:db:22:2b:e3:ce:3e:0a:9c:43:22:4f:69: 07:57:eb:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCs/yLIMrNRlbuZ2x0zO84MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNDQ5NDQ3ZWJkYWYyZDQ0YTQ5OGIzZGFlNTI1YTJmNTIy N2YxOGEwHhcNMjYwMjA5MTQwMDE3WhcNMjYwMjEwMTQwMDE3WjAzMTEwLwYDVQQD EygwMjEyZGVjZGNmZjU1YTdkODc5NzcxNGM5ZjdjNGY2YWM3MDZkYThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6C3DqTKJJI8kukyT4Zklv73+hIVi EnbPp1CQCf3pvQ44cv3DTXLpZFDRvH9IGM5jUVkwlwx8zjTgsnjPmuGWh2dkRlAk HOgYGcCAOwDaYIplSyBgVBaYa2aHqg+ldsGo8z7DRUF4SdStsIxXziqNs/ZoXJUH RrCEKmzp2z8rgRUA8ZJimwRuU/zZ9Bi/bWQEE+5C2vucZIVvG9rmLCGI7N0XQGC6 9tDaUbWr9Ohv/ak52eTJyYP139uZVxzNrj3luxQueYoNtfC75/1w93RSQTg0JJnV w12POV3rE/QBGxkXHKlU1IEH2TI5LfwPBObCbtAthmInbDu555p651YInwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAIS3s3P9Vp9h5dxTJ98T2rHBtqOMB8GA1UdIwQY MBaAFBJElEfr2vLUSkmLPa5SWi9SJ/GKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWtTVVItdmE4dFJLU1lzOXJsSmFMMUluOFlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85ZmIxNzEtMTFmNC00YzVmLTgzZTct MmVkMWZkZTY4NTE2LzEvRWtTVVItdmE4dFJLU1lzOXJsSmFMMUluOFlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy85ZmIxNzEtMTFmNC00YzVmLTgzZTctMmVkMWZkZTY4NTE2 LzEvRWtTVVItdmE4dFJLU1lzOXJsSmFMMUluOFlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEQEbbnAJ CpvyQNvaxGx7ru8D4CMm1yjw/AYOzlJvocNFJxSRYEY9xUe1ZtRRI3EOcjgB8SFj 63qMrHw9Y1D33mp3/02RvHRNPpWiuNlpwfqbLYGxyX9xZERDuK+JYTXwdlm+3Dt1 icdmDZyGHCCc1KBWQRvRdZRdVOq3/IutLkWlBkQJkvOA6B1DFlHQKjD/BRkcTpdJ OkgKj4PRcjSWuagefYK+DDQWvxOJqTvJwrL8xKvX/OGho+TButWvqs97VEVqEXH5 Gd5s7fzYC6c02Dr//or+TzQoPN4zNsPVnfGEPjwmVvn7O/dLYVN3vsC82yIr484+ CpxDIk9pB1frxA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:00 2026 by rpki-client