This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.mft File: EsqtEcXYmB2YPDAehqGs8tgRqsE.mft (raw, json) Hash identifier: kmyQXrQtui1OxEQGt2AWH1uty3E/LI9A//W1DVNnIX0= Subject key identifier: A9:EA:4E:2B:6B:91:5C:E5:76:58:9D:1A:9D:3E:92:A0:71:B2:61:D8 Authority key identifier: 12:CA:AD:11:C5:D8:98:1D:98:3C:30:1E:86:A1:AC:F2:D8:11:AA:C1 Certificate issuer: /CN=12caad11c5d8981d983c301e86a1acf2d811aac1 Certificate serial: 019C446C6A7EFDDB996CCA6399BBF9315004 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsqtEcXYmB2YPDAehqGs8tgRqsE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.mft Manifest number: 120D Signing time: Mon 09 Feb 2026 22:01:21 +0000 Manifest this update: Mon 09 Feb 2026 22:01:21 +0000 Manifest next update: Tue 10 Feb 2026 22:01:21 +0000 Files and hashes: 1: EsqtEcXYmB2YPDAehqGs8tgRqsE.crl (hash: Vw7YMbkHOSn8MieCCCjHR93sOejoUANgf8bEQ5MgNwY=) 2: fWvJKSqx17IpwOZP-DnMdVD05bA.roa (hash: a2shhv3zQfZlWKQCMJwiD1YrWh6DtVIVP13FjzeqLCc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.mft rsync://rpki.ripe.net/repository/DEFAULT/EsqtEcXYmB2YPDAehqGs8tgRqsE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6c:6a:7e:fd:db:99:6c:ca:63:99:bb:f9:31:50:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12caad11c5d8981d983c301e86a1acf2d811aac1 Validity Not Before: Feb 9 22:01:21 2026 GMT Not After : Feb 10 22:01:21 2026 GMT Subject: CN=a9ea4e2b6b915ce576589d1a9d3e92a071b261d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:59:24:a1:f9:0d:30:6d:73:ea:54:68:8e:4b: bd:ef:43:ef:48:e2:44:5a:02:97:ae:70:4d:89:1a: f1:08:fe:f7:01:ee:ec:08:e4:60:98:3d:2b:9a:f2: 3a:b9:78:b5:de:77:94:d7:3c:36:72:4e:b0:de:cf: 82:1d:62:16:0a:82:52:a3:53:1c:d7:84:3e:f4:87: 7a:4d:59:a0:32:84:b5:3e:6c:ab:0b:2c:44:d8:91: c8:01:31:d4:5a:2d:1b:fb:da:e0:f3:cc:81:98:36: 9f:a7:fe:bb:4d:e1:b7:be:f2:28:a8:4a:b9:96:a3: 29:bc:9e:92:2d:56:f5:ce:ec:fc:d5:39:88:ee:8d: 3b:12:db:5a:61:b2:11:f2:0a:6d:af:33:36:cc:48: 5d:b5:f5:31:f0:72:9a:77:2f:8d:19:5e:f8:91:2b: 66:15:90:36:bb:97:a4:6d:e9:e1:fc:5d:4d:40:1c: 25:d0:a9:60:4c:6c:ff:a5:9c:48:ec:12:dd:8c:7a: 2e:f9:e7:d6:85:49:af:dc:05:42:fd:04:da:b0:f0: f4:70:80:6d:95:c7:c7:0d:cb:fc:93:8b:80:be:0b: 2e:2a:11:99:3a:88:8b:0f:ed:fb:b1:21:7a:af:87: 02:fe:8d:d5:73:6c:1f:a5:4b:49:7c:64:d0:af:3f: cb:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:EA:4E:2B:6B:91:5C:E5:76:58:9D:1A:9D:3E:92:A0:71:B2:61:D8 X509v3 Authority Key Identifier: keyid:12:CA:AD:11:C5:D8:98:1D:98:3C:30:1E:86:A1:AC:F2:D8:11:AA:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsqtEcXYmB2YPDAehqGs8tgRqsE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:31:cf:7b:3b:73:a0:3b:fa:ed:a4:80:74:54:9f:8b:36:15: 18:b6:34:9e:4c:23:e0:c9:9c:25:d8:5e:2b:19:f3:fa:f3:23: ce:ed:60:03:fe:91:de:bc:31:eb:d1:cf:28:e6:cb:f4:4c:a2: 3d:d7:ab:e4:9b:0f:c5:62:2d:bf:3d:5a:35:95:83:1a:38:7b: 3a:85:e5:bc:eb:2f:c3:70:7a:96:98:92:58:16:67:84:ff:06: 92:27:e1:38:35:99:a1:37:d8:2c:50:7f:06:d3:d3:c1:6d:96: 5f:e6:1d:89:3e:07:ab:0c:66:36:4c:aa:20:86:1a:36:88:4f: 7d:b4:f5:27:0a:63:7c:f6:20:5b:8d:27:03:6b:a3:f2:af:96: 9b:f9:f2:57:69:ed:66:21:e5:42:bf:cf:14:84:32:c0:5d:a5: 99:2a:b7:2f:97:d4:37:94:14:b3:68:b8:21:b1:37:cd:6e:4e: ac:aa:b9:b8:0a:cb:50:b2:dc:df:d1:16:15:d3:af:b2:83:6a: 6a:d9:42:eb:87:43:66:60:bc:d1:9c:e9:83:10:73:f3:b8:7d: 87:c3:53:42:11:53:22:ae:89:f6:aa:c6:79:9c:dc:a2:6d:c3: 9f:44:80:e8:82:7f:d6:bd:69:e2:1b:13:05:24:47:ae:0a:e3: 90:56:72:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEbGp+/duZbMpjmbv5MVAEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyY2FhZDExYzVkODk4MWQ5ODNjMzAxZTg2YTFhY2YyZDgx MWFhYzEwHhcNMjYwMjA5MjIwMTIxWhcNMjYwMjEwMjIwMTIxWjAzMTEwLwYDVQQD EyhhOWVhNGUyYjZiOTE1Y2U1NzY1ODlkMWE5ZDNlOTJhMDcxYjI2MWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1kkofkNMG1z6lRojku970PvSOJE WgKXrnBNiRrxCP73Ae7sCORgmD0rmvI6uXi13neU1zw2ck6w3s+CHWIWCoJSo1Mc 14Q+9Id6TVmgMoS1PmyrCyxE2JHIATHUWi0b+9rg88yBmDafp/67TeG3vvIoqEq5 lqMpvJ6SLVb1zuz81TmI7o07EttaYbIR8gptrzM2zEhdtfUx8HKady+NGV74kStm FZA2u5ekbenh/F1NQBwl0KlgTGz/pZxI7BLdjHou+efWhUmv3AVC/QTasPD0cIBt lcfHDcv8k4uAvgsuKhGZOoiLD+37sSF6r4cC/o3Vc2wfpUtJfGTQrz/LVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKnqTitrkVzldlidGp0+kqBxsmHYMB8GA1UdIwQY MBaAFBLKrRHF2JgdmDwwHoahrPLYEarBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXNxdEVjWFltQjJZUERBZWhxR3M4dGdScXNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS82YzNmYTEtNjNiNS00YmRjLTk0YmUt ZWI3Yjk1OTBlMzAzLzEvRXNxdEVjWFltQjJZUERBZWhxR3M4dGdScXNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS82YzNmYTEtNjNiNS00YmRjLTk0YmUtZWI3Yjk1OTBlMzAz LzEvRXNxdEVjWFltQjJZUERBZWhxR3M4dGdScXNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANzHPeztz oDv67aSAdFSfizYVGLY0nkwj4MmcJdheKxnz+vMjzu1gA/6R3rwx69HPKObL9Eyi Pder5JsPxWItvz1aNZWDGjh7OoXlvOsvw3B6lpiSWBZnhP8GkifhODWZoTfYLFB/ BtPTwW2WX+YdiT4HqwxmNkyqIIYaNohPfbT1JwpjfPYgW40nA2uj8q+Wm/nyV2nt ZiHlQr/PFIQywF2lmSq3L5fUN5QUs2i4IbE3zW5OrKq5uArLULLc39EWFdOvsoNq atlC64dDZmC80ZzpgxBz87h9h8NTQhFTIq6J9qrGeZzcom3Dn0SA6IJ/1r1p4hsT BSRHrgrjkFZy9A== -----END CERTIFICATE-----Generated at Tue Feb 10 01:31:39 2026 by rpki-client