This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/ebe991-2eb4-4219-b367-0ebfcf38cbef/1/pEKhMJW3m8qG4s2gEuTEz2JGeWk.mft File: pEKhMJW3m8qG4s2gEuTEz2JGeWk.mft (raw, json) Hash identifier: Hzsg4xxIJRXk2/gBswo3o0GpfIThssAry0R6fdt/1Z0= Subject key identifier: 42:CF:28:B9:FA:5D:00:B0:F6:57:B9:17:AF:2A:19:23:6D:A7:BA:DC Authority key identifier: A4:42:A1:30:95:B7:9B:CA:86:E2:CD:A0:12:E4:C4:CF:62:46:79:69 Certificate issuer: /CN=a442a13095b79bca86e2cda012e4c4cf62467969 Certificate serial: 019C42B454301CA0500459825E0C4ABA3981 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEKhMJW3m8qG4s2gEuTEz2JGeWk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe991-2eb4-4219-b367-0ebfcf38cbef/1/pEKhMJW3m8qG4s2gEuTEz2JGeWk.mft Manifest number: 01F4 Signing time: Mon 09 Feb 2026 14:00:40 +0000 Manifest this update: Mon 09 Feb 2026 14:00:40 +0000 Manifest next update: Tue 10 Feb 2026 14:00:40 +0000 Files and hashes: 1: pEKhMJW3m8qG4s2gEuTEz2JGeWk.crl (hash: lBWpz1SkYXFPkm88+ldI6ayr1MIPot3zrLC587FJwQ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe991-2eb4-4219-b367-0ebfcf38cbef/1/pEKhMJW3m8qG4s2gEuTEz2JGeWk.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe991-2eb4-4219-b367-0ebfcf38cbef/1/pEKhMJW3m8qG4s2gEuTEz2JGeWk.mft rsync://rpki.ripe.net/repository/DEFAULT/pEKhMJW3m8qG4s2gEuTEz2JGeWk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:54:30:1c:a0:50:04:59:82:5e:0c:4a:ba:39:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a442a13095b79bca86e2cda012e4c4cf62467969 Validity Not Before: Feb 9 14:00:40 2026 GMT Not After : Feb 10 14:00:40 2026 GMT Subject: CN=42cf28b9fa5d00b0f657b917af2a19236da7badc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:38:f0:b8:91:46:29:d3:55:47:31:6c:2a:c6: dd:24:ab:43:32:3b:41:7b:6c:8c:0d:19:aa:b5:6f: 5f:08:37:b9:d3:d0:e9:fa:4d:ca:52:86:a5:1e:8c: 0d:5b:ae:63:05:db:f5:65:b9:2e:11:a3:e4:fb:94: 84:01:3b:59:53:ff:14:be:b1:1b:78:f9:25:ab:00: 5e:7b:a7:5d:59:00:9a:4b:14:48:20:6e:3e:9d:4c: 32:6c:50:2d:ac:04:8d:ca:b4:bc:0a:ab:c0:44:cb: 0c:d5:7a:fb:76:83:43:db:e6:66:11:e5:42:e3:b0: ad:d1:0d:81:2a:cf:d9:33:1d:fe:cd:46:51:c0:f6: 75:10:e5:11:21:bc:fd:80:69:62:c8:0d:68:71:44: 0c:80:3d:64:0f:ee:20:da:09:2b:80:bd:bb:3b:86: 1a:aa:64:92:ab:fc:99:9a:72:a8:31:87:1d:01:61: b1:fc:28:7e:ed:3a:5a:88:f4:7b:a5:98:58:6b:27: 6b:d7:3d:f2:d9:38:e5:7a:b2:29:39:ed:b1:01:5b: 23:64:0f:ac:34:0c:69:49:7a:da:6f:50:df:8f:03: 5a:c1:a6:6e:ae:b7:a9:f6:c3:b0:fe:cf:52:51:6d: 59:d2:b0:ce:97:a1:ae:c7:b5:91:6e:d0:53:f3:9e: 09:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:CF:28:B9:FA:5D:00:B0:F6:57:B9:17:AF:2A:19:23:6D:A7:BA:DC X509v3 Authority Key Identifier: keyid:A4:42:A1:30:95:B7:9B:CA:86:E2:CD:A0:12:E4:C4:CF:62:46:79:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEKhMJW3m8qG4s2gEuTEz2JGeWk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe991-2eb4-4219-b367-0ebfcf38cbef/1/pEKhMJW3m8qG4s2gEuTEz2JGeWk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe991-2eb4-4219-b367-0ebfcf38cbef/1/pEKhMJW3m8qG4s2gEuTEz2JGeWk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:bd:1d:b2:b5:00:40:50:80:4f:3c:99:29:a9:85:44:75:c7: 59:3c:a1:9f:fe:79:6d:f6:e2:65:e6:3d:d1:a4:a0:52:e1:32: 1c:96:b2:c0:e7:ee:cc:54:f5:cc:a5:36:f1:f6:c1:b9:31:a0: 71:d2:54:d1:38:4a:3f:7c:fb:74:2d:be:df:4a:c1:a5:72:6c: 5f:4a:fd:f0:91:aa:a9:47:c3:9a:04:06:f4:68:9e:31:4c:30: b1:45:39:e5:88:f5:64:d1:d6:c8:a4:31:f6:dd:99:11:a1:cf: e8:b5:58:f6:52:90:cd:42:46:87:64:b3:04:95:e8:8f:8a:33: f7:69:b6:21:8a:1f:71:2f:ca:11:99:75:20:b0:01:2a:54:56: 81:fd:2f:df:a9:95:0f:e4:f9:a0:42:2d:24:32:e1:23:49:84: 08:91:eb:e5:dd:eb:90:28:9b:ad:50:e4:95:55:b9:ef:0d:3d: cd:29:a5:68:31:6d:eb:80:7b:cc:de:08:5c:a7:5b:f9:1c:d5: 09:cc:85:94:ca:f4:05:0c:e5:4f:28:21:40:39:06:63:45:7c: f3:8b:55:ce:d9:dc:90:66:21:21:8c:7e:c2:95:11:7d:57:69: 91:0a:a8:53:ad:fd:d7:86:ac:1e:cd:b2:e3:d6:73:d9:24:1b: 3b:6b:0e:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtFQwHKBQBFmCXgxKujmBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0NDJhMTMwOTViNzliY2E4NmUyY2RhMDEyZTRjNGNmNjI0 Njc5NjkwHhcNMjYwMjA5MTQwMDQwWhcNMjYwMjEwMTQwMDQwWjAzMTEwLwYDVQQD Eyg0MmNmMjhiOWZhNWQwMGIwZjY1N2I5MTdhZjJhMTkyMzZkYTdiYWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzjwuJFGKdNVRzFsKsbdJKtDMjtB e2yMDRmqtW9fCDe509Dp+k3KUoalHowNW65jBdv1ZbkuEaPk+5SEATtZU/8UvrEb ePklqwBee6ddWQCaSxRIIG4+nUwybFAtrASNyrS8CqvARMsM1Xr7doND2+ZmEeVC 47Ct0Q2BKs/ZMx3+zUZRwPZ1EOURIbz9gGliyA1ocUQMgD1kD+4g2gkrgL27O4Ya qmSSq/yZmnKoMYcdAWGx/Ch+7TpaiPR7pZhYaydr1z3y2TjlerIpOe2xAVsjZA+s NAxpSXrab1DfjwNawaZurrep9sOw/s9SUW1Z0rDOl6Gux7WRbtBT854J0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFELPKLn6XQCw9le5F68qGSNtp7rcMB8GA1UdIwQY MBaAFKRCoTCVt5vKhuLNoBLkxM9iRnlpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEVLaE1KVzNtOHFHNHMyZ0V1VEV6MkpHZVdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9lYmU5OTEtMmViNC00MjE5LWIzNjct MGViZmNmMzhjYmVmLzEvcEVLaE1KVzNtOHFHNHMyZ0V1VEV6MkpHZVdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9lYmU5OTEtMmViNC00MjE5LWIzNjctMGViZmNmMzhjYmVm LzEvcEVLaE1KVzNtOHFHNHMyZ0V1VEV6MkpHZVdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAib0dsrUA QFCATzyZKamFRHXHWTyhn/55bfbiZeY90aSgUuEyHJaywOfuzFT1zKU28fbBuTGg cdJU0ThKP3z7dC2+30rBpXJsX0r98JGqqUfDmgQG9GieMUwwsUU55Yj1ZNHWyKQx 9t2ZEaHP6LVY9lKQzUJGh2SzBJXoj4oz92m2IYofcS/KEZl1ILABKlRWgf0v36mV D+T5oEItJDLhI0mECJHr5d3rkCibrVDklVW57w09zSmlaDFt64B7zN4IXKdb+RzV CcyFlMr0BQzlTyghQDkGY0V884tVztnckGYhIYx+wpURfVdpkQqoU63914asHs2y 49Zz2SQbO2sO1g== -----END CERTIFICATE-----Generated at Tue Feb 10 00:16:00 2026 by rpki-client