This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft File: EceeiifN6ZEb19pjhzxcxVjb1TE.mft (raw, json) Hash identifier: MFIJZbvd6TWD6iPf7DkzOyMFWJBjNgCi88uFRfuSxMM= Subject key identifier: A1:FF:79:14:DB:BA:94:89:C9:29:CD:06:04:78:73:F9:DB:F7:83:EA Authority key identifier: 11:C7:9E:8A:27:CD:E9:91:1B:D7:DA:63:87:3C:5C:C5:58:DB:D5:31 Certificate issuer: /CN=11c79e8a27cde9911bd7da63873c5cc558dbd531 Certificate serial: 019C43594941785B88BDDC86D1C232162AF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EceeiifN6ZEb19pjhzxcxVjb1TE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft Manifest number: 15AF Signing time: Mon 09 Feb 2026 17:00:50 +0000 Manifest this update: Mon 09 Feb 2026 17:00:50 +0000 Manifest next update: Tue 10 Feb 2026 17:00:50 +0000 Files and hashes: 1: 1-TLniUUVVOsjkUoUNpmoFgZ8jbw.roa (hash: lGRtYYr1rsbRooh6viti8BU7RHgdGU7SHvd+34Ph5r0=) 2: EceeiifN6ZEb19pjhzxcxVjb1TE.crl (hash: Od7cKkJyud9qXOXdmKeC/qars7Mc2bqa8mwEzkXUNIU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft rsync://rpki.ripe.net/repository/DEFAULT/EceeiifN6ZEb19pjhzxcxVjb1TE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:49:41:78:5b:88:bd:dc:86:d1:c2:32:16:2a:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11c79e8a27cde9911bd7da63873c5cc558dbd531 Validity Not Before: Feb 9 17:00:50 2026 GMT Not After : Feb 10 17:00:50 2026 GMT Subject: CN=a1ff7914dbba9489c929cd06047873f9dbf783ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:15:0d:dd:ff:e8:2d:78:4b:8d:ba:82:9d:9e: 23:03:fd:bf:41:72:5e:14:6a:48:1b:67:55:d1:7f: 74:e1:29:45:e7:cc:56:5e:5b:3a:8b:cf:6f:98:18: ab:74:26:75:90:52:43:ec:06:13:61:67:e4:03:63: 2e:5c:1b:49:1e:14:ad:ae:c3:86:c2:44:71:62:7a: 52:47:d2:dd:3b:c5:70:b2:45:9c:45:5d:53:0b:49: 97:a4:1f:e7:60:82:2e:41:22:d4:96:4c:44:41:64: b6:12:08:a4:98:0b:a6:73:ca:20:09:3a:5b:10:df: e8:85:9d:c1:73:b1:e2:28:63:71:20:fd:7f:04:a4: 8a:34:34:5b:65:45:af:64:11:83:ce:4b:06:16:c8: eb:41:92:d6:bd:68:d3:e1:dd:dd:95:11:c8:a5:af: ef:a6:0e:6e:ac:fd:7e:be:7f:96:2e:94:bc:89:f4: 3a:53:dc:8f:29:02:f8:b8:ad:6e:53:4e:5b:33:9d: 59:c9:35:2d:9a:e3:53:61:b8:59:eb:74:12:82:99: 60:8c:ca:e1:80:2e:5b:ee:61:9e:6c:32:a0:8c:97: 4e:bf:fd:d7:13:a1:e1:e7:f6:41:9d:14:40:b7:2d: 9e:7b:61:50:2d:1e:cb:7f:bb:ad:46:05:13:8f:4c: ad:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:FF:79:14:DB:BA:94:89:C9:29:CD:06:04:78:73:F9:DB:F7:83:EA X509v3 Authority Key Identifier: keyid:11:C7:9E:8A:27:CD:E9:91:1B:D7:DA:63:87:3C:5C:C5:58:DB:D5:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EceeiifN6ZEb19pjhzxcxVjb1TE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:b8:fa:43:b1:ae:5d:de:2e:35:b4:c2:55:3e:76:40:03:b3: 6b:ec:2e:3d:c1:1d:63:c1:21:72:68:35:4e:67:72:25:dd:3e: 0f:38:04:5c:c4:b9:00:d3:f9:3c:be:63:8a:e1:f1:d3:d8:3b: 68:63:9a:56:6f:74:89:8c:3f:dc:19:8a:f4:34:5b:11:ba:84: 4d:2c:be:a5:10:59:58:94:d8:d3:79:70:a1:e7:ff:23:b1:d6: 2d:c1:a1:69:74:dd:13:4a:cb:24:b7:30:1c:22:5e:0a:8d:6b: 9c:ed:bd:3b:58:74:f4:cb:1f:ae:d2:aa:04:9c:a4:95:9b:45: 51:8a:01:51:51:2e:e5:ee:24:a5:3c:d8:d5:b5:77:f5:a8:2b: 49:32:10:a4:fe:23:1c:c8:db:92:a1:ef:21:6d:34:00:f9:62: 4b:ce:91:09:6e:7c:0e:e7:44:02:21:a5:cc:a0:ed:1c:09:91: 36:22:e0:a1:4c:de:a3:74:49:bd:d1:41:a1:17:e2:a1:b2:d8: 0b:d2:4d:cb:84:7a:d5:4c:ff:f9:23:3f:5f:62:59:f8:99:bd: fb:89:40:06:b7:af:75:d6:80:87:fa:3a:09:fd:b8:3d:40:3a: a2:29:9d:4e:04:98:34:51:bd:79:53:46:4e:2a:1a:3e:a4:aa: e7:41:bc:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWUlBeFuIvdyG0cIyFirxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYzc5ZThhMjdjZGU5OTExYmQ3ZGE2Mzg3M2M1Y2M1NThk YmQ1MzEwHhcNMjYwMjA5MTcwMDUwWhcNMjYwMjEwMTcwMDUwWjAzMTEwLwYDVQQD EyhhMWZmNzkxNGRiYmE5NDg5YzkyOWNkMDYwNDc4NzNmOWRiZjc4M2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBUN3f/oLXhLjbqCnZ4jA/2/QXJe FGpIG2dV0X904SlF58xWXls6i89vmBirdCZ1kFJD7AYTYWfkA2MuXBtJHhStrsOG wkRxYnpSR9LdO8VwskWcRV1TC0mXpB/nYIIuQSLUlkxEQWS2EgikmAumc8ogCTpb EN/ohZ3Bc7HiKGNxIP1/BKSKNDRbZUWvZBGDzksGFsjrQZLWvWjT4d3dlRHIpa/v pg5urP1+vn+WLpS8ifQ6U9yPKQL4uK1uU05bM51ZyTUtmuNTYbhZ63QSgplgjMrh gC5b7mGebDKgjJdOv/3XE6Hh5/ZBnRRAty2ee2FQLR7Lf7utRgUTj0ytrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKH/eRTbupSJySnNBgR4c/nb94PqMB8GA1UdIwQY MBaAFBHHnoonzemRG9faY4c8XMVY29UxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWNlZWlpZk42WkViMTlwamh6eGN4VmpiMVRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS80MTRlNWEtNTJmOC00ODQ1LWIxYmIt Yjk5MzA1MTBkMGEwLzEvRWNlZWlpZk42WkViMTlwamh6eGN4VmpiMVRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS80MTRlNWEtNTJmOC00ODQ1LWIxYmItYjk5MzA1MTBkMGEw LzEvRWNlZWlpZk42WkViMTlwamh6eGN4VmpiMVRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAirj6Q7Gu Xd4uNbTCVT52QAOza+wuPcEdY8Ehcmg1TmdyJd0+DzgEXMS5ANP5PL5jiuHx09g7 aGOaVm90iYw/3BmK9DRbEbqETSy+pRBZWJTY03lwoef/I7HWLcGhaXTdE0rLJLcw HCJeCo1rnO29O1h09MsfrtKqBJyklZtFUYoBUVEu5e4kpTzY1bV39agrSTIQpP4j HMjbkqHvIW00APliS86RCW58DudEAiGlzKDtHAmRNiLgoUzeo3RJvdFBoRfiobLY C9JNy4R61Uz/+SM/X2JZ+Jm9+4lABrevddaAh/o6Cf24PUA6oimdTgSYNFG9eVNG TioaPqSq50G8TQ== -----END CERTIFICATE-----Generated at Tue Feb 10 00:17:26 2026 by rpki-client