This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a4aa47-80ae-4ffd-81de-a7e3e8a5736c/1/EzEzTIo12ma0TZCTR6ZD7kQZGq8.mft File: EzEzTIo12ma0TZCTR6ZD7kQZGq8.mft (raw, json) Hash identifier: 1GI4XWFrzPInciCeA7C0LkeOzlqF+l8Owbrxaw31fTQ= Subject key identifier: AC:63:A4:59:1E:90:DF:71:32:17:FD:D8:3C:66:3D:5A:6E:D0:61:F9 Authority key identifier: 13:31:33:4C:8A:35:DA:66:B4:4D:90:93:47:A6:43:EE:44:19:1A:AF Certificate issuer: /CN=1331334c8a35da66b44d909347a643ee44191aaf Certificate serial: 019C41D88E6D1CBBDC35473C91686D15275C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EzEzTIo12ma0TZCTR6ZD7kQZGq8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a4aa47-80ae-4ffd-81de-a7e3e8a5736c/1/EzEzTIo12ma0TZCTR6ZD7kQZGq8.mft Manifest number: 01AC Signing time: Mon 09 Feb 2026 10:00:37 +0000 Manifest this update: Mon 09 Feb 2026 10:00:37 +0000 Manifest next update: Tue 10 Feb 2026 10:00:37 +0000 Files and hashes: 1: EzEzTIo12ma0TZCTR6ZD7kQZGq8.crl (hash: kCizA5TwKWhqyeTNCVDcbQPrgNrE2wMtNQLWxWvSJZY=) 2: yx7n_319ZBwL0eqNMaxxSiyVPTE.roa (hash: DDdO4yg57n9C22JYHfd0ICckYRel7TybusY/aTLncRo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/a4aa47-80ae-4ffd-81de-a7e3e8a5736c/1/EzEzTIo12ma0TZCTR6ZD7kQZGq8.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/a4aa47-80ae-4ffd-81de-a7e3e8a5736c/1/EzEzTIo12ma0TZCTR6ZD7kQZGq8.mft rsync://rpki.ripe.net/repository/DEFAULT/EzEzTIo12ma0TZCTR6ZD7kQZGq8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:8e:6d:1c:bb:dc:35:47:3c:91:68:6d:15:27:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1331334c8a35da66b44d909347a643ee44191aaf Validity Not Before: Feb 9 10:00:37 2026 GMT Not After : Feb 10 10:00:37 2026 GMT Subject: CN=ac63a4591e90df713217fdd83c663d5a6ed061f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:01:06:60:36:86:93:91:54:aa:ce:9c:42:73: 7a:1d:0e:ea:06:27:6b:e2:23:9c:b9:19:93:cd:15: 0f:c8:62:27:08:a3:1f:62:e7:9a:66:0c:10:1f:58: 05:e4:2e:0e:50:8c:a8:65:17:47:5f:d8:d8:40:04: 5b:a2:10:16:51:2b:92:c8:a5:43:41:c5:bc:4a:d9: 79:e7:51:8f:e5:68:95:f7:21:d1:33:ac:33:46:62: 51:1c:08:ba:4b:2c:1d:32:68:e5:9b:4f:5c:9b:f8: 26:08:60:fe:ef:7d:70:6b:10:88:88:a7:9d:ae:a3: 69:30:07:e0:89:04:08:7d:28:ea:eb:44:d5:3a:34: 13:f4:d1:c8:51:51:71:b4:6d:f5:93:e1:d8:09:8f: 10:bf:88:e1:a1:6d:fb:3f:fa:e8:ce:2e:9e:fb:68: c7:c9:77:a3:52:21:c1:c8:32:7d:26:06:a6:d0:9d: 40:ae:e5:0f:dc:a4:63:3c:b1:c0:f0:5c:1b:04:9f: b6:bf:40:b1:0a:41:bc:b5:f2:49:7f:2d:a9:86:1e: 77:3c:58:52:02:c5:02:3c:6a:0d:ba:1c:1a:1d:19: 91:57:d9:20:ad:72:1a:f5:90:4c:f4:a2:01:6c:ac: f8:5e:15:5d:72:dd:74:1e:fe:da:d3:ca:40:e7:8d: 99:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:63:A4:59:1E:90:DF:71:32:17:FD:D8:3C:66:3D:5A:6E:D0:61:F9 X509v3 Authority Key Identifier: keyid:13:31:33:4C:8A:35:DA:66:B4:4D:90:93:47:A6:43:EE:44:19:1A:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzEzTIo12ma0TZCTR6ZD7kQZGq8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a4aa47-80ae-4ffd-81de-a7e3e8a5736c/1/EzEzTIo12ma0TZCTR6ZD7kQZGq8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a4aa47-80ae-4ffd-81de-a7e3e8a5736c/1/EzEzTIo12ma0TZCTR6ZD7kQZGq8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:72:be:48:dc:08:52:e2:a3:0a:2e:be:51:0b:5d:5c:a8:50: 27:e0:32:76:6b:11:6d:2c:ee:fb:00:7b:b0:bd:df:90:f9:23: 14:f9:5a:3c:39:e3:dd:20:13:1f:31:35:7b:10:7c:27:a3:a7: 6b:dd:e2:31:c6:92:9b:3f:3e:03:d8:41:3f:44:c1:ed:ec:81: 00:ca:2b:e1:68:95:f2:49:06:5c:c4:fb:97:4e:fc:50:fb:29: 91:c5:83:b2:13:f1:65:19:0c:f7:6e:c0:f1:82:ff:86:43:e5: 12:c2:84:6f:1c:c9:23:ca:f6:f9:34:15:73:a7:48:34:d4:3d: 9b:d3:c5:16:97:c6:b1:06:e8:6b:af:d2:b9:1a:1e:9f:d1:5f: f6:ef:45:d9:52:5c:13:b2:f6:47:2e:21:dd:bb:e4:7f:12:d3: 7c:ca:87:ea:db:cf:04:0a:f3:dd:15:61:f2:54:11:54:8d:75: 19:db:a8:50:a7:fc:6a:fd:47:a2:94:ce:58:c7:49:6e:0e:d5: 0c:11:f2:07:cd:2e:d8:0e:8c:24:b9:a0:30:a9:ea:5c:39:36: c6:9c:f6:e7:50:b2:0c:af:51:d6:c1:d1:ea:20:e8:b1:91:28: 01:4b:b7:9d:ac:79:e4:cc:12:b5:20:f5:44:b6:7d:c5:0c:09: c6:45:91:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2I5tHLvcNUc8kWhtFSdcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMzEzMzRjOGEzNWRhNjZiNDRkOTA5MzQ3YTY0M2VlNDQx OTFhYWYwHhcNMjYwMjA5MTAwMDM3WhcNMjYwMjEwMTAwMDM3WjAzMTEwLwYDVQQD EyhhYzYzYTQ1OTFlOTBkZjcxMzIxN2ZkZDgzYzY2M2Q1YTZlZDA2MWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgEGYDaGk5FUqs6cQnN6HQ7qBidr 4iOcuRmTzRUPyGInCKMfYueaZgwQH1gF5C4OUIyoZRdHX9jYQARbohAWUSuSyKVD QcW8Stl551GP5WiV9yHRM6wzRmJRHAi6SywdMmjlm09cm/gmCGD+731waxCIiKed rqNpMAfgiQQIfSjq60TVOjQT9NHIUVFxtG31k+HYCY8Qv4jhoW37P/rozi6e+2jH yXejUiHByDJ9Jgam0J1AruUP3KRjPLHA8FwbBJ+2v0CxCkG8tfJJfy2phh53PFhS AsUCPGoNuhwaHRmRV9kgrXIa9ZBM9KIBbKz4XhVdct10Hv7a08pA542ZFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKxjpFkekN9xMhf92DxmPVpu0GH5MB8GA1UdIwQY MBaAFBMxM0yKNdpmtE2Qk0emQ+5EGRqvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXpFelRJbzEybWEwVFpDVFI2WkQ3a1FaR3E4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9hNGFhNDctODBhZS00ZmZkLTgxZGUt YTdlM2U4YTU3MzZjLzEvRXpFelRJbzEybWEwVFpDVFI2WkQ3a1FaR3E4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9hNGFhNDctODBhZS00ZmZkLTgxZGUtYTdlM2U4YTU3MzZj LzEvRXpFelRJbzEybWEwVFpDVFI2WkQ3a1FaR3E4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASXK+SNwI UuKjCi6+UQtdXKhQJ+AydmsRbSzu+wB7sL3fkPkjFPlaPDnj3SATHzE1exB8J6On a93iMcaSmz8+A9hBP0TB7eyBAMor4WiV8kkGXMT7l078UPspkcWDshPxZRkM927A 8YL/hkPlEsKEbxzJI8r2+TQVc6dINNQ9m9PFFpfGsQboa6/SuRoen9Ff9u9F2VJc E7L2Ry4h3bvkfxLTfMqH6tvPBArz3RVh8lQRVI11GduoUKf8av1HopTOWMdJbg7V DBHyB80u2A6MJLmgMKnqXDk2xpz251CyDK9R1sHR6iDosZEoAUu3nax55MwStSD1 RLZ9xQwJxkWRSg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:59:23 2026 by rpki-client