This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft File: EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft (raw, json) Hash identifier: XIfXQiqEdu8QQOfnHO4uC3XMF46AIidTC4oRTTz61i4= Subject key identifier: 22:EA:20:A1:45:9B:29:17:AE:AC:10:81:08:E5:98:BC:75:56:DA:C8 Authority key identifier: 13:32:3E:AC:D7:7E:5C:A5:95:2D:D6:7C:28:F4:FD:90:D3:2A:FA:DF Certificate issuer: /CN=13323eacd77e5ca5952dd67c28f4fd90d32afadf Certificate serial: 019C43C6B59DB9D1145AE27D09D6697B7173 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft Manifest number: 180A Signing time: Mon 09 Feb 2026 19:00:21 +0000 Manifest this update: Mon 09 Feb 2026 19:00:21 +0000 Manifest next update: Tue 10 Feb 2026 19:00:21 +0000 Files and hashes: 1: EzI-rNd-XKWVLdZ8KPT9kNMq-t8.crl (hash: SJ71paGt4RF3bT39ByZzf1sruJKg6P9hMy6XP3ZQ3dQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.crl rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft rsync://rpki.ripe.net/repository/DEFAULT/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:b5:9d:b9:d1:14:5a:e2:7d:09:d6:69:7b:71:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13323eacd77e5ca5952dd67c28f4fd90d32afadf Validity Not Before: Feb 9 19:00:21 2026 GMT Not After : Feb 10 19:00:21 2026 GMT Subject: CN=22ea20a1459b2917aeac108108e598bc7556dac8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:cf:78:69:98:5a:62:97:c0:4d:72:c1:44:13: 26:3c:8f:47:0c:70:6f:c0:f0:d3:a8:0d:0c:b3:c7: 78:9b:5d:93:e3:89:6d:1c:4c:67:58:36:99:be:2b: ed:c1:9d:8b:52:47:69:93:ae:e5:ec:77:7f:e5:9a: 99:34:2d:3b:1c:bf:a9:03:d8:f3:48:40:3c:9f:21: 28:3f:ca:b7:63:54:c4:f7:53:ae:d2:56:53:2c:1e: 8d:55:db:57:54:0e:4a:7b:ae:7b:a2:ea:fc:ac:aa: 5c:80:57:c6:5e:fa:4c:4e:62:da:a8:7f:ab:d8:d5: a8:40:0b:ff:6b:2d:48:2d:ba:7b:a3:7b:d9:ed:25: 32:6c:76:f9:0e:99:51:6b:7e:3f:1a:c0:75:33:a9: ab:db:18:f4:01:56:a8:61:88:5f:17:3e:32:0d:4a: 70:a1:ab:72:d9:89:fe:c9:85:b1:66:d2:6a:5e:54: fa:48:42:69:e1:8a:28:b9:69:d9:4a:b6:9e:5c:7c: dc:e1:10:1d:6f:62:5f:5a:e2:d8:a7:d0:be:6e:c7: c2:10:5c:39:b7:9c:2a:1b:5c:14:49:b0:16:eb:f4: 50:d0:61:6b:05:67:80:ca:34:70:b9:f1:50:f6:52: 0f:ca:dd:0e:b2:81:e1:05:e3:07:67:ae:42:52:c1: b0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:EA:20:A1:45:9B:29:17:AE:AC:10:81:08:E5:98:BC:75:56:DA:C8 X509v3 Authority Key Identifier: keyid:13:32:3E:AC:D7:7E:5C:A5:95:2D:D6:7C:28:F4:FD:90:D3:2A:FA:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:dc:b0:b7:1a:01:aa:40:9a:4f:31:4e:2d:4b:c1:1a:0f:b7: 50:8a:02:52:d8:fc:83:95:a0:79:80:10:e5:92:5c:80:b4:8d: 9f:bf:da:5e:be:b1:6d:c7:27:72:b8:ba:81:d7:99:b2:7d:d5: 46:84:be:42:04:e1:99:45:be:07:54:7f:72:7a:de:57:56:02: 7c:a2:ef:16:0e:f3:1d:46:87:5f:c6:e7:ce:d8:40:4e:92:73: 49:91:f8:32:7b:80:be:1e:97:58:72:df:a9:06:0f:ee:21:e8: b7:ee:ed:44:1f:f8:e1:1e:78:8e:2a:ad:61:20:b6:91:a1:c9: bb:07:3d:d6:c7:5b:47:f5:6e:17:8d:60:b1:08:7f:f2:6a:4c: 4b:17:ad:87:ca:5c:2b:7b:8c:be:53:2c:f1:1c:0d:25:2f:74: 4d:48:54:08:0a:b4:ed:08:e2:9f:0f:b0:b6:b9:22:19:06:a8: bf:96:bb:65:e9:b3:5c:b6:e8:e9:d3:9f:fd:3a:e4:ad:16:db: 86:08:a4:94:c1:8c:c3:e8:20:a0:6f:45:a2:97:a1:ec:c4:2c: 74:08:e4:61:d7:71:ea:74:cf:56:00:b4:8f:08:c6:c9:d8:b4: 1f:1e:01:2e:7d:f7:9c:f5:56:61:34:da:9f:70:a5:02:c4:3c: bd:78:c6:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxrWdudEUWuJ9CdZpe3FzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMzIzZWFjZDc3ZTVjYTU5NTJkZDY3YzI4ZjRmZDkwZDMy YWZhZGYwHhcNMjYwMjA5MTkwMDIxWhcNMjYwMjEwMTkwMDIxWjAzMTEwLwYDVQQD EygyMmVhMjBhMTQ1OWIyOTE3YWVhYzEwODEwOGU1OThiYzc1NTZkYWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy894aZhaYpfATXLBRBMmPI9HDHBv wPDTqA0Ms8d4m12T44ltHExnWDaZvivtwZ2LUkdpk67l7Hd/5ZqZNC07HL+pA9jz SEA8nyEoP8q3Y1TE91Ou0lZTLB6NVdtXVA5Ke657our8rKpcgFfGXvpMTmLaqH+r 2NWoQAv/ay1ILbp7o3vZ7SUybHb5DplRa34/GsB1M6mr2xj0AVaoYYhfFz4yDUpw oaty2Yn+yYWxZtJqXlT6SEJp4YoouWnZSraeXHzc4RAdb2JfWuLYp9C+bsfCEFw5 t5wqG1wUSbAW6/RQ0GFrBWeAyjRwufFQ9lIPyt0OsoHhBeMHZ65CUsGwFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCLqIKFFmykXrqwQgQjlmLx1VtrIMB8GA1UdIwQY MBaAFBMyPqzXflyllS3WfCj0/ZDTKvrfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXpJLXJOZC1YS1dWTGRaOEtQVDlrTk1xLXQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9jYmVhYzgtZWJlZC00NWZiLWI3MjQt NzBiMWM2OWI0MjMyLzEvRXpJLXJOZC1YS1dWTGRaOEtQVDlrTk1xLXQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9jYmVhYzgtZWJlZC00NWZiLWI3MjQtNzBiMWM2OWI0MjMy LzEvRXpJLXJOZC1YS1dWTGRaOEtQVDlrTk1xLXQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAftywtxoB qkCaTzFOLUvBGg+3UIoCUtj8g5WgeYAQ5ZJcgLSNn7/aXr6xbccncri6gdeZsn3V RoS+QgThmUW+B1R/cnreV1YCfKLvFg7zHUaHX8bnzthATpJzSZH4MnuAvh6XWHLf qQYP7iHot+7tRB/44R54jiqtYSC2kaHJuwc91sdbR/VuF41gsQh/8mpMSxeth8pc K3uMvlMs8RwNJS90TUhUCAq07Qjinw+wtrkiGQaov5a7ZemzXLbo6dOf/TrkrRbb hgiklMGMw+ggoG9Fopeh7MQsdAjkYddx6nTPVgC0jwjGydi0Hx4BLn33nPVWYTTa n3ClAsQ8vXjGWA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:41 2026 by rpki-client