This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft File: CEl1fj41qqtdV8UYYkOkNxc-TTY.mft (raw, json) Hash identifier: 7qehr9Lt0twa1FRcHKHC61pmHdR2UmYWZoMjXKJkzlo= Subject key identifier: 11:B5:49:3A:2F:33:88:A6:EE:43:A2:FD:97:12:DE:D1:4F:6A:ED:3A Authority key identifier: 08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36 Certificate issuer: /CN=0849757e3e35aaab5d57c5186243a437173e4d36 Certificate serial: 019C420F5203655E967EC31BD7DDD60BC58D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft Manifest number: 1549 Signing time: Mon 09 Feb 2026 11:00:26 +0000 Manifest this update: Mon 09 Feb 2026 11:00:26 +0000 Manifest next update: Tue 10 Feb 2026 11:00:26 +0000 Files and hashes: 1: CEl1fj41qqtdV8UYYkOkNxc-TTY.crl (hash: ayci0PaI2eyIpMaXdGGP8HH0HvBa03oiMrJn8U/nEzE=) 2: LChGuhkA0gjqQw0ADj2C4E66PrY.roa (hash: yikgcRChSKL+1ugFP9oI4DkOVsuw2tP1bpSv262Uskc=) 3: Xvor6sHffWDb_gSNM1nS_zNqIlk.roa (hash: FYSQWRIi2pReCA7SOIEtCKhDaRDp0KJNqlBByNN1x3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:52:03:65:5e:96:7e:c3:1b:d7:dd:d6:0b:c5:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0849757e3e35aaab5d57c5186243a437173e4d36 Validity Not Before: Feb 9 11:00:26 2026 GMT Not After : Feb 10 11:00:26 2026 GMT Subject: CN=11b5493a2f3388a6ee43a2fd9712ded14f6aed3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:05:27:25:aa:dd:a7:40:65:87:1b:cc:34:3d: b0:be:77:2b:6c:f2:38:2b:38:03:6e:ac:7f:12:55: 46:5a:7b:81:0b:06:82:41:2e:04:a3:6c:c1:22:0c: 65:18:d5:6a:ac:f2:b4:4a:56:a8:a6:3a:a1:47:c4: 00:b8:81:9a:e5:03:e7:87:7a:8f:b6:41:52:31:24: bb:b7:c3:33:50:4b:c2:ed:d2:1b:5d:53:91:d5:95: fe:0d:63:2b:e1:39:6f:f2:2b:01:0a:80:fd:59:22: 21:53:88:8a:23:7c:56:f3:d9:08:c8:99:52:5c:ad: 48:06:ac:70:a0:f1:51:a6:e0:8f:7c:0f:ea:25:97: 13:2b:c6:3b:98:0b:83:f5:52:05:b4:17:c5:23:36: cb:7a:b2:01:c9:77:c7:45:21:be:8e:d0:ef:94:12: c2:86:60:2c:ea:54:99:f3:d5:eb:09:30:d5:18:8b: 6a:f0:3a:45:11:8d:d8:5e:c9:bf:9d:68:3a:c5:2e: 01:71:5f:88:6f:31:e2:89:90:e9:43:76:3c:3f:ed: 09:df:29:46:58:4b:54:ab:12:fb:bc:8a:cf:16:70: b9:58:48:da:e5:74:d8:bd:43:dc:b9:25:96:cf:b3: 1a:97:82:0e:8c:02:ff:f7:19:b1:8f:a0:6a:29:35: de:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B5:49:3A:2F:33:88:A6:EE:43:A2:FD:97:12:DE:D1:4F:6A:ED:3A X509v3 Authority Key Identifier: keyid:08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:48:81:51:49:da:05:06:6d:26:1e:84:00:2a:eb:0d:23:8e: 2a:ce:d1:11:47:96:95:40:c6:e4:27:8f:dd:09:f9:74:88:79: 47:5e:a9:9e:a1:7d:6a:fe:d5:00:6f:54:ef:d5:d0:6f:bd:77: 35:d6:54:c5:08:50:3b:fe:dd:ba:71:9f:58:f4:fb:7d:ef:ee: 2a:57:4b:7f:4c:38:c8:b3:37:e8:11:66:f6:a9:4f:38:c8:00: f1:a0:84:40:96:78:dd:8f:6c:46:b4:22:be:30:29:64:4c:05: ab:72:a3:29:8b:10:15:59:2b:95:e2:cc:36:37:2f:46:86:80: 4d:17:fe:e9:19:41:50:44:82:ac:da:30:96:9e:5f:60:43:34: e8:0e:39:90:80:17:e9:22:e8:93:28:4a:ba:bb:93:a1:4f:96: 69:75:54:ff:69:6b:66:91:c9:3b:2d:1c:89:37:83:74:d7:c6: 29:a5:89:4f:90:96:5d:4a:0e:93:d2:0a:d1:d4:ec:da:c7:11: 1e:b3:23:a0:83:83:81:2f:ca:72:6a:3f:22:33:7a:b0:ec:90: 79:b7:f3:1c:d6:94:69:6c:a1:7b:46:ab:62:bd:b8:45:f0:01: 9c:60:f1:ad:e6:89:6a:45:e7:84:95:ae:a8:a4:c9:ba:a3:d6: 9a:bd:04:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD1IDZV6WfsMb193WC8WNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4NDk3NTdlM2UzNWFhYWI1ZDU3YzUxODYyNDNhNDM3MTcz ZTRkMzYwHhcNMjYwMjA5MTEwMDI2WhcNMjYwMjEwMTEwMDI2WjAzMTEwLwYDVQQD EygxMWI1NDkzYTJmMzM4OGE2ZWU0M2EyZmQ5NzEyZGVkMTRmNmFlZDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wUnJardp0BlhxvMND2wvncrbPI4 KzgDbqx/ElVGWnuBCwaCQS4Eo2zBIgxlGNVqrPK0SlaopjqhR8QAuIGa5QPnh3qP tkFSMSS7t8MzUEvC7dIbXVOR1ZX+DWMr4Tlv8isBCoD9WSIhU4iKI3xW89kIyJlS XK1IBqxwoPFRpuCPfA/qJZcTK8Y7mAuD9VIFtBfFIzbLerIByXfHRSG+jtDvlBLC hmAs6lSZ89XrCTDVGItq8DpFEY3YXsm/nWg6xS4BcV+IbzHiiZDpQ3Y8P+0J3ylG WEtUqxL7vIrPFnC5WEja5XTYvUPcuSWWz7Mal4IOjAL/9xmxj6BqKTXemwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBG1STovM4im7kOi/ZcS3tFPau06MB8GA1UdIwQY MBaAFAhJdX4+NaqrXVfFGGJDpDcXPk02MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0VsMWZqNDFxcXRkVjhVWVlrT2tOeGMtVFRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mYjI0MDEtZTQ3MC00YzA1LTk5Yjgt ZjhlZWNiNDI1MDg3LzEvQ0VsMWZqNDFxcXRkVjhVWVlrT2tOeGMtVFRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9mYjI0MDEtZTQ3MC00YzA1LTk5YjgtZjhlZWNiNDI1MDg3 LzEvQ0VsMWZqNDFxcXRkVjhVWVlrT2tOeGMtVFRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHEiBUUna BQZtJh6EACrrDSOOKs7REUeWlUDG5CeP3Qn5dIh5R16pnqF9av7VAG9U79XQb713 NdZUxQhQO/7dunGfWPT7fe/uKldLf0w4yLM36BFm9qlPOMgA8aCEQJZ43Y9sRrQi vjApZEwFq3KjKYsQFVkrleLMNjcvRoaATRf+6RlBUESCrNowlp5fYEM06A45kIAX 6SLokyhKuruToU+WaXVU/2lrZpHJOy0ciTeDdNfGKaWJT5CWXUoOk9IK0dTs2scR HrMjoIODgS/Kcmo/IjN6sOyQebfzHNaUaWyhe0arYr24RfABnGDxreaJakXnhJWu qKTJuqPWmr0ETA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:58 2026 by rpki-client