This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.mft File: MDeJJY5gnz5VjXezv9CKzzUV-pI.mft (raw, json) Hash identifier: 26r3CCKkbIz7nevYMiBwLwx7oqymvatGEAHaIh7/XGA= Subject key identifier: 28:F9:FD:13:62:E8:E3:12:2D:6B:39:43:81:DF:13:35:98:87:96:81 Authority key identifier: 30:37:89:25:8E:60:9F:3E:55:8D:77:B3:BF:D0:8A:CF:35:15:FA:92 Certificate issuer: /CN=303789258e609f3e558d77b3bfd08acf3515fa92 Certificate serial: 019C42B42FA24CDC51F349AA4524449E7A3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDeJJY5gnz5VjXezv9CKzzUV-pI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.mft Manifest number: 11EA Signing time: Mon 09 Feb 2026 14:00:30 +0000 Manifest this update: Mon 09 Feb 2026 14:00:30 +0000 Manifest next update: Tue 10 Feb 2026 14:00:30 +0000 Files and hashes: 1: MDeJJY5gnz5VjXezv9CKzzUV-pI.crl (hash: pOHX2LUOsU3o5NuzSvM6fKr7+46EY5rP1ihOfHvf0Dg=) 2: xKyGUowZMpxmP8SFriJZEYa04g8.roa (hash: Ogi3KmYI+AEeVKeJkZ4F8oVDdYgo/oQccgvjBxzVA8c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.mft rsync://rpki.ripe.net/repository/DEFAULT/MDeJJY5gnz5VjXezv9CKzzUV-pI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:2f:a2:4c:dc:51:f3:49:aa:45:24:44:9e:7a:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=303789258e609f3e558d77b3bfd08acf3515fa92 Validity Not Before: Feb 9 14:00:30 2026 GMT Not After : Feb 10 14:00:30 2026 GMT Subject: CN=28f9fd1362e8e3122d6b394381df133598879681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6a:7b:cc:fd:bb:04:8b:4b:79:0c:7f:a0:79: f8:0d:76:0e:19:d9:1d:2f:35:b5:84:fe:e3:3d:6e: a3:05:61:fc:89:84:54:d0:f1:6d:3e:f2:c0:8f:a3: ff:ce:81:06:a8:85:19:a3:05:32:38:25:da:53:dc: f9:b2:11:04:9e:1c:a5:4e:b7:2e:b4:e6:6d:63:65: c7:8b:45:40:cf:06:56:32:05:f8:ce:8c:b9:37:f0: 83:32:e0:1e:bd:50:e4:14:41:4f:38:5a:16:93:53: 0c:af:5f:16:1c:fb:7a:67:cd:3a:00:86:f4:9a:8e: ec:62:83:b2:0f:44:47:2e:e1:a9:e4:fb:b1:df:3a: 2c:a5:8c:10:82:4c:73:2c:0f:b2:e8:74:5d:88:b1: f1:97:ad:56:7d:d8:a3:6d:d2:5a:86:71:b0:3b:a2: 73:6a:3f:f3:6e:c3:74:9d:7b:12:f2:ff:ef:37:8b: 75:bd:a8:7a:8f:c5:f4:60:0d:b2:f9:d7:d2:40:f7: 2e:5a:bf:c6:cc:b6:08:53:8f:d9:76:ab:59:b3:fb: fe:27:b6:27:72:57:42:dc:12:96:2b:5e:3d:a8:23: 4a:56:6a:3b:c0:e4:70:83:3b:14:39:53:bf:ff:26: a7:4d:5a:8f:4a:89:15:81:af:a5:80:f7:93:f5:4c: 62:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:F9:FD:13:62:E8:E3:12:2D:6B:39:43:81:DF:13:35:98:87:96:81 X509v3 Authority Key Identifier: keyid:30:37:89:25:8E:60:9F:3E:55:8D:77:B3:BF:D0:8A:CF:35:15:FA:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDeJJY5gnz5VjXezv9CKzzUV-pI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:15:1c:79:b1:d7:b3:3d:d9:6e:0d:9c:07:2f:ef:8e:06:1b: 6c:33:19:81:06:8c:86:62:fd:fe:27:9a:f1:67:ca:ab:c9:f2: e9:e8:03:04:40:14:ee:13:26:e5:19:ec:19:03:72:66:73:d3: 66:0c:02:55:c5:1b:98:60:54:7b:3d:45:e8:35:55:df:60:1e: 9b:87:fb:ec:ce:2c:c7:ae:ae:42:d6:e8:fa:fc:f3:58:d3:8c: 2b:15:05:cc:eb:81:29:12:21:7f:81:17:9b:53:bc:7d:c5:67: 78:93:60:78:bf:3e:dd:5d:a5:97:44:4c:c9:d7:c3:e3:5c:4a: d8:28:2b:50:73:91:d0:25:60:0d:c6:41:21:41:c7:a4:05:47: e9:41:57:e9:35:65:7d:9a:47:3e:c7:68:2c:84:ab:2e:7e:2e: f1:07:65:cf:45:c8:ee:1c:0a:47:48:dc:2f:c4:cb:87:5f:f9: 23:ae:26:1c:cd:71:1a:e5:ed:1e:18:db:7d:f4:77:d2:f3:8b: 9e:5c:51:0c:d6:e8:4b:af:d1:32:37:7f:e3:23:49:c2:d7:4a: 43:93:1e:1e:80:33:61:c3:03:2a:45:c5:1c:2d:60:f0:11:6e: 17:0f:50:39:b8:c0:58:03:91:31:a5:a4:fc:c0:00:0c:e1:30: cd:1a:e2:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtC+iTNxR80mqRSREnno6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMzc4OTI1OGU2MDlmM2U1NThkNzdiM2JmZDA4YWNmMzUx NWZhOTIwHhcNMjYwMjA5MTQwMDMwWhcNMjYwMjEwMTQwMDMwWjAzMTEwLwYDVQQD EygyOGY5ZmQxMzYyZThlMzEyMmQ2YjM5NDM4MWRmMTMzNTk4ODc5NjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGp7zP27BItLeQx/oHn4DXYOGdkd LzW1hP7jPW6jBWH8iYRU0PFtPvLAj6P/zoEGqIUZowUyOCXaU9z5shEEnhylTrcu tOZtY2XHi0VAzwZWMgX4zoy5N/CDMuAevVDkFEFPOFoWk1MMr18WHPt6Z806AIb0 mo7sYoOyD0RHLuGp5Pux3zospYwQgkxzLA+y6HRdiLHxl61WfdijbdJahnGwO6Jz aj/zbsN0nXsS8v/vN4t1vah6j8X0YA2y+dfSQPcuWr/GzLYIU4/ZdqtZs/v+J7Yn cldC3BKWK149qCNKVmo7wORwgzsUOVO//yanTVqPSokVga+lgPeT9UxiBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCj5/RNi6OMSLWs5Q4HfEzWYh5aBMB8GA1UdIwQY MBaAFDA3iSWOYJ8+VY13s7/Qis81FfqSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTURlSkpZNWduejVWalhlenY5Q0t6elVWLXBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jOTM0ZGEtOTc4YS00NmY5LTg3YTct NGYyMTlkYjc4NTA4LzEvTURlSkpZNWduejVWalhlenY5Q0t6elVWLXBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9jOTM0ZGEtOTc4YS00NmY5LTg3YTctNGYyMTlkYjc4NTA4 LzEvTURlSkpZNWduejVWalhlenY5Q0t6elVWLXBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHxUcebHX sz3Zbg2cBy/vjgYbbDMZgQaMhmL9/iea8WfKq8ny6egDBEAU7hMm5RnsGQNyZnPT ZgwCVcUbmGBUez1F6DVV32Aem4f77M4sx66uQtbo+vzzWNOMKxUFzOuBKRIhf4EX m1O8fcVneJNgeL8+3V2ll0RMydfD41xK2CgrUHOR0CVgDcZBIUHHpAVH6UFX6TVl fZpHPsdoLISrLn4u8Qdlz0XI7hwKR0jcL8TLh1/5I64mHM1xGuXtHhjbffR30vOL nlxRDNboS6/RMjd/4yNJwtdKQ5MeHoAzYcMDKkXFHC1g8BFuFw9QObjAWAORMaWk /MAADOEwzRri5g== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:12 2026 by rpki-client