This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.mft File: Ea5OyvX-SOGFhtkPpU6eb7_U_tU.mft (raw, json) Hash identifier: qCNvJFvdWROwLBP6fsVioT5ILFUslBf0wvJxzFHalNM= Subject key identifier: A9:7D:A7:F9:DB:2A:35:64:CB:D2:07:E3:25:32:55:00:F5:13:77:EA Authority key identifier: 11:AE:4E:CA:F5:FE:48:E1:85:86:D9:0F:A5:4E:9E:6F:BF:D4:FE:D5 Certificate issuer: /CN=11ae4ecaf5fe48e18586d90fa54e9e6fbfd4fed5 Certificate serial: 019C42463DC9B6F4A4843C6473370A2FBC88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.mft Manifest number: 03CE Signing time: Mon 09 Feb 2026 12:00:25 +0000 Manifest this update: Mon 09 Feb 2026 12:00:25 +0000 Manifest next update: Tue 10 Feb 2026 12:00:25 +0000 Files and hashes: 1: Ea5OyvX-SOGFhtkPpU6eb7_U_tU.crl (hash: wMV+VypBQdm8ixbPXVQNqYNceM8rBAzXH0IRAv57cT0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.mft rsync://rpki.ripe.net/repository/DEFAULT/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:3d:c9:b6:f4:a4:84:3c:64:73:37:0a:2f:bc:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ae4ecaf5fe48e18586d90fa54e9e6fbfd4fed5 Validity Not Before: Feb 9 12:00:25 2026 GMT Not After : Feb 10 12:00:25 2026 GMT Subject: CN=a97da7f9db2a3564cbd207e325325500f51377ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:8c:53:cf:a6:4d:5c:29:8b:a4:8a:ba:b1:b5: 82:97:9d:9a:30:f6:22:3e:b4:f9:01:22:9b:82:0b: 87:5d:3f:48:44:61:3e:96:37:01:8b:d8:e5:d2:06: 13:1c:c4:77:6c:7d:fd:c3:6e:f5:76:12:be:dd:eb: ef:03:18:fb:fb:c2:e1:d3:19:51:fe:d4:06:56:54: 16:d7:6e:10:cf:b2:51:21:28:b5:0c:f6:81:4e:32: 53:44:cc:3d:cc:a0:d6:8b:4c:ce:a4:c7:7a:8b:6b: 22:47:44:72:2a:10:a3:8d:0d:d5:a2:a9:c1:14:49: 71:fc:70:9d:30:f7:52:fc:03:12:27:80:81:3a:52: 0e:d0:c0:01:92:11:17:46:9c:b7:26:6e:88:09:c5: 50:88:1f:e7:23:e3:cf:15:ba:87:18:92:53:ec:f9: c9:63:cf:05:ae:0a:89:bb:33:c5:5d:08:38:66:00: 49:1c:8c:60:04:12:58:09:98:bd:08:c7:06:a2:1d: e2:11:e1:ed:ee:c3:21:d1:78:54:c6:13:7e:a7:56: b4:fd:09:37:04:79:ce:14:59:f8:ac:1a:5d:6b:90: 9c:e1:72:e1:da:5f:22:2f:dc:62:b5:c1:b5:81:6d: dd:8b:64:58:e5:b4:2a:bc:e9:65:5d:1c:23:9f:27: 45:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:7D:A7:F9:DB:2A:35:64:CB:D2:07:E3:25:32:55:00:F5:13:77:EA X509v3 Authority Key Identifier: keyid:11:AE:4E:CA:F5:FE:48:E1:85:86:D9:0F:A5:4E:9E:6F:BF:D4:FE:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:72:64:79:e9:8f:e7:af:77:0e:e4:a6:d6:fe:84:e0:d3:32: d5:8e:4b:68:a9:21:e7:84:c2:17:b8:4f:b3:78:66:5d:3b:42: 6a:4b:3c:2b:b8:b8:51:84:3d:8a:b9:63:5d:0e:6c:fe:d1:02: 70:e2:c6:f7:79:45:48:35:9a:f5:6f:63:8a:a0:20:e2:e1:72: f0:27:a6:96:93:33:16:35:25:ef:5b:77:58:d9:d3:05:78:a7: 0d:13:7c:88:79:6b:46:34:1b:d0:e8:69:a1:75:12:6f:27:10: b8:7a:17:bf:4e:e2:45:ef:e6:4f:76:5a:46:43:e5:6c:48:92: d8:b4:54:2e:b2:c8:b3:85:af:03:50:db:cf:80:5b:8a:2b:34: 12:92:32:40:ee:b1:63:d5:7b:4d:ca:39:83:94:79:84:7e:db: 11:ae:98:08:00:9d:85:fe:11:3e:cf:15:69:0d:64:f0:7f:2c: ef:44:13:01:c5:49:7e:07:dd:25:c7:ed:8f:4f:84:1e:da:f0: 20:78:f7:01:9a:9c:19:cf:c8:32:1c:cd:33:97:b0:7f:a1:4b: 4e:e4:71:a7:c8:5b:90:f5:2a:66:d6:ae:c1:7e:15:e1:e0:85: 27:85:16:0f:a7:c8:c1:b7:31:be:8b:8d:64:23:d0:da:ab:5d: 23:45:86:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRj3JtvSkhDxkczcKL7yIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYWU0ZWNhZjVmZTQ4ZTE4NTg2ZDkwZmE1NGU5ZTZmYmZk NGZlZDUwHhcNMjYwMjA5MTIwMDI1WhcNMjYwMjEwMTIwMDI1WjAzMTEwLwYDVQQD EyhhOTdkYTdmOWRiMmEzNTY0Y2JkMjA3ZTMyNTMyNTUwMGY1MTM3N2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYxTz6ZNXCmLpIq6sbWCl52aMPYi PrT5ASKbgguHXT9IRGE+ljcBi9jl0gYTHMR3bH39w271dhK+3evvAxj7+8Lh0xlR /tQGVlQW124Qz7JRISi1DPaBTjJTRMw9zKDWi0zOpMd6i2siR0RyKhCjjQ3VoqnB FElx/HCdMPdS/AMSJ4CBOlIO0MABkhEXRpy3Jm6ICcVQiB/nI+PPFbqHGJJT7PnJ Y88FrgqJuzPFXQg4ZgBJHIxgBBJYCZi9CMcGoh3iEeHt7sMh0XhUxhN+p1a0/Qk3 BHnOFFn4rBpda5Cc4XLh2l8iL9xitcG1gW3di2RY5bQqvOllXRwjnydFKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKl9p/nbKjVky9IH4yUyVQD1E3fqMB8GA1UdIwQY MBaAFBGuTsr1/kjhhYbZD6VOnm+/1P7VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWE1T3l2WC1TT0dGaHRrUHBVNmViN19VX3RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9kZjQwN2ItMDZhMC00MzdjLTgwOWUt NzRiMzI5MzljYzg0LzEvRWE1T3l2WC1TT0dGaHRrUHBVNmViN19VX3RVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9kZjQwN2ItMDZhMC00MzdjLTgwOWUtNzRiMzI5MzljYzg0 LzEvRWE1T3l2WC1TT0dGaHRrUHBVNmViN19VX3RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ3JkeemP 5693DuSm1v6E4NMy1Y5LaKkh54TCF7hPs3hmXTtCaks8K7i4UYQ9irljXQ5s/tEC cOLG93lFSDWa9W9jiqAg4uFy8CemlpMzFjUl71t3WNnTBXinDRN8iHlrRjQb0Ohp oXUSbycQuHoXv07iRe/mT3ZaRkPlbEiS2LRULrLIs4WvA1Dbz4Bbiis0EpIyQO6x Y9V7Tco5g5R5hH7bEa6YCACdhf4RPs8VaQ1k8H8s70QTAcVJfgfdJcftj0+EHtrw IHj3AZqcGc/IMhzNM5ewf6FLTuRxp8hbkPUqZtauwX4V4eCFJ4UWD6fIwbcxvouN ZCPQ2qtdI0WGDA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:50 2026 by rpki-client