This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft File: C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft (raw, json) Hash identifier: rVXmXyjQFIOrv6M5RshEoTPcwgNbG+6ZHQiZafQThsU= Subject key identifier: A7:98:EC:98:9A:39:7F:7F:9A:F8:2A:01:2D:70:E8:8E:45:B3:7F:72 Authority key identifier: 0B:B7:1E:42:64:CE:62:C3:5E:1C:EE:64:D1:87:65:D3:32:90:F2:A4 Certificate issuer: /CN=0bb71e4264ce62c35e1cee64d18765d33290f2a4 Certificate serial: 019C41A25E4ADF1D970C67918059548ADC9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft Manifest number: 1752 Signing time: Mon 09 Feb 2026 09:01:25 +0000 Manifest this update: Mon 09 Feb 2026 09:01:25 +0000 Manifest next update: Tue 10 Feb 2026 09:01:25 +0000 Files and hashes: 1: 61ugHkbatEiWTW_1eKYKqCu8qbY.roa (hash: 8Ns+XB7ZudJ9zzWr083jFxqXZ3ELplfe29YSHWs6xj0=) 2: C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.crl (hash: bUpZNC6P5E03mzvzhbffYhn2Hkww0yspu761hP3BRts=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.crl rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft rsync://rpki.ripe.net/repository/DEFAULT/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:5e:4a:df:1d:97:0c:67:91:80:59:54:8a:dc:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bb71e4264ce62c35e1cee64d18765d33290f2a4 Validity Not Before: Feb 9 09:01:25 2026 GMT Not After : Feb 10 09:01:25 2026 GMT Subject: CN=a798ec989a397f7f9af82a012d70e88e45b37f72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:23:0f:52:b0:90:5b:73:cb:eb:19:2b:a9:39: 5c:59:32:1d:7d:f5:a5:09:b5:a4:31:fb:b8:d9:41: 45:43:97:8e:8f:4b:f3:0f:78:82:cf:f0:9a:02:9e: a0:4f:06:79:13:3a:b1:40:91:6e:5e:c7:fb:d2:e4: 77:13:35:a5:f5:9c:ac:91:49:05:8f:95:e0:4d:0a: 05:ee:02:ac:33:5c:f3:b1:9d:a7:a7:0d:be:86:ae: b1:10:82:4d:10:40:72:be:b0:71:d1:07:d5:22:de: e2:cb:c1:ff:0b:d6:a0:80:06:68:6c:66:f3:09:bb: 57:1b:5a:51:41:2a:62:0d:c8:56:65:32:0f:20:41: 6a:90:13:1c:ac:59:68:2d:30:f2:05:a3:e9:6e:bb: 98:7e:f9:d4:c7:91:1a:81:52:d3:93:0f:c0:fe:49: 80:61:d0:a7:f8:29:1d:85:9a:15:40:96:58:9f:83: 61:35:c0:89:ef:0e:f9:2e:3b:c1:25:b6:aa:69:d6: 4f:34:ac:b6:27:eb:de:9f:02:d7:47:92:e7:f8:f7: 38:0d:45:3a:24:91:d9:02:e6:9c:12:28:e9:48:34: 31:eb:39:90:e8:41:0e:d2:df:53:3a:89:11:50:3d: 23:29:3b:ce:d9:c3:e8:34:cd:b8:99:eb:8a:9b:4a: 01:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:98:EC:98:9A:39:7F:7F:9A:F8:2A:01:2D:70:E8:8E:45:B3:7F:72 X509v3 Authority Key Identifier: keyid:0B:B7:1E:42:64:CE:62:C3:5E:1C:EE:64:D1:87:65:D3:32:90:F2:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:5a:14:a5:a4:10:d8:7b:7a:8c:6d:fb:06:8a:c0:0a:14:91: ff:a4:ab:35:1d:5e:a1:c7:c8:e8:c5:6b:be:72:df:53:97:23: 10:b0:f3:a7:b8:f8:07:cd:e4:97:41:5f:a7:4a:df:04:4d:13: 79:63:95:81:a9:15:79:ee:03:4f:ea:5d:0d:51:98:dd:29:9d: 0a:ef:82:2c:6c:97:46:8b:08:de:c3:c5:70:fa:9f:ca:6a:19: 00:41:ef:f2:16:dd:7a:69:57:86:90:40:71:97:70:9b:f4:25: f6:7c:72:e2:9d:8a:98:8f:e5:68:14:58:5f:32:c9:21:e4:0b: 4b:c9:0d:fe:59:13:fb:ab:00:a8:44:db:b0:fb:7e:a2:6e:02: 66:51:be:a5:4d:da:c3:48:90:a1:33:24:a6:27:e5:88:2d:53: ed:15:bc:76:dc:f8:14:2b:5b:38:12:21:03:7c:a2:43:d8:05: 61:1a:ed:99:43:78:0c:8a:37:60:5a:4c:7c:ae:65:86:66:19: 41:db:bf:e1:9f:4b:73:48:fd:18:b7:89:96:6c:73:45:90:b2: 1c:57:4a:4b:a5:10:62:b9:be:34:af:e3:f1:8c:3a:d3:ee:07: f0:a2:a5:96:28:e9:d4:09:f0:da:91:19:b6:75:2d:d7:33:72: db:d7:a3:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBol5K3x2XDGeRgFlUitybMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiYjcxZTQyNjRjZTYyYzM1ZTFjZWU2NGQxODc2NWQzMzI5 MGYyYTQwHhcNMjYwMjA5MDkwMTI1WhcNMjYwMjEwMDkwMTI1WjAzMTEwLwYDVQQD EyhhNzk4ZWM5ODlhMzk3ZjdmOWFmODJhMDEyZDcwZTg4ZTQ1YjM3ZjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCMPUrCQW3PL6xkrqTlcWTIdffWl CbWkMfu42UFFQ5eOj0vzD3iCz/CaAp6gTwZ5EzqxQJFuXsf70uR3EzWl9ZyskUkF j5XgTQoF7gKsM1zzsZ2npw2+hq6xEIJNEEByvrBx0QfVIt7iy8H/C9aggAZobGbz CbtXG1pRQSpiDchWZTIPIEFqkBMcrFloLTDyBaPpbruYfvnUx5EagVLTkw/A/kmA YdCn+CkdhZoVQJZYn4NhNcCJ7w75LjvBJbaqadZPNKy2J+venwLXR5Ln+Pc4DUU6 JJHZAuacEijpSDQx6zmQ6EEO0t9TOokRUD0jKTvO2cPoNM24meuKm0oBXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKeY7JiaOX9/mvgqAS1w6I5Fs39yMB8GA1UdIwQY MBaAFAu3HkJkzmLDXhzuZNGHZdMykPKkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzdjZVFtVE9Zc05lSE81azBZZGwwektROHFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8xM2RhMDktNWUwZS00NWNiLTk1YTMt Y2E1NDU4MzhhZmMwLzEvQzdjZVFtVE9Zc05lSE81azBZZGwwektROHFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8xM2RhMDktNWUwZS00NWNiLTk1YTMtY2E1NDU4MzhhZmMw LzEvQzdjZVFtVE9Zc05lSE81azBZZGwwektROHFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcFoUpaQQ 2Ht6jG37BorAChSR/6SrNR1eocfI6MVrvnLfU5cjELDzp7j4B83kl0Ffp0rfBE0T eWOVgakVee4DT+pdDVGY3SmdCu+CLGyXRosI3sPFcPqfymoZAEHv8hbdemlXhpBA cZdwm/Ql9nxy4p2KmI/laBRYXzLJIeQLS8kN/lkT+6sAqETbsPt+om4CZlG+pU3a w0iQoTMkpifliC1T7RW8dtz4FCtbOBIhA3yiQ9gFYRrtmUN4DIo3YFpMfK5lhmYZ Qdu/4Z9Lc0j9GLeJlmxzRZCyHFdKS6UQYrm+NK/j8Yw60+4H8KKllijp1Anw2pEZ tnUt1zNy29ejfw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:33 2026 by rpki-client