This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft File: 7qR10Itvi3jtEbDKTRNt6zi8mRs.mft (raw, json) Hash identifier: 2KzKpHJNA/SmF/t8x3nqE8PYY0wpENa2F/+P/L8ZN5I= Subject key identifier: EA:5D:7E:19:89:57:A6:28:DF:BC:BB:6C:F3:BF:CF:E7:F4:BC:A9:C9 Authority key identifier: EE:A4:75:D0:8B:6F:8B:78:ED:11:B0:CA:4D:13:6D:EB:38:BC:99:1B Certificate issuer: /CN=eea475d08b6f8b78ed11b0ca4d136deb38bc991b Certificate serial: 019C41A1DBA331B8804EA19C5955BF8C8BF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 09:00:52 +0000 Manifest this update: Mon 09 Feb 2026 09:00:52 +0000 Manifest next update: Tue 10 Feb 2026 09:00:52 +0000 Files and hashes: 1: 7qR10Itvi3jtEbDKTRNt6zi8mRs.crl (hash: krh30BOiWBdWNsWnk3ypQBfQh6p3tHDWr2chr12CPCY=) 2: Uzq6jnjiBmJhQ77sdYIGU3rtoW8.roa (hash: TaYrbh565HuhRP+MsEApRFlphctYPIuvYOeurCpD+fA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.crl rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:db:a3:31:b8:80:4e:a1:9c:59:55:bf:8c:8b:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eea475d08b6f8b78ed11b0ca4d136deb38bc991b Validity Not Before: Feb 9 09:00:52 2026 GMT Not After : Feb 10 09:00:52 2026 GMT Subject: CN=ea5d7e198957a628dfbcbb6cf3bfcfe7f4bca9c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f5:28:b0:4c:42:5a:e1:59:9b:47:a2:aa:dd: 78:3e:ce:ec:9f:11:9e:47:f7:f2:2e:bd:43:6b:7f: 7c:bf:11:1d:72:16:02:6e:8e:f5:f2:75:1b:98:39: cb:41:17:60:d6:1e:90:27:eb:6a:03:eb:7a:2b:07: d2:55:4b:0f:66:36:f4:cc:24:5a:a6:39:51:ec:40: 1d:2f:9d:a3:2b:26:88:eb:37:82:73:8f:11:bf:75: 80:31:8b:80:9b:7c:78:de:4b:ec:63:02:f9:15:b8: 57:50:a3:35:78:f5:0a:43:84:1a:51:32:21:46:b5: ea:5d:f3:80:5e:f2:cc:d4:60:ae:62:0d:cf:80:de: 13:4b:35:bc:07:7e:34:6c:3e:14:fb:0b:bf:78:a2: e4:13:bc:9e:b2:fc:a5:49:1e:3c:ed:10:f9:d6:96: 84:26:fb:67:f5:38:de:1b:03:0c:cb:f7:69:4f:58: 57:6b:3f:6b:01:9a:b7:aa:fc:b4:fe:67:6c:4c:ba: f0:bb:08:cb:d6:c0:bb:7a:63:7d:ce:d3:96:fb:c4: 47:81:d5:63:6c:52:95:a8:76:39:f6:18:01:47:64: d3:c7:59:14:86:67:c9:ad:a9:fa:b0:a3:f0:71:05: ef:54:8f:fe:3f:ca:90:6d:57:4f:c3:06:57:1d:f8: d1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:5D:7E:19:89:57:A6:28:DF:BC:BB:6C:F3:BF:CF:E7:F4:BC:A9:C9 X509v3 Authority Key Identifier: keyid:EE:A4:75:D0:8B:6F:8B:78:ED:11:B0:CA:4D:13:6D:EB:38:BC:99:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:3f:ab:0b:0a:e1:0e:8c:a9:e5:dd:80:38:a6:78:ac:2e:8b: 38:64:83:1b:d0:1a:58:a7:cc:71:7d:bb:b4:49:d2:c6:97:b3: 21:fb:56:dd:f2:63:26:fb:67:87:00:36:75:bf:75:a9:1d:5c: 16:ef:57:5c:4a:a5:13:3c:ba:31:9f:5f:8e:74:79:8f:02:c6: 87:dc:94:18:02:fe:0b:2c:81:29:0a:84:5b:a8:0f:b9:57:31: 5f:79:9d:f2:3f:71:f4:45:ee:d5:c7:a9:db:d5:da:f4:7c:47: de:01:c9:55:a9:06:78:7b:83:c0:1e:4e:9b:3c:5a:4b:a8:84: ef:bd:53:a3:47:ba:44:5c:05:14:dd:a6:44:72:62:c5:de:0a: eb:e0:96:f6:59:af:35:97:b4:ab:7c:70:b9:35:1f:3b:b4:42: 20:7d:95:9e:07:99:c2:97:97:19:51:52:48:50:43:47:70:cf: de:9a:68:b8:cc:9e:47:40:42:41:ef:7f:ba:d8:05:58:f9:d2: 42:13:0d:d9:2e:8d:9b:18:9a:a5:41:ff:33:42:ee:f6:02:ba: 6b:e7:17:d9:8d:f0:69:06:f2:09:b4:03:41:80:7f:28:20:80: 76:c7:59:ee:bf:f0:3a:04:97:f3:10:81:a8:a7:6d:75:8f:c1: 42:d3:a8:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBodujMbiATqGcWVW/jIv4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYTQ3NWQwOGI2ZjhiNzhlZDExYjBjYTRkMTM2ZGViMzhi Yzk5MWIwHhcNMjYwMjA5MDkwMDUyWhcNMjYwMjEwMDkwMDUyWjAzMTEwLwYDVQQD EyhlYTVkN2UxOTg5NTdhNjI4ZGZiY2JiNmNmM2JmY2ZlN2Y0YmNhOWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfUosExCWuFZm0eiqt14Ps7snxGe R/fyLr1Da398vxEdchYCbo718nUbmDnLQRdg1h6QJ+tqA+t6KwfSVUsPZjb0zCRa pjlR7EAdL52jKyaI6zeCc48Rv3WAMYuAm3x43kvsYwL5FbhXUKM1ePUKQ4QaUTIh RrXqXfOAXvLM1GCuYg3PgN4TSzW8B340bD4U+wu/eKLkE7yesvylSR487RD51paE Jvtn9TjeGwMMy/dpT1hXaz9rAZq3qvy0/mdsTLrwuwjL1sC7emN9ztOW+8RHgdVj bFKVqHY59hgBR2TTx1kUhmfJran6sKPwcQXvVI/+P8qQbVdPwwZXHfjR5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOpdfhmJV6Yo37y7bPO/z+f0vKnJMB8GA1UdIwQY MBaAFO6kddCLb4t47RGwyk0Tbes4vJkbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3FSMTBJdHZpM2p0RWJES1RSTnQ2emk4bVJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zY2NhZmYtNzFmMi00OTgyLWI1MzQt MzZlMzlmZWQ3YmVkLzEvN3FSMTBJdHZpM2p0RWJES1RSTnQ2emk4bVJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8zY2NhZmYtNzFmMi00OTgyLWI1MzQtMzZlMzlmZWQ3YmVk LzEvN3FSMTBJdHZpM2p0RWJES1RSTnQ2emk4bVJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFj+rCwrh Doyp5d2AOKZ4rC6LOGSDG9AaWKfMcX27tEnSxpezIftW3fJjJvtnhwA2db91qR1c Fu9XXEqlEzy6MZ9fjnR5jwLGh9yUGAL+CyyBKQqEW6gPuVcxX3md8j9x9EXu1cep 29Xa9HxH3gHJVakGeHuDwB5OmzxaS6iE771To0e6RFwFFN2mRHJixd4K6+CW9lmv NZe0q3xwuTUfO7RCIH2VngeZwpeXGVFSSFBDR3DP3ppouMyeR0BCQe9/utgFWPnS QhMN2S6NmxiapUH/M0Lu9gK6a+cX2Y3waQbyCbQDQYB/KCCAdsdZ7r/wOgSX8xCB qKdtdY/BQtOozg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:41:29 2026 by rpki-client