This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft File: 7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft (raw, json) Hash identifier: tI+E0By/KiGR2CbYMn12W2IVhJQS7sidrCaCcpXUt2A= Subject key identifier: 70:9D:09:4C:A5:A4:9C:BC:C1:45:2F:67:68:7A:15:CB:B6:22:40:B6 Authority key identifier: EC:FD:8E:AA:B5:AE:AC:3C:E9:41:FE:12:58:59:B3:2A:35:25:13:44 Certificate issuer: /CN=ecfd8eaab5aeac3ce941fe125859b32a35251344 Certificate serial: 019C446C2FE04F87609CBED9E4B3CB233399 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft Manifest number: 1570 Signing time: Mon 09 Feb 2026 22:01:06 +0000 Manifest this update: Mon 09 Feb 2026 22:01:06 +0000 Manifest next update: Tue 10 Feb 2026 22:01:06 +0000 Files and hashes: 1: 7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl (hash: xbnCv3o+CtqbDmC4kpIRQ6aQF0m/TUhrdAgtaOUU6d8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6c:2f:e0:4f:87:60:9c:be:d9:e4:b3:cb:23:33:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecfd8eaab5aeac3ce941fe125859b32a35251344 Validity Not Before: Feb 9 22:01:06 2026 GMT Not After : Feb 10 22:01:06 2026 GMT Subject: CN=709d094ca5a49cbcc1452f67687a15cbb62240b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:66:d7:26:17:88:02:11:00:26:25:ac:58:30: 49:f7:8d:09:6c:9f:17:38:d8:da:82:a6:21:6e:56: bd:16:b7:1a:9b:61:51:19:20:b9:77:8c:3f:09:a5: de:eb:0a:03:1e:49:da:92:c6:3e:de:84:d8:a0:7e: f1:5a:46:b6:a5:e9:a0:81:56:c4:b0:fb:99:da:8e: 18:c8:eb:90:d8:92:a1:8e:b0:62:46:06:76:c1:cb: 4c:93:a1:40:dd:e8:01:b9:87:a9:e5:9e:fc:50:5f: c5:ff:5b:47:67:73:e5:bc:05:80:67:51:17:4a:38: 57:a8:dd:e2:12:a7:3c:da:45:aa:f5:19:c1:ec:79: 5f:02:cf:e1:2b:01:e3:69:42:13:ca:63:a1:70:f2: d6:ca:5a:8c:8e:84:b6:df:14:b3:26:6e:cc:61:0a: 06:0d:7c:01:3e:93:6f:41:c1:69:13:e8:e5:01:1d: 44:56:9d:53:68:60:d5:3c:c3:c3:eb:9a:ac:b4:e2: 4a:07:74:82:e5:ac:1f:65:59:ae:f5:57:18:03:5e: a9:39:5e:d0:19:f3:a4:38:81:7e:30:a9:0b:c7:3f: 0b:df:7e:ee:a5:a3:6a:48:0d:ae:78:5a:fb:05:8d: af:06:5a:6e:58:d8:0e:ae:3f:86:5e:d9:be:29:2c: d6:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:9D:09:4C:A5:A4:9C:BC:C1:45:2F:67:68:7A:15:CB:B6:22:40:B6 X509v3 Authority Key Identifier: keyid:EC:FD:8E:AA:B5:AE:AC:3C:E9:41:FE:12:58:59:B3:2A:35:25:13:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:41:b6:e9:d9:b1:d1:48:fc:73:43:a1:e0:06:67:2e:3e:9a: a0:f3:a0:bf:3d:ad:15:70:70:5c:8f:50:39:9a:a1:f2:da:40: 70:b0:5a:44:bb:6b:65:e8:bb:e2:26:18:6c:3e:65:9e:11:07: 76:3d:1a:49:ea:3a:52:47:39:55:eb:d3:55:84:d5:15:dc:73: 89:1b:62:66:50:c6:88:e1:e5:cd:f2:fc:b8:4d:ad:43:ba:18: 37:01:98:f4:f6:86:49:b9:1c:c5:03:5f:8e:7c:ab:f3:4a:03: 58:f4:35:50:5a:af:20:04:56:98:62:8e:d4:89:4f:ee:e0:f1: db:3e:5c:90:ee:23:47:e9:59:cb:6b:fd:54:3c:7d:63:dc:df: e3:46:ce:c8:46:19:6c:d3:95:02:59:57:48:f9:50:94:35:62: ff:38:66:35:4e:a0:c6:05:a2:a9:1f:bf:ec:d5:8a:7b:d5:c0: c2:32:53:5f:a5:8f:8c:29:52:56:38:f9:bd:f4:11:16:cf:a0: 9d:86:e5:ef:15:27:f3:34:b1:1f:30:7d:f3:2d:c4:4f:81:39: 10:f7:49:c1:0b:29:a3:ac:6d:33:03:89:31:4a:06:01:11:8e: c2:ad:05:71:ab:6a:63:30:56:a8:99:59:56:8a:c0:ce:eb:6d: f1:ee:36:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEbC/gT4dgnL7Z5LPLIzOZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjZmQ4ZWFhYjVhZWFjM2NlOTQxZmUxMjU4NTliMzJhMzUy NTEzNDQwHhcNMjYwMjA5MjIwMTA2WhcNMjYwMjEwMjIwMTA2WjAzMTEwLwYDVQQD Eyg3MDlkMDk0Y2E1YTQ5Y2JjYzE0NTJmNjc2ODdhMTVjYmI2MjI0MGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWbXJheIAhEAJiWsWDBJ940JbJ8X ONjagqYhbla9Frcam2FRGSC5d4w/CaXe6woDHknaksY+3oTYoH7xWka2pemggVbE sPuZ2o4YyOuQ2JKhjrBiRgZ2wctMk6FA3egBuYep5Z78UF/F/1tHZ3PlvAWAZ1EX SjhXqN3iEqc82kWq9RnB7HlfAs/hKwHjaUITymOhcPLWylqMjoS23xSzJm7MYQoG DXwBPpNvQcFpE+jlAR1EVp1TaGDVPMPD65qstOJKB3SC5awfZVmu9VcYA16pOV7Q GfOkOIF+MKkLxz8L337upaNqSA2ueFr7BY2vBlpuWNgOrj+GXtm+KSzWPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHCdCUylpJy8wUUvZ2h6Fcu2IkC2MB8GA1UdIwQY MBaAFOz9jqq1rqw86UH+ElhZsyo1JRNEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1AyT3FyV3VyRHpwUWY0U1dGbXpLalVsRTBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iYjg4M2EtNDg2ZC00OTc1LThkYmMt ZDRiOTBiNmY0NjU5LzEvN1AyT3FyV3VyRHpwUWY0U1dGbXpLalVsRTBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9iYjg4M2EtNDg2ZC00OTc1LThkYmMtZDRiOTBiNmY0NjU5 LzEvN1AyT3FyV3VyRHpwUWY0U1dGbXpLalVsRTBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV0G26dmx 0Uj8c0Oh4AZnLj6aoPOgvz2tFXBwXI9QOZqh8tpAcLBaRLtrZei74iYYbD5lnhEH dj0aSeo6Ukc5VevTVYTVFdxziRtiZlDGiOHlzfL8uE2tQ7oYNwGY9PaGSbkcxQNf jnyr80oDWPQ1UFqvIARWmGKO1IlP7uDx2z5ckO4jR+lZy2v9VDx9Y9zf40bOyEYZ bNOVAllXSPlQlDVi/zhmNU6gxgWiqR+/7NWKe9XAwjJTX6WPjClSVjj5vfQRFs+g nYbl7xUn8zSxHzB98y3ET4E5EPdJwQspo6xtMwOJMUoGARGOwq0FcatqYzBWqJlZ VorAzutt8e42GA== -----END CERTIFICATE-----Generated at Tue Feb 10 02:59:59 2026 by rpki-client