This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft File: 7W3VjHMPSQxsZTC3ULUY55Okh6U.mft (raw, json) Hash identifier: 8iig3vxG/lFeybuXmbWgnjAa2Pz2YSjPjfBBxnWbmXw= Subject key identifier: 4A:28:17:E8:76:7A:29:BA:DF:18:A7:25:70:17:03:F6:33:11:FE:6A Authority key identifier: ED:6D:D5:8C:73:0F:49:0C:6C:65:30:B7:50:B5:18:E7:93:A4:87:A5 Certificate issuer: /CN=ed6dd58c730f490c6c6530b750b518e793a487a5 Certificate serial: 019C4322280B7B847DBBB3B56C9717A741D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W3VjHMPSQxsZTC3ULUY55Okh6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft Manifest number: 0EF5 Signing time: Mon 09 Feb 2026 16:00:37 +0000 Manifest this update: Mon 09 Feb 2026 16:00:37 +0000 Manifest next update: Tue 10 Feb 2026 16:00:37 +0000 Files and hashes: 1: 7W3VjHMPSQxsZTC3ULUY55Okh6U.crl (hash: 6w67Zkef9bwU9UEuVhQqQrKCDnI8IjMGjcSfkz7hbMA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.crl rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft rsync://rpki.ripe.net/repository/DEFAULT/7W3VjHMPSQxsZTC3ULUY55Okh6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:28:0b:7b:84:7d:bb:b3:b5:6c:97:17:a7:41:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed6dd58c730f490c6c6530b750b518e793a487a5 Validity Not Before: Feb 9 16:00:37 2026 GMT Not After : Feb 10 16:00:37 2026 GMT Subject: CN=4a2817e8767a29badf18a725701703f63311fe6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e3:9b:64:4d:a5:b3:cc:1d:e5:a2:76:2a:63: dd:d8:55:52:3b:b5:b1:d2:e4:6b:9b:27:d3:03:68: 27:f1:f8:78:ff:4f:72:2e:0e:43:c0:8d:62:cf:d6: e0:75:bb:ca:c0:21:6d:68:cb:b9:ca:08:49:6c:aa: d5:81:9a:2c:41:22:4d:a1:db:04:53:06:e8:35:bf: 75:7d:bf:f3:ea:74:47:84:eb:a5:33:78:01:73:54: 13:b7:86:b0:eb:12:67:3b:65:9b:d9:5c:8f:0f:77: ad:37:a9:85:59:87:34:99:ad:9e:ec:6a:07:86:f6: dc:97:5d:60:51:59:ab:c9:e8:d3:6a:b6:0d:6a:4d: cf:6d:26:06:65:77:d4:4e:2a:1c:9c:b7:4b:80:a1: 37:b9:c4:d6:a7:e9:de:ae:e6:22:18:c4:0b:93:bc: 2c:d6:28:69:bb:1c:5a:16:cc:d8:19:99:b4:28:80: 67:d6:6c:51:e7:b7:f8:61:64:5d:a3:d7:a4:c7:d3: 17:99:54:a9:e1:df:ef:dd:98:83:49:aa:7c:97:4d: 9e:75:f4:4c:74:a3:fc:18:85:71:6d:9d:04:f3:64: 39:ff:79:a5:a6:2f:70:8f:20:11:29:fc:18:78:97: 9a:2b:d1:59:cc:51:62:36:5b:61:9a:ba:6d:c2:64: 0f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:28:17:E8:76:7A:29:BA:DF:18:A7:25:70:17:03:F6:33:11:FE:6A X509v3 Authority Key Identifier: keyid:ED:6D:D5:8C:73:0F:49:0C:6C:65:30:B7:50:B5:18:E7:93:A4:87:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W3VjHMPSQxsZTC3ULUY55Okh6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:bd:58:e2:85:9c:2f:f5:2e:aa:c6:02:4c:e2:f1:ff:d1:ce: 65:58:1a:bb:5d:c3:a2:dc:b2:35:c4:be:00:d6:c8:58:94:83: 49:c9:d7:2c:92:45:36:70:26:6d:23:f0:f0:79:b4:8d:92:21: 4d:d7:a1:5c:3f:83:2c:6a:00:e9:3f:80:91:f4:b9:dc:19:b7: 47:72:72:3d:06:d5:1a:ca:48:0c:f3:40:f6:07:e2:e3:0b:49: 56:85:dc:f2:f5:d4:a6:d5:0d:57:14:7e:73:a3:77:30:de:eb: b0:e0:6a:98:90:91:3c:af:ca:f8:0e:63:fc:8c:5f:5f:9c:bb: 38:7a:f6:ff:e6:78:ba:68:47:ef:f3:84:b0:01:49:0f:c8:60: ed:09:02:ce:dc:60:75:04:bd:30:b3:84:e0:4b:f4:4f:58:cc: 2e:a8:e9:12:c9:3a:d2:09:32:0f:2d:9e:35:2c:fe:4c:9f:ed: 78:26:c0:1c:8d:37:2e:87:84:fb:be:eb:48:79:9d:e1:3a:e7: 81:43:8d:fc:9f:0c:fa:72:c3:9d:35:84:21:f6:95:56:44:d3: 27:8b:f8:e7:5a:c2:39:2d:5f:be:7d:14:08:5e:21:7a:d6:f9: 94:ac:4e:b3:4e:47:74:f5:4d:01:68:e6:4d:58:93:5f:12:0e: 8c:df:e4:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIigLe4R9u7O1bJcXp0HVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNmRkNThjNzMwZjQ5MGM2YzY1MzBiNzUwYjUxOGU3OTNh NDg3YTUwHhcNMjYwMjA5MTYwMDM3WhcNMjYwMjEwMTYwMDM3WjAzMTEwLwYDVQQD Eyg0YTI4MTdlODc2N2EyOWJhZGYxOGE3MjU3MDE3MDNmNjMzMTFmZTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneObZE2ls8wd5aJ2KmPd2FVSO7Wx 0uRrmyfTA2gn8fh4/09yLg5DwI1iz9bgdbvKwCFtaMu5yghJbKrVgZosQSJNodsE UwboNb91fb/z6nRHhOulM3gBc1QTt4aw6xJnO2Wb2VyPD3etN6mFWYc0ma2e7GoH hvbcl11gUVmryejTarYNak3PbSYGZXfUTiocnLdLgKE3ucTWp+neruYiGMQLk7ws 1ihpuxxaFszYGZm0KIBn1mxR57f4YWRdo9ekx9MXmVSp4d/v3ZiDSap8l02edfRM dKP8GIVxbZ0E82Q5/3mlpi9wjyARKfwYeJeaK9FZzFFiNlthmrptwmQPMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEooF+h2eim63xinJXAXA/YzEf5qMB8GA1UdIwQY MBaAFO1t1YxzD0kMbGUwt1C1GOeTpIelMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1czVmpITVBTUXhzWlRDM1VMVVk1NU9raDZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9lMWRhZDItMTc5Ni00NzY0LWFjZjkt MGFhZWE2NjcwNjYzLzEvN1czVmpITVBTUXhzWlRDM1VMVVk1NU9raDZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9lMWRhZDItMTc5Ni00NzY0LWFjZjktMGFhZWE2NjcwNjYz LzEvN1czVmpITVBTUXhzWlRDM1VMVVk1NU9raDZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANL1Y4oWc L/UuqsYCTOLx/9HOZVgau13DotyyNcS+ANbIWJSDScnXLJJFNnAmbSPw8Hm0jZIh TdehXD+DLGoA6T+AkfS53Bm3R3JyPQbVGspIDPNA9gfi4wtJVoXc8vXUptUNVxR+ c6N3MN7rsOBqmJCRPK/K+A5j/IxfX5y7OHr2/+Z4umhH7/OEsAFJD8hg7QkCztxg dQS9MLOE4Ev0T1jMLqjpEsk60gkyDy2eNSz+TJ/teCbAHI03LoeE+77rSHmd4Trn gUON/J8M+nLDnTWEIfaVVkTTJ4v451rCOS1fvn0UCF4hetb5lKxOs05HdPVNAWjm TViTXxIOjN/koQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:03 2026 by rpki-client