This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/n7bU2YfQBKAPopfmnCaOt189mkA.mft File: n7bU2YfQBKAPopfmnCaOt189mkA.mft (raw, json) Hash identifier: OeACVh30TpBfnKZWrjZTAnppBDQmM3amsl/1vrTeR3U= Subject key identifier: A2:33:8A:F4:96:A6:5D:02:B4:96:6A:4A:17:BF:DF:69:9A:0D:2C:68 Authority key identifier: 9F:B6:D4:D9:87:D0:04:A0:0F:A2:97:E6:9C:26:8E:B7:5F:3D:9A:40 Certificate issuer: /CN=9fb6d4d987d004a00fa297e69c268eb75f3d9a40 Certificate serial: 019C42EBB41CEBBD27A03E6D6ABF70AE39F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n7bU2YfQBKAPopfmnCaOt189mkA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/n7bU2YfQBKAPopfmnCaOt189mkA.mft Manifest number: 0FEF Signing time: Mon 09 Feb 2026 15:01:09 +0000 Manifest this update: Mon 09 Feb 2026 15:01:09 +0000 Manifest next update: Tue 10 Feb 2026 15:01:09 +0000 Files and hashes: 1: KG8loLuhTcIMjieWs1KfwpWofRk.roa (hash: RxfX57Z0L5BZOB9gWwKFQnTlLw89l17p5HkheRVermQ=) 2: n7bU2YfQBKAPopfmnCaOt189mkA.crl (hash: u4ekcmjHo7Ycxyza5U6V5tu278+CkzmV5Dh4QLEBGSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/n7bU2YfQBKAPopfmnCaOt189mkA.crl rsync://rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/n7bU2YfQBKAPopfmnCaOt189mkA.mft rsync://rpki.ripe.net/repository/DEFAULT/n7bU2YfQBKAPopfmnCaOt189mkA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:b4:1c:eb:bd:27:a0:3e:6d:6a:bf:70:ae:39:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fb6d4d987d004a00fa297e69c268eb75f3d9a40 Validity Not Before: Feb 9 15:01:09 2026 GMT Not After : Feb 10 15:01:09 2026 GMT Subject: CN=a2338af496a65d02b4966a4a17bfdf699a0d2c68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5b:5e:1d:a2:e6:12:7a:a0:c6:67:e8:1c:5f: b9:13:bd:41:dc:c2:c9:2c:27:46:f0:ad:c4:83:47: 5b:61:30:21:76:3e:3d:d5:65:dc:b9:7c:b7:73:eb: 48:73:5c:88:fe:ef:b2:83:86:0a:65:81:11:d0:b3: 8f:da:9c:05:c5:cc:a0:6d:dc:69:3f:2f:93:2c:11: 36:ca:fd:97:02:e0:f9:41:73:5d:8a:f4:1e:a1:3e: b7:59:d1:69:60:ff:87:49:46:a7:28:ba:e7:d3:bc: 8f:19:7a:11:21:ef:be:66:5b:e9:91:36:c2:74:f9: f5:12:38:d3:d9:56:78:62:20:2f:b3:29:7a:da:2d: 9b:25:b2:11:d4:77:6b:c2:00:e9:5b:41:e9:b1:de: f7:c4:64:27:73:0e:7c:79:7a:05:1d:9b:9f:ad:21: d2:e0:ba:be:c7:26:a4:9f:6f:f8:31:60:cb:46:0b: bc:0c:f5:b3:46:3c:be:86:71:01:d1:81:26:87:d5: aa:8e:98:09:bb:2a:91:64:75:8e:6b:12:3d:99:e3: 47:a5:f6:4b:ee:6c:54:86:ed:37:96:cf:09:eb:52: 56:9f:49:de:cb:bc:50:b9:b3:2d:97:b1:37:5b:13: bc:91:aa:bb:28:f1:b5:e8:d8:9f:f8:6d:0a:a4:1e: 35:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:33:8A:F4:96:A6:5D:02:B4:96:6A:4A:17:BF:DF:69:9A:0D:2C:68 X509v3 Authority Key Identifier: keyid:9F:B6:D4:D9:87:D0:04:A0:0F:A2:97:E6:9C:26:8E:B7:5F:3D:9A:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7bU2YfQBKAPopfmnCaOt189mkA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/n7bU2YfQBKAPopfmnCaOt189mkA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/n7bU2YfQBKAPopfmnCaOt189mkA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e9:74:6e:ff:c2:bf:1f:60:b8:54:68:33:b4:fe:af:3e:60:ba: 24:ab:a8:21:28:90:e9:e1:f5:bb:30:61:a8:04:f0:1d:b3:52: d2:f8:64:23:04:c1:e4:d5:86:58:26:f1:97:89:b0:47:53:7f: a8:ec:fd:76:56:dd:c6:91:f5:bc:f2:85:81:bb:86:d2:d5:89: 6f:1e:f4:cf:d6:1f:41:e4:a8:b0:00:93:13:5a:04:6f:24:0d: 83:d8:57:4c:ff:70:8c:8e:79:68:8d:0e:46:5f:9d:d9:e2:59: 4f:56:40:ca:18:7f:b9:e4:23:4c:90:a6:1b:e2:22:8b:2a:6c: 3c:19:96:db:da:a5:b9:a3:20:e3:41:7f:cf:49:85:16:be:c3: 09:a0:a4:51:91:ec:96:94:55:03:ca:fe:8c:0f:57:a9:28:7b: 0c:77:0a:f7:0e:64:bf:0f:5b:51:d4:5e:46:00:d7:b5:99:b1: 50:6b:5f:c1:c3:c7:10:b8:a7:41:61:e7:9e:6f:6d:d8:4f:c1: f6:ab:61:64:a1:dd:a1:53:5a:6b:2f:1b:e9:a8:a6:1a:e4:0a: 9a:fc:5c:e0:cb:26:ec:f0:e2:44:55:17:a6:53:57:8d:d1:35: ae:0b:d0:cb:ff:2f:07:12:f5:19:b4:be:56:b5:84:f2:fa:91: c9:ed:72:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC67Qc670noD5tar9wrjn1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmYjZkNGQ5ODdkMDA0YTAwZmEyOTdlNjljMjY4ZWI3NWYz ZDlhNDAwHhcNMjYwMjA5MTUwMTA5WhcNMjYwMjEwMTUwMTA5WjAzMTEwLwYDVQQD EyhhMjMzOGFmNDk2YTY1ZDAyYjQ5NjZhNGExN2JmZGY2OTlhMGQyYzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVteHaLmEnqgxmfoHF+5E71B3MLJ LCdG8K3Eg0dbYTAhdj491WXcuXy3c+tIc1yI/u+yg4YKZYER0LOP2pwFxcygbdxp Py+TLBE2yv2XAuD5QXNdivQeoT63WdFpYP+HSUanKLrn07yPGXoRIe++ZlvpkTbC dPn1EjjT2VZ4YiAvsyl62i2bJbIR1HdrwgDpW0Hpsd73xGQncw58eXoFHZufrSHS 4Lq+xyakn2/4MWDLRgu8DPWzRjy+hnEB0YEmh9WqjpgJuyqRZHWOaxI9meNHpfZL 7mxUhu03ls8J61JWn0ney7xQubMtl7E3WxO8kaq7KPG16Nif+G0KpB416wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKIzivSWpl0CtJZqShe/32maDSxoMB8GA1UdIwQY MBaAFJ+21NmH0ASgD6KX5pwmjrdfPZpAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjdiVTJZZlFCS0FQb3BmbW5DYU90MTg5bWtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wMjQwMGYtNzgwMi00NGU3LTg1Mjct OGIyOTFlMjZkMWQ5LzEvbjdiVTJZZlFCS0FQb3BmbW5DYU90MTg5bWtBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8wMjQwMGYtNzgwMi00NGU3LTg1MjctOGIyOTFlMjZkMWQ5 LzEvbjdiVTJZZlFCS0FQb3BmbW5DYU90MTg5bWtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6XRu/8K/ H2C4VGgztP6vPmC6JKuoISiQ6eH1uzBhqATwHbNS0vhkIwTB5NWGWCbxl4mwR1N/ qOz9dlbdxpH1vPKFgbuG0tWJbx70z9YfQeSosACTE1oEbyQNg9hXTP9wjI55aI0O Rl+d2eJZT1ZAyhh/ueQjTJCmG+IiiypsPBmW29qluaMg40F/z0mFFr7DCaCkUZHs lpRVA8r+jA9XqSh7DHcK9w5kvw9bUdReRgDXtZmxUGtfwcPHELinQWHnnm9t2E/B 9qthZKHdoVNaay8b6aimGuQKmvxc4Msm7PDiRFUXplNXjdE1rgvQy/8vBxL1GbS+ VrWE8vqRye1yXg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:25 2026 by rpki-client