This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft File: 7kDaG04w_7sypOSkt61zHAMeRCk.mft (raw, json) Hash identifier: nwFiGdJKR3F9DxRkTfGKfFEbtHd/MxvdgLNmYgtpNxw= Subject key identifier: 46:35:B1:B4:E5:76:E4:5F:36:71:44:BF:C1:52:39:04:8A:A8:2A:09 Authority key identifier: EE:40:DA:1B:4E:30:FF:BB:32:A4:E4:A4:B7:AD:73:1C:03:1E:44:29 Certificate issuer: /CN=ee40da1b4e30ffbb32a4e4a4b7ad731c031e4429 Certificate serial: 019C44A24C9B9D37B3E5DF1FF67ADB4DF405 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft Manifest number: 06A4 Signing time: Mon 09 Feb 2026 23:00:12 +0000 Manifest this update: Mon 09 Feb 2026 23:00:12 +0000 Manifest next update: Tue 10 Feb 2026 23:00:12 +0000 Files and hashes: 1: 7kDaG04w_7sypOSkt61zHAMeRCk.crl (hash: uwBdVBaU5GxQ2PTc6Chz11FDEYcPDyxtEanj9FaNXK0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.crl rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:a2:4c:9b:9d:37:b3:e5:df:1f:f6:7a:db:4d:f4:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee40da1b4e30ffbb32a4e4a4b7ad731c031e4429 Validity Not Before: Feb 9 23:00:12 2026 GMT Not After : Feb 10 23:00:12 2026 GMT Subject: CN=4635b1b4e576e45f367144bfc15239048aa82a09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:6a:4e:62:31:43:37:f3:d9:6d:a3:71:12:d0: 5c:be:2d:68:45:b5:2b:9a:0f:4e:1a:e9:74:ab:39: f0:c7:7a:ae:7a:fa:1d:bc:e9:30:94:76:2c:88:73: 88:bd:91:4c:41:96:e4:96:8c:d6:0a:21:3b:ec:2b: 01:89:5e:7f:4d:f5:07:01:08:e9:28:17:f1:1c:a2: b3:e1:4f:62:48:b9:2b:1d:53:37:45:39:a7:32:54: 32:47:a5:a4:67:59:06:4b:0b:17:2d:41:0f:05:84: 21:ee:e2:d2:e8:b5:aa:b8:68:3a:c7:92:57:a9:b7: ec:07:f7:6a:48:3c:f0:e6:d3:8a:0d:5c:13:05:5d: f5:a8:20:87:a5:1c:27:bd:c8:7a:59:de:ac:7b:b3: 4f:45:ff:e0:ed:0f:1d:a3:97:30:9d:23:95:dd:37: 90:8d:b8:d2:dc:0e:9c:9c:c4:85:c6:da:1e:97:5b: 9e:74:da:e0:d8:f1:b6:f9:5e:c2:df:fd:20:ee:4a: 14:b5:f5:c1:6c:9a:78:69:33:d6:fd:65:15:76:07: 53:74:b8:81:19:93:9c:00:3a:1b:83:50:7a:49:1a: 82:0d:05:60:ed:4e:a0:fc:f2:94:9b:36:e0:27:17: 80:9b:5a:ac:9f:81:6e:b4:3f:56:37:c0:61:8c:07: 81:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:35:B1:B4:E5:76:E4:5F:36:71:44:BF:C1:52:39:04:8A:A8:2A:09 X509v3 Authority Key Identifier: keyid:EE:40:DA:1B:4E:30:FF:BB:32:A4:E4:A4:B7:AD:73:1C:03:1E:44:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:5b:a5:d8:46:c7:92:2f:d1:1a:52:e4:b3:b5:cd:2e:95:32: 6a:ea:cb:d8:f7:fa:ae:2b:b9:11:c5:65:8a:90:d8:89:7a:f5: 4a:60:5a:3d:8b:2e:04:9d:c0:b6:9c:9c:1b:76:dd:13:d5:b5: 44:de:8e:d8:f9:22:99:75:21:a4:a4:55:4d:68:0a:e4:bb:28: fb:56:35:a4:69:2a:9d:be:b4:6a:6e:7f:a8:65:24:a7:9f:d0: 26:13:0b:bc:bb:76:f9:9d:53:ac:1a:39:78:21:1b:bb:ca:ad: fe:f2:dd:9a:e0:db:da:03:14:8c:31:95:ed:ee:25:ef:01:ff: b9:62:62:27:9f:65:04:aa:a6:cf:e9:43:39:ca:71:23:6b:5c: 7a:60:6e:02:0f:9d:b3:7b:1f:88:63:6d:79:6a:26:50:bb:e3: 58:dc:e0:77:fd:14:78:2b:5e:43:5d:95:83:97:91:69:15:91: c4:60:ec:9f:1a:b2:ea:46:4a:99:ba:fc:ac:3b:7d:78:9f:4b: bc:04:3c:79:c5:67:69:e7:58:0c:8f:f6:bd:75:99:dd:e6:de: 44:f4:97:de:3d:96:07:62:bc:dd:96:21:dc:52:54:38:83:46: ef:b6:26:42:80:0b:c0:76:9e:5f:ad:68:53:8f:55:ba:04:e9: 43:b6:60:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEokybnTez5d8f9nrbTfQFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlNDBkYTFiNGUzMGZmYmIzMmE0ZTRhNGI3YWQ3MzFjMDMx ZTQ0MjkwHhcNMjYwMjA5MjMwMDEyWhcNMjYwMjEwMjMwMDEyWjAzMTEwLwYDVQQD Eyg0NjM1YjFiNGU1NzZlNDVmMzY3MTQ0YmZjMTUyMzkwNDhhYTgyYTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2pOYjFDN/PZbaNxEtBcvi1oRbUr mg9OGul0qznwx3quevodvOkwlHYsiHOIvZFMQZbklozWCiE77CsBiV5/TfUHAQjp KBfxHKKz4U9iSLkrHVM3RTmnMlQyR6WkZ1kGSwsXLUEPBYQh7uLS6LWquGg6x5JX qbfsB/dqSDzw5tOKDVwTBV31qCCHpRwnvch6Wd6se7NPRf/g7Q8do5cwnSOV3TeQ jbjS3A6cnMSFxtoel1uedNrg2PG2+V7C3/0g7koUtfXBbJp4aTPW/WUVdgdTdLiB GZOcADobg1B6SRqCDQVg7U6g/PKUmzbgJxeAm1qsn4FutD9WN8BhjAeBMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEY1sbTlduRfNnFEv8FSOQSKqCoJMB8GA1UdIwQY MBaAFO5A2htOMP+7MqTkpLetcxwDHkQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2tEYUcwNHdfN3N5cE9Ta3Q2MXpIQU1lUkNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9kYzYyMjktNWVkNS00ZjJkLWIyMDEt M2Q2NTc4MTQwZmMxLzEvN2tEYUcwNHdfN3N5cE9Ta3Q2MXpIQU1lUkNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9kYzYyMjktNWVkNS00ZjJkLWIyMDEtM2Q2NTc4MTQwZmMx LzEvN2tEYUcwNHdfN3N5cE9Ta3Q2MXpIQU1lUkNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk1ul2EbH ki/RGlLks7XNLpUyaurL2Pf6riu5EcVlipDYiXr1SmBaPYsuBJ3AtpycG3bdE9W1 RN6O2PkimXUhpKRVTWgK5Lso+1Y1pGkqnb60am5/qGUkp5/QJhMLvLt2+Z1TrBo5 eCEbu8qt/vLdmuDb2gMUjDGV7e4l7wH/uWJiJ59lBKqmz+lDOcpxI2tcemBuAg+d s3sfiGNteWomULvjWNzgd/0UeCteQ12Vg5eRaRWRxGDsnxqy6kZKmbr8rDt9eJ9L vAQ8ecVnaedYDI/2vXWZ3ebeRPSX3j2WB2K83ZYh3FJUOING77YmQoALwHaeX61o U49VugTpQ7ZgiA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:34:53 2026 by rpki-client