This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/9a8ceb-27ca-4a21-848b-0b954fff9b25/1/7ILDD5ZP8q_QzwjzjIsnTfInFPg.mft File: 7ILDD5ZP8q_QzwjzjIsnTfInFPg.mft (raw, json) Hash identifier: O3fchRNgmMBMVyvHyD0k6cU5mSzOlq+Z9hpUF+6zSIY= Subject key identifier: B9:89:A7:02:D1:A5:99:21:BA:9F:A4:28:F0:95:84:9A:BD:67:76:69 Authority key identifier: EC:82:C3:0F:96:4F:F2:AF:D0:CF:08:F3:8C:8B:27:4D:F2:27:14:F8 Certificate issuer: /CN=ec82c30f964ff2afd0cf08f38c8b274df22714f8 Certificate serial: 019C420F713F8C2087D0E0403F16B3ADBEAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ILDD5ZP8q_QzwjzjIsnTfInFPg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/9a8ceb-27ca-4a21-848b-0b954fff9b25/1/7ILDD5ZP8q_QzwjzjIsnTfInFPg.mft Manifest number: 034D Signing time: Mon 09 Feb 2026 11:00:34 +0000 Manifest this update: Mon 09 Feb 2026 11:00:34 +0000 Manifest next update: Tue 10 Feb 2026 11:00:34 +0000 Files and hashes: 1: 7ILDD5ZP8q_QzwjzjIsnTfInFPg.crl (hash: SxrONW2Vn2jol0UDWtLYX2Pq9YzS9QGPrddb5miPg3w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/9a8ceb-27ca-4a21-848b-0b954fff9b25/1/7ILDD5ZP8q_QzwjzjIsnTfInFPg.crl rsync://rpki.ripe.net/repository/DEFAULT/19/9a8ceb-27ca-4a21-848b-0b954fff9b25/1/7ILDD5ZP8q_QzwjzjIsnTfInFPg.mft rsync://rpki.ripe.net/repository/DEFAULT/7ILDD5ZP8q_QzwjzjIsnTfInFPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:71:3f:8c:20:87:d0:e0:40:3f:16:b3:ad:be:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec82c30f964ff2afd0cf08f38c8b274df22714f8 Validity Not Before: Feb 9 11:00:34 2026 GMT Not After : Feb 10 11:00:34 2026 GMT Subject: CN=b989a702d1a59921ba9fa428f095849abd677669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:df:51:c7:df:9a:6d:00:b1:bf:5b:a8:9a:f5: 3d:17:69:d6:f1:9d:a7:d4:4c:2c:f6:0e:07:3a:cf: 82:26:75:be:7c:65:45:bc:07:1e:68:31:b5:98:c1: fb:d1:70:3c:04:a3:d2:53:f2:28:54:21:c5:45:a5: d1:5f:de:10:82:0a:c4:0b:db:e0:4a:b5:e5:ce:8d: b0:a5:8a:a7:02:6c:8a:c9:b1:3f:f4:ed:33:28:9f: 19:09:91:b1:0d:19:f5:1a:04:d2:82:21:9d:a4:c1: 0c:59:b9:63:ca:a4:6e:5b:e9:af:69:18:8f:ea:12: c0:ce:78:eb:ce:bf:62:a1:ad:da:1a:8a:fa:18:31: af:b3:06:8d:95:7b:0e:41:3b:e7:47:16:24:00:ca: 55:54:03:c4:d6:6e:04:08:49:c6:90:88:97:3a:44: d3:c5:85:f8:cb:96:4d:5d:72:78:4b:0e:d8:ac:0d: f0:b0:ee:f9:98:6d:e2:f5:4d:97:33:e8:17:51:a2: 44:38:92:06:3c:44:a4:78:85:3b:8a:57:c7:7b:d6: f2:e9:de:63:5a:58:52:4a:d9:eb:3e:87:b8:68:2e: bc:46:ad:46:43:53:21:2b:55:30:15:ba:b9:c0:40: 59:ec:65:f4:58:31:14:68:74:a4:ca:fe:0b:1c:3b: 97:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:89:A7:02:D1:A5:99:21:BA:9F:A4:28:F0:95:84:9A:BD:67:76:69 X509v3 Authority Key Identifier: keyid:EC:82:C3:0F:96:4F:F2:AF:D0:CF:08:F3:8C:8B:27:4D:F2:27:14:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ILDD5ZP8q_QzwjzjIsnTfInFPg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/9a8ceb-27ca-4a21-848b-0b954fff9b25/1/7ILDD5ZP8q_QzwjzjIsnTfInFPg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/9a8ceb-27ca-4a21-848b-0b954fff9b25/1/7ILDD5ZP8q_QzwjzjIsnTfInFPg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:5c:ec:07:ed:29:0e:f8:2e:ec:d1:52:0b:52:41:aa:df:51: ea:7e:91:e9:a0:e6:73:b4:8c:c5:95:79:00:73:3f:62:49:75: be:5b:78:6c:72:e2:ba:8f:d3:b9:2b:4a:29:fc:5c:9c:a7:57: e9:9f:6c:ba:f0:a9:3e:43:c3:d5:ab:fa:fe:3e:e6:a7:46:37: 8c:e3:99:c0:4e:4c:19:6d:96:03:70:29:5c:60:78:4e:28:65: c0:ef:f8:d9:0f:dd:55:72:29:f4:72:99:2c:c0:01:8b:b3:bd: b0:df:a7:ee:cd:e8:86:92:aa:2a:5a:12:8a:43:02:40:e1:12: b4:bf:f2:ad:2b:86:bd:49:2a:07:d0:5c:ee:43:77:1c:88:d8: c0:16:08:5f:b8:4e:f4:c5:e7:fd:27:e1:60:74:ac:dd:b1:8d: f3:a3:60:42:e0:9c:a0:bb:65:6a:cc:22:d7:d6:2b:29:04:3a: ae:d2:16:97:d9:2c:be:3c:f2:bb:ec:80:49:5c:35:8f:d5:a7: 70:5d:5b:db:d2:d0:45:b4:13:dd:99:66:12:f9:d8:4f:46:21: 3f:16:07:e9:65:95:59:ac:30:2c:75:51:89:e8:4c:e4:8b:9f: 08:e3:a0:cd:63:ba:04:99:80:31:19:e5:1a:6f:4c:fd:ad:66: 2d:2e:b9:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD3E/jCCH0OBAPxazrb6tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjODJjMzBmOTY0ZmYyYWZkMGNmMDhmMzhjOGIyNzRkZjIy NzE0ZjgwHhcNMjYwMjA5MTEwMDM0WhcNMjYwMjEwMTEwMDM0WjAzMTEwLwYDVQQD EyhiOTg5YTcwMmQxYTU5OTIxYmE5ZmE0MjhmMDk1ODQ5YWJkNjc3NjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu99Rx9+abQCxv1uomvU9F2nW8Z2n 1Ews9g4HOs+CJnW+fGVFvAceaDG1mMH70XA8BKPSU/IoVCHFRaXRX94QggrEC9vg SrXlzo2wpYqnAmyKybE/9O0zKJ8ZCZGxDRn1GgTSgiGdpMEMWbljyqRuW+mvaRiP 6hLAznjrzr9ioa3aGor6GDGvswaNlXsOQTvnRxYkAMpVVAPE1m4ECEnGkIiXOkTT xYX4y5ZNXXJ4Sw7YrA3wsO75mG3i9U2XM+gXUaJEOJIGPESkeIU7ilfHe9by6d5j WlhSStnrPoe4aC68Rq1GQ1MhK1UwFbq5wEBZ7GX0WDEUaHSkyv4LHDuXoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLmJpwLRpZkhup+kKPCVhJq9Z3ZpMB8GA1UdIwQY MBaAFOyCww+WT/Kv0M8I84yLJ03yJxT4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0lMREQ1WlA4cV9RendqempJc25UZkluRlBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS85YThjZWItMjdjYS00YTIxLTg0OGIt MGI5NTRmZmY5YjI1LzEvN0lMREQ1WlA4cV9RendqempJc25UZkluRlBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS85YThjZWItMjdjYS00YTIxLTg0OGItMGI5NTRmZmY5YjI1 LzEvN0lMREQ1WlA4cV9RendqempJc25UZkluRlBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUlzsB+0p Dvgu7NFSC1JBqt9R6n6R6aDmc7SMxZV5AHM/Ykl1vlt4bHLiuo/TuStKKfxcnKdX 6Z9suvCpPkPD1av6/j7mp0Y3jOOZwE5MGW2WA3ApXGB4TihlwO/42Q/dVXIp9HKZ LMABi7O9sN+n7s3ohpKqKloSikMCQOEStL/yrSuGvUkqB9Bc7kN3HIjYwBYIX7hO 9MXn/SfhYHSs3bGN86NgQuCcoLtlaswi19YrKQQ6rtIWl9ksvjzyu+yASVw1j9Wn cF1b29LQRbQT3ZlmEvnYT0YhPxYH6WWVWawwLHVRiehM5IufCOOgzWO6BJmAMRnl Gm9M/a1mLS651A== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:42 2026 by rpki-client