This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft File: 7crL2itLMjHQi1HxbxsqfAgjetE.mft (raw, json) Hash identifier: oVB8Cqbol6iLuI2oCXOTLVK4YVo4msvdt/DzCAEKZSA= Subject key identifier: 29:6E:A5:73:9A:FC:1F:CC:1F:10:A4:23:30:BB:96:1C:3D:F9:B5:91 Authority key identifier: ED:CA:CB:DA:2B:4B:32:31:D0:8B:51:F1:6F:1B:2A:7C:08:23:7A:D1 Certificate issuer: /CN=edcacbda2b4b3231d08b51f16f1b2a7c08237ad1 Certificate serial: 019C438FC53EE63AC54597598F8F07CFCED9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7crL2itLMjHQi1HxbxsqfAgjetE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft Manifest number: 047C Signing time: Mon 09 Feb 2026 18:00:21 +0000 Manifest this update: Mon 09 Feb 2026 18:00:21 +0000 Manifest next update: Tue 10 Feb 2026 18:00:21 +0000 Files and hashes: 1: 7crL2itLMjHQi1HxbxsqfAgjetE.crl (hash: SusWk5+1hqbahIFynTQDm0FuzB89P+BHkHK8nStCfNo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft rsync://rpki.ripe.net/repository/DEFAULT/7crL2itLMjHQi1HxbxsqfAgjetE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:c5:3e:e6:3a:c5:45:97:59:8f:8f:07:cf:ce:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edcacbda2b4b3231d08b51f16f1b2a7c08237ad1 Validity Not Before: Feb 9 18:00:21 2026 GMT Not After : Feb 10 18:00:21 2026 GMT Subject: CN=296ea5739afc1fcc1f10a42330bb961c3df9b591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:40:72:6f:50:0f:cb:70:f5:3b:54:ea:6c:a0: 06:08:7e:7c:51:3b:16:27:6d:cb:10:84:8b:91:e8: 36:ba:66:74:b9:10:0f:08:57:4d:d4:b1:c9:4a:15: 8f:f1:d5:ee:63:7c:b5:92:06:7e:55:96:30:e2:22: e1:cf:7a:0f:56:4c:c5:58:10:47:f6:2d:fc:e6:06: 88:d8:a0:91:05:64:f6:d7:ac:e5:ea:29:48:7c:fe: 18:5a:d5:79:87:45:37:b0:10:19:59:41:af:c8:00: 68:d4:71:60:7f:5d:b4:fa:69:34:c2:31:18:6e:f6: fc:32:7c:a3:6c:32:6a:9c:ea:37:b1:e9:6d:d2:83: 4e:7d:48:48:2c:7e:31:fc:74:35:fc:2d:39:bd:8d: 21:61:a8:2b:20:08:5f:44:a4:46:19:71:0f:34:e8: de:5b:42:2f:4b:00:db:7b:8e:b3:37:da:65:da:a5: 8a:77:e4:15:0f:95:21:ca:ed:f5:a4:b0:4d:08:91: 84:be:b3:84:9f:69:ed:1c:1a:d4:5f:77:bb:e0:17: 5d:75:ae:d8:2b:3c:8a:70:c7:ab:92:b1:de:f7:f6: 7c:a6:4b:c6:4a:d6:aa:6b:e8:89:78:bb:61:80:bf: 5d:f8:4e:4a:9d:6a:ea:de:98:ee:b1:26:79:df:68: e2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:6E:A5:73:9A:FC:1F:CC:1F:10:A4:23:30:BB:96:1C:3D:F9:B5:91 X509v3 Authority Key Identifier: keyid:ED:CA:CB:DA:2B:4B:32:31:D0:8B:51:F1:6F:1B:2A:7C:08:23:7A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7crL2itLMjHQi1HxbxsqfAgjetE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:b9:87:7a:fb:5e:d1:c6:df:19:f6:b3:cd:60:17:c3:77:26: 1b:82:f0:50:2c:02:98:7a:46:03:ae:7c:f5:ce:de:38:44:51: d3:9b:ff:a1:64:df:4a:9d:11:8b:51:b8:84:35:45:29:8f:11: 44:e8:28:a7:35:9b:60:79:46:c6:1a:65:3b:14:9b:8a:9d:eb: e6:c4:23:a2:dd:e1:df:e5:48:68:b5:c0:4c:86:35:bf:86:3b: 93:64:14:cd:0c:af:b3:87:04:81:7c:49:4d:29:03:25:11:b5: 8c:35:ab:90:87:86:58:72:ec:c6:6a:a3:f1:1c:f6:f6:30:98: c1:cd:1f:5e:16:12:25:d9:00:8a:a3:e9:bc:e1:78:af:1e:0c: 67:c8:b8:a5:c4:9a:ac:3d:4a:25:cc:67:0a:bb:de:27:19:9b: 04:98:79:82:3f:02:d9:8a:d8:33:d0:8d:f5:e6:82:83:aa:51: 82:94:f8:f0:1d:1f:b6:fb:ae:00:23:46:80:93:ca:4b:84:c2: bc:5a:08:9b:c5:be:e7:de:c6:39:a8:b9:b6:c3:01:e3:25:d5: 9c:78:3d:47:74:8b:63:23:ed:ea:b4:c0:72:55:95:11:f7:fd: f6:18:5a:bc:dd:4e:3b:26:19:cb:a7:f1:28:78:5a:bd:a3:dc: 10:df:e6:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj8U+5jrFRZdZj48Hz87ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkY2FjYmRhMmI0YjMyMzFkMDhiNTFmMTZmMWIyYTdjMDgy MzdhZDEwHhcNMjYwMjA5MTgwMDIxWhcNMjYwMjEwMTgwMDIxWjAzMTEwLwYDVQQD EygyOTZlYTU3MzlhZmMxZmNjMWYxMGE0MjMzMGJiOTYxYzNkZjliNTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkByb1APy3D1O1TqbKAGCH58UTsW J23LEISLkeg2umZ0uRAPCFdN1LHJShWP8dXuY3y1kgZ+VZYw4iLhz3oPVkzFWBBH 9i385gaI2KCRBWT216zl6ilIfP4YWtV5h0U3sBAZWUGvyABo1HFgf120+mk0wjEY bvb8MnyjbDJqnOo3selt0oNOfUhILH4x/HQ1/C05vY0hYagrIAhfRKRGGXEPNOje W0IvSwDbe46zN9pl2qWKd+QVD5Uhyu31pLBNCJGEvrOEn2ntHBrUX3e74Bddda7Y KzyKcMerkrHe9/Z8pkvGStaqa+iJeLthgL9d+E5KnWrq3pjusSZ532jiLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFClupXOa/B/MHxCkIzC7lhw9+bWRMB8GA1UdIwQY MBaAFO3Ky9orSzIx0ItR8W8bKnwII3rRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2NyTDJpdExNakhRaTFIeGJ4c3FmQWdqZXRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9hM2ViZjktNGYyZC00YWMxLWI5MjIt MWJkYWExYTY5ODE1LzEvN2NyTDJpdExNakhRaTFIeGJ4c3FmQWdqZXRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9hM2ViZjktNGYyZC00YWMxLWI5MjItMWJkYWExYTY5ODE1 LzEvN2NyTDJpdExNakhRaTFIeGJ4c3FmQWdqZXRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAebmHevte 0cbfGfazzWAXw3cmG4LwUCwCmHpGA6589c7eOERR05v/oWTfSp0Ri1G4hDVFKY8R ROgopzWbYHlGxhplOxSbip3r5sQjot3h3+VIaLXATIY1v4Y7k2QUzQyvs4cEgXxJ TSkDJRG1jDWrkIeGWHLsxmqj8Rz29jCYwc0fXhYSJdkAiqPpvOF4rx4MZ8i4pcSa rD1KJcxnCrveJxmbBJh5gj8C2YrYM9CN9eaCg6pRgpT48B0ftvuuACNGgJPKS4TC vFoIm8W+597GOai5tsMB4yXVnHg9R3SLYyPt6rTAclWVEff99hhavN1OOyYZy6fx KHhavaPcEN/muA== -----END CERTIFICATE-----Generated at Tue Feb 10 02:59:57 2026 by rpki-client