This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft File: RD7UrkP6GQwQ_SxToQ494KvZi3g.mft (raw, json) Hash identifier: HsHeYP9Yvu9r2HYxzctVd9wjK4Jpwu9UL3vdve4mboc= Subject key identifier: A7:FA:DE:F2:DD:89:83:90:27:0F:0F:75:E3:AC:72:AB:AB:32:E1:3C Authority key identifier: 44:3E:D4:AE:43:FA:19:0C:10:FD:2C:53:A1:0E:3D:E0:AB:D9:8B:78 Certificate issuer: /CN=443ed4ae43fa190c10fd2c53a10e3de0abd98b78 Certificate serial: 019C420F96138D6D2466E67D6EB1F9C2D217 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft Manifest number: 1185 Signing time: Mon 09 Feb 2026 11:00:43 +0000 Manifest this update: Mon 09 Feb 2026 11:00:43 +0000 Manifest next update: Tue 10 Feb 2026 11:00:43 +0000 Files and hashes: 1: RD7UrkP6GQwQ_SxToQ494KvZi3g.crl (hash: TUCV3Yv2i0U7E0tgtX3UUw056OAdGvON6152dMuoKUM=) 2: xbkHK9BjxqqWppD29--gfkSmovk.roa (hash: hkkQkmlB4qFZaOaawyBYcXjPEkqDqcjHyvxZakCPMVc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:96:13:8d:6d:24:66:e6:7d:6e:b1:f9:c2:d2:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=443ed4ae43fa190c10fd2c53a10e3de0abd98b78 Validity Not Before: Feb 9 11:00:43 2026 GMT Not After : Feb 10 11:00:43 2026 GMT Subject: CN=a7fadef2dd898390270f0f75e3ac72abab32e13c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:65:94:ad:fe:fb:37:1d:4f:08:78:b8:7f:a5: 1d:b9:a2:63:25:59:7f:e5:6a:a2:16:18:fb:74:a0: b3:a1:48:ed:71:ab:c9:21:eb:61:64:65:dd:f6:4f: 0a:d1:2f:e3:eb:46:7b:ea:16:f6:27:a7:ce:a9:9d: ef:8b:3b:b2:58:91:c7:af:7d:30:ea:09:25:69:4f: 6b:a2:de:a3:4e:3c:11:a9:6e:5b:b4:28:fc:df:e2: 5d:f9:42:7a:ea:63:97:51:6f:2e:18:ed:13:79:9d: 75:58:8d:6a:a1:a7:95:34:8a:5b:0a:46:24:15:ba: 66:84:cc:5d:5e:b1:2f:d1:f0:28:f0:2f:32:95:23: 97:79:d0:85:fd:4c:11:e1:77:d8:73:d7:0b:cc:9b: 52:4e:92:60:fe:b9:d1:c4:84:ba:ac:10:fd:94:56: 5d:c7:77:6d:a6:c4:e0:6e:ed:98:f4:1e:e7:1f:0e: 66:5d:19:6c:7c:68:d0:91:1a:cd:c3:04:b8:fb:8a: 8b:55:f0:5d:49:33:e7:f7:d8:32:c6:bd:6d:27:90: b1:32:73:c8:20:73:da:7e:50:c0:4a:82:c3:20:d5: eb:5b:e2:b2:f5:0c:f5:23:b4:4b:a2:29:5a:77:d8: f9:85:0c:c7:97:f0:b1:d3:f2:98:08:e9:08:59:f8: db:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:FA:DE:F2:DD:89:83:90:27:0F:0F:75:E3:AC:72:AB:AB:32:E1:3C X509v3 Authority Key Identifier: keyid:44:3E:D4:AE:43:FA:19:0C:10:FD:2C:53:A1:0E:3D:E0:AB:D9:8B:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:8c:a8:99:7b:04:f8:f8:73:6c:f6:5e:5f:12:b4:a4:83:9e: ad:01:a9:55:f5:b7:da:d6:c8:fe:c6:cf:ad:17:54:13:2a:bc: 26:23:85:6d:66:e4:19:30:55:17:8f:53:bf:ac:43:a9:7d:1d: 01:a1:cc:95:9d:b6:0f:3d:ff:94:09:45:f4:09:ab:d6:97:7c: f9:d0:41:5b:fd:34:36:be:c3:fc:6e:ef:18:16:f8:89:38:69: 00:5a:ad:09:64:70:ae:54:d9:91:f1:35:ff:08:3e:8c:b3:8e: fb:42:b9:d7:cb:bc:50:04:db:18:0d:37:8d:dc:d0:0e:50:4a: 81:69:ba:15:f6:4e:a1:0f:04:f7:c0:78:9c:0e:b4:35:b3:12: 05:cb:fc:91:b4:77:cf:25:fa:66:c9:4f:d6:f9:90:15:93:d4: 72:9b:bb:d0:92:68:86:6f:af:cb:26:33:8e:9f:eb:ea:e3:34: bb:ce:c2:b8:ab:91:cc:c7:e9:ef:d3:65:70:bb:9d:7a:b1:b4: 91:5a:2a:0b:fe:a7:0b:b8:23:e8:e1:bb:e8:03:2e:d9:26:ca: 0c:cd:13:20:23:e1:09:92:75:23:e8:8e:51:25:01:15:cf:7d: b4:66:7e:70:fb:31:c9:4d:0d:3c:f1:4e:3d:f8:f0:af:8e:55: d7:67:e6:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD5YTjW0kZuZ9brH5wtIXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0M2VkNGFlNDNmYTE5MGMxMGZkMmM1M2ExMGUzZGUwYWJk OThiNzgwHhcNMjYwMjA5MTEwMDQzWhcNMjYwMjEwMTEwMDQzWjAzMTEwLwYDVQQD EyhhN2ZhZGVmMmRkODk4MzkwMjcwZjBmNzVlM2FjNzJhYmFiMzJlMTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGWUrf77Nx1PCHi4f6UduaJjJVl/ 5WqiFhj7dKCzoUjtcavJIethZGXd9k8K0S/j60Z76hb2J6fOqZ3vizuyWJHHr30w 6gklaU9rot6jTjwRqW5btCj83+Jd+UJ66mOXUW8uGO0TeZ11WI1qoaeVNIpbCkYk FbpmhMxdXrEv0fAo8C8ylSOXedCF/UwR4XfYc9cLzJtSTpJg/rnRxIS6rBD9lFZd x3dtpsTgbu2Y9B7nHw5mXRlsfGjQkRrNwwS4+4qLVfBdSTPn99gyxr1tJ5CxMnPI IHPaflDASoLDINXrW+Ky9Qz1I7RLoilad9j5hQzHl/Cx0/KYCOkIWfjbhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKf63vLdiYOQJw8PdeOscqurMuE8MB8GA1UdIwQY MBaAFEQ+1K5D+hkMEP0sU6EOPeCr2Yt4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkQ3VXJrUDZHUXdRX1N4VG9RNDk0S3ZaaTNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy85ODQxNWEtZjEyZS00YzFlLTg4MDYt MjFmZTVhZTllZjNiLzEvUkQ3VXJrUDZHUXdRX1N4VG9RNDk0S3ZaaTNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy85ODQxNWEtZjEyZS00YzFlLTg4MDYtMjFmZTVhZTllZjNi LzEvUkQ3VXJrUDZHUXdRX1N4VG9RNDk0S3ZaaTNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgoyomXsE +PhzbPZeXxK0pIOerQGpVfW32tbI/sbPrRdUEyq8JiOFbWbkGTBVF49Tv6xDqX0d AaHMlZ22Dz3/lAlF9Amr1pd8+dBBW/00Nr7D/G7vGBb4iThpAFqtCWRwrlTZkfE1 /wg+jLOO+0K518u8UATbGA03jdzQDlBKgWm6FfZOoQ8E98B4nA60NbMSBcv8kbR3 zyX6ZslP1vmQFZPUcpu70JJohm+vyyYzjp/r6uM0u87CuKuRzMfp79NlcLuderG0 kVoqC/6nC7gj6OG76AMu2SbKDM0TICPhCZJ1I+iOUSUBFc99tGZ+cPsxyU0NPPFO Pfjwr45V12fmgA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:09:54 2026 by rpki-client