This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.mft File: Rg7_G6LS91kqRNITPSB7KT4kGsI.mft (raw, json) Hash identifier: FiKhy/Rrj5UA0WU7S4g8Z3nYMI6UKXVLAtTUpkjMjbQ= Subject key identifier: 22:60:E0:1B:8F:85:A2:57:C6:F9:67:47:AA:DE:45:94:74:5A:0E:DD Authority key identifier: 46:0E:FF:1B:A2:D2:F7:59:2A:44:D2:13:3D:20:7B:29:3E:24:1A:C2 Certificate issuer: /CN=460eff1ba2d2f7592a44d2133d207b293e241ac2 Certificate serial: 019C43FDFE4560CDB8BCB871CD2562AB694C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rg7_G6LS91kqRNITPSB7KT4kGsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.mft Manifest number: 0D17 Signing time: Mon 09 Feb 2026 20:00:44 +0000 Manifest this update: Mon 09 Feb 2026 20:00:44 +0000 Manifest next update: Tue 10 Feb 2026 20:00:44 +0000 Files and hashes: 1: Rg7_G6LS91kqRNITPSB7KT4kGsI.crl (hash: 1mUCHVau+RpS3hOI2j14PEHmzzER8e/FSN6Cho3ohIc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.crl rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.mft rsync://rpki.ripe.net/repository/DEFAULT/Rg7_G6LS91kqRNITPSB7KT4kGsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:fe:45:60:cd:b8:bc:b8:71:cd:25:62:ab:69:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=460eff1ba2d2f7592a44d2133d207b293e241ac2 Validity Not Before: Feb 9 20:00:44 2026 GMT Not After : Feb 10 20:00:44 2026 GMT Subject: CN=2260e01b8f85a257c6f96747aade4594745a0edd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f0:c5:c4:1b:e1:65:55:9b:92:c9:11:e7:ab: 2e:39:3f:54:82:b2:b0:dd:2c:66:b6:f2:b1:54:74: 37:97:8f:5a:3d:69:f6:47:da:b4:76:4d:43:86:e6: b3:e8:e7:8b:3c:b7:b5:ad:16:24:e7:82:7b:7a:d0: d0:51:0d:b9:15:a6:62:5a:b1:d7:ad:bb:91:56:e1: 60:2e:e3:6d:b9:ba:ee:09:6d:6a:b4:eb:1d:62:f0: dc:5e:0e:d5:34:72:53:2d:5d:29:c6:23:bd:1d:2b: b2:0c:a2:fe:4b:16:11:9f:62:b3:3e:a5:be:6c:e5: c2:1a:62:1d:d5:85:94:2c:88:dc:88:2b:93:7a:dc: c2:11:73:f0:0d:fc:cd:11:a0:27:be:b0:49:c8:80: 70:62:93:0d:1c:01:d7:29:be:de:c6:74:5e:9e:27: 5b:19:33:ab:1d:c6:03:0b:7b:f2:1d:a4:f9:a7:58: d8:ad:25:2c:83:d4:48:62:f2:5c:e7:18:f6:01:a8: a5:71:cf:20:ba:e9:72:c7:cc:01:3c:44:e6:89:0b: 9d:2e:74:a8:0d:17:cf:36:27:99:25:3b:d6:df:b4: 36:8b:ef:a8:4f:69:12:c4:99:ab:09:27:10:59:29: 48:20:15:dc:3f:e2:46:11:57:c9:bf:c6:2a:3c:8c: 60:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:60:E0:1B:8F:85:A2:57:C6:F9:67:47:AA:DE:45:94:74:5A:0E:DD X509v3 Authority Key Identifier: keyid:46:0E:FF:1B:A2:D2:F7:59:2A:44:D2:13:3D:20:7B:29:3E:24:1A:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rg7_G6LS91kqRNITPSB7KT4kGsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:fd:a7:59:64:17:bf:9c:e0:d3:33:6d:3a:46:46:16:cf:ea: 69:63:40:57:d4:a8:b8:c5:b4:03:38:2c:4b:b4:2e:71:c2:7d: c2:39:2f:13:be:ea:25:cf:c4:49:26:fd:49:5a:4f:7e:ba:53: 0a:5f:41:dc:d5:4e:2e:aa:3d:08:e3:9f:33:5c:3b:20:a6:ca: 71:2a:af:10:4e:d0:21:59:5e:e2:0c:5d:c7:af:a6:f4:f1:2e: 2e:88:b7:7d:a2:75:5c:b6:2b:62:bd:86:bd:9d:b9:38:62:71: 8e:ae:7f:8c:2a:36:00:4e:81:5a:59:68:5b:dd:5f:6f:ae:98: 96:4b:d8:1c:5f:99:61:80:9f:50:7e:67:2a:05:f1:0d:b4:fc: b2:1d:61:38:c7:d7:27:2a:b4:04:d9:3a:f3:89:de:83:4a:16: 4d:2e:85:53:57:66:dd:a5:07:cf:69:fb:19:93:84:88:9a:e8: 5c:ab:aa:9e:69:38:93:84:4f:13:0f:5c:ef:0e:5b:b1:80:44: 9a:ab:4e:f9:e1:0f:0b:fa:e3:52:d0:82:68:61:82:aa:25:b2: 75:e7:af:31:9c:da:46:7c:31:8d:40:9d:0b:19:ce:22:e1:d7: a7:25:79:50:38:7c:9e:4a:2f:af:f1:25:dc:ca:4a:cb:d4:f0: 1a:0b:3a:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/f5FYM24vLhxzSViq2lMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2MGVmZjFiYTJkMmY3NTkyYTQ0ZDIxMzNkMjA3YjI5M2Uy NDFhYzIwHhcNMjYwMjA5MjAwMDQ0WhcNMjYwMjEwMjAwMDQ0WjAzMTEwLwYDVQQD EygyMjYwZTAxYjhmODVhMjU3YzZmOTY3NDdhYWRlNDU5NDc0NWEwZWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfDFxBvhZVWbkskR56suOT9UgrKw 3SxmtvKxVHQ3l49aPWn2R9q0dk1Dhuaz6OeLPLe1rRYk54J7etDQUQ25FaZiWrHX rbuRVuFgLuNtubruCW1qtOsdYvDcXg7VNHJTLV0pxiO9HSuyDKL+SxYRn2KzPqW+ bOXCGmId1YWULIjciCuTetzCEXPwDfzNEaAnvrBJyIBwYpMNHAHXKb7exnRenidb GTOrHcYDC3vyHaT5p1jYrSUsg9RIYvJc5xj2Aailcc8guulyx8wBPETmiQudLnSo DRfPNieZJTvW37Q2i++oT2kSxJmrCScQWSlIIBXcP+JGEVfJv8YqPIxgpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCJg4BuPhaJXxvlnR6reRZR0Wg7dMB8GA1UdIwQY MBaAFEYO/xui0vdZKkTSEz0geyk+JBrCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmc3X0c2TFM5MWtxUk5JVFBTQjdLVDRrR3NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8yZWY3N2UtOTE5Zi00ODZjLTgxMjQt YTNiMTc5OGU0MTMxLzEvUmc3X0c2TFM5MWtxUk5JVFBTQjdLVDRrR3NJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8yZWY3N2UtOTE5Zi00ODZjLTgxMjQtYTNiMTc5OGU0MTMx LzEvUmc3X0c2TFM5MWtxUk5JVFBTQjdLVDRrR3NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEf2nWWQX v5zg0zNtOkZGFs/qaWNAV9SouMW0AzgsS7QuccJ9wjkvE77qJc/ESSb9SVpPfrpT Cl9B3NVOLqo9COOfM1w7IKbKcSqvEE7QIVle4gxdx6+m9PEuLoi3faJ1XLYrYr2G vZ25OGJxjq5/jCo2AE6BWlloW91fb66YlkvYHF+ZYYCfUH5nKgXxDbT8sh1hOMfX Jyq0BNk684neg0oWTS6FU1dm3aUHz2n7GZOEiJroXKuqnmk4k4RPEw9c7w5bsYBE mqtO+eEPC/rjUtCCaGGCqiWydeevMZzaRnwxjUCdCxnOIuHXpyV5UDh8nkovr/El 3MpKy9TwGgs6nA== -----END CERTIFICATE-----Generated at Tue Feb 10 02:55:43 2026 by rpki-client