This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.mft File: 7S-mhtGMgCCvxq31Wv2-Zg26rBU.mft (raw, json) Hash identifier: yCb0b52d247+aojJdOsBYgwsWbgqA9l0pwYDNT4rAMQ= Subject key identifier: 4C:5E:BC:C8:16:53:6C:86:A4:12:21:D1:56:77:93:C0:A7:16:04:B0 Authority key identifier: ED:2F:A6:86:D1:8C:80:20:AF:C6:AD:F5:5A:FD:BE:66:0D:BA:AC:15 Certificate issuer: /CN=ed2fa686d18c8020afc6adf55afdbe660dbaac15 Certificate serial: 019C43594A4CA40EE65DFB780928E33D3DCF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7S-mhtGMgCCvxq31Wv2-Zg26rBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.mft Manifest number: 1513 Signing time: Mon 09 Feb 2026 17:00:51 +0000 Manifest this update: Mon 09 Feb 2026 17:00:51 +0000 Manifest next update: Tue 10 Feb 2026 17:00:51 +0000 Files and hashes: 1: 7S-mhtGMgCCvxq31Wv2-Zg26rBU.crl (hash: TSs9cMGjknu+go7TPjqn5LzrJ0J1t/paCEOt3MzmcrQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.mft rsync://rpki.ripe.net/repository/DEFAULT/7S-mhtGMgCCvxq31Wv2-Zg26rBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:4a:4c:a4:0e:e6:5d:fb:78:09:28:e3:3d:3d:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed2fa686d18c8020afc6adf55afdbe660dbaac15 Validity Not Before: Feb 9 17:00:51 2026 GMT Not After : Feb 10 17:00:51 2026 GMT Subject: CN=4c5ebcc816536c86a41221d1567793c0a71604b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:76:ec:9d:f9:f9:15:49:57:1f:27:10:6d:6a: 76:96:ce:b9:40:66:86:7a:91:aa:b9:2c:c7:cc:b4: f2:7a:7e:7a:c3:5f:d4:13:ec:4a:87:73:be:10:c2: 2d:17:2e:7b:97:2f:18:31:00:1d:d6:8f:4c:be:ba: a1:b4:16:87:79:52:bc:38:14:7e:d1:e4:ba:b1:c2: 75:54:63:1a:45:fe:5d:57:bc:11:58:8c:5f:51:05: 99:65:e6:c8:95:e9:a7:91:d6:f0:9a:80:90:97:7d: 1a:c8:60:40:92:c1:6e:d2:dd:46:71:04:15:ef:19: ae:d7:7c:2d:c9:4f:1f:67:1a:5a:2a:cd:1e:53:19: 6a:10:7a:0c:80:e3:47:e3:6c:68:9d:d5:7b:28:29: 50:e3:0b:47:b9:91:5f:a8:af:cc:92:5f:39:2b:f3: e8:58:c5:bb:99:c7:36:f9:c3:9c:8b:9e:1a:aa:90: f6:a9:ae:02:0d:5c:f0:61:04:c5:aa:bc:8d:d9:c5: 0c:5f:0b:f4:0f:40:ad:a4:56:0d:29:06:e5:b0:b8: 34:21:a6:a3:61:c5:33:80:91:e8:57:25:1e:85:df: ba:da:be:95:16:11:27:36:9c:cd:43:fb:b2:74:de: c1:76:bb:01:df:47:4c:50:b0:fb:0f:20:d0:90:52: 8b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:5E:BC:C8:16:53:6C:86:A4:12:21:D1:56:77:93:C0:A7:16:04:B0 X509v3 Authority Key Identifier: keyid:ED:2F:A6:86:D1:8C:80:20:AF:C6:AD:F5:5A:FD:BE:66:0D:BA:AC:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7S-mhtGMgCCvxq31Wv2-Zg26rBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:64:69:55:07:99:1b:c7:35:3a:0c:12:d0:43:cc:3d:d9:22: 4d:8c:b8:3d:22:27:f3:6e:67:c6:04:77:9e:ca:68:7e:93:7b: 51:cc:01:f9:40:cd:68:b2:77:9c:f7:1c:0e:ed:ce:62:35:a0: 86:fa:47:e6:03:0e:38:c9:96:18:36:02:bf:76:8e:79:3f:d8: 45:90:af:9f:d2:6e:6e:44:42:72:7e:70:7e:d1:43:8c:9e:7f: 68:74:cd:b5:df:29:3b:e6:c8:42:f5:2a:63:01:cc:55:b0:b1: 25:f3:fa:20:e8:d7:9f:9b:cb:98:38:d2:96:c8:ee:29:fb:95: 08:00:a4:82:04:fa:78:1f:be:42:f5:61:0d:60:39:68:4c:ef: 78:5f:69:b2:06:6f:a9:3e:8d:ff:56:2f:3a:b5:7d:a9:32:97: 9f:aa:79:7e:25:fc:9c:46:0a:1c:c4:c3:0c:23:9c:d6:00:61: 4f:6f:71:86:36:e7:61:d0:82:ac:3f:b6:5a:de:e9:81:e8:e6: 91:e4:fe:8d:af:11:29:54:c4:f8:08:bd:70:fd:cc:f1:cc:43: dd:93:9b:e5:83:33:fe:25:1f:82:fb:99:75:ca:5f:57:1f:ce: d6:51:cd:de:08:3e:ca:dc:97:32:77:2e:3b:26:62:13:58:d4: a5:49:07:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWUpMpA7mXft4CSjjPT3PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkMmZhNjg2ZDE4YzgwMjBhZmM2YWRmNTVhZmRiZTY2MGRi YWFjMTUwHhcNMjYwMjA5MTcwMDUxWhcNMjYwMjEwMTcwMDUxWjAzMTEwLwYDVQQD Eyg0YzVlYmNjODE2NTM2Yzg2YTQxMjIxZDE1Njc3OTNjMGE3MTYwNGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03bsnfn5FUlXHycQbWp2ls65QGaG epGquSzHzLTyen56w1/UE+xKh3O+EMItFy57ly8YMQAd1o9MvrqhtBaHeVK8OBR+ 0eS6scJ1VGMaRf5dV7wRWIxfUQWZZebIlemnkdbwmoCQl30ayGBAksFu0t1GcQQV 7xmu13wtyU8fZxpaKs0eUxlqEHoMgONH42xondV7KClQ4wtHuZFfqK/Mkl85K/Po WMW7mcc2+cOci54aqpD2qa4CDVzwYQTFqryN2cUMXwv0D0CtpFYNKQblsLg0Iaaj YcUzgJHoVyUehd+62r6VFhEnNpzNQ/uydN7BdrsB30dMULD7DyDQkFKL7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFExevMgWU2yGpBIh0VZ3k8CnFgSwMB8GA1UdIwQY MBaAFO0vpobRjIAgr8at9Vr9vmYNuqwVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1MtbWh0R01nQ0N2eHEzMVd2Mi1aZzI2ckJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kNzhmYzUtYmYzZS00Njg2LThkODUt YzMzZjhhMjExMjJjLzEvN1MtbWh0R01nQ0N2eHEzMVd2Mi1aZzI2ckJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kNzhmYzUtYmYzZS00Njg2LThkODUtYzMzZjhhMjExMjJj LzEvN1MtbWh0R01nQ0N2eHEzMVd2Mi1aZzI2ckJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh2RpVQeZ G8c1OgwS0EPMPdkiTYy4PSIn825nxgR3nspofpN7UcwB+UDNaLJ3nPccDu3OYjWg hvpH5gMOOMmWGDYCv3aOeT/YRZCvn9JubkRCcn5wftFDjJ5/aHTNtd8pO+bIQvUq YwHMVbCxJfP6IOjXn5vLmDjSlsjuKfuVCACkggT6eB++QvVhDWA5aEzveF9psgZv qT6N/1YvOrV9qTKXn6p5fiX8nEYKHMTDDCOc1gBhT29xhjbnYdCCrD+2Wt7pgejm keT+ja8RKVTE+Ai9cP3M8cxD3ZOb5YMz/iUfgvuZdcpfVx/O1lHN3gg+ytyXMncu OyZiE1jUpUkHeA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:23 2026 by rpki-client