This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft File: C7rRuSXg5WPbhdQdJwcF1xhApYg.mft (raw, json) Hash identifier: vU84q4v1RvzRf6oSENNUR/4GyiWwScfmYgXdkhZw9VE= Subject key identifier: 11:8A:DF:53:48:33:79:DF:FD:F2:6C:F2:77:DC:25:54:65:4D:43:CE Authority key identifier: 0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88 Certificate issuer: /CN=0bbad1b925e0e563db85d41d270705d71840a588 Certificate serial: 019C4434946E247DDCA32AEDF59A5E19B1EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft Manifest number: 0F98 Signing time: Mon 09 Feb 2026 21:00:22 +0000 Manifest this update: Mon 09 Feb 2026 21:00:22 +0000 Manifest next update: Tue 10 Feb 2026 21:00:22 +0000 Files and hashes: 1: 1K0i2XyGKd7Bi4qw3JSXv-7t3uo.roa (hash: RPMjT2FQ9x0V2uqd3ChoSH8foN5RoM/gd5M/7fF5CR0=) 2: C7rRuSXg5WPbhdQdJwcF1xhApYg.crl (hash: hanCGLE81zbPvAiqNBEyqxXL1if8v++sQRNqH146reo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:34:94:6e:24:7d:dc:a3:2a:ed:f5:9a:5e:19:b1:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bbad1b925e0e563db85d41d270705d71840a588 Validity Not Before: Feb 9 21:00:22 2026 GMT Not After : Feb 10 21:00:22 2026 GMT Subject: CN=118adf53483379dffdf26cf277dc2554654d43ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:14:bf:e9:d0:ab:95:0f:e4:62:71:f4:88:92: 96:54:30:2f:65:c0:db:15:2d:e4:44:c5:14:b5:1d: 3d:1c:eb:e4:1b:02:ed:29:ca:75:c5:7e:69:ea:6f: cc:c0:27:eb:52:1b:fe:55:bb:d7:a1:6e:1e:1d:25: 19:ec:1f:3b:10:b0:84:20:ff:7a:52:49:8b:ac:2f: 19:48:fc:67:27:d4:4b:aa:38:aa:03:51:31:3c:ee: d5:8e:e0:4f:dd:42:a6:d5:79:0e:2f:f7:f3:3a:bd: 70:a1:f9:e3:5e:38:e5:f0:29:12:1c:cf:41:b8:4c: b1:ee:16:3e:2d:70:22:4b:2f:e3:f8:ec:49:99:d7: 34:c3:aa:08:d1:21:a0:30:fe:ef:71:21:37:8b:92: 5f:db:9f:63:bd:1f:49:f2:14:e4:81:ae:a9:f5:09: 0b:53:e7:d2:11:4a:fc:6e:6a:3f:52:a5:be:93:c1: 0f:2c:49:2a:02:cf:aa:d3:97:39:dd:6d:2b:c7:bb: 98:3f:44:af:bc:45:b5:03:8c:0c:c6:79:47:ac:7d: aa:40:ec:a1:7d:70:5a:1f:ef:cd:7a:f1:59:1d:fc: de:8a:08:41:36:07:1b:e0:47:35:72:a5:26:d3:10: bd:a8:cf:db:21:73:f8:dc:76:54:4d:c9:54:15:cd: 30:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:8A:DF:53:48:33:79:DF:FD:F2:6C:F2:77:DC:25:54:65:4D:43:CE X509v3 Authority Key Identifier: keyid:0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:27:d1:80:23:7c:7b:c6:08:4e:4e:1f:3e:b5:f6:97:55:d2: 83:8e:30:72:06:c6:1b:6c:aa:2c:53:c7:da:e7:28:8d:21:c4: 02:85:b6:35:84:80:3b:d1:b6:55:f2:48:d9:3e:dc:c4:11:97: 7e:86:60:af:0b:48:f8:9d:7a:62:d2:0e:6d:7d:3d:dd:f6:4e: c9:46:55:82:79:18:c5:d4:31:9a:33:0b:3f:ba:11:1a:f6:d2: e3:4c:9c:ad:73:7f:c2:22:3f:86:69:7f:d1:45:47:b2:0c:c2: 7f:ec:d6:2b:68:80:19:cc:f1:f4:79:59:e2:d8:6c:b1:80:70: b3:1f:12:f9:60:26:3d:9b:86:3e:d4:7a:35:ba:78:f7:1b:31: 15:c9:e9:99:5d:be:61:be:79:2a:54:4b:39:3c:40:84:9d:2e: b2:20:e0:5b:95:02:76:8b:10:16:4a:26:c1:5a:2d:43:32:52: 81:3f:1a:0e:40:90:cd:e9:f9:38:97:55:2a:c8:ee:28:1e:6f: e7:f3:e7:e6:5c:f7:8c:32:9d:d0:43:b5:de:66:71:1b:a6:02: 97:3f:55:4e:45:96:cf:c6:77:b2:44:af:79:1e:3e:68:d2:7d: b6:bb:63:16:37:3d:aa:f1:9c:34:c7:2e:e0:63:04:d9:bb:4f: a8:fa:d7:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxENJRuJH3coyrt9ZpeGbHqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiYmFkMWI5MjVlMGU1NjNkYjg1ZDQxZDI3MDcwNWQ3MTg0 MGE1ODgwHhcNMjYwMjA5MjEwMDIyWhcNMjYwMjEwMjEwMDIyWjAzMTEwLwYDVQQD EygxMThhZGY1MzQ4MzM3OWRmZmRmMjZjZjI3N2RjMjU1NDY1NGQ0M2NlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6hS/6dCrlQ/kYnH0iJKWVDAvZcDb FS3kRMUUtR09HOvkGwLtKcp1xX5p6m/MwCfrUhv+VbvXoW4eHSUZ7B87ELCEIP96 UkmLrC8ZSPxnJ9RLqjiqA1ExPO7VjuBP3UKm1XkOL/fzOr1wofnjXjjl8CkSHM9B uEyx7hY+LXAiSy/j+OxJmdc0w6oI0SGgMP7vcSE3i5Jf259jvR9J8hTkga6p9QkL U+fSEUr8bmo/UqW+k8EPLEkqAs+q05c53W0rx7uYP0SvvEW1A4wMxnlHrH2qQOyh fXBaH+/NevFZHfzeighBNgcb4Ec1cqUm0xC9qM/bIXP43HZUTclUFc0wuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBGK31NIM3nf/fJs8nfcJVRlTUPOMB8GA1UdIwQY MBaAFAu60bkl4OVj24XUHScHBdcYQKWIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzdyUnVTWGc1V1BiaGRRZEp3Y0YxeGhBcFlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8yMmQ5YjMtZmEwYi00Y2YwLTk3NDAt MmY3ZmQxZjBlOWMzLzEvQzdyUnVTWGc1V1BiaGRRZEp3Y0YxeGhBcFlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi8yMmQ5YjMtZmEwYi00Y2YwLTk3NDAtMmY3ZmQxZjBlOWMz LzEvQzdyUnVTWGc1V1BiaGRRZEp3Y0YxeGhBcFlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXifRgCN8 e8YITk4fPrX2l1XSg44wcgbGG2yqLFPH2ucojSHEAoW2NYSAO9G2VfJI2T7cxBGX foZgrwtI+J16YtIObX093fZOyUZVgnkYxdQxmjMLP7oRGvbS40ycrXN/wiI/hml/ 0UVHsgzCf+zWK2iAGczx9HlZ4thssYBwsx8S+WAmPZuGPtR6Nbp49xsxFcnpmV2+ Yb55KlRLOTxAhJ0usiDgW5UCdosQFkomwVotQzJSgT8aDkCQzen5OJdVKsjuKB5v 5/Pn5lz3jDKd0EO13mZxG6YClz9VTkWWz8Z3skSveR4+aNJ9trtjFjc9qvGcNMcu 4GME2btPqPrX1g== -----END CERTIFICATE-----Generated at Tue Feb 10 06:04:14 2026 by rpki-client