This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft File: A-7ifdtJC7lmnuug4RaUFkyi6Og.mft (raw, json) Hash identifier: ZvcO+p7VRN0fFPWWaMb8FZeor8kTVgQHFgDeduWXl3g= Subject key identifier: A1:85:4A:05:17:1E:2C:D1:B4:EC:A2:1D:6B:10:13:65:08:10:AA:7B Authority key identifier: 03:EE:E2:7D:DB:49:0B:B9:66:9E:EB:A0:E1:16:94:16:4C:A2:E8:E8 Certificate issuer: /CN=03eee27ddb490bb9669eeba0e11694164ca2e8e8 Certificate serial: 019C416A971CFF7454B5DD9D8408E46E1731 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft Manifest number: 04CB Signing time: Mon 09 Feb 2026 08:00:30 +0000 Manifest this update: Mon 09 Feb 2026 08:00:30 +0000 Manifest next update: Tue 10 Feb 2026 08:00:30 +0000 Files and hashes: 1: A-7ifdtJC7lmnuug4RaUFkyi6Og.crl (hash: M3Y5/rYxIgKIv/dN8rNqcvxqhwiRzq7wdMwrfbjzlSQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 08:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:6a:97:1c:ff:74:54:b5:dd:9d:84:08:e4:6e:17:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03eee27ddb490bb9669eeba0e11694164ca2e8e8 Validity Not Before: Feb 9 08:00:30 2026 GMT Not After : Feb 10 08:00:30 2026 GMT Subject: CN=a1854a05171e2cd1b4eca21d6b1013650810aa7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b7:3e:de:23:03:c4:1a:39:81:80:e1:43:83: 9c:4c:ab:1c:86:0a:8e:d1:64:81:9d:b6:d5:28:7a: 5e:54:8b:b2:08:ac:45:f4:54:55:1f:49:a7:0d:50: 7d:9c:c4:ed:13:b7:87:9d:e7:4b:82:4c:98:b9:d6: e1:a2:24:85:6f:07:70:e2:2e:b4:39:15:2a:9f:da: 54:7a:6a:18:48:c3:97:d8:7c:66:f3:f7:1b:d3:fd: 99:01:65:7d:67:a4:ab:7f:70:99:47:7f:08:2a:2d: 2c:57:73:67:a8:b3:9b:0e:b5:21:09:ac:e4:99:06: c7:ea:fd:2d:3e:de:ce:c0:03:61:4d:60:09:54:b6: fa:6d:43:96:d9:a0:f9:a9:83:b6:e1:00:a6:f5:27: f2:f8:e9:e4:29:bd:ef:c2:39:35:3d:6a:69:76:b1: e6:d9:8a:a3:b0:fc:fb:05:57:7b:15:b9:10:b3:71: 2f:60:db:44:bf:4d:07:de:bb:27:13:6b:38:07:e0: 2e:35:2b:70:b8:5d:43:e9:8b:e1:8e:f0:83:d2:cd: 7e:32:14:27:be:71:10:1d:8f:95:18:aa:ab:af:ae: 42:3d:bf:06:a6:c1:7b:14:ba:31:cb:f5:84:72:0e: b7:6c:d3:42:b0:4c:95:1b:71:05:04:88:19:16:4d: c8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:85:4A:05:17:1E:2C:D1:B4:EC:A2:1D:6B:10:13:65:08:10:AA:7B X509v3 Authority Key Identifier: keyid:03:EE:E2:7D:DB:49:0B:B9:66:9E:EB:A0:E1:16:94:16:4C:A2:E8:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:80:89:4d:df:d0:13:ec:61:29:a6:8f:d8:3d:a6:76:72:a5: 07:90:60:4b:ff:22:d9:78:d7:f6:29:49:64:72:77:b4:15:48: f7:37:78:dc:5b:11:b0:de:e9:07:3a:ac:81:a2:c2:ef:3c:22: 33:a8:ad:6e:df:b7:71:bb:ca:28:b3:38:f3:49:e9:21:b3:07: 22:ed:fd:00:54:ff:d7:cb:04:ad:6c:0e:cb:28:d1:47:ab:02: 42:6f:2a:1a:1d:52:c8:de:fb:ee:3b:f9:2c:bb:87:e8:13:6e: 6c:d7:bd:65:2b:c1:3d:ff:6c:57:7b:39:0a:75:6f:cb:a0:e9: f0:e5:09:f4:6e:5b:61:53:b9:49:1a:74:a8:33:3d:4d:a7:2a: f4:ee:e9:6c:58:5b:31:14:c6:d6:34:06:4b:44:53:15:43:6a: 4c:ee:1c:69:c2:55:e4:c4:4c:94:a3:a4:be:d3:91:73:77:ce: 9d:69:7f:4b:e2:8a:82:da:0c:e0:1a:b5:a7:68:e7:fc:83:49: 15:e5:95:0a:48:4f:fe:e7:a3:2b:8b:ad:3b:67:23:4c:88:95: 78:e9:29:e5:41:d7:04:d4:4c:57:15:7a:8b:76:ae:58:28:9c: bd:cb:6c:14:b9:da:92:9e:a7:94:f2:83:36:13:43:bd:00:0a: 3a:92:d9:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBapcc/3RUtd2dhAjkbhcxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzZWVlMjdkZGI0OTBiYjk2NjllZWJhMGUxMTY5NDE2NGNh MmU4ZTgwHhcNMjYwMjA5MDgwMDMwWhcNMjYwMjEwMDgwMDMwWjAzMTEwLwYDVQQD EyhhMTg1NGEwNTE3MWUyY2QxYjRlY2EyMWQ2YjEwMTM2NTA4MTBhYTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbc+3iMDxBo5gYDhQ4OcTKschgqO 0WSBnbbVKHpeVIuyCKxF9FRVH0mnDVB9nMTtE7eHnedLgkyYudbhoiSFbwdw4i60 ORUqn9pUemoYSMOX2Hxm8/cb0/2ZAWV9Z6Srf3CZR38IKi0sV3NnqLObDrUhCazk mQbH6v0tPt7OwANhTWAJVLb6bUOW2aD5qYO24QCm9Sfy+OnkKb3vwjk1PWppdrHm 2YqjsPz7BVd7FbkQs3EvYNtEv00H3rsnE2s4B+AuNStwuF1D6YvhjvCD0s1+MhQn vnEQHY+VGKqrr65CPb8GpsF7FLoxy/WEcg63bNNCsEyVG3EFBIgZFk3IGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKGFSgUXHizRtOyiHWsQE2UIEKp7MB8GA1UdIwQY MBaAFAPu4n3bSQu5Zp7roOEWlBZMoujoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQS03aWZkdEpDN2xtbnV1ZzRSYVVGa3lpNk9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9kNGQyMzEtYTlhNS00MDdiLWJhMjUt OGQ4YzU5MmRhNDIwLzEvQS03aWZkdEpDN2xtbnV1ZzRSYVVGa3lpNk9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9kNGQyMzEtYTlhNS00MDdiLWJhMjUtOGQ4YzU5MmRhNDIw LzEvQS03aWZkdEpDN2xtbnV1ZzRSYVVGa3lpNk9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnICJTd/Q E+xhKaaP2D2mdnKlB5BgS/8i2XjX9ilJZHJ3tBVI9zd43FsRsN7pBzqsgaLC7zwi M6itbt+3cbvKKLM480npIbMHIu39AFT/18sErWwOyyjRR6sCQm8qGh1SyN777jv5 LLuH6BNubNe9ZSvBPf9sV3s5CnVvy6Dp8OUJ9G5bYVO5SRp0qDM9Tacq9O7pbFhb MRTG1jQGS0RTFUNqTO4cacJV5MRMlKOkvtORc3fOnWl/S+KKgtoM4Bq1p2jn/INJ FeWVCkhP/uejK4utO2cjTIiVeOkp5UHXBNRMVxV6i3auWCicvctsFLnakp6nlPKD NhNDvQAKOpLZ0A== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:40 2026 by rpki-client