This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft File: 7xPpqiScWVAsDPi3hNQz-nUCBMs.mft (raw, json) Hash identifier: 3NXQO+L7c9X9Gv+nZSr3E1PO+Hza9nofcmSFeWqsE78= Subject key identifier: F4:CF:1B:BC:6C:03:C6:06:DB:94:12:F3:F1:A8:1F:AC:40:81:5F:F2 Authority key identifier: EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB Certificate issuer: /CN=ef13e9aa249c59502c0cf8b784d433fa750204cb Certificate serial: 019C41347C4620C907803DD6876DA9BD0236 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft Manifest number: 0A82 Signing time: Mon 09 Feb 2026 07:01:24 +0000 Manifest this update: Mon 09 Feb 2026 07:01:24 +0000 Manifest next update: Tue 10 Feb 2026 07:01:24 +0000 Files and hashes: 1: 7xPpqiScWVAsDPi3hNQz-nUCBMs.crl (hash: eIkQjpjJ34QR8Pq1JokuvcclIkd1HUtsGEWJza1g3NQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:34:7c:46:20:c9:07:80:3d:d6:87:6d:a9:bd:02:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef13e9aa249c59502c0cf8b784d433fa750204cb Validity Not Before: Feb 9 07:01:24 2026 GMT Not After : Feb 10 07:01:24 2026 GMT Subject: CN=f4cf1bbc6c03c606db9412f3f1a81fac40815ff2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:68:a3:00:77:7b:3f:e5:6d:f4:d6:0a:7e:40: ea:f7:50:d2:fa:36:e0:bf:1e:2d:4d:e4:f3:a0:41: 75:c1:f0:f3:13:43:c0:d1:fd:91:8e:9f:e4:07:91: 40:5d:6a:6a:2b:71:c9:45:c2:55:c2:be:05:cd:e9: c2:9b:25:3a:cb:5d:72:3d:29:7a:80:20:84:6d:51: 43:45:80:05:41:d3:c5:14:ab:89:e2:06:6c:d8:d9: 32:75:dc:15:35:a1:3b:38:e6:cb:ce:27:15:3b:16: 94:4c:71:04:ab:66:e5:e6:d2:28:c8:ce:2f:09:82: 26:e0:51:8c:9c:db:bd:e6:4d:39:b9:ad:fe:ba:e9: 90:31:06:92:86:77:79:0d:8b:92:dc:3b:fe:10:e4: a5:9f:81:c9:05:4d:e6:89:dc:5a:98:9a:cc:fb:a5: ee:ee:59:c0:5a:ad:26:07:0e:ce:5c:c6:17:ee:9c: f8:74:02:52:58:ff:81:6b:4e:ca:f9:86:c6:d4:90: da:27:9e:b6:d5:b9:45:c4:7a:2e:61:7b:e1:f8:60: 5b:70:ef:97:f4:10:83:79:f6:f6:db:88:8e:d3:fd: 0b:1e:2f:5b:84:fe:df:00:32:2b:16:ee:76:b8:38: f1:31:ee:27:82:c4:7f:a8:f3:74:55:1b:4d:a1:4e: cb:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:CF:1B:BC:6C:03:C6:06:DB:94:12:F3:F1:A8:1F:AC:40:81:5F:F2 X509v3 Authority Key Identifier: keyid:EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:11:9a:55:fb:99:ef:ce:80:cf:72:cb:b8:e9:15:2f:77:15: 32:3d:4f:09:16:e2:fd:11:8a:e5:11:88:67:3f:fc:9e:85:61: 51:31:c8:4c:d1:e8:57:fb:dd:de:16:d4:69:e5:89:6b:c2:81: 8a:67:d3:87:93:84:02:55:dc:7c:f2:55:ac:2c:c6:80:54:8f: 96:92:17:84:2c:4b:e2:fd:33:86:05:be:58:44:ea:74:7e:d6: 4f:6d:33:44:7a:5c:af:08:c0:f1:d3:47:61:4b:a4:30:90:b6: e2:10:2d:ee:46:c8:95:f3:86:f1:7c:14:1b:1a:d6:c9:98:ea: 32:99:7c:21:7d:42:45:06:5c:09:56:b5:a1:4e:25:32:48:33: 72:18:cb:0a:8b:ea:60:ea:6b:c5:d3:59:fc:d4:24:99:6e:aa: ee:5f:94:3c:cc:f1:a6:2d:38:eb:67:84:da:99:d2:12:d8:a5: 22:ba:3e:ea:20:04:6c:d6:ae:eb:68:95:19:ed:4f:31:46:35: 23:b4:82:01:82:3f:bd:c1:3c:25:96:11:84:8e:c9:ba:46:1d: a4:47:35:8f:93:e3:8d:28:b0:57:50:a3:84:62:25:5e:4b:2e: b7:cb:74:b7:74:00:d9:02:6b:26:4c:22:67:df:0d:27:50:ce: 1c:c8:ba:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBNHxGIMkHgD3Wh22pvQI2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMTNlOWFhMjQ5YzU5NTAyYzBjZjhiNzg0ZDQzM2ZhNzUw MjA0Y2IwHhcNMjYwMjA5MDcwMTI0WhcNMjYwMjEwMDcwMTI0WjAzMTEwLwYDVQQD EyhmNGNmMWJiYzZjMDNjNjA2ZGI5NDEyZjNmMWE4MWZhYzQwODE1ZmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mijAHd7P+Vt9NYKfkDq91DS+jbg vx4tTeTzoEF1wfDzE0PA0f2Rjp/kB5FAXWpqK3HJRcJVwr4FzenCmyU6y11yPSl6 gCCEbVFDRYAFQdPFFKuJ4gZs2NkyddwVNaE7OObLzicVOxaUTHEEq2bl5tIoyM4v CYIm4FGMnNu95k05ua3+uumQMQaShnd5DYuS3Dv+EOSln4HJBU3midxamJrM+6Xu 7lnAWq0mBw7OXMYX7pz4dAJSWP+Ba07K+YbG1JDaJ5621blFxHouYXvh+GBbcO+X 9BCDefb224iO0/0LHi9bhP7fADIrFu52uDjxMe4ngsR/qPN0VRtNoU7LNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPTPG7xsA8YG25QS8/GoH6xAgV/yMB8GA1UdIwQY MBaAFO8T6aoknFlQLAz4t4TUM/p1AgTLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3hQcHFpU2NXVkFzRFBpM2hOUXotblVDQk1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9iM2M1MjItZjY4Yi00Yjk4LWE1ODQt NTIxYjI1ODdkZDBjLzEvN3hQcHFpU2NXVkFzRFBpM2hOUXotblVDQk1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9iM2M1MjItZjY4Yi00Yjk4LWE1ODQtNTIxYjI1ODdkZDBj LzEvN3hQcHFpU2NXVkFzRFBpM2hOUXotblVDQk1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFhGaVfuZ 786Az3LLuOkVL3cVMj1PCRbi/RGK5RGIZz/8noVhUTHITNHoV/vd3hbUaeWJa8KB imfTh5OEAlXcfPJVrCzGgFSPlpIXhCxL4v0zhgW+WETqdH7WT20zRHpcrwjA8dNH YUukMJC24hAt7kbIlfOG8XwUGxrWyZjqMpl8IX1CRQZcCVa1oU4lMkgzchjLCovq YOprxdNZ/NQkmW6q7l+UPMzxpi0462eE2pnSEtilIro+6iAEbNau62iVGe1PMUY1 I7SCAYI/vcE8JZYRhI7JukYdpEc1j5PjjSiwV1CjhGIlXksut8t0t3QA2QJrJkwi Z98NJ1DOHMi6zg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:46 2026 by rpki-client