This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft File: 7ix0WZPMS28UcK6rRhTwhdSuQKk.mft (raw, json) Hash identifier: lMAcSLW76xrVOg9B/mqHkop9wrcNSLXjapx09etdfig= Subject key identifier: 15:E1:7F:4C:FC:7B:D1:4D:40:AE:72:85:01:CC:B2:B6:7C:5E:79:AD Authority key identifier: EE:2C:74:59:93:CC:4B:6F:14:70:AE:AB:46:14:F0:85:D4:AE:40:A9 Certificate issuer: /CN=ee2c745993cc4b6f1470aeab4614f085d4ae40a9 Certificate serial: 019C43FE033E5BAE809439B6A9F40C4D7F88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft Manifest number: 14A3 Signing time: Mon 09 Feb 2026 20:00:46 +0000 Manifest this update: Mon 09 Feb 2026 20:00:46 +0000 Manifest next update: Tue 10 Feb 2026 20:00:46 +0000 Files and hashes: 1: 7ix0WZPMS28UcK6rRhTwhdSuQKk.crl (hash: UZFO4MdCFzo93itzC9muPuqavlNaTIEaDlBatQVc4qI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.crl rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:03:3e:5b:ae:80:94:39:b6:a9:f4:0c:4d:7f:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee2c745993cc4b6f1470aeab4614f085d4ae40a9 Validity Not Before: Feb 9 20:00:46 2026 GMT Not After : Feb 10 20:00:46 2026 GMT Subject: CN=15e17f4cfc7bd14d40ae728501ccb2b67c5e79ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e3:0b:65:69:80:b3:89:72:26:8d:2d:a1:f3: 6c:67:30:03:e2:00:6f:89:a4:29:62:0a:17:a4:ef: 33:1e:7c:bc:cd:a5:2d:13:de:2b:69:b6:d6:16:65: 97:f3:22:33:fb:06:38:d6:99:90:c5:51:1b:96:3c: 35:eb:02:02:9c:3c:a1:a9:ad:18:33:0a:9c:8b:10: 92:de:c0:92:4c:9a:e8:2f:66:cf:16:c8:66:8b:ee: ab:60:da:3c:85:62:5c:ef:ab:62:74:69:82:c4:b2: 47:f5:4e:0d:af:36:25:3e:7b:43:2d:1e:ae:07:7b: 2b:cb:2f:e2:d9:b9:fe:92:85:c5:1f:2c:f1:92:2e: cd:e5:54:1d:9a:ee:ba:75:ee:a5:be:76:ab:11:7f: 27:99:a6:de:20:5f:e4:4c:07:9f:1d:bd:09:0c:ad: 03:94:f3:5c:df:cc:83:cf:83:3e:8c:a9:76:22:8d: 14:45:6b:cf:0b:45:f3:85:c8:2f:6d:86:10:f0:3a: 4f:cc:01:ac:9b:e3:35:7d:97:fe:33:0e:64:d7:75: 46:5d:b3:30:dc:96:7f:e8:70:f7:ca:f8:a7:34:cc: a9:fe:28:81:da:28:a5:4a:f1:ed:4e:36:f8:f9:ad: 76:64:4d:93:8d:d8:62:03:89:3d:94:fb:34:b6:c9: 6c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:E1:7F:4C:FC:7B:D1:4D:40:AE:72:85:01:CC:B2:B6:7C:5E:79:AD X509v3 Authority Key Identifier: keyid:EE:2C:74:59:93:CC:4B:6F:14:70:AE:AB:46:14:F0:85:D4:AE:40:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:9a:61:89:38:7d:27:a8:85:df:c0:69:b5:6c:c2:bc:8b:19: b5:c4:66:37:9f:3a:81:5a:ae:a4:c1:4c:47:70:fd:43:5b:d7: 46:f7:be:06:e7:6c:50:0b:12:f6:f6:9b:b6:4b:16:09:c4:75: 82:49:86:8f:07:65:aa:6f:8e:94:ed:93:03:18:0c:b6:16:10: ba:87:6d:27:95:5d:f2:d5:3f:db:26:19:7a:da:53:41:92:5c: d4:ac:e6:f5:99:80:05:4c:94:7c:32:77:67:b8:85:af:c4:5f: 50:21:1a:0b:9a:1b:a0:9c:56:01:1f:57:14:b5:e8:30:85:fc: c6:26:93:01:13:70:19:9a:80:48:e9:af:76:3b:21:65:e6:74: 82:6c:87:04:2e:f6:ed:db:fe:6c:e9:ff:8a:2b:a5:47:d8:bc: 6d:20:2d:12:26:ce:e9:34:0f:be:5c:e5:86:5c:a2:75:76:60: cf:0c:26:1c:58:c2:81:c7:b8:32:e4:1d:cc:2c:06:12:87:71: 22:82:66:0b:8b:77:db:89:d8:f4:77:22:4f:d3:24:4b:ea:dd: c5:14:19:9f:99:79:21:47:4b:29:fb:55:61:84:63:7b:a5:0a: ce:22:f1:67:31:99:8c:78:c8:79:6d:37:65:a0:80:18:33:e1: fb:9d:8d:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/gM+W66AlDm2qfQMTX+IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMmM3NDU5OTNjYzRiNmYxNDcwYWVhYjQ2MTRmMDg1ZDRh ZTQwYTkwHhcNMjYwMjA5MjAwMDQ2WhcNMjYwMjEwMjAwMDQ2WjAzMTEwLwYDVQQD EygxNWUxN2Y0Y2ZjN2JkMTRkNDBhZTcyODUwMWNjYjJiNjdjNWU3OWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuMLZWmAs4lyJo0tofNsZzAD4gBv iaQpYgoXpO8zHny8zaUtE94rabbWFmWX8yIz+wY41pmQxVEbljw16wICnDyhqa0Y MwqcixCS3sCSTJroL2bPFshmi+6rYNo8hWJc76tidGmCxLJH9U4NrzYlPntDLR6u B3sryy/i2bn+koXFHyzxki7N5VQdmu66de6lvnarEX8nmabeIF/kTAefHb0JDK0D lPNc38yDz4M+jKl2Io0URWvPC0XzhcgvbYYQ8DpPzAGsm+M1fZf+Mw5k13VGXbMw 3JZ/6HD3yvinNMyp/iiB2iilSvHtTjb4+a12ZE2TjdhiA4k9lPs0tslsRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBXhf0z8e9FNQK5yhQHMsrZ8XnmtMB8GA1UdIwQY MBaAFO4sdFmTzEtvFHCuq0YU8IXUrkCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2l4MFdaUE1TMjhVY0s2clJoVHdoZFN1UUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8yZGI0ZDAtOTg4Mi00NTYzLWE1Nzgt NzcyYzkxNzdkNTI5LzEvN2l4MFdaUE1TMjhVY0s2clJoVHdoZFN1UUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8yZGI0ZDAtOTg4Mi00NTYzLWE1NzgtNzcyYzkxNzdkNTI5 LzEvN2l4MFdaUE1TMjhVY0s2clJoVHdoZFN1UUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJpphiTh9 J6iF38BptWzCvIsZtcRmN586gVqupMFMR3D9Q1vXRve+BudsUAsS9vabtksWCcR1 gkmGjwdlqm+OlO2TAxgMthYQuodtJ5Vd8tU/2yYZetpTQZJc1Kzm9ZmABUyUfDJ3 Z7iFr8RfUCEaC5oboJxWAR9XFLXoMIX8xiaTARNwGZqASOmvdjshZeZ0gmyHBC72 7dv+bOn/iiulR9i8bSAtEibO6TQPvlzlhlyidXZgzwwmHFjCgce4MuQdzCwGEodx IoJmC4t324nY9HciT9MkS+rdxRQZn5l5IUdLKftVYYRje6UKziLxZzGZjHjIeW03 ZaCAGDPh+52N6g== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:22 2026 by rpki-client