This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft File: 7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft (raw, json) Hash identifier: wJvxnSxNSKGTbB8MPmgdC6hGp6Ij0YVRgQ8FflzZy14= Subject key identifier: 5D:4F:6A:6F:9E:7D:BD:D8:9F:7C:B1:D8:79:B9:8D:1C:E0:BF:4C:09 Authority key identifier: ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11 Certificate issuer: /CN=ed89298644ed486ded509d946a6d6d839589ce11 Certificate serial: 019C40FCBC1E4EA0E9297B3591391CF2336C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft Manifest number: 0793 Signing time: Mon 09 Feb 2026 06:00:30 +0000 Manifest this update: Mon 09 Feb 2026 06:00:30 +0000 Manifest next update: Tue 10 Feb 2026 06:00:30 +0000 Files and hashes: 1: 7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl (hash: KnuuykLvDXMHGK8MqehfowybRxcJfUb4hUOvGxapnOQ=) 2: ci8f7Y86uB9atamo1D3e8sszzV0.roa (hash: JE0+am3liaO3am6zHqUi0SmfiCv9crbc5X4aX8Cwg8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:40:fc:bc:1e:4e:a0:e9:29:7b:35:91:39:1c:f2:33:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed89298644ed486ded509d946a6d6d839589ce11 Validity Not Before: Feb 9 06:00:30 2026 GMT Not After : Feb 10 06:00:30 2026 GMT Subject: CN=5d4f6a6f9e7dbdd89f7cb1d879b98d1ce0bf4c09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0c:46:80:11:1c:fb:f1:2a:12:e5:63:d5:0f: dc:13:55:80:95:86:3f:73:23:9e:f8:ac:2c:4d:04: 7c:83:01:7d:9b:7c:eb:23:83:65:da:cf:a5:66:1c: 49:ad:95:80:84:78:52:8f:ea:c4:cf:b0:83:8a:fb: f1:18:77:36:70:7c:6f:29:06:be:a9:6f:56:a4:70: 21:06:5c:6f:54:54:de:a2:97:55:c8:10:fd:85:7f: f4:8c:9c:c3:96:ff:97:5a:34:86:d7:91:d9:cc:65: ac:4f:e4:8e:9a:35:3d:aa:29:e1:16:98:ac:9f:7c: 0d:8f:1f:c3:f4:b8:62:da:67:e9:72:6f:02:4c:75: ef:33:45:ea:68:19:a2:80:56:56:6d:94:76:d4:40: a1:fe:b1:78:cc:02:0d:af:6d:9f:7e:83:5b:7c:4b: ef:ca:8c:61:7a:fd:68:07:d7:dd:f2:6e:12:c7:69: 12:b1:80:50:81:78:26:1b:3e:f4:53:cb:bf:82:ba: f1:80:e5:5f:73:78:72:8b:6c:8c:d9:0a:c5:00:2a: 7d:1e:98:bd:c2:bd:9e:8e:ac:50:95:11:17:db:93: 9d:80:e1:3d:c5:de:f3:8d:91:e6:1d:90:a3:f9:18: 65:16:47:41:e2:ff:20:be:66:ea:b3:4e:e3:72:ec: 48:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:4F:6A:6F:9E:7D:BD:D8:9F:7C:B1:D8:79:B9:8D:1C:E0:BF:4C:09 X509v3 Authority Key Identifier: keyid:ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:a8:eb:d6:b2:5b:e3:0a:f6:5a:22:f8:c3:4d:e5:4c:20:dc: 44:93:0d:a9:7a:a5:94:5e:ed:e7:58:35:6f:79:3b:a8:a1:9d: 58:17:f6:aa:2f:f9:3d:a4:e6:de:36:cd:fa:fe:54:40:c6:7a: af:25:ef:32:55:ec:a6:c1:52:d7:71:a1:5b:27:05:45:fc:6d: 61:e8:ce:c6:e7:f0:f3:c1:7d:c1:7f:27:80:ba:c1:8a:c9:0d: b9:fb:8a:e8:cc:cf:2f:5b:f4:77:36:a6:d3:89:92:b7:ac:1a: ac:5c:d4:39:83:95:30:4e:d0:35:b2:6f:d2:20:45:f3:04:96: 9b:b4:d5:30:3e:73:6c:77:59:bf:72:23:dd:e6:38:b8:33:3d: a4:e2:5d:f0:75:04:2f:e6:dc:08:be:77:14:0f:44:51:be:f1: 0a:bc:eb:bb:b8:fc:57:8d:f5:bf:f0:73:ed:1b:b1:98:5f:41: 39:3b:04:6e:06:dd:67:1e:2f:28:5e:d1:98:f1:e0:25:53:44: d6:e9:1e:ed:ef:93:d0:4e:db:5f:00:12:ce:c1:ff:9f:c8:db: 64:59:74:07:d0:aa:4d:3e:86:08:6d:cd:4b:6e:21:a8:f2:47: 06:1d:56:d7:0f:73:d1:30:04:9e:cf:40:0f:6b:f1:07:35:5f: 35:1c:e9:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxA/LweTqDpKXs1kTkc8jNsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkODkyOTg2NDRlZDQ4NmRlZDUwOWQ5NDZhNmQ2ZDgzOTU4 OWNlMTEwHhcNMjYwMjA5MDYwMDMwWhcNMjYwMjEwMDYwMDMwWjAzMTEwLwYDVQQD Eyg1ZDRmNmE2ZjllN2RiZGQ4OWY3Y2IxZDg3OWI5OGQxY2UwYmY0YzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwxGgBEc+/EqEuVj1Q/cE1WAlYY/ cyOe+KwsTQR8gwF9m3zrI4Nl2s+lZhxJrZWAhHhSj+rEz7CDivvxGHc2cHxvKQa+ qW9WpHAhBlxvVFTeopdVyBD9hX/0jJzDlv+XWjSG15HZzGWsT+SOmjU9qinhFpis n3wNjx/D9Lhi2mfpcm8CTHXvM0XqaBmigFZWbZR21ECh/rF4zAINr22ffoNbfEvv yoxhev1oB9fd8m4Sx2kSsYBQgXgmGz70U8u/grrxgOVfc3hyi2yM2QrFACp9Hpi9 wr2ejqxQlREX25OdgOE9xd7zjZHmHZCj+RhlFkdB4v8gvmbqs07jcuxIyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF1Pam+efb3Yn3yx2Hm5jRzgv0wJMB8GA1UdIwQY MBaAFO2JKYZE7Uht7VCdlGptbYOVic4RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1lrcGhrVHRTRzN0VUoyVWFtMXRnNVdKemhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8xNDE4ODctNTUwNy00NWE1LThiMGEt NTdhMWYwYjMyZjAxLzEvN1lrcGhrVHRTRzN0VUoyVWFtMXRnNVdKemhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi8xNDE4ODctNTUwNy00NWE1LThiMGEtNTdhMWYwYjMyZjAx LzEvN1lrcGhrVHRTRzN0VUoyVWFtMXRnNVdKemhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP6jr1rJb 4wr2WiL4w03lTCDcRJMNqXqllF7t51g1b3k7qKGdWBf2qi/5PaTm3jbN+v5UQMZ6 ryXvMlXspsFS13GhWycFRfxtYejOxufw88F9wX8ngLrBiskNufuK6MzPL1v0dzam 04mSt6warFzUOYOVME7QNbJv0iBF8wSWm7TVMD5zbHdZv3Ij3eY4uDM9pOJd8HUE L+bcCL53FA9EUb7xCrzru7j8V431v/Bz7RuxmF9BOTsEbgbdZx4vKF7RmPHgJVNE 1uke7e+T0E7bXwASzsH/n8jbZFl0B9CqTT6GCG3NS24hqPJHBh1W1w9z0TAEns9A D2vxBzVfNRzpeQ== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:30 2026 by rpki-client