This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft File: pb7DLWxk_7YB4nDO280-__XOekA.mft (raw, json) Hash identifier: JkvBzw9IM1p+nNh83ySDaJhBmuUDDHzRW6MnTPJMImM= Subject key identifier: 7F:46:90:74:86:CB:54:F4:12:1F:02:44:FA:DC:3E:BD:67:75:BC:9C Authority key identifier: A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40 Certificate issuer: /CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40 Certificate serial: 019C416AB2B699ADD8A57FD38B6E28B2D692 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 08:00:37 +0000 Manifest this update: Mon 09 Feb 2026 08:00:37 +0000 Manifest next update: Tue 10 Feb 2026 08:00:37 +0000 Files and hashes: 1: IxBdYAo13YF7sRrVQg3Z0e5Vbt0.roa (hash: tlcEeyFCaaPVcJ/vf8BbCsm35ivqUr1FJnJrFhHoj6A=) 2: pb7DLWxk_7YB4nDO280-__XOekA.crl (hash: tPJsx+Nt/TxX0hMCD5Ip2W/oeDtoJFsTWJ2rL6VPcLM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 08:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:6a:b2:b6:99:ad:d8:a5:7f:d3:8b:6e:28:b2:d6:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40 Validity Not Before: Feb 9 08:00:37 2026 GMT Not After : Feb 10 08:00:37 2026 GMT Subject: CN=7f46907486cb54f4121f0244fadc3ebd6775bc9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0d:0f:e4:db:3d:89:c8:13:b6:ee:ef:4f:ab: 3a:fa:a6:a7:62:03:c5:d5:65:78:3f:9b:6e:b3:4a: 29:c0:2a:f0:06:69:6d:cd:46:11:3c:7a:9d:d7:ed: db:f5:3f:f8:65:88:cb:a8:01:af:2b:4a:b5:0d:76: 4b:c5:c0:e1:e9:26:0b:77:93:9d:66:89:27:55:74: 7d:d4:6a:b5:60:08:1a:70:4a:d5:d4:0d:b6:6b:9a: 23:8b:27:b0:b0:b8:98:fb:6c:74:1f:ee:ad:7a:2d: 38:2e:2b:1f:9d:98:d6:3f:8e:c6:b6:31:5a:83:61: 37:7b:55:7b:d9:50:7f:f5:8a:7d:86:13:c1:2e:24: 02:1c:af:e2:80:d1:ba:b6:bd:cb:bc:8c:08:96:ce: 64:29:44:d4:6c:49:d6:5c:1b:3f:29:ed:89:30:46: ae:76:35:e7:e4:6a:5c:31:4f:23:60:f6:4b:e9:1d: c2:c3:96:79:7b:92:bb:7e:30:f9:9c:76:04:89:96: 3f:5e:9f:89:54:75:38:e3:f0:ef:6f:12:f5:c6:28: dd:33:ef:7e:7f:61:51:b5:d6:c2:00:fc:d6:25:0e: 21:1f:84:7e:ec:85:eb:18:f9:28:0c:49:8d:79:a6: 0e:a3:b6:97:c0:a8:ce:0a:88:67:65:45:e2:31:95: af:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:46:90:74:86:CB:54:F4:12:1F:02:44:FA:DC:3E:BD:67:75:BC:9C X509v3 Authority Key Identifier: keyid:A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:5a:16:a7:6a:c6:ac:a7:a1:a2:a7:58:a8:b0:82:2b:02:b1: 8d:70:94:d1:d5:e5:08:0d:db:45:53:dd:2e:c2:ff:f3:e5:ce: 3b:53:b3:aa:ee:17:f6:f4:ab:9d:d3:c9:f8:11:a2:e3:72:58: eb:2d:16:f1:6e:4e:c2:5d:1f:0f:f7:3c:a5:ed:11:93:7c:41: 62:f7:42:e1:07:b0:72:10:fa:c9:d3:e6:97:07:1c:10:13:e1: 8b:ee:60:b3:f8:92:7e:b9:b5:fe:97:51:60:d1:1e:69:20:d9: e1:b2:d7:ec:23:b2:84:91:d2:1f:ef:ab:29:1a:df:33:06:0c: cf:6a:37:58:2f:74:36:ae:f4:b5:3a:87:76:ee:75:ac:1a:23: 47:ab:b7:82:70:bb:10:f5:d3:8e:6f:20:56:cd:c2:33:a9:9f: 59:25:b5:e7:9a:bd:87:26:77:30:94:3c:5e:33:e2:8d:c8:20: cc:86:8a:e2:e4:6d:7d:27:25:96:ac:34:e7:9c:63:c2:f8:2c: d8:03:4f:84:e3:35:05:b6:12:aa:8d:53:7a:a1:cb:af:6d:a2: 6b:b0:d5:2b:5b:28:df:73:c6:1a:06:9a:a9:55:a4:fa:b7:8d: 2a:c2:ad:3e:92:23:10:37:13:6c:41:bf:9c:43:bc:33:d3:71: 89:c1:eb:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBarK2ma3YpX/Ti24ostaSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YmVjMzJkNmM2NGZmYjYwMWUyNzBjZWRiY2QzZWZmZjVj ZTdhNDAwHhcNMjYwMjA5MDgwMDM3WhcNMjYwMjEwMDgwMDM3WjAzMTEwLwYDVQQD Eyg3ZjQ2OTA3NDg2Y2I1NGY0MTIxZjAyNDRmYWRjM2ViZDY3NzViYzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAow0P5Ns9icgTtu7vT6s6+qanYgPF 1WV4P5tus0opwCrwBmltzUYRPHqd1+3b9T/4ZYjLqAGvK0q1DXZLxcDh6SYLd5Od ZoknVXR91Gq1YAgacErV1A22a5ojiyewsLiY+2x0H+6tei04LisfnZjWP47GtjFa g2E3e1V72VB/9Yp9hhPBLiQCHK/igNG6tr3LvIwIls5kKUTUbEnWXBs/Ke2JMEau djXn5GpcMU8jYPZL6R3Cw5Z5e5K7fjD5nHYEiZY/Xp+JVHU44/DvbxL1xijdM+9+ f2FRtdbCAPzWJQ4hH4R+7IXrGPkoDEmNeaYOo7aXwKjOCohnZUXiMZWvoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH9GkHSGy1T0Eh8CRPrcPr1ndbycMB8GA1UdIwQY MBaAFKW+wy1sZP+2AeJwztvNPv/1znpAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGI3RExXeGtfN1lCNG5ETzI4MC1fX1hPZWtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi83ZDY0ZjEtM2Q2NC00MmViLWEyNzUt MjE3OTY0NGYzNzg4LzEvcGI3RExXeGtfN1lCNG5ETzI4MC1fX1hPZWtBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi83ZDY0ZjEtM2Q2NC00MmViLWEyNzUtMjE3OTY0NGYzNzg4 LzEvcGI3RExXeGtfN1lCNG5ETzI4MC1fX1hPZWtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbFoWp2rG rKehoqdYqLCCKwKxjXCU0dXlCA3bRVPdLsL/8+XOO1Ozqu4X9vSrndPJ+BGi43JY 6y0W8W5Owl0fD/c8pe0Rk3xBYvdC4QewchD6ydPmlwccEBPhi+5gs/iSfrm1/pdR YNEeaSDZ4bLX7COyhJHSH++rKRrfMwYMz2o3WC90Nq70tTqHdu51rBojR6u3gnC7 EPXTjm8gVs3CM6mfWSW155q9hyZ3MJQ8XjPijcggzIaK4uRtfScllqw055xjwvgs 2ANPhOM1BbYSqo1TeqHLr22ia7DVK1so33PGGgaaqVWk+reNKsKtPpIjEDcTbEG/ nEO8M9NxicHrYg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:40 2026 by rpki-client