This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft File: T7EQS7paPx3dLe67o0gZGfT5YaQ.mft (raw, json) Hash identifier: TyXYAWGaacfRRHhcpMsb2N022mGLiTUZlqYBh+Oxn48= Subject key identifier: F2:8A:5D:EF:A5:D7:C8:DC:1A:A8:93:66:07:EE:52:66:E8:80:9F:5D Authority key identifier: 4F:B1:10:4B:BA:5A:3F:1D:DD:2D:EE:BB:A3:48:19:19:F4:F9:61:A4 Certificate issuer: /CN=4fb1104bba5a3f1ddd2deebba3481919f4f961a4 Certificate serial: 019C4321E63C624860FD41569CD4CC6CDF3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft Manifest number: 120B Signing time: Mon 09 Feb 2026 16:00:20 +0000 Manifest this update: Mon 09 Feb 2026 16:00:20 +0000 Manifest next update: Tue 10 Feb 2026 16:00:20 +0000 Files and hashes: 1: QXk8W4rb7xC84yICsxZR9VqLPac.roa (hash: d5XV4cDn9Fni7vqIA1er8ivsyYtrUO1CqIbq1cH3BPY=) 2: T7EQS7paPx3dLe67o0gZGfT5YaQ.crl (hash: Bab70VsPUW9r7+VdZ4Y9ccg7FbyPka/Q3Uf0Lod2X7s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:e6:3c:62:48:60:fd:41:56:9c:d4:cc:6c:df:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fb1104bba5a3f1ddd2deebba3481919f4f961a4 Validity Not Before: Feb 9 16:00:20 2026 GMT Not After : Feb 10 16:00:20 2026 GMT Subject: CN=f28a5defa5d7c8dc1aa8936607ee5266e8809f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ba:a1:ca:4e:69:67:08:29:8d:26:0e:c8:03: 2c:c5:35:8b:e0:fe:c7:9a:7e:04:d9:70:10:c2:60: 2a:90:82:be:c6:ed:ce:40:5a:5f:de:5b:4a:6c:01: f9:18:4b:69:f1:92:6d:01:6d:33:ae:c4:84:ad:c9: 5f:f1:3c:3d:ac:03:96:f1:38:17:8d:20:8f:7a:44: 80:69:1f:a1:6a:98:7a:7d:7d:ba:3c:c9:b8:bf:d5: 0a:3a:65:8a:c3:20:54:36:8f:31:d8:84:47:9b:5c: c4:f4:79:99:5b:62:2c:a2:96:95:f5:59:ce:cd:0d: 8a:b5:c9:f5:59:dd:65:15:2c:b2:6a:e1:de:1e:5b: 12:f0:60:e4:e5:c3:c2:81:da:c8:58:c5:48:8f:28: a6:33:b9:fb:be:44:99:ec:17:17:bb:94:8e:b6:69: 17:b4:7e:d3:27:8b:8f:f2:c6:4d:fd:eb:a4:b0:5e: e8:45:f1:81:0a:1c:f7:43:02:da:c8:d8:07:62:b0: c1:2c:5d:88:ca:a1:5b:c8:34:a8:6e:d4:2b:78:b1: 86:b4:74:9a:c6:ab:c2:cc:eb:1c:82:b8:a9:d2:df: 59:6f:fe:f9:a5:6a:cf:70:1b:eb:d9:6e:6c:8a:11: 97:09:51:6b:4f:89:e6:3a:b6:28:d2:9a:d4:70:21: a0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:8A:5D:EF:A5:D7:C8:DC:1A:A8:93:66:07:EE:52:66:E8:80:9F:5D X509v3 Authority Key Identifier: keyid:4F:B1:10:4B:BA:5A:3F:1D:DD:2D:EE:BB:A3:48:19:19:F4:F9:61:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:53:52:2f:9e:5f:97:ea:0d:84:99:9f:1c:ae:b3:70:99:cd: 74:69:86:44:20:79:57:03:53:7f:21:3a:47:e6:29:12:20:3e: 3c:b6:3e:9e:a8:e8:9a:9f:f9:58:ee:a4:08:13:a0:f8:16:19: 31:0d:3c:02:94:9f:76:4e:78:83:a6:50:75:b1:e3:4e:c7:08: 7e:db:cc:06:5e:db:f1:75:43:b4:21:b1:e6:1d:d9:89:ff:ef: c8:8a:51:51:53:e9:6e:30:ce:83:bd:68:ed:fe:2f:cc:5c:06: 38:a1:18:63:ed:74:ee:92:6f:39:14:63:67:c5:db:e1:bf:5c: 5f:ba:70:e3:03:95:9a:c2:53:53:71:e9:88:c2:a2:c3:dd:b9: be:c1:11:30:28:d7:06:cd:9c:53:02:0b:23:fe:f8:85:9d:f0: 8f:df:fd:44:4d:ec:f5:0a:a7:0b:30:f3:ba:8e:a2:48:19:05: 22:cd:c4:c0:b1:3e:28:ac:fe:64:64:6e:dc:c7:ef:a4:8a:85: 8f:8f:35:b9:5a:cf:c0:b0:3d:2b:3e:a6:05:4a:7c:03:17:73: 15:78:08:1e:3b:d1:b3:93:33:f0:94:8e:be:52:96:6b:ef:53: db:14:34:81:bb:ed:f1:b9:3f:2d:64:af:d7:b8:d8:11:28:24: 56:c8:1f:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIeY8Ykhg/UFWnNTMbN86MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYjExMDRiYmE1YTNmMWRkZDJkZWViYmEzNDgxOTE5ZjRm OTYxYTQwHhcNMjYwMjA5MTYwMDIwWhcNMjYwMjEwMTYwMDIwWjAzMTEwLwYDVQQD EyhmMjhhNWRlZmE1ZDdjOGRjMWFhODkzNjYwN2VlNTI2NmU4ODA5ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7qhyk5pZwgpjSYOyAMsxTWL4P7H mn4E2XAQwmAqkIK+xu3OQFpf3ltKbAH5GEtp8ZJtAW0zrsSErclf8Tw9rAOW8TgX jSCPekSAaR+haph6fX26PMm4v9UKOmWKwyBUNo8x2IRHm1zE9HmZW2IsopaV9VnO zQ2Ktcn1Wd1lFSyyauHeHlsS8GDk5cPCgdrIWMVIjyimM7n7vkSZ7BcXu5SOtmkX tH7TJ4uP8sZN/euksF7oRfGBChz3QwLayNgHYrDBLF2IyqFbyDSobtQreLGGtHSa xqvCzOscgrip0t9Zb/75pWrPcBvr2W5sihGXCVFrT4nmOrYo0prUcCGgwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPKKXe+l18jcGqiTZgfuUmbogJ9dMB8GA1UdIwQY MBaAFE+xEEu6Wj8d3S3uu6NIGRn0+WGkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDdFUVM3cGFQeDNkTGU2N28wZ1pHZlQ1WWFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84OWVlOTQtNTAxMC00NGFkLTllMTct NDM2YWI0YWRlMGE3LzEvVDdFUVM3cGFQeDNkTGU2N28wZ1pHZlQ1WWFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny84OWVlOTQtNTAxMC00NGFkLTllMTctNDM2YWI0YWRlMGE3 LzEvVDdFUVM3cGFQeDNkTGU2N28wZ1pHZlQ1WWFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG1NSL55f l+oNhJmfHK6zcJnNdGmGRCB5VwNTfyE6R+YpEiA+PLY+nqjomp/5WO6kCBOg+BYZ MQ08ApSfdk54g6ZQdbHjTscIftvMBl7b8XVDtCGx5h3Zif/vyIpRUVPpbjDOg71o 7f4vzFwGOKEYY+107pJvORRjZ8Xb4b9cX7pw4wOVmsJTU3HpiMKiw925vsERMCjX Bs2cUwILI/74hZ3wj9/9RE3s9QqnCzDzuo6iSBkFIs3EwLE+KKz+ZGRu3MfvpIqF j481uVrPwLA9Kz6mBUp8AxdzFXgIHjvRs5Mz8JSOvlKWa+9T2xQ0gbvt8bk/LWSv 17jYESgkVsgf/A== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:51 2026 by rpki-client