This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft File: s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft (raw, json) Hash identifier: IisNLdjhWQjEcQLYpRsfF5RKvPnreKi6x9OaDFG5Wrs= Subject key identifier: 1C:48:80:F1:49:0F:1B:60:68:1B:8E:79:F2:88:5B:87:2E:C1:27:67 Authority key identifier: B3:B5:E2:1B:84:5B:B1:DD:FA:BB:38:88:80:2C:19:A6:22:77:38:02 Certificate issuer: /CN=b3b5e21b845bb1ddfabb3888802c19a622773802 Certificate serial: 019C4321C7D92AB8B84FFF885D3BEEB67C8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7XiG4Rbsd36uziIgCwZpiJ3OAI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 16:00:13 +0000 Manifest this update: Mon 09 Feb 2026 16:00:13 +0000 Manifest next update: Tue 10 Feb 2026 16:00:13 +0000 Files and hashes: 1: s7XiG4Rbsd36uziIgCwZpiJ3OAI.crl (hash: HXJuqh1tCucvQ6bT1uOmIagWAaQsovbAi441LcaXGIc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.crl rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft rsync://rpki.ripe.net/repository/DEFAULT/s7XiG4Rbsd36uziIgCwZpiJ3OAI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:c7:d9:2a:b8:b8:4f:ff:88:5d:3b:ee:b6:7c:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3b5e21b845bb1ddfabb3888802c19a622773802 Validity Not Before: Feb 9 16:00:13 2026 GMT Not After : Feb 10 16:00:13 2026 GMT Subject: CN=1c4880f1490f1b60681b8e79f2885b872ec12767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e9:12:dc:c6:17:cd:6d:ad:f4:8e:55:14:a6: 7e:fa:bf:a0:da:e6:85:49:4e:e1:14:54:40:81:ec: 46:af:89:f0:2a:ac:51:1a:c4:79:a1:c3:ed:9b:fe: 7b:bf:55:22:49:a2:5f:62:36:e5:44:26:b2:df:6d: 63:ed:0d:63:0d:ed:58:6e:8c:d6:f3:8e:fd:42:63: 96:ae:93:c6:5c:9a:e1:6a:0e:3c:8a:38:f8:e0:cc: 59:45:16:e9:83:6d:1f:15:5f:7b:c2:b6:55:62:af: 04:3f:5d:1f:02:0a:2c:f4:f8:33:ed:73:02:46:83: 1b:2c:b0:26:10:25:84:7e:20:12:68:d5:6e:dd:e6: 58:37:b0:30:13:1c:0a:ac:a8:06:59:46:16:18:0e: e2:08:fd:1f:f8:3a:ee:f6:65:93:98:a9:84:f2:72: 95:ea:ed:c7:72:4f:47:97:72:2a:c9:c1:2e:ca:a3: 26:9c:be:45:c1:8d:5c:11:3c:4e:20:75:74:27:58: 2e:87:9a:c3:77:6f:9d:61:90:54:d5:81:1f:14:c9: 24:21:d4:c6:70:8b:3d:77:48:6e:37:9a:a3:5b:aa: 7d:4c:9f:f7:d4:eb:c5:5c:2b:05:05:26:ad:57:5a: b5:53:77:b6:fd:87:58:fe:fd:7f:36:86:e2:b5:52: 85:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:48:80:F1:49:0F:1B:60:68:1B:8E:79:F2:88:5B:87:2E:C1:27:67 X509v3 Authority Key Identifier: keyid:B3:B5:E2:1B:84:5B:B1:DD:FA:BB:38:88:80:2C:19:A6:22:77:38:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7XiG4Rbsd36uziIgCwZpiJ3OAI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:f6:9a:1d:ba:a0:ec:59:5a:cc:5a:75:30:f0:37:05:a9:a4: e4:92:02:cc:ba:c7:d7:4f:01:51:0e:70:ab:97:9e:e0:bb:29: 4d:7a:f4:87:bb:e9:1b:84:74:04:06:45:1d:cb:a8:75:c7:fd: 9d:5f:82:2f:68:18:61:22:64:f2:f1:f4:13:4d:2f:ab:5a:72: 56:3d:61:09:03:d8:fc:cb:a0:b2:47:5f:ec:e7:f6:1d:35:c2: 75:5a:70:f0:4b:db:a6:ca:66:63:7d:33:6d:8f:d6:2c:b1:21: ea:10:96:b0:57:2b:62:7c:52:d2:b4:82:e6:fd:45:c9:9e:88: 0e:ae:5d:93:8b:fa:e7:ee:26:c9:9c:a2:04:05:30:e3:98:c2: 4f:d3:6b:e6:f6:53:70:fd:be:07:0e:89:d5:40:87:3d:2f:ab: 72:b3:2a:73:91:ca:58:3f:b6:28:f3:96:e8:c1:b0:88:1e:e4: 87:44:e1:b0:0e:4d:c4:02:56:2a:ba:c7:b3:db:58:00:51:c2: 0f:17:31:dc:eb:37:ae:6f:b1:68:d0:41:39:a9:7a:fa:7c:ed: 06:11:57:ff:f3:7b:52:ad:f3:ba:e3:76:4f:a7:64:31:27:34: 10:0f:11:86:2a:23:3a:f9:66:4f:b3:c1:f6:80:b0:61:31:b4: ac:83:f3:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIcfZKri4T/+IXTvutnyMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYjVlMjFiODQ1YmIxZGRmYWJiMzg4ODgwMmMxOWE2MjI3 NzM4MDIwHhcNMjYwMjA5MTYwMDEzWhcNMjYwMjEwMTYwMDEzWjAzMTEwLwYDVQQD EygxYzQ4ODBmMTQ5MGYxYjYwNjgxYjhlNzlmMjg4NWI4NzJlYzEyNzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ekS3MYXzW2t9I5VFKZ++r+g2uaF SU7hFFRAgexGr4nwKqxRGsR5ocPtm/57v1UiSaJfYjblRCay321j7Q1jDe1YbozW 8479QmOWrpPGXJrhag48ijj44MxZRRbpg20fFV97wrZVYq8EP10fAgos9Pgz7XMC RoMbLLAmECWEfiASaNVu3eZYN7AwExwKrKgGWUYWGA7iCP0f+Dru9mWTmKmE8nKV 6u3Hck9Hl3IqycEuyqMmnL5FwY1cETxOIHV0J1guh5rDd2+dYZBU1YEfFMkkIdTG cIs9d0huN5qjW6p9TJ/31OvFXCsFBSatV1q1U3e2/YdY/v1/NobitVKFUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBxIgPFJDxtgaBuOefKIW4cuwSdnMB8GA1UdIwQY MBaAFLO14huEW7Hd+rs4iIAsGaYidzgCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczdYaUc0UmJzZDM2dXppSWdDd1pwaUozT0FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS84ODE3OGEtN2Y1MS00MzY1LWFhZTIt ZmU1MDY1MGUxYmU0LzEvczdYaUc0UmJzZDM2dXppSWdDd1pwaUozT0FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS84ODE3OGEtN2Y1MS00MzY1LWFhZTItZmU1MDY1MGUxYmU0 LzEvczdYaUc0UmJzZDM2dXppSWdDd1pwaUozT0FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAafaaHbqg 7FlazFp1MPA3Bamk5JICzLrH108BUQ5wq5ee4LspTXr0h7vpG4R0BAZFHcuodcf9 nV+CL2gYYSJk8vH0E00vq1pyVj1hCQPY/Mugskdf7Of2HTXCdVpw8EvbpspmY30z bY/WLLEh6hCWsFcrYnxS0rSC5v1FyZ6IDq5dk4v65+4myZyiBAUw45jCT9Nr5vZT cP2+Bw6J1UCHPS+rcrMqc5HKWD+2KPOW6MGwiB7kh0ThsA5NxAJWKrrHs9tYAFHC Dxcx3Os3rm+xaNBBOal6+nztBhFX//N7Uq3zuuN2T6dkMSc0EA8RhiojOvlmT7PB 9oCwYTG0rIPzHg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:26 2026 by rpki-client