This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/e02e74-6b7e-4c06-bc9f-6c8bf2d18149/1/S7XgXuY7yBc2B_ugMe8I_hCyGWc.mft File: S7XgXuY7yBc2B_ugMe8I_hCyGWc.mft (raw, json) Hash identifier: NQPDzg2TZeYnGJzErr1BF2U+cYhIjGCU75WEzYG3Ab4= Subject key identifier: 3C:31:E5:9F:63:CA:60:BA:DA:EF:37:67:9D:53:37:10:D3:22:F2:BA Authority key identifier: 4B:B5:E0:5E:E6:3B:C8:17:36:07:FB:A0:31:EF:08:FE:10:B2:19:67 Certificate issuer: /CN=4bb5e05ee63bc8173607fba031ef08fe10b21967 Certificate serial: 019C427DA146B701A030EB1176C065DF0922 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S7XgXuY7yBc2B_ugMe8I_hCyGWc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/e02e74-6b7e-4c06-bc9f-6c8bf2d18149/1/S7XgXuY7yBc2B_ugMe8I_hCyGWc.mft Manifest number: 0119 Signing time: Mon 09 Feb 2026 13:00:55 +0000 Manifest this update: Mon 09 Feb 2026 13:00:55 +0000 Manifest next update: Tue 10 Feb 2026 13:00:55 +0000 Files and hashes: 1: S7XgXuY7yBc2B_ugMe8I_hCyGWc.crl (hash: 0zbxpn/vjO+TNXJU0erNsAlp2tNDmeoNSVJ82MtTt+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/e02e74-6b7e-4c06-bc9f-6c8bf2d18149/1/S7XgXuY7yBc2B_ugMe8I_hCyGWc.crl rsync://rpki.ripe.net/repository/DEFAULT/62/e02e74-6b7e-4c06-bc9f-6c8bf2d18149/1/S7XgXuY7yBc2B_ugMe8I_hCyGWc.mft rsync://rpki.ripe.net/repository/DEFAULT/S7XgXuY7yBc2B_ugMe8I_hCyGWc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:a1:46:b7:01:a0:30:eb:11:76:c0:65:df:09:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bb5e05ee63bc8173607fba031ef08fe10b21967 Validity Not Before: Feb 9 13:00:55 2026 GMT Not After : Feb 10 13:00:55 2026 GMT Subject: CN=3c31e59f63ca60badaef37679d533710d322f2ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:78:a7:84:d9:41:83:0f:d5:d8:0f:2a:9f:d3: 0d:e4:15:95:27:34:bb:a0:c5:ae:8d:f4:9c:e7:12: 93:96:67:f6:6b:62:19:a4:12:54:07:b8:3b:2e:35: 34:70:12:44:1d:71:96:97:04:91:e2:ba:25:4e:0b: 59:3f:43:7c:cf:3f:70:33:a6:3e:55:13:2f:11:e7: 22:1d:05:c6:a3:1e:5c:4b:df:11:25:6f:47:d4:58: 58:72:62:5f:33:c3:89:e0:6d:cc:ba:a2:05:f1:4d: 82:88:a2:4e:54:1c:34:45:2e:e7:9e:41:83:83:97: 7f:83:07:18:ba:f1:d5:cd:4b:4a:5d:b6:c3:3d:8d: 31:6a:13:e8:1b:d6:e3:9b:16:c3:f7:9b:d6:b5:b0: 07:47:48:b2:38:b6:e2:d5:44:82:00:c7:c0:68:7c: 3b:a5:ae:21:30:0d:25:ce:11:8d:51:68:1a:bc:de: 12:94:64:11:69:95:43:40:e1:d7:bc:09:fd:1c:94: cb:71:93:74:fd:75:6b:64:26:44:67:3f:88:3b:be: 4d:e3:62:96:51:6b:d3:46:22:8a:01:a4:d5:25:95: 0d:c9:8e:66:4b:33:5c:2e:69:29:26:ff:0b:98:f3: ea:7c:46:2c:a2:73:ea:3f:37:1d:43:4c:11:84:6b: 51:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:31:E5:9F:63:CA:60:BA:DA:EF:37:67:9D:53:37:10:D3:22:F2:BA X509v3 Authority Key Identifier: keyid:4B:B5:E0:5E:E6:3B:C8:17:36:07:FB:A0:31:EF:08:FE:10:B2:19:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S7XgXuY7yBc2B_ugMe8I_hCyGWc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e02e74-6b7e-4c06-bc9f-6c8bf2d18149/1/S7XgXuY7yBc2B_ugMe8I_hCyGWc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e02e74-6b7e-4c06-bc9f-6c8bf2d18149/1/S7XgXuY7yBc2B_ugMe8I_hCyGWc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:23:f4:84:aa:6a:22:b9:d3:72:6d:8c:4c:a4:9e:bf:da:61: 03:c8:86:f6:99:0c:4c:ab:a3:4c:b3:55:2d:b9:8d:40:b6:9e: ba:d5:cd:94:66:b8:ea:6d:c6:07:b9:46:95:6f:93:fc:d9:6a: dd:f1:1e:45:bf:76:2d:6a:9a:31:ea:fc:c8:c7:b1:8d:94:f3: 33:64:ad:c3:93:d2:fa:9e:e6:ef:db:70:a2:2e:60:29:54:e0: 80:89:1c:8b:dd:46:0b:b4:2b:8f:32:ed:44:1b:b8:ec:47:95: 22:82:3f:09:06:95:60:fb:8a:a9:ea:46:7d:51:4b:62:e1:e8: 8c:70:18:aa:c5:79:99:94:2d:7f:61:cf:5c:34:a7:6b:bf:61: 45:8c:c6:72:4a:eb:14:ac:c5:91:f1:b9:ac:82:14:41:06:35: d4:96:19:fd:50:80:8d:20:d7:1c:23:c3:db:5e:47:e7:8a:bf: 9a:f8:63:ac:dc:8a:cd:ea:85:9f:f9:ae:00:34:fa:13:72:e2: 35:d7:09:da:b8:0d:45:94:30:c0:4e:0e:b9:d5:cf:ef:80:03: 87:21:8a:df:f6:bb:c1:e7:e2:f5:96:0f:fe:a1:ba:dd:e5:9d: 1a:3b:a1:fe:a8:d4:56:2a:42:57:50:27:43:de:a8:d8:7b:cd: 99:db:d5:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfaFGtwGgMOsRdsBl3wkiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiYjVlMDVlZTYzYmM4MTczNjA3ZmJhMDMxZWYwOGZlMTBi MjE5NjcwHhcNMjYwMjA5MTMwMDU1WhcNMjYwMjEwMTMwMDU1WjAzMTEwLwYDVQQD EygzYzMxZTU5ZjYzY2E2MGJhZGFlZjM3Njc5ZDUzMzcxMGQzMjJmMmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HinhNlBgw/V2A8qn9MN5BWVJzS7 oMWujfSc5xKTlmf2a2IZpBJUB7g7LjU0cBJEHXGWlwSR4rolTgtZP0N8zz9wM6Y+ VRMvEeciHQXGox5cS98RJW9H1FhYcmJfM8OJ4G3MuqIF8U2CiKJOVBw0RS7nnkGD g5d/gwcYuvHVzUtKXbbDPY0xahPoG9bjmxbD95vWtbAHR0iyOLbi1USCAMfAaHw7 pa4hMA0lzhGNUWgavN4SlGQRaZVDQOHXvAn9HJTLcZN0/XVrZCZEZz+IO75N42KW UWvTRiKKAaTVJZUNyY5mSzNcLmkpJv8LmPPqfEYsonPqPzcdQ0wRhGtRBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDwx5Z9jymC62u83Z51TNxDTIvK6MB8GA1UdIwQY MBaAFEu14F7mO8gXNgf7oDHvCP4QshlnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzdYZ1h1WTd5QmMyQl91Z01lOElfaEN5R1djLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9lMDJlNzQtNmI3ZS00YzA2LWJjOWYt NmM4YmYyZDE4MTQ5LzEvUzdYZ1h1WTd5QmMyQl91Z01lOElfaEN5R1djLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9lMDJlNzQtNmI3ZS00YzA2LWJjOWYtNmM4YmYyZDE4MTQ5 LzEvUzdYZ1h1WTd5QmMyQl91Z01lOElfaEN5R1djLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQCP0hKpq IrnTcm2MTKSev9phA8iG9pkMTKujTLNVLbmNQLaeutXNlGa46m3GB7lGlW+T/Nlq 3fEeRb92LWqaMer8yMexjZTzM2Stw5PS+p7m79twoi5gKVTggIkci91GC7QrjzLt RBu47EeVIoI/CQaVYPuKqepGfVFLYuHojHAYqsV5mZQtf2HPXDSna79hRYzGckrr FKzFkfG5rIIUQQY11JYZ/VCAjSDXHCPD215H54q/mvhjrNyKzeqFn/muADT6E3Li NdcJ2rgNRZQwwE4OudXP74ADhyGK3/a7wefi9ZYP/qG63eWdGjuh/qjUVipCV1An Q96o2HvNmdvV6Q== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:56 2026 by rpki-client