This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft File: 7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft (raw, json) Hash identifier: Eunq+G/OlgQ5Rmf9cGsTkNCorGbf4j/chwA7jmNQQjg= Subject key identifier: 10:FB:56:DA:20:AA:44:31:A4:6B:7B:8B:0B:96:EB:0F:9A:13:D2:30 Authority key identifier: EE:28:D9:4D:48:40:33:F7:7E:6F:93:81:A0:2D:A3:E2:42:16:7D:AE Certificate issuer: /CN=ee28d94d484033f77e6f9381a02da3e242167dae Certificate serial: 019C42EB334DE04FA8AAE57CC2291F3B0512 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft Manifest number: 0392 Signing time: Mon 09 Feb 2026 15:00:36 +0000 Manifest this update: Mon 09 Feb 2026 15:00:36 +0000 Manifest next update: Tue 10 Feb 2026 15:00:36 +0000 Files and hashes: 1: 7ijZTUhAM_d-b5OBoC2j4kIWfa4.crl (hash: /6FUEoSwNOecShq42+peR5eai+pBjuYUXq8ui1N9T+0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.crl rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:33:4d:e0:4f:a8:aa:e5:7c:c2:29:1f:3b:05:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee28d94d484033f77e6f9381a02da3e242167dae Validity Not Before: Feb 9 15:00:36 2026 GMT Not After : Feb 10 15:00:36 2026 GMT Subject: CN=10fb56da20aa4431a46b7b8b0b96eb0f9a13d230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:eb:54:fc:6a:9b:1e:6e:e4:c8:b0:3b:20:e1: 8f:67:02:b0:10:21:19:f0:05:35:3a:c1:09:a0:9d: 21:58:a8:da:73:2d:8d:6c:93:e5:be:4d:1a:9f:95: 9a:f2:c4:27:e7:55:d8:ac:14:72:1c:03:06:28:6a: 5a:db:d3:9e:f2:04:01:8b:37:92:f6:78:83:bc:a3: d6:0f:49:29:77:a6:d7:f0:60:b8:33:a9:f2:a2:a6: 67:20:ae:b4:2d:7a:a7:2f:c7:dd:08:63:91:74:f2: 94:b5:85:e4:49:44:9a:73:25:e2:f3:8c:4e:29:57: 51:d2:3c:df:09:c1:5c:c1:fc:38:64:33:9d:61:b7: e4:d5:c0:ca:fb:3c:b0:1b:af:60:13:95:f3:06:fd: ae:7c:28:73:7c:40:aa:59:95:d4:c4:a5:3e:6d:5f: 9f:03:76:bf:4a:cd:3d:32:ea:2e:cd:0a:89:7b:71: d6:96:31:b3:87:d3:8e:7a:18:7d:83:6e:09:69:2e: 5b:79:6b:d1:21:66:c3:30:54:a6:16:2a:2e:6b:1f: dd:a2:a4:b1:1c:07:28:ad:3c:39:08:65:62:3d:cb: cc:28:ad:63:bc:ca:ea:29:60:fb:ae:33:aa:5b:96: 8f:05:15:ea:5d:fa:05:00:77:90:29:b2:04:a8:28: 53:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:FB:56:DA:20:AA:44:31:A4:6B:7B:8B:0B:96:EB:0F:9A:13:D2:30 X509v3 Authority Key Identifier: keyid:EE:28:D9:4D:48:40:33:F7:7E:6F:93:81:A0:2D:A3:E2:42:16:7D:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:77:30:93:57:5d:18:ad:b4:05:71:6e:47:06:93:67:94:bf: 1c:93:d2:f3:b2:59:38:d1:af:95:f1:a5:6c:cc:b2:47:4d:51: af:d4:5e:09:60:54:87:aa:18:a8:98:fa:35:14:ba:18:62:7d: 7c:37:31:ab:25:0d:c9:8a:bd:ac:0c:b7:cf:79:e3:ce:b8:97: c2:18:52:24:e0:17:80:48:6c:77:67:b6:37:8b:06:a4:04:bb: 88:ba:62:04:9e:c0:8a:20:55:8f:8b:61:43:a9:ae:16:da:bb: e0:5f:0e:8e:10:fe:8b:f9:86:f8:0c:bc:48:a1:72:d4:20:62: 9d:38:c2:aa:d9:08:f5:f7:b0:fa:68:22:25:5a:27:e3:83:79: a9:eb:45:4f:b5:5d:f0:68:a4:12:7a:a8:4d:e3:b2:a7:bf:75: dc:34:ea:6e:a3:65:ea:c3:9c:bc:ed:20:c1:0f:82:72:2f:b1: e1:d1:de:65:3b:12:33:bc:7d:12:01:83:3b:30:40:93:d7:d7: d7:93:ab:db:d6:1e:a7:85:dc:83:76:f5:3f:7b:3d:21:60:ad: 77:44:6b:93:93:99:9f:d3:01:dc:c7:76:17:49:54:51:4a:f3: 54:0b:d9:53:92:05:71:57:92:21:97:23:66:b8:6c:73:9d:fd: 34:9b:d6:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6zNN4E+oquV8wikfOwUSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMjhkOTRkNDg0MDMzZjc3ZTZmOTM4MWEwMmRhM2UyNDIx NjdkYWUwHhcNMjYwMjA5MTUwMDM2WhcNMjYwMjEwMTUwMDM2WjAzMTEwLwYDVQQD EygxMGZiNTZkYTIwYWE0NDMxYTQ2YjdiOGIwYjk2ZWIwZjlhMTNkMjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOtU/GqbHm7kyLA7IOGPZwKwECEZ 8AU1OsEJoJ0hWKjacy2NbJPlvk0an5Wa8sQn51XYrBRyHAMGKGpa29Oe8gQBizeS 9niDvKPWD0kpd6bX8GC4M6nyoqZnIK60LXqnL8fdCGORdPKUtYXkSUSacyXi84xO KVdR0jzfCcFcwfw4ZDOdYbfk1cDK+zywG69gE5XzBv2ufChzfECqWZXUxKU+bV+f A3a/Ss09MuouzQqJe3HWljGzh9OOehh9g24JaS5beWvRIWbDMFSmFiouax/doqSx HAcorTw5CGViPcvMKK1jvMrqKWD7rjOqW5aPBRXqXfoFAHeQKbIEqChT6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBD7VtogqkQxpGt7iwuW6w+aE9IwMB8GA1UdIwQY MBaAFO4o2U1IQDP3fm+TgaAto+JCFn2uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2lqWlRVaEFNX2QtYjVPQm9DMmo0a0lXZmE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9lYWRiZjgtOGU0NC00MjcxLWE3MmIt MGM3NTZmZDI0OGM4LzEvN2lqWlRVaEFNX2QtYjVPQm9DMmo0a0lXZmE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9lYWRiZjgtOGU0NC00MjcxLWE3MmItMGM3NTZmZDI0OGM4 LzEvN2lqWlRVaEFNX2QtYjVPQm9DMmo0a0lXZmE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJHcwk1dd GK20BXFuRwaTZ5S/HJPS87JZONGvlfGlbMyyR01Rr9ReCWBUh6oYqJj6NRS6GGJ9 fDcxqyUNyYq9rAy3z3njzriXwhhSJOAXgEhsd2e2N4sGpAS7iLpiBJ7AiiBVj4th Q6muFtq74F8OjhD+i/mG+Ay8SKFy1CBinTjCqtkI9few+mgiJVon44N5qetFT7Vd 8GikEnqoTeOyp7913DTqbqNl6sOcvO0gwQ+Cci+x4dHeZTsSM7x9EgGDOzBAk9fX 15Or29Yep4Xcg3b1P3s9IWCtd0Rrk5OZn9MB3Md2F0lUUUrzVAvZU5IFcVeSIZcj Zrhsc539NJvWlw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:39:08 2026 by rpki-client