This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft File: 7nRQsjAXLj6K01KIEQ74q9JP-S0.mft (raw, json) Hash identifier: hZZUFnPF0HcnwZzBHjdEeYH+0HQEGwptFJzuwzu//2w= Subject key identifier: 2D:11:56:5F:48:0C:E4:9B:E8:F3:01:12:C9:2B:93:71:09:8D:F7:80 Authority key identifier: EE:74:50:B2:30:17:2E:3E:8A:D3:52:88:11:0E:F8:AB:D2:4F:F9:2D Certificate issuer: /CN=ee7450b230172e3e8ad35288110ef8abd24ff92d Certificate serial: 019C4434B4AAD6B525E945FB071D7875C2F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7nRQsjAXLj6K01KIEQ74q9JP-S0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft Manifest number: 0ADD Signing time: Mon 09 Feb 2026 21:00:30 +0000 Manifest this update: Mon 09 Feb 2026 21:00:30 +0000 Manifest next update: Tue 10 Feb 2026 21:00:30 +0000 Files and hashes: 1: 7nRQsjAXLj6K01KIEQ74q9JP-S0.crl (hash: BznDhescjQSehftAvqlCDMFG/7ZUMNrZ9MdnnvHjdHw=) 2: smfmsIUF9u9g8NgIU5ofNUq_OII.roa (hash: 4JsRlal2vIPYDa8QmogXl60LTzkl5mPgzweZiKuoNtI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.crl rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft rsync://rpki.ripe.net/repository/DEFAULT/7nRQsjAXLj6K01KIEQ74q9JP-S0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:34:b4:aa:d6:b5:25:e9:45:fb:07:1d:78:75:c2:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee7450b230172e3e8ad35288110ef8abd24ff92d Validity Not Before: Feb 9 21:00:30 2026 GMT Not After : Feb 10 21:00:30 2026 GMT Subject: CN=2d11565f480ce49be8f30112c92b9371098df780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:20:a6:e8:27:4f:65:94:dd:5c:0c:37:79:55: 5a:12:8b:fa:cc:c8:b3:80:a3:40:2f:19:1d:cd:9b: 1a:46:39:79:4e:78:73:98:14:79:f6:a4:f7:97:f1: 53:af:24:4e:ec:b6:4a:64:1d:84:57:6e:94:bc:6c: b6:df:ae:da:fa:44:78:6f:73:68:64:25:f4:8e:be: c7:00:3c:c5:13:5e:35:1e:d5:2e:e4:00:15:d6:aa: e1:0d:8a:4c:c8:65:60:66:4b:cb:c8:78:70:16:a7: 77:b9:1f:a5:25:3f:11:f4:8f:03:50:b9:4c:6b:4a: 06:82:7c:be:59:e3:0a:b2:c1:17:b6:7b:3d:3c:7b: 11:0a:9b:0e:89:b8:dd:cc:23:8a:90:ee:3f:a4:8c: 2f:de:36:16:de:39:7e:29:b9:05:a5:ec:bf:ac:05: 01:27:90:25:dd:d3:bc:41:0c:80:40:d1:b1:e4:2c: 43:04:04:27:a7:0d:60:5b:8b:8d:f3:9d:fa:be:9b: bc:6d:9d:98:0a:e2:b3:bf:26:36:08:ee:e6:d6:2f: d9:37:db:2c:7b:d3:87:a9:fc:0f:cd:23:c6:3b:74: 72:6f:24:b2:80:eb:bb:30:15:2b:49:4f:7d:3a:03: 3d:fb:cf:87:6a:26:8b:6b:f1:89:d5:5c:eb:a6:d4: 8d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:11:56:5F:48:0C:E4:9B:E8:F3:01:12:C9:2B:93:71:09:8D:F7:80 X509v3 Authority Key Identifier: keyid:EE:74:50:B2:30:17:2E:3E:8A:D3:52:88:11:0E:F8:AB:D2:4F:F9:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nRQsjAXLj6K01KIEQ74q9JP-S0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:cd:c4:8e:1d:77:b7:2b:c5:ba:52:4a:4e:40:cc:75:e4:9b: 41:f6:85:dc:bb:25:0d:a5:ba:39:9a:c7:54:ea:81:11:65:c2: 39:2f:47:fa:9e:1f:99:c5:5f:b4:25:e7:a0:cb:79:01:f1:e3: 3d:93:67:d3:4a:ad:d8:6d:9b:78:30:94:da:68:be:fe:00:8d: cf:fb:b8:f4:11:e7:96:28:db:22:74:b1:36:10:79:a7:f0:ff: 2b:fc:38:fe:1f:20:2f:d7:24:92:92:c5:f7:04:c3:9b:c4:72: 33:f5:11:51:c8:2f:01:a5:1c:f3:e9:91:8a:46:39:16:82:65: dc:7d:3a:52:0a:55:82:02:87:9b:47:22:60:12:6a:3c:99:cb: 77:3f:ff:11:93:ec:7b:4b:f1:e2:7d:2f:28:8e:56:ab:30:de: bd:1c:da:a7:b7:9b:8f:c8:05:7d:16:b8:66:bf:b2:49:3a:25: ad:56:70:d1:c6:d9:f5:36:ff:6d:1d:56:1f:33:da:c7:4a:60: 4e:84:de:06:3e:61:70:39:e3:6f:a0:87:c6:eb:4b:c0:06:12: d7:94:ea:aa:88:fd:a3:d2:4e:b2:28:51:41:80:d3:dd:59:1c: 44:91:3f:97:23:9c:e3:cd:8f:54:99:db:fa:1c:cf:1b:17:41: 26:6f:2c:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxENLSq1rUl6UX7Bx14dcLxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlNzQ1MGIyMzAxNzJlM2U4YWQzNTI4ODExMGVmOGFiZDI0 ZmY5MmQwHhcNMjYwMjA5MjEwMDMwWhcNMjYwMjEwMjEwMDMwWjAzMTEwLwYDVQQD EygyZDExNTY1ZjQ4MGNlNDliZThmMzAxMTJjOTJiOTM3MTA5OGRmNzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CCm6CdPZZTdXAw3eVVaEov6zMiz gKNALxkdzZsaRjl5TnhzmBR59qT3l/FTryRO7LZKZB2EV26UvGy2367a+kR4b3No ZCX0jr7HADzFE141HtUu5AAV1qrhDYpMyGVgZkvLyHhwFqd3uR+lJT8R9I8DULlM a0oGgny+WeMKssEXtns9PHsRCpsOibjdzCOKkO4/pIwv3jYW3jl+KbkFpey/rAUB J5Al3dO8QQyAQNGx5CxDBAQnpw1gW4uN8536vpu8bZ2YCuKzvyY2CO7m1i/ZN9ss e9OHqfwPzSPGO3RybySygOu7MBUrSU99OgM9+8+HaiaLa/GJ1VzrptSNmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC0RVl9IDOSb6PMBEskrk3EJjfeAMB8GA1UdIwQY MBaAFO50ULIwFy4+itNSiBEO+KvST/ktMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN25SUXNqQVhMajZLMDFLSUVRNzRxOUpQLVMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8yZTI1N2UtZGY2NC00NjY4LTg2M2It ZjRkZWE4NjkyOWFlLzEvN25SUXNqQVhMajZLMDFLSUVRNzRxOUpQLVMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8yZTI1N2UtZGY2NC00NjY4LTg2M2ItZjRkZWE4NjkyOWFl LzEvN25SUXNqQVhMajZLMDFLSUVRNzRxOUpQLVMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE83Ejh13 tyvFulJKTkDMdeSbQfaF3LslDaW6OZrHVOqBEWXCOS9H+p4fmcVftCXnoMt5AfHj PZNn00qt2G2beDCU2mi+/gCNz/u49BHnlijbInSxNhB5p/D/K/w4/h8gL9ckkpLF 9wTDm8RyM/URUcgvAaUc8+mRikY5FoJl3H06UgpVggKHm0ciYBJqPJnLdz//EZPs e0vx4n0vKI5WqzDevRzap7ebj8gFfRa4Zr+ySTolrVZw0cbZ9Tb/bR1WHzPax0pg ToTeBj5hcDnjb6CHxutLwAYS15Tqqoj9o9JOsihRQYDT3VkcRJE/lyOc482PVJnb +hzPGxdBJm8slg== -----END CERTIFICATE-----Generated at Tue Feb 10 00:16:44 2026 by rpki-client