This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/e89e19-465f-41f2-a4c7-dd431bcce3dd/1/7cFfZVhGJAinV1N2WyxxplTxZ24.mft File: 7cFfZVhGJAinV1N2WyxxplTxZ24.mft (raw, json) Hash identifier: rFtcZrjmfCIoI53+vAMFEvtTi8r8Xn1j+xtVmXsyRxU= Subject key identifier: BE:86:44:3F:D3:23:18:EA:8B:FF:82:3A:4F:D1:81:F4:67:C2:91:6A Authority key identifier: ED:C1:5F:65:58:46:24:08:A7:57:53:76:5B:2C:71:A6:54:F1:67:6E Certificate issuer: /CN=edc15f6558462408a75753765b2c71a654f1676e Certificate serial: 019C427DDC4AD9947BDF57459BD94AC142F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cFfZVhGJAinV1N2WyxxplTxZ24.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/e89e19-465f-41f2-a4c7-dd431bcce3dd/1/7cFfZVhGJAinV1N2WyxxplTxZ24.mft Manifest number: 154E Signing time: Mon 09 Feb 2026 13:01:10 +0000 Manifest this update: Mon 09 Feb 2026 13:01:10 +0000 Manifest next update: Tue 10 Feb 2026 13:01:10 +0000 Files and hashes: 1: 7cFfZVhGJAinV1N2WyxxplTxZ24.crl (hash: 0szH/j7e4umgMrXjtvmIBplyLvHzmI8GnYY80yoanyg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/e89e19-465f-41f2-a4c7-dd431bcce3dd/1/7cFfZVhGJAinV1N2WyxxplTxZ24.crl rsync://rpki.ripe.net/repository/DEFAULT/91/e89e19-465f-41f2-a4c7-dd431bcce3dd/1/7cFfZVhGJAinV1N2WyxxplTxZ24.mft rsync://rpki.ripe.net/repository/DEFAULT/7cFfZVhGJAinV1N2WyxxplTxZ24.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:dc:4a:d9:94:7b:df:57:45:9b:d9:4a:c1:42:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edc15f6558462408a75753765b2c71a654f1676e Validity Not Before: Feb 9 13:01:10 2026 GMT Not After : Feb 10 13:01:10 2026 GMT Subject: CN=be86443fd32318ea8bff823a4fd181f467c2916a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a0:88:b4:b8:64:15:ef:cd:db:11:ae:c0:13: e2:df:37:1c:ae:2c:86:0c:54:83:be:84:a4:8e:15: a6:46:91:be:b3:04:60:10:57:7d:fd:a2:93:96:cf: 0c:5f:cb:fb:a9:0b:72:24:d0:67:26:0b:3e:7e:d7: 43:09:a9:1c:35:f5:84:bb:57:08:81:e9:c3:c3:c6: a5:61:af:af:f1:9b:54:e9:6a:71:a6:06:32:db:48: 0a:09:29:f9:d3:28:56:fc:0c:8b:f7:9f:68:d5:f7: 6c:94:2d:70:98:e3:3c:2e:9e:0c:dc:5e:27:64:60: 57:93:23:dc:b6:f7:28:03:55:dd:8c:bf:65:f0:ed: 6d:53:a2:0f:8d:b8:cc:52:b6:f2:e0:cd:bd:64:e8: d6:3a:e9:e5:29:76:40:e8:42:59:9f:74:39:0b:8f: 82:83:85:2e:61:57:45:5f:30:d4:41:7e:c7:47:b0: 34:bc:0c:e1:c7:17:88:f6:f8:f6:8c:b2:1b:28:60: 7f:d5:bc:f3:d1:92:74:12:a3:f7:a2:64:35:56:7e: 20:71:c8:d2:60:52:77:61:1e:ff:a9:bd:5a:63:3b: c4:3e:4c:ab:d5:7a:e6:66:1b:85:fc:f9:5b:09:fe: 22:83:07:16:ed:37:6a:69:5a:36:6e:f7:fe:2e:c3: 7e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:86:44:3F:D3:23:18:EA:8B:FF:82:3A:4F:D1:81:F4:67:C2:91:6A X509v3 Authority Key Identifier: keyid:ED:C1:5F:65:58:46:24:08:A7:57:53:76:5B:2C:71:A6:54:F1:67:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cFfZVhGJAinV1N2WyxxplTxZ24.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e89e19-465f-41f2-a4c7-dd431bcce3dd/1/7cFfZVhGJAinV1N2WyxxplTxZ24.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e89e19-465f-41f2-a4c7-dd431bcce3dd/1/7cFfZVhGJAinV1N2WyxxplTxZ24.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:33:d4:9e:9b:08:d9:d0:19:26:97:44:81:e4:b0:fc:c1:db: 81:7e:9e:56:be:7e:94:f2:13:78:b8:8e:8b:23:c0:c4:ff:0a: 59:47:25:a3:bc:7d:bf:7a:89:d6:67:d9:fd:07:b7:4f:4b:ff: 48:5d:3d:48:d8:4a:aa:6a:74:f1:bd:82:cb:78:9d:02:d7:28: 75:0d:fc:f2:10:e4:fe:b4:fd:94:5e:68:f8:99:68:4a:f9:34: 9b:ae:1b:57:e0:7f:4f:b9:05:b0:94:f1:a5:8a:e7:3c:10:4f: 3e:08:29:b2:8b:7d:00:9e:fe:63:40:d5:7b:41:f0:7a:0e:22: fc:b5:9a:b5:7c:e3:dd:ba:31:d1:37:24:1b:33:ad:88:39:53: 17:78:8f:6c:cb:e0:ff:6e:1f:1c:84:66:e9:2f:ff:3a:f8:04: 51:15:f5:26:19:77:79:bd:da:68:cb:4e:8f:e8:cf:63:06:95: 08:9a:58:9a:03:42:2e:04:cd:a4:76:dc:04:0d:7e:1d:e2:46: 4c:14:e9:a9:00:31:16:1e:86:31:40:8e:2f:78:68:3a:a6:bd: f7:fb:62:48:17:a9:ed:ba:71:42:9e:dd:28:e3:4d:3d:53:2e: 91:4f:50:5a:44:b8:9e:a3:59:ab:11:7f:b3:c2:80:1a:98:58: d1:0f:5d:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfdxK2ZR731dFm9lKwULzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkYzE1ZjY1NTg0NjI0MDhhNzU3NTM3NjViMmM3MWE2NTRm MTY3NmUwHhcNMjYwMjA5MTMwMTEwWhcNMjYwMjEwMTMwMTEwWjAzMTEwLwYDVQQD EyhiZTg2NDQzZmQzMjMxOGVhOGJmZjgyM2E0ZmQxODFmNDY3YzI5MTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6CItLhkFe/N2xGuwBPi3zccriyG DFSDvoSkjhWmRpG+swRgEFd9/aKTls8MX8v7qQtyJNBnJgs+ftdDCakcNfWEu1cI genDw8alYa+v8ZtU6WpxpgYy20gKCSn50yhW/AyL959o1fdslC1wmOM8Lp4M3F4n ZGBXkyPctvcoA1XdjL9l8O1tU6IPjbjMUrby4M29ZOjWOunlKXZA6EJZn3Q5C4+C g4UuYVdFXzDUQX7HR7A0vAzhxxeI9vj2jLIbKGB/1bzz0ZJ0EqP3omQ1Vn4gccjS YFJ3YR7/qb1aYzvEPkyr1XrmZhuF/PlbCf4igwcW7TdqaVo2bvf+LsN+JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL6GRD/TIxjqi/+COk/RgfRnwpFqMB8GA1UdIwQY MBaAFO3BX2VYRiQIp1dTdlsscaZU8WduMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2NGZlpWaEdKQWluVjFOMld5eHhwbFR4WjI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9lODllMTktNDY1Zi00MWYyLWE0Yzct ZGQ0MzFiY2NlM2RkLzEvN2NGZlpWaEdKQWluVjFOMld5eHhwbFR4WjI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9lODllMTktNDY1Zi00MWYyLWE0YzctZGQ0MzFiY2NlM2Rk LzEvN2NGZlpWaEdKQWluVjFOMld5eHhwbFR4WjI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZTPUnpsI 2dAZJpdEgeSw/MHbgX6eVr5+lPITeLiOiyPAxP8KWUclo7x9v3qJ1mfZ/Qe3T0v/ SF09SNhKqmp08b2Cy3idAtcodQ388hDk/rT9lF5o+JloSvk0m64bV+B/T7kFsJTx pYrnPBBPPggpsot9AJ7+Y0DVe0Hweg4i/LWatXzj3box0TckGzOtiDlTF3iPbMvg /24fHIRm6S//OvgEURX1Jhl3eb3aaMtOj+jPYwaVCJpYmgNCLgTNpHbcBA1+HeJG TBTpqQAxFh6GMUCOL3hoOqa99/tiSBep7bpxQp7dKONNPVMukU9QWkS4nqNZqxF/ s8KAGphY0Q9dKw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:12 2026 by rpki-client