This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/980bfb-c9b4-4433-8927-b667e18fd818/1/x7cn_mQvVCkYabzx8pF-D1O-vSI.mft File: x7cn_mQvVCkYabzx8pF-D1O-vSI.mft (raw, json) Hash identifier: gYdNzFnnRNEXhp0T3XQJI7boj0LALCyvwUmlV4KtrWk= Subject key identifier: 89:96:52:97:4A:4A:7A:6A:A1:71:88:7F:90:E0:58:E9:54:38:0C:9B Authority key identifier: C7:B7:27:FE:64:2F:54:29:18:69:BC:F1:F2:91:7E:0F:53:BE:BD:22 Certificate issuer: /CN=c7b727fe642f54291869bcf1f2917e0f53bebd22 Certificate serial: 019C41D84F448ED9E2739D6C0785D3810DEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7cn_mQvVCkYabzx8pF-D1O-vSI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/980bfb-c9b4-4433-8927-b667e18fd818/1/x7cn_mQvVCkYabzx8pF-D1O-vSI.mft Manifest number: 0228 Signing time: Mon 09 Feb 2026 10:00:20 +0000 Manifest this update: Mon 09 Feb 2026 10:00:20 +0000 Manifest next update: Tue 10 Feb 2026 10:00:20 +0000 Files and hashes: 1: kORyU4g90CSGVxPKrMfByEHg2Gc.roa (hash: vQB4VQcvyf3GoDwBmOym3tthm9so9Eu72xcJSgkbl28=) 2: x7cn_mQvVCkYabzx8pF-D1O-vSI.crl (hash: L8YJBU7rBzLk9N3tlIT6QTT45Zis2vYEpVeC1OcjHzs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/980bfb-c9b4-4433-8927-b667e18fd818/1/x7cn_mQvVCkYabzx8pF-D1O-vSI.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/980bfb-c9b4-4433-8927-b667e18fd818/1/x7cn_mQvVCkYabzx8pF-D1O-vSI.mft rsync://rpki.ripe.net/repository/DEFAULT/x7cn_mQvVCkYabzx8pF-D1O-vSI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:4f:44:8e:d9:e2:73:9d:6c:07:85:d3:81:0d:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7b727fe642f54291869bcf1f2917e0f53bebd22 Validity Not Before: Feb 9 10:00:20 2026 GMT Not After : Feb 10 10:00:20 2026 GMT Subject: CN=899652974a4a7a6aa171887f90e058e954380c9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:14:76:ec:3b:b5:79:27:36:59:b1:cd:45:ee: 4f:c6:5b:eb:13:57:25:a3:60:45:8e:78:96:5a:dd: bd:9e:4d:bf:78:50:8f:10:0c:f0:1a:b8:9b:48:65: ff:23:db:1e:e2:b3:16:63:31:04:6b:c1:d2:41:17: 21:f0:2f:cd:23:7e:c8:46:01:90:47:ff:ef:83:dc: 06:22:06:73:bb:f6:da:51:c0:8b:21:cf:fd:28:2f: da:ad:5c:2e:28:d8:31:80:97:f2:bf:b1:98:96:2f: 65:78:9b:bb:e3:0c:61:cd:a8:79:3f:d6:d8:df:7c: 81:e9:ee:cc:97:07:d4:9d:a7:bd:5c:10:b0:65:89: d3:45:4d:e8:9b:2b:e3:22:7a:e1:90:ad:8c:51:76: 32:87:b6:45:8b:60:fd:43:dd:c3:8e:df:16:b0:d9: 48:d7:01:e8:c9:9d:9c:b6:19:79:fd:dc:6e:02:ee: 52:02:9c:70:f3:4c:60:c9:55:82:be:b8:12:38:13: 00:b8:7f:de:b3:02:df:54:56:92:44:79:97:e1:ba: 44:3c:c3:45:68:43:87:25:1f:ac:0c:cc:ef:c3:47: d8:9b:b7:b1:6d:ba:2f:4e:b8:bb:e5:af:8f:5f:69: 56:d2:25:32:6a:97:97:4d:12:bd:f4:d8:29:f9:66: 61:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:96:52:97:4A:4A:7A:6A:A1:71:88:7F:90:E0:58:E9:54:38:0C:9B X509v3 Authority Key Identifier: keyid:C7:B7:27:FE:64:2F:54:29:18:69:BC:F1:F2:91:7E:0F:53:BE:BD:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7cn_mQvVCkYabzx8pF-D1O-vSI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/980bfb-c9b4-4433-8927-b667e18fd818/1/x7cn_mQvVCkYabzx8pF-D1O-vSI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/980bfb-c9b4-4433-8927-b667e18fd818/1/x7cn_mQvVCkYabzx8pF-D1O-vSI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:a9:a4:19:4d:c5:4e:af:13:e8:49:5f:01:02:db:11:95:5d: 3e:4b:2f:1c:a7:61:19:54:b8:1e:0d:c8:21:a2:3b:4c:9e:f8: 85:85:98:a9:7e:ad:76:65:71:c3:0b:89:2a:a9:f9:5e:51:3e: 7c:16:73:42:f6:d5:36:5a:d1:b1:5d:ed:d1:cc:47:b4:0f:86: ca:a5:42:a0:32:2e:7f:e7:cf:5d:bd:c7:88:eb:4b:42:df:91: 8b:df:f1:e5:3e:87:e8:e4:1e:ac:ba:ce:86:cb:09:c7:4b:ca: 70:6c:c0:64:59:8f:85:c5:28:bd:5d:45:bf:1b:76:c9:01:61: 8e:e7:8e:f0:6a:78:64:0f:1c:ba:04:d2:c6:a1:1f:98:e6:95: 51:39:88:d7:24:c3:12:10:6b:a8:0b:d7:fa:63:7d:7b:4f:92: c3:0e:96:f6:61:04:8b:0d:90:a9:01:86:39:57:4c:1d:64:1b: f3:15:4d:f7:ed:b0:60:6a:6b:11:fc:11:61:51:7b:88:fc:11: e6:99:9f:b9:8a:38:49:1f:fc:49:5c:86:11:79:70:d7:bb:ee: e6:a9:0a:3f:23:7a:ae:8a:a1:a1:c3:20:15:9b:fc:20:7c:57: aa:52:ca:8b:5c:a0:fc:a5:70:18:67:00:89:59:33:8e:2b:5f: 6f:96:7d:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2E9Ejtnic51sB4XTgQ3rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3YjcyN2ZlNjQyZjU0MjkxODY5YmNmMWYyOTE3ZTBmNTNi ZWJkMjIwHhcNMjYwMjA5MTAwMDIwWhcNMjYwMjEwMTAwMDIwWjAzMTEwLwYDVQQD Eyg4OTk2NTI5NzRhNGE3YTZhYTE3MTg4N2Y5MGUwNThlOTU0MzgwYzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hR27Du1eSc2WbHNRe5PxlvrE1cl o2BFjniWWt29nk2/eFCPEAzwGribSGX/I9se4rMWYzEEa8HSQRch8C/NI37IRgGQ R//vg9wGIgZzu/baUcCLIc/9KC/arVwuKNgxgJfyv7GYli9leJu74wxhzah5P9bY 33yB6e7MlwfUnae9XBCwZYnTRU3omyvjInrhkK2MUXYyh7ZFi2D9Q93Djt8WsNlI 1wHoyZ2cthl5/dxuAu5SApxw80xgyVWCvrgSOBMAuH/eswLfVFaSRHmX4bpEPMNF aEOHJR+sDMzvw0fYm7exbbovTri75a+PX2lW0iUyapeXTRK99Ngp+WZhKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFImWUpdKSnpqoXGIf5DgWOlUOAybMB8GA1UdIwQY MBaAFMe3J/5kL1QpGGm88fKRfg9Tvr0iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDdjbl9tUXZWQ2tZYWJ6eDhwRi1EMU8tdlNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS85ODBiZmItYzliNC00NDMzLTg5Mjct YjY2N2UxOGZkODE4LzEveDdjbl9tUXZWQ2tZYWJ6eDhwRi1EMU8tdlNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS85ODBiZmItYzliNC00NDMzLTg5MjctYjY2N2UxOGZkODE4 LzEveDdjbl9tUXZWQ2tZYWJ6eDhwRi1EMU8tdlNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjqmkGU3F Tq8T6ElfAQLbEZVdPksvHKdhGVS4Hg3IIaI7TJ74hYWYqX6tdmVxwwuJKqn5XlE+ fBZzQvbVNlrRsV3t0cxHtA+GyqVCoDIuf+fPXb3HiOtLQt+Ri9/x5T6H6OQerLrO hssJx0vKcGzAZFmPhcUovV1Fvxt2yQFhjueO8Gp4ZA8cugTSxqEfmOaVUTmI1yTD EhBrqAvX+mN9e0+Sww6W9mEEiw2QqQGGOVdMHWQb8xVN9+2wYGprEfwRYVF7iPwR 5pmfuYo4SR/8SVyGEXlw17vu5qkKPyN6roqhocMgFZv8IHxXqlLKi1yg/KVwGGcA iVkzjitfb5Z9wg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:30 2026 by rpki-client