This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.mft
File: 7GV-idqz-xXjuuDrGsf6yT32OF0.mft (raw, json)
Hash identifier: oYVzIjTzDIEGuZt70sExXVjE36LCg7qZcFWUY4c9Fq4=
Subject key identifier: D9:F2:5E:50:A3:9A:D2:0C:12:03:6D:0B:75:9F:CC:CA:58:B6:F6:C3
Authority key identifier: EC:65:7E:89:DA:B3:FB:15:E3:BA:E0:EB:1A:C7:FA:C9:3D:F6:38:5D
Certificate issuer: /CN=ec657e89dab3fb15e3bae0eb1ac7fac93df6385d
Certificate serial: 019C424678259AC3FB6328E6E32A9C634E7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GV-idqz-xXjuuDrGsf6yT32OF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.mft
Manifest number: 0801
Signing time: Mon 09 Feb 2026 12:00:40 +0000
Manifest this update: Mon 09 Feb 2026 12:00:40 +0000
Manifest next update: Tue 10 Feb 2026 12:00:40 +0000
Files and hashes: 1: 7GV-idqz-xXjuuDrGsf6yT32OF0.crl (hash: GCinL/2PwpyxcTk0A/T2XZgAnnHCx6xEYibJSj3Itbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GV-idqz-xXjuuDrGsf6yT32OF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:78:25:9a:c3:fb:63:28:e6:e3:2a:9c:63:4e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec657e89dab3fb15e3bae0eb1ac7fac93df6385d
Validity
Not Before: Feb 9 12:00:40 2026 GMT
Not After : Feb 10 12:00:40 2026 GMT
Subject: CN=d9f25e50a39ad20c12036d0b759fccca58b6f6c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:65:4a:77:77:3c:8b:b9:17:70:cb:d8:95:23:
a3:bf:90:13:63:52:80:ba:f0:ea:2f:55:57:f8:50:
cf:c0:26:2f:6d:1f:87:52:1c:9e:d3:f0:e2:31:c7:
65:3a:6c:0a:1a:90:9a:ed:66:dc:77:52:b2:85:4f:
bd:a5:dd:1f:cc:50:f4:13:2c:14:d1:e7:36:ab:6e:
27:fc:7b:78:a7:a1:ee:f3:60:21:a9:40:e3:44:75:
a6:a1:93:0e:e2:89:7f:ee:96:be:de:ef:1e:80:30:
86:17:4d:2b:28:e5:62:fd:ab:db:d3:63:00:b9:df:
f2:5c:c8:e0:8d:12:fc:3e:93:8a:67:e4:51:88:07:
85:56:a1:c7:ca:88:49:68:b1:a7:b7:fc:a0:13:49:
98:f9:86:11:1a:ab:3a:37:06:9e:a4:b4:77:29:df:
39:21:ff:7e:65:34:f6:c7:bd:58:eb:6f:42:97:3f:
c5:a5:0f:d1:a1:84:e5:9f:cb:1d:bc:c9:5c:3f:ce:
3f:b0:09:ba:ff:49:54:3e:cb:b5:4f:0e:1f:d2:25:
4e:e6:58:8e:27:0f:56:ae:c0:38:e3:ca:dc:25:00:
ef:f2:04:bf:f1:53:56:88:2e:16:62:4f:3d:c1:c4:
3e:68:08:23:ab:37:85:c6:97:58:e7:ae:23:0b:dd:
e5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F2:5E:50:A3:9A:D2:0C:12:03:6D:0B:75:9F:CC:CA:58:B6:F6:C3
X509v3 Authority Key Identifier:
keyid:EC:65:7E:89:DA:B3:FB:15:E3:BA:E0:EB:1A:C7:FA:C9:3D:F6:38:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GV-idqz-xXjuuDrGsf6yT32OF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:ca:71:75:a6:a8:11:83:fa:a8:48:17:5e:16:51:85:15:02:
e1:9f:5b:c0:89:3e:19:9a:e4:9c:51:57:03:61:ff:be:88:10:
a1:bf:52:75:f4:29:29:ad:63:7d:6f:aa:53:ed:07:e3:10:3b:
b0:20:d2:36:c7:6a:37:4b:24:f8:0c:7a:26:64:ee:28:26:0b:
6d:7c:dd:d4:5a:7c:1d:9b:98:78:4e:c3:1a:5a:88:9e:5a:ef:
8f:68:f3:af:06:5f:a9:0c:a7:fc:89:d6:49:41:4c:cf:7c:ec:
83:d5:18:87:e2:81:e3:a4:c6:8b:3d:6d:5f:30:4a:ee:97:04:
bb:ed:e5:a7:68:d0:bb:18:8c:e4:26:0c:03:78:17:8d:c2:38:
f7:36:dd:eb:fa:d4:99:fe:2e:63:5c:e7:c0:cf:2e:42:17:61:
f1:29:86:67:09:e7:d0:95:65:d6:fa:97:aa:ce:d6:c8:05:8c:
54:7b:64:e3:33:7b:9f:90:67:a1:ea:65:8a:84:e9:5f:73:08:
fb:12:21:e3:54:33:fa:e9:30:a9:49:94:0a:dd:e8:74:63:5f:
ba:18:9f:4b:c0:d8:8e:0e:4b:89:34:ce:38:40:80:46:8b:6d:
88:9a:7f:b1:04:fe:88:6c:3b:a0:92:40:76:32:23:96:bf:e4:
0e:3e:d6:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:46:45 2026 by rpki-client