This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft File: v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft (raw, json) Hash identifier: KLnOMUwx6cPs9zv4M146lIphZ7GcSOXVax0+97TFaAc= Subject key identifier: B4:25:92:F4:20:89:01:D1:48:E9:5D:2F:2E:87:FF:5A:25:F1:9C:C4 Authority key identifier: BF:D7:BB:FC:C2:B8:FA:B6:6A:58:1B:82:27:CA:0A:C8:17:FA:14:6B Certificate issuer: /CN=bfd7bbfcc2b8fab66a581b8227ca0ac817fa146b Certificate serial: 019C42B4641C5D9C05A17A6867EEED83BB23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft Manifest number: 1107 Signing time: Mon 09 Feb 2026 14:00:44 +0000 Manifest this update: Mon 09 Feb 2026 14:00:44 +0000 Manifest next update: Tue 10 Feb 2026 14:00:44 +0000 Files and hashes: 1: S6cfSB1H_ps_kH_S0XDtasvicvA.roa (hash: xt44QNEN7hPpzFoxnaD4gxZK8ZilzAgXn7bld09Oo6g=) 2: v9e7_MK4-rZqWBuCJ8oKyBf6FGs.crl (hash: C7enwtrs3ZWx4gxt0W23X+cGLH1uRlKRuuRHhQyRpw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft rsync://rpki.ripe.net/repository/DEFAULT/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:64:1c:5d:9c:05:a1:7a:68:67:ee:ed:83:bb:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfd7bbfcc2b8fab66a581b8227ca0ac817fa146b Validity Not Before: Feb 9 14:00:44 2026 GMT Not After : Feb 10 14:00:44 2026 GMT Subject: CN=b42592f4208901d148e95d2f2e87ff5a25f19cc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:74:92:c5:c2:ec:ca:41:73:bf:59:07:2b:2b: 71:63:1d:7e:a0:47:4d:fd:c6:dd:03:3a:22:27:71: c4:32:c8:e3:d7:cb:61:ec:3a:8b:fd:c6:41:c2:ab: a9:8b:cd:a2:23:90:0b:6e:bb:5b:2e:70:9c:51:f2: 49:e3:c4:de:66:6f:24:0b:c8:6f:3e:a5:60:6e:1d: e6:54:4a:1e:f9:d9:73:3d:fc:ed:64:0c:ac:10:c7: fc:61:c0:ff:c8:fa:f9:49:43:0a:2b:18:3c:9a:91: cf:f7:9c:9c:38:2f:cc:0f:cf:6a:3a:c7:1d:bd:62: 56:4a:5c:34:3b:b9:2f:00:d0:27:52:c2:82:f8:ae: 23:69:d8:76:82:68:da:23:16:c5:77:0c:46:73:6c: e3:c3:2a:18:63:bc:27:a3:9e:34:08:2e:aa:9e:2a: f9:af:02:a8:6a:84:56:ae:15:c1:6d:94:7a:39:57: cc:9e:cb:f2:b0:06:00:86:a5:8d:66:2b:7b:92:0d: 18:97:8b:e1:65:cc:56:d3:39:b3:60:d9:bc:c7:8d: 39:69:d0:87:f9:c3:ed:b3:49:73:d1:e1:71:4e:4a: ea:d0:c6:24:b8:b3:46:96:8f:7d:0c:8e:fb:fa:35: fb:82:d1:6f:d1:22:e3:13:f8:a2:22:8d:c6:d9:b1: 50:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:25:92:F4:20:89:01:D1:48:E9:5D:2F:2E:87:FF:5A:25:F1:9C:C4 X509v3 Authority Key Identifier: keyid:BF:D7:BB:FC:C2:B8:FA:B6:6A:58:1B:82:27:CA:0A:C8:17:FA:14:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:7e:d4:62:3a:cb:a2:69:b7:76:df:27:ad:93:d8:b8:e4:9f: d2:24:2c:89:0c:22:10:f8:51:ae:6b:dd:c3:1a:4b:94:0d:5b: a4:7a:7f:0e:6b:a9:2b:88:3e:ec:5f:43:15:e8:94:d5:c9:11: 56:57:d1:ee:bb:3a:b8:21:b4:d9:09:49:d0:c3:f9:96:61:50: 7e:b7:0a:19:b8:2e:6b:ac:63:3f:b2:d7:11:9f:29:37:0d:0f: 76:a1:21:19:5e:e0:8e:13:6c:28:07:ac:ec:2b:f0:8e:04:ac: 80:27:71:13:88:20:a9:99:65:c9:6c:4e:78:d8:ac:8a:a7:8c: b6:0e:17:c1:18:7c:04:87:f2:30:ae:4e:48:d5:bf:3a:34:73: 75:fc:f2:a0:d1:25:67:1f:ed:9e:3d:83:10:a0:13:cc:6a:b9: ed:23:17:75:b6:70:57:16:52:4f:52:64:bd:ad:cf:fd:46:90: 9c:4f:c0:fc:49:df:5e:3f:b9:0c:38:0f:ed:5f:08:96:a7:51: 46:a0:c5:2d:f8:cf:9b:f3:d7:bb:49:72:c4:eb:ad:43:03:12: ad:26:fa:2e:86:e5:e7:a1:7d:2a:4b:af:55:ed:61:cf:ab:30: 02:b2:6f:bc:7a:cf:c4:34:ce:97:cf:df:b7:e5:1a:cd:a2:62: 6f:69:4e:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtGQcXZwFoXpoZ+7tg7sjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmZDdiYmZjYzJiOGZhYjY2YTU4MWI4MjI3Y2EwYWM4MTdm YTE0NmIwHhcNMjYwMjA5MTQwMDQ0WhcNMjYwMjEwMTQwMDQ0WjAzMTEwLwYDVQQD EyhiNDI1OTJmNDIwODkwMWQxNDhlOTVkMmYyZTg3ZmY1YTI1ZjE5Y2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnSSxcLsykFzv1kHKytxYx1+oEdN /cbdAzoiJ3HEMsjj18th7DqL/cZBwqupi82iI5ALbrtbLnCcUfJJ48TeZm8kC8hv PqVgbh3mVEoe+dlzPfztZAysEMf8YcD/yPr5SUMKKxg8mpHP95ycOC/MD89qOscd vWJWSlw0O7kvANAnUsKC+K4jadh2gmjaIxbFdwxGc2zjwyoYY7wno540CC6qnir5 rwKoaoRWrhXBbZR6OVfMnsvysAYAhqWNZit7kg0Yl4vhZcxW0zmzYNm8x405adCH +cPts0lz0eFxTkrq0MYkuLNGlo99DI77+jX7gtFv0SLjE/iiIo3G2bFQTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLQlkvQgiQHRSOldLy6H/1ol8ZzEMB8GA1UdIwQY MBaAFL/Xu/zCuPq2algbgifKCsgX+hRrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjllN19NSzQtclpxV0J1Q0o4b0t5QmY2RkdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS84MmZiMDUtNjFlNi00MzM1LWIxNjct MzZhZWQ4N2UzMzg4LzEvdjllN19NSzQtclpxV0J1Q0o4b0t5QmY2RkdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS84MmZiMDUtNjFlNi00MzM1LWIxNjctMzZhZWQ4N2UzMzg4 LzEvdjllN19NSzQtclpxV0J1Q0o4b0t5QmY2RkdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqX7UYjrL omm3dt8nrZPYuOSf0iQsiQwiEPhRrmvdwxpLlA1bpHp/DmupK4g+7F9DFeiU1ckR VlfR7rs6uCG02QlJ0MP5lmFQfrcKGbgua6xjP7LXEZ8pNw0PdqEhGV7gjhNsKAes 7CvwjgSsgCdxE4ggqZllyWxOeNisiqeMtg4XwRh8BIfyMK5OSNW/OjRzdfzyoNEl Zx/tnj2DEKATzGq57SMXdbZwVxZST1Jkva3P/UaQnE/A/EnfXj+5DDgP7V8IlqdR RqDFLfjPm/PXu0lyxOutQwMSrSb6Lobl56F9KkuvVe1hz6swArJvvHrPxDTOl8/f t+UazaJib2lOfA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:42 2026 by rpki-client