This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.mft File: 7W-ceQaUDj1EN8a9zeFk0GWoDqU.mft (raw, json) Hash identifier: Rz66dmLXnsk7gRLf7w9Ev5fTOcdWkrlekW1Go6PewPE= Subject key identifier: 39:10:A3:F3:79:59:96:86:45:CA:C7:D1:E9:86:F8:3B:88:0C:FB:54 Authority key identifier: ED:6F:9C:79:06:94:0E:3D:44:37:C6:BD:CD:E1:64:D0:65:A8:0E:A5 Certificate issuer: /CN=ed6f9c7906940e3d4437c6bdcde164d065a80ea5 Certificate serial: 019C43FE0047A0C9792540ADCAF0EF023AF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W-ceQaUDj1EN8a9zeFk0GWoDqU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.mft Manifest number: 07BA Signing time: Mon 09 Feb 2026 20:00:45 +0000 Manifest this update: Mon 09 Feb 2026 20:00:45 +0000 Manifest next update: Tue 10 Feb 2026 20:00:45 +0000 Files and hashes: 1: 7W-ceQaUDj1EN8a9zeFk0GWoDqU.crl (hash: lFobzzrEVdClO5D9zAmAb32ie+/V2c3dfao3R2wkuYM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.mft rsync://rpki.ripe.net/repository/DEFAULT/7W-ceQaUDj1EN8a9zeFk0GWoDqU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:00:47:a0:c9:79:25:40:ad:ca:f0:ef:02:3a:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed6f9c7906940e3d4437c6bdcde164d065a80ea5 Validity Not Before: Feb 9 20:00:45 2026 GMT Not After : Feb 10 20:00:45 2026 GMT Subject: CN=3910a3f37959968645cac7d1e986f83b880cfb54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:38:ef:f6:cc:92:29:1b:af:a8:bd:87:1d:c2: 0f:0b:fa:3e:c1:3c:b4:47:4c:c5:01:cd:22:dc:cb: 72:a0:83:35:c8:4c:6d:35:83:ed:01:40:fa:af:4b: 6a:d9:09:12:a8:0a:58:ec:77:2b:89:6a:45:d9:62: 89:f0:f5:8b:b9:b6:8c:ef:40:3c:04:91:e3:d0:ad: da:eb:ea:bb:48:38:ba:b3:f6:c9:4a:2a:37:85:90: 5e:4d:b7:43:79:73:69:24:ae:6c:5d:e4:8f:81:77: da:7f:c1:cc:b9:d5:ac:b9:26:c1:a5:70:39:85:44: 80:40:49:ba:78:da:2d:a2:d3:94:9b:58:4a:bb:00: 4b:35:59:3c:c3:dd:69:e3:3f:0a:a2:4b:49:5e:56: 84:de:0c:4b:e7:59:90:0d:da:74:8e:fd:4e:59:c1: dd:0a:4f:04:c4:a2:a2:2b:eb:9b:b5:42:90:71:29: d3:88:93:24:ef:83:91:01:0a:e6:5c:cc:70:99:84: e3:bb:97:26:4b:be:14:22:62:00:9c:ce:60:2d:87: c0:71:02:86:ac:fa:b3:3a:4f:90:58:32:b9:d6:73: 75:f6:a9:65:e8:10:ca:45:cb:80:3d:fb:94:6a:01: ac:ed:36:20:ca:8b:8c:80:fd:b6:84:8a:81:9f:d8: ce:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:10:A3:F3:79:59:96:86:45:CA:C7:D1:E9:86:F8:3B:88:0C:FB:54 X509v3 Authority Key Identifier: keyid:ED:6F:9C:79:06:94:0E:3D:44:37:C6:BD:CD:E1:64:D0:65:A8:0E:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W-ceQaUDj1EN8a9zeFk0GWoDqU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:84:b0:d8:dd:7a:bb:77:f9:1d:08:fd:b0:b8:c5:f0:a6:db: 21:86:9a:6a:09:09:98:06:ff:00:c8:5e:70:f6:eb:eb:19:97: bb:3b:a6:50:82:6e:e5:53:68:f7:7a:04:b3:13:15:52:30:47: ae:8e:70:e4:65:74:16:76:65:6e:8a:df:4a:a6:39:7f:f4:9e: 9a:6e:90:75:43:35:0c:cb:9f:0f:8c:1a:8d:0a:e8:ab:b7:84: b5:16:45:ec:3e:70:9b:2a:7b:06:d9:ee:e4:29:0e:51:78:a7: 88:80:a4:3a:48:3a:93:0f:94:74:a0:96:50:dd:cb:9a:3c:c7: 0d:31:7d:34:ca:60:a3:fd:71:da:51:57:c8:53:bf:5d:cc:92: 63:49:58:75:26:07:75:cc:6d:60:c6:05:52:91:95:70:10:8a: 11:f1:68:1f:1b:ce:1e:9c:1b:0e:70:a4:2c:3c:da:c2:54:53: 3d:2b:2f:b6:47:0f:8d:70:1b:c5:04:4d:3c:24:8e:bb:95:f8: e3:cb:50:a9:10:d0:e1:d2:0b:77:74:fd:93:84:b5:ee:07:04: f7:60:9a:dd:cc:89:b8:a1:15:ff:35:16:f0:b3:c6:81:da:d2: be:e5:78:c0:f9:f4:40:08:e5:dd:3f:8f:a3:3b:b2:b0:26:fb: 95:a4:0c:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/gBHoMl5JUCtyvDvAjrwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNmY5Yzc5MDY5NDBlM2Q0NDM3YzZiZGNkZTE2NGQwNjVh ODBlYTUwHhcNMjYwMjA5MjAwMDQ1WhcNMjYwMjEwMjAwMDQ1WjAzMTEwLwYDVQQD EygzOTEwYTNmMzc5NTk5Njg2NDVjYWM3ZDFlOTg2ZjgzYjg4MGNmYjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjjv9sySKRuvqL2HHcIPC/o+wTy0 R0zFAc0i3MtyoIM1yExtNYPtAUD6r0tq2QkSqApY7HcriWpF2WKJ8PWLubaM70A8 BJHj0K3a6+q7SDi6s/bJSio3hZBeTbdDeXNpJK5sXeSPgXfaf8HMudWsuSbBpXA5 hUSAQEm6eNototOUm1hKuwBLNVk8w91p4z8KoktJXlaE3gxL51mQDdp0jv1OWcHd Ck8ExKKiK+ubtUKQcSnTiJMk74ORAQrmXMxwmYTju5cmS74UImIAnM5gLYfAcQKG rPqzOk+QWDK51nN19qll6BDKRcuAPfuUagGs7TYgyouMgP22hIqBn9jONQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDkQo/N5WZaGRcrH0emG+DuIDPtUMB8GA1UdIwQY MBaAFO1vnHkGlA49RDfGvc3hZNBlqA6lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1ctY2VRYVVEajFFTjhhOXplRmswR1dvRHFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9kYTUwZGUtMjU2OS00Y2JjLTgwNDMt NjY1ZGFmYTMwNTViLzEvN1ctY2VRYVVEajFFTjhhOXplRmswR1dvRHFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9kYTUwZGUtMjU2OS00Y2JjLTgwNDMtNjY1ZGFmYTMwNTVi LzEvN1ctY2VRYVVEajFFTjhhOXplRmswR1dvRHFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC4Sw2N16 u3f5HQj9sLjF8KbbIYaaagkJmAb/AMhecPbr6xmXuzumUIJu5VNo93oEsxMVUjBH ro5w5GV0FnZlborfSqY5f/Semm6QdUM1DMufD4wajQroq7eEtRZF7D5wmyp7Btnu 5CkOUXiniICkOkg6kw+UdKCWUN3LmjzHDTF9NMpgo/1x2lFXyFO/XcySY0lYdSYH dcxtYMYFUpGVcBCKEfFoHxvOHpwbDnCkLDzawlRTPSsvtkcPjXAbxQRNPCSOu5X4 48tQqRDQ4dILd3T9k4S17gcE92Ca3cyJuKEV/zUW8LPGgdrSvuV4wPn0QAjl3T+P ozuysCb7laQMTQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:52 2026 by rpki-client