This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft File: 7rtMC0r2FchaPNze1LfrtmYxG0g.mft (raw, json) Hash identifier: CRYuQyB0TmbOe080i+dNMu2PuDjX0c+xHKwSc2vi3oc= Subject key identifier: 01:58:DC:82:46:4C:D4:94:FB:C5:3D:AE:D6:00:4D:22:69:A0:50:7F Authority key identifier: EE:BB:4C:0B:4A:F6:15:C8:5A:3C:DC:DE:D4:B7:EB:B6:66:31:1B:48 Certificate issuer: /CN=eebb4c0b4af615c85a3cdcded4b7ebb666311b48 Certificate serial: 019C1C14FBC20316D67C4E455D74AEBCF013 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft Manifest number: 1790 Signing time: Mon 02 Feb 2026 02:01:03 +0000 Manifest this update: Mon 02 Feb 2026 02:01:03 +0000 Manifest next update: Tue 03 Feb 2026 02:01:03 +0000 Files and hashes: 1: 7rtMC0r2FchaPNze1LfrtmYxG0g.crl (hash: NTw5rRv2K5yUTojtqWQ+4UtowOuy6NFCQmEc6WFD+Jo=) 2: guibBNdYNmYjs3BhZ4d37Us7C4k.roa (hash: ERVCfgK3qCQAc++yH8oVuuxPI5EAT0LJxo2iXgCuAbw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 02:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1c:14:fb:c2:03:16:d6:7c:4e:45:5d:74:ae:bc:f0:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebb4c0b4af615c85a3cdcded4b7ebb666311b48 Validity Not Before: Feb 2 02:01:03 2026 GMT Not After : Feb 3 02:01:03 2026 GMT Subject: CN=0158dc82464cd494fbc53daed6004d2269a0507f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d1:38:89:37:1c:68:1d:04:2e:5a:22:f3:fa: eb:3e:78:da:5f:56:20:bc:e8:9e:e0:16:e8:b6:4a: ce:ed:98:ea:77:22:28:a6:01:7b:8d:b0:22:84:ce: 8a:35:89:2d:e4:c5:a7:90:80:c3:fd:80:50:53:a0: f0:99:c0:3c:8c:05:de:f1:ad:07:81:fc:56:ba:d7: 3d:1a:1a:dd:fe:7b:18:92:57:15:72:bb:28:98:d1: 84:fe:13:67:8f:9e:30:13:34:6e:8d:c9:e9:da:02: bc:8c:ef:15:6c:fd:4d:62:f1:2c:b5:ac:0e:47:55: e9:d8:62:f2:30:9b:a9:14:cd:41:29:28:2b:4b:79: 15:53:26:95:98:b1:6b:2c:5c:ed:97:5c:13:96:3d: 6c:1c:c3:5c:40:0c:13:6a:73:a3:cf:ef:8f:73:6c: ac:7d:06:0b:3d:9f:2e:0a:62:0a:0b:e2:50:f9:93: db:1a:a5:11:44:da:00:ff:f5:3e:9e:d9:c4:19:7b: e6:f1:3b:f6:a5:5e:0a:c3:62:06:a5:bd:a8:4d:5f: 08:96:ef:c7:f5:e5:91:81:1e:81:fa:23:f1:23:32: 56:09:f8:dd:d4:6f:5f:86:09:3b:40:59:46:26:cd: e8:7b:a1:a4:e7:9f:20:1d:fc:9d:ee:1b:31:38:61: 89:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:58:DC:82:46:4C:D4:94:FB:C5:3D:AE:D6:00:4D:22:69:A0:50:7F X509v3 Authority Key Identifier: keyid:EE:BB:4C:0B:4A:F6:15:C8:5A:3C:DC:DE:D4:B7:EB:B6:66:31:1B:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:91:12:68:6f:18:3b:9e:1c:a4:27:4f:00:54:f0:ea:62:fd: 05:21:8b:79:55:b9:1c:1f:a0:da:be:eb:76:7f:38:03:1b:47: 63:c7:33:8c:8f:a2:3d:57:02:c2:b2:55:71:f9:b6:70:15:be: 08:9b:b4:14:70:e6:76:c6:ff:7a:26:65:c2:c8:b9:b7:c1:f7: c9:2b:5f:6e:c3:95:b2:cb:45:f9:73:b5:bf:1d:38:f5:49:a5: f7:f0:4f:bd:d3:e3:9e:da:1c:13:9c:0d:8c:b5:65:d9:60:57: 75:5b:d8:37:97:15:57:57:ec:67:05:15:0c:02:9e:5d:e4:bd: 22:c0:5b:1d:da:c6:81:9b:7c:46:2e:98:a8:dd:3c:1b:2d:16: 98:10:3c:4d:ef:02:2a:fc:e6:f7:c2:1b:49:26:d5:41:21:9e: c7:1d:b3:94:60:bf:cd:54:04:54:0e:72:a8:2d:20:47:93:66: 0a:07:09:31:50:de:5c:6b:95:b2:e7:08:8f:c8:ea:22:a5:a5: 2f:a9:c0:0f:0c:f6:df:54:55:39:90:af:84:1e:b2:30:eb:c2: 10:36:83:88:2c:98:be:a0:5d:ab:fd:33:b6:1a:97:e2:32:09: 1b:be:a9:1f:e0:28:ea:17:cc:b4:ec:c7:e6:32:ea:ed:06:69: b6:4e:5e:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwcFPvCAxbWfE5FXXSuvPATMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYmI0YzBiNGFmNjE1Yzg1YTNjZGNkZWQ0YjdlYmI2NjYz MTFiNDgwHhcNMjYwMjAyMDIwMTAzWhcNMjYwMjAzMDIwMTAzWjAzMTEwLwYDVQQD EygwMTU4ZGM4MjQ2NGNkNDk0ZmJjNTNkYWVkNjAwNGQyMjY5YTA1MDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtE4iTccaB0ELloi8/rrPnjaX1Yg vOie4BbotkrO7ZjqdyIopgF7jbAihM6KNYkt5MWnkIDD/YBQU6DwmcA8jAXe8a0H gfxWutc9Ghrd/nsYklcVcrsomNGE/hNnj54wEzRujcnp2gK8jO8VbP1NYvEstawO R1Xp2GLyMJupFM1BKSgrS3kVUyaVmLFrLFztl1wTlj1sHMNcQAwTanOjz++Pc2ys fQYLPZ8uCmIKC+JQ+ZPbGqURRNoA//U+ntnEGXvm8Tv2pV4Kw2IGpb2oTV8Ilu/H 9eWRgR6B+iPxIzJWCfjd1G9fhgk7QFlGJs3oe6Gk558gHfyd7hsxOGGJxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAFY3IJGTNSU+8U9rtYATSJpoFB/MB8GA1UdIwQY MBaAFO67TAtK9hXIWjzc3tS367ZmMRtIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3J0TUMwcjJGY2hhUE56ZTFMZnJ0bVl4RzBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9lZDFiODQtYjhjNS00NzY2LTg4MmQt MThlODRlNzQ3ZDIyLzEvN3J0TUMwcjJGY2hhUE56ZTFMZnJ0bVl4RzBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9lZDFiODQtYjhjNS00NzY2LTg4MmQtMThlODRlNzQ3ZDIy LzEvN3J0TUMwcjJGY2hhUE56ZTFMZnJ0bVl4RzBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG5ESaG8Y O54cpCdPAFTw6mL9BSGLeVW5HB+g2r7rdn84AxtHY8czjI+iPVcCwrJVcfm2cBW+ CJu0FHDmdsb/eiZlwsi5t8H3yStfbsOVsstF+XO1vx049Uml9/BPvdPjntocE5wN jLVl2WBXdVvYN5cVV1fsZwUVDAKeXeS9IsBbHdrGgZt8Ri6YqN08Gy0WmBA8Te8C Kvzm98IbSSbVQSGexx2zlGC/zVQEVA5yqC0gR5NmCgcJMVDeXGuVsucIj8jqIqWl L6nADwz231RVOZCvhB6yMOvCEDaDiCyYvqBdq/0zthqX4jIJG76pH+Ao6hfMtOzH 5jLq7QZptk5eLA== -----END CERTIFICATE-----Generated at Mon Feb 2 09:42:09 2026 by rpki-client