This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft File: 7fBEw2PXiOdDNOE24DzH_R5JohY.mft (raw, json) Hash identifier: QIxU6v8akmoDYMQGBGNc9AbGAR0mWIPpsmg5DLewvYw= Subject key identifier: 33:AF:D9:71:04:9F:59:61:A5:CE:7B:27:EA:A8:24:14:13:78:3B:2C Authority key identifier: ED:F0:44:C3:63:D7:88:E7:43:34:E1:36:E0:3C:C7:FD:1E:49:A2:16 Certificate issuer: /CN=edf044c363d788e74334e136e03cc7fd1e49a216 Certificate serial: 019C43228CE7A0C79910687E1ECB606CC917 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fBEw2PXiOdDNOE24DzH_R5JohY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft Manifest number: 0A86 Signing time: Mon 09 Feb 2026 16:01:03 +0000 Manifest this update: Mon 09 Feb 2026 16:01:03 +0000 Manifest next update: Tue 10 Feb 2026 16:01:03 +0000 Files and hashes: 1: 7fBEw2PXiOdDNOE24DzH_R5JohY.crl (hash: gezteOQVUOlWoMFJHmf6UluFXt//zFdQxZXO2zII+/I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft rsync://rpki.ripe.net/repository/DEFAULT/7fBEw2PXiOdDNOE24DzH_R5JohY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:8c:e7:a0:c7:99:10:68:7e:1e:cb:60:6c:c9:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edf044c363d788e74334e136e03cc7fd1e49a216 Validity Not Before: Feb 9 16:01:03 2026 GMT Not After : Feb 10 16:01:03 2026 GMT Subject: CN=33afd971049f5961a5ce7b27eaa8241413783b2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c7:77:3b:a8:d8:ac:dd:1d:4d:ee:f7:91:10: 82:9e:87:1b:3a:87:88:5a:1f:dc:ec:32:5f:fe:02: c4:6a:51:b2:2a:7a:0f:57:ac:e3:b4:af:20:ba:f6: 97:e2:d3:9c:f8:73:09:87:a1:78:f9:d4:80:3d:89: 1d:17:08:ed:30:9a:80:52:a0:8a:89:aa:9b:68:fe: bc:2c:72:b6:94:1c:8b:fb:c1:39:8a:44:ea:1d:fb: d7:b3:fa:af:fb:ae:8a:c1:e3:05:e2:64:9e:9d:f0: fd:f4:28:74:06:82:08:2b:a8:64:b4:62:a2:e8:59: 98:67:bd:69:bf:fb:3e:44:d8:a5:fb:12:66:96:7f: 67:ad:15:fe:d2:52:99:0b:09:9e:ba:f4:26:80:32: 00:dd:42:f5:21:de:ba:6d:e3:25:54:f7:6d:00:19: 2c:b9:cb:9d:11:f6:0f:23:dd:8c:dd:41:4e:f6:ba: 55:08:5f:80:c3:8f:19:19:17:f8:98:25:bb:dc:fc: d7:78:ba:1a:21:7a:bc:b2:0f:2d:bc:d3:20:6e:b6: 9f:17:76:a6:b1:e1:f1:f6:b5:b8:79:bc:bb:be:5c: 24:e3:c5:60:0e:61:ce:c1:27:01:12:82:75:f1:9d: 54:ba:47:02:d7:c4:6e:3a:5e:3f:86:d7:4b:4f:54: 84:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:AF:D9:71:04:9F:59:61:A5:CE:7B:27:EA:A8:24:14:13:78:3B:2C X509v3 Authority Key Identifier: keyid:ED:F0:44:C3:63:D7:88:E7:43:34:E1:36:E0:3C:C7:FD:1E:49:A2:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fBEw2PXiOdDNOE24DzH_R5JohY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:a6:e6:c4:15:3d:f3:e5:b3:cd:67:6d:6f:91:70:3e:50:65: 0c:a3:7e:ae:5c:a5:99:19:d1:98:38:b0:50:29:63:47:7d:19: 6e:38:30:39:7f:37:c0:b1:c9:82:cf:9b:cf:df:7b:d6:37:18: 1d:b7:5f:d1:1a:87:18:e7:a0:4a:c5:c0:8a:ae:3f:ad:4e:17: 7e:ab:73:6e:c3:00:25:1e:34:48:dc:c1:e6:f5:4a:c1:5f:c2: e2:77:36:73:0f:4f:41:20:86:79:89:01:31:29:ea:dc:68:0d: e1:fc:49:a2:3a:3c:34:48:73:50:b9:8f:6e:b6:1e:26:19:67: af:6f:e7:e2:8a:7d:23:06:05:a7:57:d7:c4:c9:12:ee:00:0e: 38:d5:ef:49:c1:94:01:93:a9:36:85:39:7a:c3:fe:d5:64:79: e0:20:56:88:84:d3:fc:45:66:3d:e9:cd:d4:4d:df:05:c1:e0: d6:f0:99:3e:45:35:31:b0:79:b2:f7:13:0b:7d:1a:76:29:6e: fe:b3:66:f0:01:97:21:dc:32:a7:32:e5:22:70:8f:8b:a8:e9: 4b:27:c0:2c:02:04:28:ce:e8:32:50:78:ae:39:f1:43:ca:94: fa:7e:21:67:a0:3a:6e:1e:9c:43:9b:57:fb:96:e1:06:79:00: 16:b2:c8:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIoznoMeZEGh+HstgbMkXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkZjA0NGMzNjNkNzg4ZTc0MzM0ZTEzNmUwM2NjN2ZkMWU0 OWEyMTYwHhcNMjYwMjA5MTYwMTAzWhcNMjYwMjEwMTYwMTAzWjAzMTEwLwYDVQQD EygzM2FmZDk3MTA0OWY1OTYxYTVjZTdiMjdlYWE4MjQxNDEzNzgzYjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsd3O6jYrN0dTe73kRCCnocbOoeI Wh/c7DJf/gLEalGyKnoPV6zjtK8guvaX4tOc+HMJh6F4+dSAPYkdFwjtMJqAUqCK iaqbaP68LHK2lByL+8E5ikTqHfvXs/qv+66KweMF4mSenfD99Ch0BoIIK6hktGKi 6FmYZ71pv/s+RNil+xJmln9nrRX+0lKZCwmeuvQmgDIA3UL1Id66beMlVPdtABks ucudEfYPI92M3UFO9rpVCF+Aw48ZGRf4mCW73PzXeLoaIXq8sg8tvNMgbrafF3am seHx9rW4eby7vlwk48VgDmHOwScBEoJ18Z1UukcC18RuOl4/htdLT1SEVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDOv2XEEn1lhpc57J+qoJBQTeDssMB8GA1UdIwQY MBaAFO3wRMNj14jnQzThNuA8x/0eSaIWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2ZCRXcyUFhpT2RETk9FMjREekhfUjVKb2hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zNDA0OTEtZDFkMi00MzJjLTk1NmQt MmZlMTU5NGRkYzljLzEvN2ZCRXcyUFhpT2RETk9FMjREekhfUjVKb2hZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8zNDA0OTEtZDFkMi00MzJjLTk1NmQtMmZlMTU5NGRkYzlj LzEvN2ZCRXcyUFhpT2RETk9FMjREekhfUjVKb2hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApqbmxBU9 8+WzzWdtb5FwPlBlDKN+rlylmRnRmDiwUCljR30ZbjgwOX83wLHJgs+bz9971jcY Hbdf0RqHGOegSsXAiq4/rU4XfqtzbsMAJR40SNzB5vVKwV/C4nc2cw9PQSCGeYkB MSnq3GgN4fxJojo8NEhzULmPbrYeJhlnr2/n4op9IwYFp1fXxMkS7gAOONXvScGU AZOpNoU5esP+1WR54CBWiITT/EVmPenN1E3fBcHg1vCZPkU1MbB5svcTC30adilu /rNm8AGXIdwypzLlInCPi6jpSyfALAIEKM7oMlB4rjnxQ8qU+n4hZ6A6bh6cQ5tX +5bhBnkAFrLILw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:08:00 2026 by rpki-client