This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft File: 7s8_de-DBrbFk6QjzaGYa9496Ug.mft (raw, json) Hash identifier: 58wLLs/b7pGWnBhf1yUeZnK9Z2mKSc+KItfbGgm/1WM= Subject key identifier: FF:A2:8F:35:04:DC:56:FA:11:5D:99:82:2D:A9:ED:D2:C3:7C:39:14 Authority key identifier: EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48 Certificate issuer: /CN=eecf3f75ef8306b6c593a423cda1986bde3de948 Certificate serial: 019C44D9D18C2C0E341ACA9E70F5200C17D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft Manifest number: 1811 Signing time: Tue 10 Feb 2026 00:00:51 +0000 Manifest this update: Tue 10 Feb 2026 00:00:51 +0000 Manifest next update: Wed 11 Feb 2026 00:00:51 +0000 Files and hashes: 1: 7s8_de-DBrbFk6QjzaGYa9496Ug.crl (hash: SpCw/4wHVmnBVfS+jGOYizTNBo8TwdBMbqUm/kC1UTY=) 2: sl-nYt82qhzHyv-nkhEpEqMcJKY.roa (hash: q2Tif7W7uSE6r0l0RzQYoGnDEkiYUnvvVbum3TT4DDQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:d9:d1:8c:2c:0e:34:1a:ca:9e:70:f5:20:0c:17:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eecf3f75ef8306b6c593a423cda1986bde3de948 Validity Not Before: Feb 10 00:00:51 2026 GMT Not After : Feb 11 00:00:51 2026 GMT Subject: CN=ffa28f3504dc56fa115d99822da9edd2c37c3914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:64:77:51:ec:0e:5a:9f:d9:82:20:58:08:8f: ad:2b:17:c8:20:b0:a2:a2:2f:86:55:c7:b0:1f:ac: 2d:49:88:89:78:09:6a:64:f3:85:f8:44:36:e4:b2: ed:3b:09:07:6f:20:e2:38:70:f3:0b:3f:10:4b:60: 4a:c1:31:b3:5f:bd:f1:ff:c7:71:a6:d9:e5:13:16: c5:3b:3e:ce:6e:8a:ad:2b:06:19:cd:82:4c:7d:c3: 54:a9:61:fb:59:47:fd:66:66:af:1c:6b:28:5b:44: bb:38:ad:79:64:0b:cf:bf:d3:4c:f4:84:cf:e8:c3: c7:c8:56:ee:84:98:49:75:de:36:6e:50:62:84:16: bc:4f:30:fc:40:e0:15:7e:00:26:14:ef:98:2e:f6: 29:0c:54:c7:1d:f3:cf:81:32:4e:fb:3e:ca:15:ff: 03:8d:4a:1b:5b:e3:65:5a:39:fe:d5:c9:ce:62:7f: ee:45:04:54:b0:dc:e9:d6:20:d8:a2:7d:ce:1b:62: 5b:c7:d5:1d:73:ab:37:e0:39:2e:b7:9d:24:0d:c9: 7f:bb:56:4f:f1:6e:95:56:ff:2c:dd:f2:b3:72:7e: 1a:2e:fa:72:98:1a:39:84:80:8c:d8:b2:89:05:fb: 0f:42:4c:df:4f:34:e1:6f:1f:d3:d1:09:7e:82:3f: 4b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A2:8F:35:04:DC:56:FA:11:5D:99:82:2D:A9:ED:D2:C3:7C:39:14 X509v3 Authority Key Identifier: keyid:EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:b3:34:3d:49:14:d2:68:05:fb:e1:7d:eb:9d:3e:9a:a4:7c: 2e:bb:c9:dc:c4:2f:58:50:68:d6:a1:fc:16:64:fc:fd:26:ac: 89:07:e5:ce:c8:16:97:fa:04:a0:0b:ad:18:a9:31:45:89:9d: 90:d3:46:f2:b4:f4:8e:f1:8c:af:7f:fc:1f:21:f0:5c:df:22: 2c:ad:7c:fa:db:eb:d3:94:21:fa:3b:de:7d:a3:61:c3:71:bb: 0d:41:3e:1f:e6:ff:1d:55:c3:e2:87:e8:71:ae:0d:b8:4f:9d: 80:a9:3a:08:d0:f4:88:de:97:18:0b:d9:a6:20:38:ee:7e:b8: 41:31:dc:a6:df:71:e1:ea:a1:f9:97:e6:84:22:37:53:92:83: 4a:ab:e8:68:4a:c4:4a:c3:3b:e5:7c:66:15:4c:b4:53:b0:32: 16:3b:5d:7a:dd:92:44:3f:26:f4:a7:d9:13:ed:30:35:20:b6: 85:c1:96:42:39:02:31:ef:00:78:2b:6b:44:60:fe:49:b9:7e: f3:67:49:a3:72:81:98:c3:18:a4:a4:7a:53:64:54:8c:1b:68: 18:98:b7:32:62:a1:57:f2:ed:f2:6e:cf:99:f8:a8:9c:72:e1: b1:f5:bd:7c:14:2b:fb:a5:9f:9c:a5:11:04:d3:a6:3c:51:90: 50:93:21:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxE2dGMLA40GsqecPUgDBfXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlY2YzZjc1ZWY4MzA2YjZjNTkzYTQyM2NkYTE5ODZiZGUz ZGU5NDgwHhcNMjYwMjEwMDAwMDUxWhcNMjYwMjExMDAwMDUxWjAzMTEwLwYDVQQD EyhmZmEyOGYzNTA0ZGM1NmZhMTE1ZDk5ODIyZGE5ZWRkMmMzN2MzOTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2R3UewOWp/ZgiBYCI+tKxfIILCi oi+GVcewH6wtSYiJeAlqZPOF+EQ25LLtOwkHbyDiOHDzCz8QS2BKwTGzX73x/8dx ptnlExbFOz7OboqtKwYZzYJMfcNUqWH7WUf9ZmavHGsoW0S7OK15ZAvPv9NM9ITP 6MPHyFbuhJhJdd42blBihBa8TzD8QOAVfgAmFO+YLvYpDFTHHfPPgTJO+z7KFf8D jUobW+NlWjn+1cnOYn/uRQRUsNzp1iDYon3OG2Jbx9Udc6s34Dkut50kDcl/u1ZP 8W6VVv8s3fKzcn4aLvpymBo5hICM2LKJBfsPQkzfTzThbx/T0Ql+gj9LLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+ijzUE3Fb6EV2Zgi2p7dLDfDkUMB8GA1UdIwQY MBaAFO7PP3Xvgwa2xZOkI82hmGvePelIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3M4X2RlLURCcmJGazZRanphR1lhOTQ5NlVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS81ZGYxNmItYmM2Ni00MGRkLWE3MzEt MzViNTZjY2NhODQ5LzEvN3M4X2RlLURCcmJGazZRanphR1lhOTQ5NlVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS81ZGYxNmItYmM2Ni00MGRkLWE3MzEtMzViNTZjY2NhODQ5 LzEvN3M4X2RlLURCcmJGazZRanphR1lhOTQ5NlVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL7M0PUkU 0mgF++F9650+mqR8LrvJ3MQvWFBo1qH8FmT8/SasiQflzsgWl/oEoAutGKkxRYmd kNNG8rT0jvGMr3/8HyHwXN8iLK18+tvr05Qh+jvefaNhw3G7DUE+H+b/HVXD4ofo ca4NuE+dgKk6CND0iN6XGAvZpiA47n64QTHcpt9x4eqh+ZfmhCI3U5KDSqvoaErE SsM75XxmFUy0U7AyFjtdet2SRD8m9KfZE+0wNSC2hcGWQjkCMe8AeCtrRGD+Sbl+ 82dJo3KBmMMYpKR6U2RUjBtoGJi3MmKhV/Lt8m7PmfionHLhsfW9fBQr+6WfnKUR BNOmPFGQUJMh4w== -----END CERTIFICATE-----Generated at Tue Feb 10 01:42:52 2026 by rpki-client