This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft File: 7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft (raw, json) Hash identifier: HEQ9jhew/ng6yBorF1S+iKmbb7AxqB1/VeHdhov9g9w= Subject key identifier: 85:4F:1B:09:06:1F:84:B8:E7:D4:ED:8D:50:4C:01:D5:77:C2:93:9F Authority key identifier: EC:FE:4A:09:67:7B:00:BB:C3:33:F7:16:78:EA:A8:0A:71:B6:2A:48 Certificate issuer: /CN=ecfe4a09677b00bbc333f71678eaa80a71b62a48 Certificate serial: 019C41A2254DCD5A67FA03C83D1923D3DE1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft Manifest number: 0C91 Signing time: Mon 09 Feb 2026 09:01:11 +0000 Manifest this update: Mon 09 Feb 2026 09:01:11 +0000 Manifest next update: Tue 10 Feb 2026 09:01:11 +0000 Files and hashes: 1: 7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl (hash: 1iNHJbwQ38hiRfJmoNfj9Kf7hHCn2+/Dlq9dnjkKdOw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:25:4d:cd:5a:67:fa:03:c8:3d:19:23:d3:de:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecfe4a09677b00bbc333f71678eaa80a71b62a48 Validity Not Before: Feb 9 09:01:11 2026 GMT Not After : Feb 10 09:01:11 2026 GMT Subject: CN=854f1b09061f84b8e7d4ed8d504c01d577c2939f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8b:42:66:74:ad:fa:1d:3a:a3:7c:3f:51:57: 63:70:58:81:d4:54:f4:2e:4b:a4:54:5c:bb:9a:c6: 9e:bf:26:4f:14:a6:4e:73:82:b3:c0:bd:5d:16:f3: a1:da:db:29:4f:6b:fb:7a:c1:47:d3:80:da:ab:e7: d0:86:c5:17:a7:1e:38:5d:2b:63:92:6d:9e:2d:73: 8a:b5:a3:41:13:bf:f4:04:d3:53:5b:c3:54:d4:77: 82:2f:ac:3f:41:1a:3f:2c:6e:4c:4b:ab:1b:1b:0c: 0b:fe:63:3b:6c:06:a9:fb:e2:60:4a:36:94:fc:22: b8:c5:16:69:53:d0:b1:3b:a1:10:f3:86:eb:a3:0b: f5:45:00:6c:64:f9:5e:c1:21:7c:bb:54:e4:69:b3: 1e:7e:a9:02:45:0d:1d:d0:98:0c:88:d9:cb:b7:d5: 15:0e:78:bc:f0:d2:6c:3e:a5:15:b8:fd:d7:af:1f: 4f:86:b0:7b:d1:a2:ff:9f:1d:fa:5a:ed:64:88:75: 19:ff:71:8a:48:01:f9:4b:9a:df:3a:9c:3c:20:2d: ef:ae:c0:4c:6b:1d:45:32:ea:6f:f7:08:83:a8:aa: 09:27:d5:32:ff:e8:e9:3c:f8:58:fa:a8:4a:7b:67: ea:ed:47:ae:89:ce:1b:5e:ce:c0:7e:c0:7b:a1:f3: d2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:4F:1B:09:06:1F:84:B8:E7:D4:ED:8D:50:4C:01:D5:77:C2:93:9F X509v3 Authority Key Identifier: keyid:EC:FE:4A:09:67:7B:00:BB:C3:33:F7:16:78:EA:A8:0A:71:B6:2A:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:1b:01:59:b0:b3:18:1d:71:2a:e8:a1:c7:c2:6a:4c:c8:e2: f7:44:96:ba:7b:a8:83:af:0a:28:f9:c9:e1:05:7a:de:2d:67: 0f:75:f2:be:e4:b4:ba:77:14:c6:1b:aa:83:c4:02:cb:c0:f7: 5b:07:5e:c3:10:a8:cb:42:6c:dd:1e:a0:70:27:ad:67:dd:8d: e3:dd:42:45:e9:7b:f2:5c:b8:f3:17:bf:f3:27:c4:0d:15:81: 8f:5c:77:d1:67:33:a2:c0:a8:24:90:c6:44:d2:a3:73:33:9e: 98:6f:d1:32:c2:7a:28:50:ca:80:b2:2c:da:9b:46:4f:e0:1f: 12:92:32:dd:07:48:cb:86:16:ce:b5:9e:b9:1f:1d:49:2f:a9: 67:cf:0f:82:8f:b8:df:62:09:04:0d:f3:8a:dc:01:5f:af:57: 7d:1f:d5:63:ea:07:17:48:f9:e8:75:08:ae:2c:8b:a0:70:6f: 92:97:fb:b5:02:da:7a:10:25:a7:29:87:66:96:32:a1:97:8f: ba:d8:f0:16:57:32:4e:1c:c2:25:a4:b6:c7:0e:d0:9c:92:31: c1:ab:c4:6b:b4:fd:63:b5:78:1d:c4:bb:08:25:fa:57:9f:26: b6:22:f3:55:a8:ea:e7:dd:0d:5e:0b:18:f9:f9:c5:9e:1d:6a: 59:2b:72:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoiVNzVpn+gPIPRkj094eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjZmU0YTA5Njc3YjAwYmJjMzMzZjcxNjc4ZWFhODBhNzFi NjJhNDgwHhcNMjYwMjA5MDkwMTExWhcNMjYwMjEwMDkwMTExWjAzMTEwLwYDVQQD Eyg4NTRmMWIwOTA2MWY4NGI4ZTdkNGVkOGQ1MDRjMDFkNTc3YzI5MzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4tCZnSt+h06o3w/UVdjcFiB1FT0 LkukVFy7msaevyZPFKZOc4KzwL1dFvOh2tspT2v7esFH04Daq+fQhsUXpx44XStj km2eLXOKtaNBE7/0BNNTW8NU1HeCL6w/QRo/LG5MS6sbGwwL/mM7bAap++JgSjaU /CK4xRZpU9CxO6EQ84browv1RQBsZPlewSF8u1TkabMefqkCRQ0d0JgMiNnLt9UV Dni88NJsPqUVuP3Xrx9PhrB70aL/nx36Wu1kiHUZ/3GKSAH5S5rfOpw8IC3vrsBM ax1FMupv9wiDqKoJJ9Uy/+jpPPhY+qhKe2fq7Ueuic4bXs7AfsB7ofPSIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIVPGwkGH4S459TtjVBMAdV3wpOfMB8GA1UdIwQY MBaAFOz+SglnewC7wzP3FnjqqApxtipIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1A1S0NXZDdBTHZETV9jV2VPcW9DbkcyS2tnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hNGE0YTgtMmE5My00OGFkLWI4OTEt ZWQ5MzAyZmVkZGNiLzEvN1A1S0NXZDdBTHZETV9jV2VPcW9DbkcyS2tnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9hNGE0YTgtMmE5My00OGFkLWI4OTEtZWQ5MzAyZmVkZGNi LzEvN1A1S0NXZDdBTHZETV9jV2VPcW9DbkcyS2tnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOBsBWbCz GB1xKuihx8JqTMji90SWunuog68KKPnJ4QV63i1nD3XyvuS0uncUxhuqg8QCy8D3 WwdewxCoy0Js3R6gcCetZ92N491CRel78ly48xe/8yfEDRWBj1x30WczosCoJJDG RNKjczOemG/RMsJ6KFDKgLIs2ptGT+AfEpIy3QdIy4YWzrWeuR8dSS+pZ88Pgo+4 32IJBA3zitwBX69XfR/VY+oHF0j56HUIriyLoHBvkpf7tQLaehAlpymHZpYyoZeP utjwFlcyThzCJaS2xw7QnJIxwavEa7T9Y7V4HcS7CCX6V58mtiLzVajq590NXgsY +fnFnh1qWStyBQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:55 2026 by rpki-client