This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft File: DR7vsZI4vpruN5lb700q_Ref8sw.mft (raw, json) Hash identifier: WvhD8aFTfP+RBaKxhyrNfWKxCMQz/Bh1lO9QK6LCEsY= Subject key identifier: 7A:DB:D2:0E:06:E5:D7:78:51:AA:0B:79:CF:9F:44:39:AC:CB:8B:D1 Authority key identifier: 0D:1E:EF:B1:92:38:BE:9A:EE:37:99:5B:EF:4D:2A:FD:17:9F:F2:CC Certificate issuer: /CN=0d1eefb19238be9aee37995bef4d2afd179ff2cc Certificate serial: 019C43224FAF792A866115E677CFFD43ABA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DR7vsZI4vpruN5lb700q_Ref8sw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft Manifest number: 0EB4 Signing time: Mon 09 Feb 2026 16:00:47 +0000 Manifest this update: Mon 09 Feb 2026 16:00:47 +0000 Manifest next update: Tue 10 Feb 2026 16:00:47 +0000 Files and hashes: 1: DR7vsZI4vpruN5lb700q_Ref8sw.crl (hash: ZI9QruC3/+34WPNd9MPnfL86hpBiNeUgSnCReIFuDwI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft rsync://rpki.ripe.net/repository/DEFAULT/DR7vsZI4vpruN5lb700q_Ref8sw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:4f:af:79:2a:86:61:15:e6:77:cf:fd:43:ab:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d1eefb19238be9aee37995bef4d2afd179ff2cc Validity Not Before: Feb 9 16:00:47 2026 GMT Not After : Feb 10 16:00:47 2026 GMT Subject: CN=7adbd20e06e5d77851aa0b79cf9f4439accb8bd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:88:16:c3:b9:c5:bb:b0:39:df:68:ef:6e:de: 64:83:8e:59:4d:98:5c:04:83:a2:37:78:b4:e2:e0: b6:2e:b1:24:2e:b4:ab:eb:4e:22:d5:f3:e9:30:a7: 75:3e:ec:d2:6b:3c:84:0e:54:4e:0b:e4:df:8e:22: 89:66:a5:5d:a9:23:9c:1e:bc:5f:84:c3:42:91:98: 47:61:8d:50:af:3d:40:47:a5:bf:f4:a5:16:1f:d0: 56:7d:5f:69:fe:21:7b:10:f3:14:8a:13:df:a5:2d: 26:b9:34:3c:4b:03:9c:68:de:4d:fb:2d:a4:44:b3: af:81:9a:f2:a1:46:e4:ae:a2:10:5b:6f:00:4b:8d: 55:ad:07:8c:02:7f:32:9f:34:6b:67:dc:8a:b7:fa: cb:1c:0d:9e:52:be:26:0a:c0:61:90:91:97:df:b5: 04:76:eb:5e:7f:9a:5f:b6:32:47:95:70:0e:9c:75: 82:de:49:da:40:9b:7f:66:42:35:7c:3d:90:a3:33: 90:6c:a7:2d:88:46:e6:2d:7a:c2:c6:2c:6d:81:8b: cc:ad:4e:21:87:2b:82:eb:da:ec:b2:9c:0c:c7:c3: 84:cc:3c:82:ae:75:9d:f0:4e:bc:dd:23:17:80:33: 40:aa:b2:12:7b:31:29:f1:0f:ce:d2:01:37:98:39: c2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:DB:D2:0E:06:E5:D7:78:51:AA:0B:79:CF:9F:44:39:AC:CB:8B:D1 X509v3 Authority Key Identifier: keyid:0D:1E:EF:B1:92:38:BE:9A:EE:37:99:5B:EF:4D:2A:FD:17:9F:F2:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DR7vsZI4vpruN5lb700q_Ref8sw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e3:e5:80:84:25:e3:5b:46:d9:50:24:50:b8:5a:67:94:25:30: 24:47:91:6c:c5:a4:af:20:a8:87:54:63:b3:fc:2a:40:b9:90: f0:8e:8a:1e:fb:a9:44:03:43:84:52:4b:4f:47:54:c0:a7:6b: c8:b9:c0:74:42:73:cf:34:7f:7a:29:5d:3d:98:6d:37:1f:34: f8:f5:88:b5:cc:b3:a8:2e:3f:bf:6f:f0:ef:62:fc:af:71:9b: 70:b2:df:6a:25:e0:45:33:6b:42:ee:55:fc:57:7a:99:d8:55: 63:af:de:3e:77:12:82:53:0d:81:23:b4:9e:c9:a7:be:38:97: 2a:8a:49:7c:13:8b:61:7d:8e:54:97:b1:b8:59:37:80:85:70: 76:e8:b2:2a:ae:35:17:42:fd:c0:92:a7:26:b7:5c:a8:4f:1a: 36:f9:af:f1:ec:b4:b4:60:0f:c3:20:b7:2f:d1:3c:cf:2f:3f: 8a:1a:fa:7d:3c:1e:9f:2b:49:57:9d:0d:df:36:a1:fc:ff:2d: c8:90:15:ba:da:59:9a:8b:c6:96:cd:d9:0e:4b:fe:9c:34:54: 15:f8:cf:66:0b:f5:99:9c:6d:db:01:fe:6c:1c:6f:8b:ff:fa: 68:e3:0a:f6:ae:e7:f7:89:96:a5:70:a3:1e:88:a5:ef:46:78: ea:93:a5:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIk+veSqGYRXmd8/9Q6uhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMWVlZmIxOTIzOGJlOWFlZTM3OTk1YmVmNGQyYWZkMTc5 ZmYyY2MwHhcNMjYwMjA5MTYwMDQ3WhcNMjYwMjEwMTYwMDQ3WjAzMTEwLwYDVQQD Eyg3YWRiZDIwZTA2ZTVkNzc4NTFhYTBiNzljZjlmNDQzOWFjY2I4YmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyogWw7nFu7A532jvbt5kg45ZTZhc BIOiN3i04uC2LrEkLrSr604i1fPpMKd1PuzSazyEDlROC+TfjiKJZqVdqSOcHrxf hMNCkZhHYY1Qrz1AR6W/9KUWH9BWfV9p/iF7EPMUihPfpS0muTQ8SwOcaN5N+y2k RLOvgZryoUbkrqIQW28AS41VrQeMAn8ynzRrZ9yKt/rLHA2eUr4mCsBhkJGX37UE dutef5pftjJHlXAOnHWC3knaQJt/ZkI1fD2QozOQbKctiEbmLXrCxixtgYvMrU4h hyuC69rsspwMx8OEzDyCrnWd8E683SMXgDNAqrISezEp8Q/O0gE3mDnCVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHrb0g4G5dd4UaoLec+fRDmsy4vRMB8GA1UdIwQY MBaAFA0e77GSOL6a7jeZW+9NKv0Xn/LMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFI3dnNaSTR2cHJ1TjVsYjcwMHFfUmVmOHN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9lOTQ0N2EtMWU1Yy00YjFlLTgwNTYt MzQ0OWYzM2ExODQyLzEvRFI3dnNaSTR2cHJ1TjVsYjcwMHFfUmVmOHN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9lOTQ0N2EtMWU1Yy00YjFlLTgwNTYtMzQ0OWYzM2ExODQy LzEvRFI3dnNaSTR2cHJ1TjVsYjcwMHFfUmVmOHN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4+WAhCXj W0bZUCRQuFpnlCUwJEeRbMWkryCoh1Rjs/wqQLmQ8I6KHvupRANDhFJLT0dUwKdr yLnAdEJzzzR/eildPZhtNx80+PWItcyzqC4/v2/w72L8r3GbcLLfaiXgRTNrQu5V /Fd6mdhVY6/ePncSglMNgSO0nsmnvjiXKopJfBOLYX2OVJexuFk3gIVwduiyKq41 F0L9wJKnJrdcqE8aNvmv8ey0tGAPwyC3L9E8zy8/ihr6fTwenytJV50N3zah/P8t yJAVutpZmovGls3ZDkv+nDRUFfjPZgv1mZxt2wH+bBxvi//6aOMK9q7n94mWpXCj Hoil70Z46pOlpg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:09 2026 by rpki-client