This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft File: 7jlnrQpFi4KCnunizNauljHVQhI.mft (raw, json) Hash identifier: 72pv9teNj2CmTVwBxMvfIoYECmEmum+ve0YdG+7ZSmY= Subject key identifier: 58:DA:75:69:34:2D:6F:BE:91:C4:1C:A0:15:1C:97:B5:92:2F:F8:1F Authority key identifier: EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12 Certificate issuer: /CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212 Certificate serial: 019C1CBA055ED72D0E438F27B0ABEF0225AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft Manifest number: 048F Signing time: Mon 02 Feb 2026 05:01:18 +0000 Manifest this update: Mon 02 Feb 2026 05:01:18 +0000 Manifest next update: Tue 03 Feb 2026 05:01:18 +0000 Files and hashes: 1: 7jlnrQpFi4KCnunizNauljHVQhI.crl (hash: jgAu1phaKo07R+MnXdvthIpxEQJiP8x7YsZJuA5stvc=) 2: 9agfB9dVL-Kd6aIq8hf6VJQFr-c.roa (hash: 0rqJmTL+IHF4zuPR+5EuCzywtP32Y0FzvoOjmasnRjI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 05:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1c:ba:05:5e:d7:2d:0e:43:8f:27:b0:ab:ef:02:25:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212 Validity Not Before: Feb 2 05:01:18 2026 GMT Not After : Feb 3 05:01:18 2026 GMT Subject: CN=58da7569342d6fbe91c41ca0151c97b5922ff81f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:27:4d:be:4a:e4:74:08:31:d4:25:6d:6c:7d: 39:68:1b:4a:1f:96:8e:68:0f:8d:30:ed:41:f6:88: 89:a0:7b:df:19:97:b0:36:41:9a:56:2f:19:d2:79: e9:74:4b:05:98:75:cb:f1:f1:f2:2b:85:64:2a:1b: 7f:98:95:10:93:41:53:9e:5c:c9:2a:ff:50:a5:03: f7:aa:ff:15:a7:33:f3:83:68:d9:01:c8:8f:24:76: e6:c6:ee:f3:3a:8a:e4:42:7d:3c:4a:37:84:74:c6: 26:7a:e6:dc:59:4d:11:41:b7:66:1d:b4:7f:5a:f8: 0d:b0:17:9c:83:1a:d8:94:73:ab:f0:05:d5:f9:b6: e3:ea:b9:0e:49:68:a6:ac:23:d2:17:29:8d:2e:02: 37:12:aa:cc:2e:23:18:41:83:de:d2:16:f0:8e:33: c5:e4:c5:d0:57:16:f1:86:44:fc:1a:b7:eb:ea:2a: f7:78:bc:b4:ea:b8:b5:54:28:5c:50:23:de:5f:be: 6f:71:d8:49:e7:ce:67:e1:7d:61:28:f3:6a:b8:ec: 88:c6:42:e8:c7:ad:21:78:4f:f7:22:9a:2e:ac:31: 72:e2:bc:cc:ac:38:32:fe:89:80:b3:d1:7c:bd:81: 42:d9:3b:76:ad:a9:87:0a:fb:dd:b3:e9:75:b2:47: 68:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:DA:75:69:34:2D:6F:BE:91:C4:1C:A0:15:1C:97:B5:92:2F:F8:1F X509v3 Authority Key Identifier: keyid:EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:6a:40:3a:69:28:4c:83:db:29:5c:8f:77:4a:db:77:45:26: 37:91:2d:83:85:9b:2f:0e:4b:b7:b0:11:16:fb:c5:80:9d:05: 82:8f:ed:dc:95:88:78:0e:cc:27:da:5b:b6:fa:c3:a6:f0:c5: 6f:04:83:e1:71:f5:ce:f8:52:1a:ae:90:e8:8f:be:83:c1:e4: af:3e:fb:de:ab:89:32:9b:c6:75:12:56:42:93:34:86:49:f9: 8b:d0:9c:09:d2:4d:58:64:c2:e6:d6:75:f2:60:11:f1:cf:12: c0:c6:51:ee:65:5d:95:15:e2:18:01:3e:14:80:44:c9:26:1e: e5:d5:1d:a5:68:fe:19:b9:81:ec:67:07:ed:71:5a:83:d9:09: 5b:e6:20:7c:96:fd:02:0f:c9:32:f0:c5:7f:7c:2d:e1:70:bc: 79:e1:fa:82:1d:8c:7e:b9:e2:53:56:d4:68:fb:2d:5a:47:99: ca:93:a1:3a:3b:52:9d:6f:c5:eb:6d:7f:e3:8a:5d:bd:70:8a: ab:33:32:5d:ed:5f:12:01:27:50:3b:3a:29:fa:03:e2:24:83: 37:80:79:95:ab:92:e5:27:98:48:5b:d4:d4:d0:a9:92:7f:2f: 8a:55:4f:f3:38:1a:61:30:e2:87:f8:5f:c0:a8:d0:47:6f:95: 44:04:51:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwcugVe1y0OQ48nsKvvAiWqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMzk2N2FkMGE0NThiODI4MjllZTllMmNjZDZhZTk2MzFk NTQyMTIwHhcNMjYwMjAyMDUwMTE4WhcNMjYwMjAzMDUwMTE4WjAzMTEwLwYDVQQD Eyg1OGRhNzU2OTM0MmQ2ZmJlOTFjNDFjYTAxNTFjOTdiNTkyMmZmODFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCdNvkrkdAgx1CVtbH05aBtKH5aO aA+NMO1B9oiJoHvfGZewNkGaVi8Z0nnpdEsFmHXL8fHyK4VkKht/mJUQk0FTnlzJ Kv9QpQP3qv8VpzPzg2jZAciPJHbmxu7zOorkQn08SjeEdMYmeubcWU0RQbdmHbR/ WvgNsBecgxrYlHOr8AXV+bbj6rkOSWimrCPSFymNLgI3EqrMLiMYQYPe0hbwjjPF 5MXQVxbxhkT8Grfr6ir3eLy06ri1VChcUCPeX75vcdhJ585n4X1hKPNquOyIxkLo x60heE/3IpourDFy4rzMrDgy/omAs9F8vYFC2Tt2ramHCvvds+l1skdofQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFjadWk0LW++kcQcoBUcl7WSL/gfMB8GA1UdIwQY MBaAFO45Z60KRYuCgp7p4szWrpYx1UISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2psbnJRcEZpNEtDbnVuaXpOYXVsakhWUWhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC82NmVjNDMtMGE0OS00M2FiLWFkOWQt MmYzMjgxNmU3NzYwLzEvN2psbnJRcEZpNEtDbnVuaXpOYXVsakhWUWhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC82NmVjNDMtMGE0OS00M2FiLWFkOWQtMmYzMjgxNmU3NzYw LzEvN2psbnJRcEZpNEtDbnVuaXpOYXVsakhWUWhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO2pAOmko TIPbKVyPd0rbd0UmN5Etg4WbLw5Lt7ARFvvFgJ0Fgo/t3JWIeA7MJ9pbtvrDpvDF bwSD4XH1zvhSGq6Q6I++g8Hkrz773quJMpvGdRJWQpM0hkn5i9CcCdJNWGTC5tZ1 8mAR8c8SwMZR7mVdlRXiGAE+FIBEySYe5dUdpWj+GbmB7GcH7XFag9kJW+YgfJb9 Ag/JMvDFf3wt4XC8eeH6gh2MfrniU1bUaPstWkeZypOhOjtSnW/F621/44pdvXCK qzMyXe1fEgEnUDs6KfoD4iSDN4B5lauS5SeYSFvU1NCpkn8vilVP8zgaYTDih/hf wKjQR2+VRARRFw== -----END CERTIFICATE-----Generated at Mon Feb 2 09:44:54 2026 by rpki-client