This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.mft File: _7ml8yjMMGUnzExHS9xLE6dGoag.mft (raw, json) Hash identifier: qH8Io6OBkSVVkLQRD1lApDrw/NMP7sEeQcjracEh10U= Subject key identifier: A1:15:81:E9:E9:47:34:7B:AF:D1:B8:3A:10:1D:E2:E9:5A:A6:F2:4A Authority key identifier: FF:B9:A5:F3:28:CC:30:65:27:CC:4C:47:4B:DC:4B:13:A7:46:A1:A8 Certificate issuer: /CN=ffb9a5f328cc306527cc4c474bdc4b13a746a1a8 Certificate serial: 019C2A074FD94B3B78959F040F8D82C27C4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7ml8yjMMGUnzExHS9xLE6dGoag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.mft Manifest number: 08 Signing time: Wed 04 Feb 2026 19:00:48 +0000 Manifest this update: Wed 04 Feb 2026 19:00:48 +0000 Manifest next update: Thu 05 Feb 2026 19:00:48 +0000 Files and hashes: 1: TjUAHrNX6D8KKFwZiePYTV0m3bk.roa (hash: 61/mGPF5yOHT2ppU4Jvr6b/vuT6FmCh4sw4OsDecTfo=) 2: _7ml8yjMMGUnzExHS9xLE6dGoag.crl (hash: IwBd6+HEo0rJwBBUgY1qNsAYtr4MRZ/IZ9oA5BRf36I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.mft rsync://rpki.ripe.net/repository/DEFAULT/_7ml8yjMMGUnzExHS9xLE6dGoag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 18:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:2a:07:4f:d9:4b:3b:78:95:9f:04:0f:8d:82:c2:7c:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffb9a5f328cc306527cc4c474bdc4b13a746a1a8 Validity Not Before: Feb 4 19:00:48 2026 GMT Not After : Feb 5 19:00:48 2026 GMT Subject: CN=a11581e9e947347bafd1b83a101de2e95aa6f24a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:cc:88:cd:fd:60:76:79:c7:69:67:0d:7c:02: 5a:13:af:4c:96:47:95:c9:23:16:fb:a5:09:a9:d7: 55:83:dd:ed:e4:55:32:6e:7b:2c:21:c5:60:b1:61: 52:27:49:db:d4:34:1c:3f:65:5d:56:d1:ec:41:43: 4c:9a:8c:b4:a2:23:ef:8d:eb:49:da:3e:fc:56:6f: be:c7:cb:6b:3a:37:56:60:8b:e1:1b:45:df:48:e5: f3:6b:e3:85:10:66:b8:0b:0a:56:04:15:0d:a7:b5: 59:e6:8d:a8:d8:76:eb:d1:8c:77:13:b5:c3:60:8b: 4b:e4:2a:81:5d:b0:a5:02:6c:0a:c2:ac:c2:69:42: 38:ad:2a:1b:7b:44:21:2e:b3:b8:48:07:1b:d2:1b: 4a:60:c3:ca:5e:04:55:4a:1c:75:e4:74:5f:92:74: 9a:26:46:86:fc:36:de:ca:46:34:64:c7:3b:84:63: 12:a9:16:11:eb:2d:9d:84:06:bc:9f:e1:ec:c6:65: 11:ab:c9:63:c0:a0:b0:5f:b6:9c:1b:65:2f:5e:f5: 78:76:7e:a1:a7:d2:0e:c1:ae:fb:19:8f:7f:7e:73: 0d:6c:c6:3e:90:4e:ca:11:5f:01:61:86:9e:4b:aa: a7:f4:30:c5:26:c8:00:1a:01:25:f2:07:1d:07:1c: 77:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:15:81:E9:E9:47:34:7B:AF:D1:B8:3A:10:1D:E2:E9:5A:A6:F2:4A X509v3 Authority Key Identifier: keyid:FF:B9:A5:F3:28:CC:30:65:27:CC:4C:47:4B:DC:4B:13:A7:46:A1:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7ml8yjMMGUnzExHS9xLE6dGoag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:04:49:a6:b4:42:39:7f:ca:eb:b1:f2:bb:4a:40:59:80:8b: 8b:9e:0c:26:e3:7e:0c:bc:81:94:9a:14:88:c8:87:a1:e1:7d: 18:a9:a1:22:ae:6f:5c:4e:05:bf:68:f0:ea:2d:a6:f9:78:21: 2a:8f:72:7b:43:8b:41:6d:af:f1:2e:6f:58:82:5c:df:4c:fb: c1:0a:55:8c:b0:d9:67:56:bf:59:08:d6:40:63:96:8e:d8:1e: 62:f8:c5:76:85:fd:fc:ab:6d:44:05:62:45:3d:12:f0:2d:8b: fa:b6:3c:8a:84:6c:69:7b:15:1a:f4:15:f0:0a:12:10:61:b1: d7:f4:ef:b6:3c:e2:16:e1:b4:65:16:03:d0:8e:37:d9:53:34: c0:b7:62:ed:94:cf:d7:71:d4:12:59:c7:6a:24:c2:c5:46:d0: 3a:4e:be:44:17:ea:b9:87:b9:ff:db:6c:95:7a:dd:f6:95:97: 67:7d:0d:3a:de:32:8c:96:3b:cf:45:6a:bc:b2:0a:7d:b9:dc: cb:c2:9a:58:5f:f4:61:17:5f:18:f3:6e:f3:67:5e:1b:1f:27: 6f:05:cb:a6:28:d0:1a:df:ea:48:fc:85:cc:89:ba:32:79:2d: f9:ba:0d:cc:62:95:49:a5:9d:78:19:0c:a0:ca:31:61:39:9c: 41:64:a8:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwqB0/ZSzt4lZ8ED42CwnxLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYjlhNWYzMjhjYzMwNjUyN2NjNGM0NzRiZGM0YjEzYTc0 NmExYTgwHhcNMjYwMjA0MTkwMDQ4WhcNMjYwMjA1MTkwMDQ4WjAzMTEwLwYDVQQD EyhhMTE1ODFlOWU5NDczNDdiYWZkMWI4M2ExMDFkZTJlOTVhYTZmMjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8yIzf1gdnnHaWcNfAJaE69MlkeV ySMW+6UJqddVg93t5FUybnssIcVgsWFSJ0nb1DQcP2VdVtHsQUNMmoy0oiPvjetJ 2j78Vm++x8trOjdWYIvhG0XfSOXza+OFEGa4CwpWBBUNp7VZ5o2o2Hbr0Yx3E7XD YItL5CqBXbClAmwKwqzCaUI4rSobe0QhLrO4SAcb0htKYMPKXgRVShx15HRfknSa JkaG/DbeykY0ZMc7hGMSqRYR6y2dhAa8n+HsxmURq8ljwKCwX7acG2UvXvV4dn6h p9IOwa77GY9/fnMNbMY+kE7KEV8BYYaeS6qn9DDFJsgAGgEl8gcdBxx3qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKEVgenpRzR7r9G4OhAd4ulapvJKMB8GA1UdIwQY MBaAFP+5pfMozDBlJ8xMR0vcSxOnRqGoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzdtbDh5ak1NR1VuekV4SFM5eExFNmRHb2FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8yZmZlZmYtNmIwYi00MGM4LTg3ZWMt MWYxNjQyNTA3MTkzLzEvXzdtbDh5ak1NR1VuekV4SFM5eExFNmRHb2FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8yZmZlZmYtNmIwYi00MGM4LTg3ZWMtMWYxNjQyNTA3MTkz LzEvXzdtbDh5ak1NR1VuekV4SFM5eExFNmRHb2FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEgRJprRC OX/K67Hyu0pAWYCLi54MJuN+DLyBlJoUiMiHoeF9GKmhIq5vXE4Fv2jw6i2m+Xgh Ko9ye0OLQW2v8S5vWIJc30z7wQpVjLDZZ1a/WQjWQGOWjtgeYvjFdoX9/KttRAVi RT0S8C2L+rY8ioRsaXsVGvQV8AoSEGGx1/TvtjziFuG0ZRYD0I432VM0wLdi7ZTP 13HUElnHaiTCxUbQOk6+RBfquYe5/9tslXrd9pWXZ30NOt4yjJY7z0VqvLIKfbnc y8KaWF/0YRdfGPNu82deGx8nbwXLpijQGt/qSPyFzIm6Mnkt+boNzGKVSaWdeBkM oMoxYTmcQWSoog== -----END CERTIFICATE-----Generated at Thu Feb 5 03:13:23 2026 by rpki-client