This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft File: 7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft (raw, json) Hash identifier: dl3RKArHNxHr3y8O1/SJE45BrSZGAaVQ++mPdMXwx1k= Subject key identifier: 46:09:FF:3C:D1:26:54:36:00:77:50:79:09:C8:42:03:B0:4E:D5:D8 Authority key identifier: EF:1E:22:56:14:C6:5C:E2:CF:52:75:EB:46:43:34:39:5C:06:F4:30 Certificate issuer: /CN=ef1e225614c65ce2cf5275eb464334395c06f430 Certificate serial: 019C4390C1636C0E8EF56B07F0B9A4CA6713 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7x4iVhTGXOLPUnXrRkM0OVwG9DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft Manifest number: 17A1 Signing time: Mon 09 Feb 2026 18:01:26 +0000 Manifest this update: Mon 09 Feb 2026 18:01:26 +0000 Manifest next update: Tue 10 Feb 2026 18:01:26 +0000 Files and hashes: 1: 7x4iVhTGXOLPUnXrRkM0OVwG9DA.crl (hash: r36V6nZ3X60qCnUXv4kGdSOiiuaVWUn/cdPLh6FFuow=) 2: iGZBxF80eg1s-AXqofHEFgzkQW8.roa (hash: lIhOn1xqmKsRUERs7AyAkoKDdV8gvZyVvDH+bT2A3zc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft rsync://rpki.ripe.net/repository/DEFAULT/7x4iVhTGXOLPUnXrRkM0OVwG9DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:c1:63:6c:0e:8e:f5:6b:07:f0:b9:a4:ca:67:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef1e225614c65ce2cf5275eb464334395c06f430 Validity Not Before: Feb 9 18:01:26 2026 GMT Not After : Feb 10 18:01:26 2026 GMT Subject: CN=4609ff3cd12654360077507909c84203b04ed5d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:97:94:76:41:b0:79:52:74:c1:54:6c:02:97: 69:cd:3c:dc:f9:a7:b9:ad:d6:36:36:dc:e0:28:71: 0c:99:2b:22:ad:03:6e:59:17:af:54:28:fb:b5:b6: 5c:48:be:4f:9f:fb:4c:c6:20:65:32:a8:c5:03:59: 0a:49:43:c3:64:0d:28:a0:f2:88:e1:23:4e:9c:aa: 41:c6:55:9a:1c:b5:29:46:cc:5f:17:0f:20:c5:cd: ce:56:49:40:52:74:fb:3b:7d:1a:8b:97:36:a8:81: 21:c2:69:67:81:70:23:f0:e8:3a:9c:f9:be:2c:ad: ab:38:04:46:08:a4:1f:b4:02:98:5b:77:20:54:96: b2:4e:6e:95:11:a4:b0:79:ba:0e:2a:cf:ff:ac:cc: 64:52:ce:fa:bd:fb:42:e4:2f:6c:8a:dd:1c:7f:33: 53:6e:b2:81:08:0d:18:b8:bf:a2:26:e4:34:80:6a: 3d:8a:da:58:5a:84:1b:d7:75:d1:c8:e2:e9:f1:e4: f8:33:ef:f6:82:8b:05:d5:4e:66:e8:fb:49:8b:d7: 85:0b:c7:93:17:9a:a4:5f:2d:84:d3:be:ec:76:d4: 8e:8b:33:5e:25:71:00:95:ac:46:cc:50:f7:94:c5: 36:cc:68:88:18:f3:43:2e:ea:2f:3a:95:db:be:59: 1a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:09:FF:3C:D1:26:54:36:00:77:50:79:09:C8:42:03:B0:4E:D5:D8 X509v3 Authority Key Identifier: keyid:EF:1E:22:56:14:C6:5C:E2:CF:52:75:EB:46:43:34:39:5C:06:F4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7x4iVhTGXOLPUnXrRkM0OVwG9DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:d3:c0:42:2f:7f:48:fa:98:e9:b3:7f:15:61:5c:61:bf:5e: e5:73:15:0f:20:4c:14:db:0e:40:f8:84:1d:54:7a:91:8b:5b: 75:78:ab:91:ec:8e:15:60:48:14:0a:a4:aa:4f:96:6a:8d:f6: a9:26:bb:4d:6c:53:43:f1:2c:24:e2:ca:14:29:b9:0a:18:c9: 52:d4:85:30:df:89:c2:b7:11:0b:95:03:e8:39:01:dd:6d:bf: 30:04:1b:4f:0f:55:22:23:9c:ac:72:cf:36:02:13:33:af:c3: 77:25:75:d5:d3:8e:90:3f:50:11:57:50:12:91:47:82:bd:7a: 1d:1e:e7:66:59:62:85:aa:87:d1:e5:24:77:26:93:c2:65:c5: f9:88:47:27:72:b8:45:51:21:f1:96:3c:f8:cc:35:b9:20:f1: a0:34:ca:5a:eb:3e:8f:ca:66:d3:2e:a9:6d:17:21:14:3a:f6: 09:6a:a7:43:67:c8:13:4f:2a:80:2e:3a:52:ef:dc:bd:c8:9b: a2:2e:77:f7:a1:75:19:31:7d:a3:b9:9c:ac:2a:84:12:5b:ab: a5:62:fc:b4:51:42:cf:69:31:c2:95:58:f6:59:fd:1a:20:dc: e4:73:16:85:9c:b9:10:fe:08:8e:c8:8e:fe:57:d3:b6:bb:85: 2f:be:21:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkMFjbA6O9WsH8LmkymcTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMWUyMjU2MTRjNjVjZTJjZjUyNzVlYjQ2NDMzNDM5NWMw NmY0MzAwHhcNMjYwMjA5MTgwMTI2WhcNMjYwMjEwMTgwMTI2WjAzMTEwLwYDVQQD Eyg0NjA5ZmYzY2QxMjY1NDM2MDA3NzUwNzkwOWM4NDIwM2IwNGVkNWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5eUdkGweVJ0wVRsApdpzTzc+ae5 rdY2NtzgKHEMmSsirQNuWRevVCj7tbZcSL5Pn/tMxiBlMqjFA1kKSUPDZA0ooPKI 4SNOnKpBxlWaHLUpRsxfFw8gxc3OVklAUnT7O30ai5c2qIEhwmlngXAj8Og6nPm+ LK2rOARGCKQftAKYW3cgVJayTm6VEaSweboOKs//rMxkUs76vftC5C9sit0cfzNT brKBCA0YuL+iJuQ0gGo9itpYWoQb13XRyOLp8eT4M+/2gosF1U5m6PtJi9eFC8eT F5qkXy2E077sdtSOizNeJXEAlaxGzFD3lMU2zGiIGPNDLuovOpXbvlkahwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEYJ/zzRJlQ2AHdQeQnIQgOwTtXYMB8GA1UdIwQY MBaAFO8eIlYUxlziz1J160ZDNDlcBvQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3g0aVZoVEdYT0xQVW5YclJrTTBPVndHOURBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9kNDU1YmEtN2VjNi00ZjNlLWFjZDYt MTFmOTUyNjhlYTc0LzEvN3g0aVZoVEdYT0xQVW5YclJrTTBPVndHOURBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9kNDU1YmEtN2VjNi00ZjNlLWFjZDYtMTFmOTUyNjhlYTc0 LzEvN3g0aVZoVEdYT0xQVW5YclJrTTBPVndHOURBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwNPAQi9/ SPqY6bN/FWFcYb9e5XMVDyBMFNsOQPiEHVR6kYtbdXirkeyOFWBIFAqkqk+Wao32 qSa7TWxTQ/EsJOLKFCm5ChjJUtSFMN+JwrcRC5UD6DkB3W2/MAQbTw9VIiOcrHLP NgITM6/DdyV11dOOkD9QEVdQEpFHgr16HR7nZllihaqH0eUkdyaTwmXF+YhHJ3K4 RVEh8ZY8+Mw1uSDxoDTKWus+j8pm0y6pbRchFDr2CWqnQ2fIE08qgC46Uu/cvcib oi5396F1GTF9o7mcrCqEElurpWL8tFFCz2kxwpVY9ln9GiDc5HMWhZy5EP4IjsiO /lfTtruFL74hTw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:17:41 2026 by rpki-client