This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft File: 7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft (raw, json) Hash identifier: uzBRRDj8VAWHGRbX9vaLRvfr2wI6hMQQFTMLzt/RsLg= Subject key identifier: 4B:81:3D:26:98:35:73:7F:4A:C4:65:95:E7:99:57:10:45:F6:F8:03 Authority key identifier: EC:64:3B:4F:A3:F0:E1:3C:CA:80:55:83:3A:C7:0C:69:DD:1C:A8:E1 Certificate issuer: /CN=ec643b4fa3f0e13cca8055833ac70c69dd1ca8e1 Certificate serial: 019C41D8C3D2C56D46637D09AC7B088F71CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft Manifest number: 0593 Signing time: Mon 09 Feb 2026 10:00:50 +0000 Manifest this update: Mon 09 Feb 2026 10:00:50 +0000 Manifest next update: Tue 10 Feb 2026 10:00:50 +0000 Files and hashes: 1: 7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl (hash: f1RPZWnE4CRFcQytk4HH6KVJbWeLzsa9P4AwGxRHXUI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:c3:d2:c5:6d:46:63:7d:09:ac:7b:08:8f:71:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec643b4fa3f0e13cca8055833ac70c69dd1ca8e1 Validity Not Before: Feb 9 10:00:50 2026 GMT Not After : Feb 10 10:00:50 2026 GMT Subject: CN=4b813d269835737f4ac46595e799571045f6f803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cf:fd:52:86:d2:e3:a9:db:b5:a0:84:35:4c: 07:b0:a1:2e:db:83:0f:8c:81:c2:c8:20:85:1d:72: 40:1a:0d:a1:f5:d8:48:5e:ce:84:e8:8e:62:2c:d5: 50:54:2d:77:16:d9:b3:c5:8d:90:6c:f9:12:46:d4: 78:63:d5:ad:7f:4a:92:40:75:2d:7d:99:2c:3f:67: 10:72:90:49:59:5a:af:3a:c5:02:11:01:49:16:f5: f5:34:43:5d:c6:98:6a:73:54:4e:5f:46:0b:07:42: bd:a2:bb:20:12:7c:18:8d:83:67:6c:03:66:32:94: 15:b0:93:d2:3c:7c:6b:be:93:3b:d7:36:f5:01:98: dc:1b:fe:b9:f7:a5:96:ba:32:38:8b:ad:0b:49:f7: 61:ba:18:d0:b1:a7:a3:dc:54:ad:05:63:a7:d9:e5: f7:33:0c:db:9a:da:18:30:b3:f7:35:08:49:79:ba: 1b:bf:8a:dd:c0:32:ec:c1:ef:b6:e7:0c:1b:ea:d0: e8:7f:52:d1:78:31:ea:bf:c3:75:7c:46:39:c8:95: 81:d0:dd:96:b1:bc:3f:3c:58:64:42:06:91:be:73: 6f:4c:d5:53:53:3d:ed:71:4a:29:18:4f:f3:bc:a4: 1e:6a:e0:e6:e8:ff:55:9b:f5:6a:51:2d:b3:ee:2a: a3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:81:3D:26:98:35:73:7F:4A:C4:65:95:E7:99:57:10:45:F6:F8:03 X509v3 Authority Key Identifier: keyid:EC:64:3B:4F:A3:F0:E1:3C:CA:80:55:83:3A:C7:0C:69:DD:1C:A8:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:86:f3:00:a3:2e:64:6d:c4:a7:38:72:f8:4b:68:69:06:23: 8b:25:c9:cf:37:93:28:96:1b:9d:13:91:ef:1d:a3:3e:e9:5a: f7:29:b4:fa:6e:86:7e:b1:11:a5:43:db:eb:73:4f:21:79:ea: d2:d9:1a:3f:25:59:4f:92:1a:b6:8f:fd:0a:17:3d:1b:46:65: 71:e9:9d:08:0e:07:e1:98:41:aa:72:7b:d0:66:30:2b:5c:da: 95:a1:24:4e:da:98:44:be:f6:e5:93:1d:5e:30:93:0b:84:7a: 73:a3:e8:45:4c:c9:81:63:76:4a:51:f0:37:25:82:ac:1c:c1: 57:a9:94:9a:7d:af:f9:2f:8d:fe:b9:bc:8c:6b:c4:fd:bb:02: 7a:7c:31:65:94:a6:2c:4b:32:87:5b:4d:6c:ac:b4:66:89:ff: 5f:18:6b:51:be:98:35:fd:01:24:f1:0e:e1:52:12:29:62:83: 3a:ed:1d:bb:a8:7b:db:9f:ce:92:eb:09:1d:44:b9:b8:41:62: f5:15:2c:54:4b:c8:e3:e5:d1:df:1f:48:d7:be:59:b9:b5:2f: 0e:07:16:d2:84:c0:f9:cc:8d:2f:32:ac:12:af:41:13:b8:65: fc:d3:c7:e2:5a:aa:16:0a:44:a4:ec:6e:3f:68:3b:52:7b:b9: 14:3f:15:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2MPSxW1GY30JrHsIj3HLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNjQzYjRmYTNmMGUxM2NjYTgwNTU4MzNhYzcwYzY5ZGQx Y2E4ZTEwHhcNMjYwMjA5MTAwMDUwWhcNMjYwMjEwMTAwMDUwWjAzMTEwLwYDVQQD Eyg0YjgxM2QyNjk4MzU3MzdmNGFjNDY1OTVlNzk5NTcxMDQ1ZjZmODAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvM/9UobS46nbtaCENUwHsKEu24MP jIHCyCCFHXJAGg2h9dhIXs6E6I5iLNVQVC13FtmzxY2QbPkSRtR4Y9Wtf0qSQHUt fZksP2cQcpBJWVqvOsUCEQFJFvX1NENdxphqc1ROX0YLB0K9orsgEnwYjYNnbANm MpQVsJPSPHxrvpM71zb1AZjcG/6596WWujI4i60LSfdhuhjQsaej3FStBWOn2eX3 MwzbmtoYMLP3NQhJebobv4rdwDLswe+25wwb6tDof1LReDHqv8N1fEY5yJWB0N2W sbw/PFhkQgaRvnNvTNVTUz3tcUopGE/zvKQeauDm6P9Vm/VqUS2z7iqjMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEuBPSaYNXN/SsRlleeZVxBF9vgDMB8GA1UdIwQY MBaAFOxkO0+j8OE8yoBVgzrHDGndHKjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0dRN1Q2UHc0VHpLZ0ZXRE9zY01hZDBjcU9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS83NGQ0OTAtYjg1YS00OTM5LTkwZGMt NzllNzQ2MzgzZjhkLzEvN0dRN1Q2UHc0VHpLZ0ZXRE9zY01hZDBjcU9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS83NGQ0OTAtYjg1YS00OTM5LTkwZGMtNzllNzQ2MzgzZjhk LzEvN0dRN1Q2UHc0VHpLZ0ZXRE9zY01hZDBjcU9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlIbzAKMu ZG3Epzhy+EtoaQYjiyXJzzeTKJYbnROR7x2jPula9ym0+m6GfrERpUPb63NPIXnq 0tkaPyVZT5Iato/9Chc9G0ZlcemdCA4H4ZhBqnJ70GYwK1zalaEkTtqYRL725ZMd XjCTC4R6c6PoRUzJgWN2SlHwNyWCrBzBV6mUmn2v+S+N/rm8jGvE/bsCenwxZZSm LEsyh1tNbKy0Zon/XxhrUb6YNf0BJPEO4VISKWKDOu0du6h725/OkusJHUS5uEFi 9RUsVEvI4+XR3x9I175ZubUvDgcW0oTA+cyNLzKsEq9BE7hl/NPH4lqqFgpEpOxu P2g7Unu5FD8V5A== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:31 2026 by rpki-client