This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft File: 7a8O0eMJHntcmc5DysEDEFWw84U.mft (raw, json) Hash identifier: 83qyiAkHhaRIXebhSPzJyz/yxjhCV0k1zElb3HDlL3Y= Subject key identifier: AC:9F:A4:C7:F9:8B:6B:78:F5:DA:67:7A:CE:74:C5:B6:F1:4B:3B:CC Authority key identifier: ED:AF:0E:D1:E3:09:1E:7B:5C:99:CE:43:CA:C1:03:10:55:B0:F3:85 Certificate issuer: /CN=edaf0ed1e3091e7b5c99ce43cac1031055b0f385 Certificate serial: 019C43903A922C6375E6FFF7239AD0ABC9E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7a8O0eMJHntcmc5DysEDEFWw84U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft Manifest number: 17A2 Signing time: Mon 09 Feb 2026 18:00:51 +0000 Manifest this update: Mon 09 Feb 2026 18:00:51 +0000 Manifest next update: Tue 10 Feb 2026 18:00:51 +0000 Files and hashes: 1: 7a8O0eMJHntcmc5DysEDEFWw84U.crl (hash: rPQZp1EIJwtkwdVcfxvKLmPOJ7TvZLzLq+zoI3xDpqk=) 2: zlNsdLQAtO6TKIpveiYDahXGOtc.roa (hash: zWs8jQOETQ5X0XyX4yP+smjLWA31kMqZBSgEABnieXo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft rsync://rpki.ripe.net/repository/DEFAULT/7a8O0eMJHntcmc5DysEDEFWw84U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:3a:92:2c:63:75:e6:ff:f7:23:9a:d0:ab:c9:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edaf0ed1e3091e7b5c99ce43cac1031055b0f385 Validity Not Before: Feb 9 18:00:51 2026 GMT Not After : Feb 10 18:00:51 2026 GMT Subject: CN=ac9fa4c7f98b6b78f5da677ace74c5b6f14b3bcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:00:c2:34:84:c9:be:93:db:0d:c1:93:36:c1: 3e:19:80:7c:00:04:f2:a3:a3:8b:02:b4:15:15:87: 93:ac:60:5d:90:90:69:bf:32:c2:87:c8:70:4f:9c: 4a:2d:dd:24:1c:06:e0:a7:38:57:21:69:e6:89:f9: ff:eb:f0:e6:e2:a1:c3:0a:c6:a9:83:13:87:54:fa: 62:32:6a:8e:d6:0b:55:e9:f6:6f:30:56:63:02:06: e5:2f:55:fe:6f:3d:e6:36:19:d7:2e:94:c2:ec:78: 84:80:7b:d4:05:b5:6c:d2:e7:6b:6d:40:9e:b6:bd: ca:de:8c:9c:4d:b7:84:c6:68:34:83:07:0f:3d:c5: be:93:fc:b4:ea:67:4c:12:ee:66:16:6e:3c:26:67: 5c:6b:fd:6e:35:3f:bf:23:43:95:c6:71:11:15:b1: d4:6d:ad:13:3e:18:d5:81:a3:db:35:e0:7b:00:73: 80:34:91:28:4a:a6:c3:f5:4a:97:a0:ae:7b:95:dc: a0:eb:6b:14:b6:56:17:5c:d7:aa:35:80:41:c6:60: bb:2d:b6:65:33:bc:b4:0e:52:6f:99:f1:f5:98:cb: ac:3c:4f:2b:bc:5a:18:81:7a:a6:5d:f2:a5:fc:e3: 58:de:ce:2b:dd:2c:3b:9a:90:fa:9c:8f:d2:c0:f7: fa:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:9F:A4:C7:F9:8B:6B:78:F5:DA:67:7A:CE:74:C5:B6:F1:4B:3B:CC X509v3 Authority Key Identifier: keyid:ED:AF:0E:D1:E3:09:1E:7B:5C:99:CE:43:CA:C1:03:10:55:B0:F3:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a8O0eMJHntcmc5DysEDEFWw84U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:42:bb:32:7a:28:4f:79:49:f6:28:3a:48:34:b5:7e:08:ed: 3d:9d:50:2d:48:46:4e:57:b4:b0:6f:62:b8:14:ce:07:b6:15: b5:1a:32:44:f2:7d:a4:13:27:03:06:07:4d:33:54:58:3d:90: 41:82:03:33:0b:fe:b0:96:3f:3b:3f:b1:93:3b:db:27:26:e9: 73:2a:78:22:65:7e:21:35:8b:04:ee:f7:c2:7d:84:14:3b:de: ac:f5:6a:e1:f3:ee:30:ed:3c:80:be:a2:b6:3f:c6:81:73:d5: 7a:6b:12:c7:a6:01:14:c9:28:2c:a3:1e:aa:ea:31:dc:5e:39: c6:da:17:f0:e6:70:79:a4:37:39:bd:c2:c2:72:f3:bc:05:fe: 22:73:e3:8f:e1:e8:cc:a3:e3:94:fb:1f:a0:16:db:70:75:25: f7:a3:49:34:7d:56:a5:bd:7e:32:bb:fa:fc:3b:d7:b0:88:61: 00:cf:8c:eb:1c:0a:d9:6d:f5:e5:70:63:ad:ff:33:9d:f2:ee: a8:99:cb:7c:78:40:30:26:ac:12:a0:9f:e9:5e:75:5e:72:97: 09:c8:68:8a:50:c4:1d:73:4d:44:d4:83:26:37:bc:3a:b8:62: 02:e2:0a:c6:c9:2c:0a:4f:a0:4c:0d:85:27:ca:2c:7c:f5:52: 7b:1a:09:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkDqSLGN15v/3I5rQq8nmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkYWYwZWQxZTMwOTFlN2I1Yzk5Y2U0M2NhYzEwMzEwNTVi MGYzODUwHhcNMjYwMjA5MTgwMDUxWhcNMjYwMjEwMTgwMDUxWjAzMTEwLwYDVQQD EyhhYzlmYTRjN2Y5OGI2Yjc4ZjVkYTY3N2FjZTc0YzViNmYxNGIzYmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wDCNITJvpPbDcGTNsE+GYB8AATy o6OLArQVFYeTrGBdkJBpvzLCh8hwT5xKLd0kHAbgpzhXIWnmifn/6/Dm4qHDCsap gxOHVPpiMmqO1gtV6fZvMFZjAgblL1X+bz3mNhnXLpTC7HiEgHvUBbVs0udrbUCe tr3K3oycTbeExmg0gwcPPcW+k/y06mdMEu5mFm48Jmdca/1uNT+/I0OVxnERFbHU ba0TPhjVgaPbNeB7AHOANJEoSqbD9UqXoK57ldyg62sUtlYXXNeqNYBBxmC7LbZl M7y0DlJvmfH1mMusPE8rvFoYgXqmXfKl/ONY3s4r3Sw7mpD6nI/SwPf6fwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKyfpMf5i2t49dpnes50xbbxSzvMMB8GA1UdIwQY MBaAFO2vDtHjCR57XJnOQ8rBAxBVsPOFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2E4TzBlTUpIbnRjbWM1RHlzRURFRld3ODRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi84ZTQzZmEtZTkxZi00ODE4LWI4M2Yt MTdhMWY4NmM2ODA0LzEvN2E4TzBlTUpIbnRjbWM1RHlzRURFRld3ODRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi84ZTQzZmEtZTkxZi00ODE4LWI4M2YtMTdhMWY4NmM2ODA0 LzEvN2E4TzBlTUpIbnRjbWM1RHlzRURFRld3ODRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj0K7Mnoo T3lJ9ig6SDS1fgjtPZ1QLUhGTle0sG9iuBTOB7YVtRoyRPJ9pBMnAwYHTTNUWD2Q QYIDMwv+sJY/Oz+xkzvbJybpcyp4ImV+ITWLBO73wn2EFDverPVq4fPuMO08gL6i tj/GgXPVemsSx6YBFMkoLKMequox3F45xtoX8OZweaQ3Ob3CwnLzvAX+InPjj+Ho zKPjlPsfoBbbcHUl96NJNH1Wpb1+Mrv6/DvXsIhhAM+M6xwK2W315XBjrf8znfLu qJnLfHhAMCasEqCf6V51XnKXCchoilDEHXNNRNSDJje8OrhiAuIKxsksCk+gTA2F J8osfPVSexoJxA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:34 2026 by rpki-client