This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft File: 7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft (raw, json) Hash identifier: MOBAWEGirM23GIARzIEk3n54fWqJtC39y4iYTWcDwKw= Subject key identifier: 25:EE:55:D1:EF:4A:B3:55:95:67:3A:68:F8:37:76:5D:29:7F:2B:18 Authority key identifier: ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8 Certificate issuer: /CN=ed476a7486b785451293571126c5f9da3ec485d8 Certificate serial: 019C41A1E54C7C6795180EBB95D3F9FACD77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft Manifest number: 17A2 Signing time: Mon 09 Feb 2026 09:00:54 +0000 Manifest this update: Mon 09 Feb 2026 09:00:54 +0000 Manifest next update: Tue 10 Feb 2026 09:00:54 +0000 Files and hashes: 1: 7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl (hash: LBji9+fUgbsrby75DJTsxfVI31GgU5+LkYf5WmGNgHU=) 2: NJ53-rR_xX4WzjhOA9BrYV2nSLM.roa (hash: QoLJTTNt4EV3su31vq7GYg/U/5yk5wlrs70Rl9FmejU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:e5:4c:7c:67:95:18:0e:bb:95:d3:f9:fa:cd:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed476a7486b785451293571126c5f9da3ec485d8 Validity Not Before: Feb 9 09:00:54 2026 GMT Not After : Feb 10 09:00:54 2026 GMT Subject: CN=25ee55d1ef4ab35595673a68f837765d297f2b18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:eb:43:06:af:02:cc:c5:ef:a3:2f:bd:43:ae: 1d:87:6e:ef:fb:e3:c7:4e:77:69:75:49:d1:b7:7c: 65:02:45:d7:6c:63:6a:03:0b:2c:ad:09:7e:34:63: 0e:19:0c:d5:e4:f1:ef:aa:94:df:32:13:dc:09:73: 9b:48:36:40:53:27:f4:31:5a:37:ab:90:9a:1f:59: f1:33:4b:52:3a:65:db:cc:b7:10:54:3f:e4:bf:b5: bd:da:07:c5:d7:bb:73:38:8b:c3:9e:7a:aa:df:18: 40:48:60:73:f6:67:42:cf:c3:ca:a0:0f:31:b3:42: c0:25:a5:27:a9:e6:fc:92:99:70:02:ef:c7:6a:5f: 66:18:52:42:f6:a2:dd:52:ae:df:13:a0:78:00:f1: 2b:79:6e:e8:c0:c1:14:04:c0:d6:bf:ed:24:2d:59: b1:7d:23:2a:03:9b:0b:72:b2:8b:b9:d4:84:a3:d3: f3:0e:da:f1:99:98:54:a9:b0:09:f7:42:1d:c6:5d: b7:5d:ff:15:cb:3e:b1:28:61:91:d4:1c:a3:6f:ec: 16:c9:3b:27:2a:a0:79:f2:33:7b:2f:ca:0c:84:2f: 20:e1:96:a4:22:6e:bd:2d:c1:ee:43:fb:e7:bd:c0: d6:03:73:b0:72:bb:bb:b3:21:2f:3e:35:c4:66:75: b1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:EE:55:D1:EF:4A:B3:55:95:67:3A:68:F8:37:76:5D:29:7F:2B:18 X509v3 Authority Key Identifier: keyid:ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:5f:57:b0:e9:d1:cb:4c:92:96:13:c4:44:61:fe:55:79:9f: ca:40:6b:64:11:91:f6:e1:cf:ea:44:99:17:06:78:8b:08:e1: d3:32:57:24:d1:f4:51:38:9c:41:83:f7:33:a7:77:3d:77:68: 8a:6e:fc:f5:b8:ef:22:cc:65:3d:60:14:c5:ce:87:a1:ba:ea: 2d:65:a3:9f:4a:f2:ff:04:08:47:54:70:38:6e:4f:bc:a3:91: 76:a1:5a:a0:d6:d9:79:f2:75:c2:de:89:59:4a:28:94:fd:90: 75:3d:1e:15:93:1e:4b:16:ab:e0:b8:af:93:aa:79:d9:44:f7: d3:6c:6f:ad:e7:b3:a0:20:e4:10:63:68:23:77:be:25:aa:92: e5:f8:11:86:d7:06:ae:b5:45:3e:21:e1:97:1b:17:0c:c0:42: e1:18:be:39:75:df:22:19:38:4b:ce:3e:6b:c3:41:d4:2a:76: 2a:4b:ce:c5:43:55:f7:2a:8f:e1:36:eb:ae:70:01:66:80:94: f2:0e:a0:8e:1b:3e:10:60:57:dd:45:ae:cc:c2:3e:dc:c2:97: 3f:5a:c7:01:31:9d:b5:40:00:b6:b3:a7:ee:3e:2a:3e:26:0e: 7e:6d:77:ff:fb:1e:a7:cf:97:cf:55:94:0d:e0:a3:fa:3f:89: a8:ba:bc:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoeVMfGeVGA67ldP5+s13MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNDc2YTc0ODZiNzg1NDUxMjkzNTcxMTI2YzVmOWRhM2Vj NDg1ZDgwHhcNMjYwMjA5MDkwMDU0WhcNMjYwMjEwMDkwMDU0WjAzMTEwLwYDVQQD EygyNWVlNTVkMWVmNGFiMzU1OTU2NzNhNjhmODM3NzY1ZDI5N2YyYjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOtDBq8CzMXvoy+9Q64dh27v++PH TndpdUnRt3xlAkXXbGNqAwssrQl+NGMOGQzV5PHvqpTfMhPcCXObSDZAUyf0MVo3 q5CaH1nxM0tSOmXbzLcQVD/kv7W92gfF17tzOIvDnnqq3xhASGBz9mdCz8PKoA8x s0LAJaUnqeb8kplwAu/Hal9mGFJC9qLdUq7fE6B4APEreW7owMEUBMDWv+0kLVmx fSMqA5sLcrKLudSEo9PzDtrxmZhUqbAJ90Idxl23Xf8Vyz6xKGGR1Byjb+wWyTsn KqB58jN7L8oMhC8g4ZakIm69LcHuQ/vnvcDWA3Owcru7syEvPjXEZnWxLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCXuVdHvSrNVlWc6aPg3dl0pfysYMB8GA1UdIwQY MBaAFO1HanSGt4VFEpNXESbF+do+xIXYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1VkcWRJYTNoVVVTazFjUkpzWDUyajdFaGRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hMDE0N2ItMDU4ZC00ZjJkLWI2MDMt NjFmOWU1NGVkMjM5LzEvN1VkcWRJYTNoVVVTazFjUkpzWDUyajdFaGRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9hMDE0N2ItMDU4ZC00ZjJkLWI2MDMtNjFmOWU1NGVkMjM5 LzEvN1VkcWRJYTNoVVVTazFjUkpzWDUyajdFaGRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALV9XsOnR y0ySlhPERGH+VXmfykBrZBGR9uHP6kSZFwZ4iwjh0zJXJNH0UTicQYP3M6d3PXdo im789bjvIsxlPWAUxc6HobrqLWWjn0ry/wQIR1RwOG5PvKORdqFaoNbZefJ1wt6J WUoolP2QdT0eFZMeSxar4Livk6p52UT302xvreezoCDkEGNoI3e+JaqS5fgRhtcG rrVFPiHhlxsXDMBC4Ri+OXXfIhk4S84+a8NB1Cp2KkvOxUNV9yqP4TbrrnABZoCU 8g6gjhs+EGBX3UWuzMI+3MKXP1rHATGdtUAAtrOn7j4qPiYOfm13//sep8+Xz1WU DeCj+j+JqLq8gw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:32 2026 by rpki-client