This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft File: _7up17hmEtT4fPFhcf-CsrRBNk0.mft (raw, json) Hash identifier: 89OJhhRsrRKEWnFPqMoCC6t+7aa/jlrnFcCNucZD/AA= Subject key identifier: 34:0B:73:0C:88:7F:1C:0C:C5:C2:CA:BF:6F:7D:E0:13:30:EF:E6:02 Authority key identifier: FF:BB:A9:D7:B8:66:12:D4:F8:7C:F1:61:71:FF:82:B2:B4:41:36:4D Certificate issuer: /CN=ffbba9d7b86612d4f87cf16171ff82b2b441364d Certificate serial: 019C41D849BFD2C3D1DFD64883E109BA974C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7up17hmEtT4fPFhcf-CsrRBNk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 10:00:19 +0000 Manifest this update: Mon 09 Feb 2026 10:00:19 +0000 Manifest next update: Tue 10 Feb 2026 10:00:19 +0000 Files and hashes: 1: IuddFKkHgI9EpqcNiGzO6nW7ZKg.roa (hash: OtPSvPPL7VmcdioSeh1OC7elWB71YMWR1bBkxbubrgo=) 2: _7up17hmEtT4fPFhcf-CsrRBNk0.crl (hash: e7+3g2mBaHgnJxvlHtm7i/tU8jwGgHPrB29ziL89MLI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft rsync://rpki.ripe.net/repository/DEFAULT/_7up17hmEtT4fPFhcf-CsrRBNk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:49:bf:d2:c3:d1:df:d6:48:83:e1:09:ba:97:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffbba9d7b86612d4f87cf16171ff82b2b441364d Validity Not Before: Feb 9 10:00:19 2026 GMT Not After : Feb 10 10:00:19 2026 GMT Subject: CN=340b730c887f1c0cc5c2cabf6f7de01330efe602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ba:b1:61:41:d4:03:32:a5:5e:5a:94:ad:c5: 09:cc:a0:6a:7b:96:ce:bc:5f:97:c9:2d:28:52:7a: 1b:ad:46:79:5e:19:8f:e0:ab:50:9f:f6:ce:90:e8: 93:b5:54:b4:94:a2:56:52:57:20:b1:4b:e4:c8:13: 99:4b:07:19:02:14:ad:47:fa:8a:81:c1:6e:02:25: 3b:42:63:cb:1b:94:9d:d2:be:a8:1c:f7:21:8c:96: c6:3b:c6:3e:33:70:3e:35:15:2e:51:9d:7d:03:dd: 2d:62:70:c6:54:42:31:0b:02:53:6d:17:23:8e:4b: b1:34:c0:c0:8d:83:3f:09:80:c5:11:50:dd:b9:92: c1:d6:14:72:07:8d:2d:d4:8f:85:8c:8b:99:ef:8a: ef:b4:a8:d1:cd:36:08:a2:7a:f4:a7:6a:46:17:3f: 9a:5e:8c:c1:e7:03:fe:7c:fd:d5:9d:7b:d3:f7:87: 7e:9c:f3:53:eb:2e:fd:2a:b4:4d:46:a0:88:ad:ab: fb:6d:dc:7e:82:89:a5:66:58:ab:ed:a8:16:ad:62: 44:58:31:16:98:4d:bb:f2:3f:da:fe:6b:80:db:ea: 28:4d:d9:f1:f7:26:97:be:4c:ff:d5:e4:a0:b6:9a: 68:81:4e:01:82:dc:b9:bc:93:a9:e6:7e:a8:3d:4a: 80:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:0B:73:0C:88:7F:1C:0C:C5:C2:CA:BF:6F:7D:E0:13:30:EF:E6:02 X509v3 Authority Key Identifier: keyid:FF:BB:A9:D7:B8:66:12:D4:F8:7C:F1:61:71:FF:82:B2:B4:41:36:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7up17hmEtT4fPFhcf-CsrRBNk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:1e:e2:5a:47:3e:aa:8d:bb:41:01:29:10:c1:f6:a2:7f:24: fb:07:41:4d:9c:e8:c3:d4:2c:16:b0:ad:5a:ab:54:47:a5:50: c3:a1:be:20:32:c4:d8:08:ec:4a:4f:64:7b:03:34:0a:5d:ae: 13:ef:3e:00:a0:8e:97:fc:e5:31:53:8b:70:ea:67:93:24:84: 5c:96:88:79:2d:2e:f0:e9:9c:59:29:e1:a2:fa:b1:2d:e5:fc: 26:e2:42:d6:2b:2d:7c:2d:b5:c7:1a:fa:6a:60:d0:5a:0e:2e: 27:f9:10:e3:6f:16:9f:25:fc:34:aa:93:fe:fa:e4:51:8f:45: 6d:c4:5e:c2:f1:85:f5:4c:69:3e:1c:06:54:41:3f:43:87:20: a2:28:6c:3b:4b:aa:96:e8:37:83:5d:d6:c7:14:50:17:71:df: 79:92:c9:f5:1a:8f:13:dd:a8:f9:f3:d2:5e:96:c0:cb:e8:8d: a3:a4:49:4f:21:01:ba:b1:7c:8d:12:9f:6d:0f:90:51:a3:8b: e5:b5:b6:eb:b7:51:08:5d:1f:ee:61:a7:53:9b:d2:5c:e1:42: ac:5d:38:79:aa:5b:5b:53:17:da:b4:f9:ad:f9:d1:2c:54:4b: d7:dc:d0:db:20:86:e6:c1:68:dd:64:ab:bd:f5:fb:1d:8c:6d: f5:5d:89:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2Em/0sPR39ZIg+EJupdMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYmJhOWQ3Yjg2NjEyZDRmODdjZjE2MTcxZmY4MmIyYjQ0 MTM2NGQwHhcNMjYwMjA5MTAwMDE5WhcNMjYwMjEwMTAwMDE5WjAzMTEwLwYDVQQD EygzNDBiNzMwYzg4N2YxYzBjYzVjMmNhYmY2ZjdkZTAxMzMwZWZlNjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobqxYUHUAzKlXlqUrcUJzKBqe5bO vF+XyS0oUnobrUZ5XhmP4KtQn/bOkOiTtVS0lKJWUlcgsUvkyBOZSwcZAhStR/qK gcFuAiU7QmPLG5Sd0r6oHPchjJbGO8Y+M3A+NRUuUZ19A90tYnDGVEIxCwJTbRcj jkuxNMDAjYM/CYDFEVDduZLB1hRyB40t1I+FjIuZ74rvtKjRzTYIonr0p2pGFz+a XozB5wP+fP3VnXvT94d+nPNT6y79KrRNRqCIrav7bdx+gomlZlir7agWrWJEWDEW mE278j/a/muA2+ooTdnx9yaXvkz/1eSgtppogU4Bgty5vJOp5n6oPUqA/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQLcwyIfxwMxcLKv2994BMw7+YCMB8GA1UdIwQY MBaAFP+7qde4ZhLU+HzxYXH/grK0QTZNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzd1cDE3aG1FdFQ0ZlBGaGNmLUNzclJCTmswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy80NDgyZjUtOTlkMy00ZDY1LWE2ZTUt NjhlODEzNDIwYWU2LzEvXzd1cDE3aG1FdFQ0ZlBGaGNmLUNzclJCTmswLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy80NDgyZjUtOTlkMy00ZDY1LWE2ZTUtNjhlODEzNDIwYWU2 LzEvXzd1cDE3aG1FdFQ0ZlBGaGNmLUNzclJCTmswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdB7iWkc+ qo27QQEpEMH2on8k+wdBTZzow9QsFrCtWqtUR6VQw6G+IDLE2AjsSk9kewM0Cl2u E+8+AKCOl/zlMVOLcOpnkySEXJaIeS0u8OmcWSnhovqxLeX8JuJC1istfC21xxr6 amDQWg4uJ/kQ428WnyX8NKqT/vrkUY9FbcRewvGF9UxpPhwGVEE/Q4cgoihsO0uq lug3g13WxxRQF3HfeZLJ9RqPE92o+fPSXpbAy+iNo6RJTyEBurF8jRKfbQ+QUaOL 5bW267dRCF0f7mGnU5vSXOFCrF04eapbW1MX2rT5rfnRLFRL19zQ2yCG5sFo3WSr vfX7HYxt9V2JaA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:00 2026 by rpki-client