This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.mft File: x-0gqk1F1WHiTZJvWbF1J42bAcg.mft (raw, json) Hash identifier: JGeYpX9ggf5FgXrC0J2oXXLQaHOpy+tnSEUjidap6Us= Subject key identifier: 7F:C4:D9:AC:7A:68:F1:71:9E:7D:25:87:D4:FD:65:C4:B5:89:3A:7F Authority key identifier: C7:ED:20:AA:4D:45:D5:61:E2:4D:92:6F:59:B1:75:27:8D:9B:01:C8 Certificate issuer: /CN=c7ed20aa4d45d561e24d926f59b175278d9b01c8 Certificate serial: 019C446C18B5EDED8228E00FB14A96AAA46B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-0gqk1F1WHiTZJvWbF1J42bAcg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.mft Manifest number: 147D Signing time: Mon 09 Feb 2026 22:01:00 +0000 Manifest this update: Mon 09 Feb 2026 22:01:00 +0000 Manifest next update: Tue 10 Feb 2026 22:01:00 +0000 Files and hashes: 1: x-0gqk1F1WHiTZJvWbF1J42bAcg.crl (hash: /HSvhHQUXjVCKufmkw5fX7hrrKFZi6VH+EBPgo0O4Js=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.mft rsync://rpki.ripe.net/repository/DEFAULT/x-0gqk1F1WHiTZJvWbF1J42bAcg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6c:18:b5:ed:ed:82:28:e0:0f:b1:4a:96:aa:a4:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7ed20aa4d45d561e24d926f59b175278d9b01c8 Validity Not Before: Feb 9 22:01:00 2026 GMT Not After : Feb 10 22:01:00 2026 GMT Subject: CN=7fc4d9ac7a68f1719e7d2587d4fd65c4b5893a7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d0:ba:c0:5d:ca:1d:43:cf:b5:2f:f9:ac:0c: d3:c5:f4:49:72:f7:4c:14:6e:2f:bf:a4:93:aa:e3: ba:72:0d:8a:e5:82:f9:29:20:06:ed:fb:55:3d:91: 4a:f6:82:c3:06:03:d9:d2:ca:c8:3d:a0:3e:d4:b7: 32:93:aa:db:70:16:1d:cc:c5:2c:69:50:83:d7:13: ef:ea:a9:f6:0d:5f:6d:ca:27:d8:ab:11:1c:16:50: 83:20:7c:de:3c:63:db:68:92:0f:7b:c8:78:10:29: 41:f8:3f:2e:7d:c0:a9:0a:41:2e:22:b8:04:b9:98: e5:89:d0:0a:4b:4c:f4:0f:78:b4:5a:d7:09:b4:85: 27:d3:4f:2a:d9:f2:8d:e0:ff:e4:cc:c6:8b:9e:c1: 0b:58:b8:58:6a:b0:1c:a5:23:4f:15:98:fd:ca:e2: 81:58:25:49:cb:d1:35:84:d5:b0:26:17:a4:06:91: c8:61:9d:d9:d1:2a:2a:69:59:10:10:57:18:f4:c9: 63:a3:16:e8:58:8f:a4:24:90:04:c5:f9:57:83:8c: b3:7e:2a:63:23:87:a7:2f:42:38:53:71:e1:ad:14: d9:bb:ba:80:ba:8d:b4:5c:49:f8:78:52:fe:0b:60: a6:8a:c4:11:e7:1c:e4:53:c0:af:3d:45:a6:33:f3: ee:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:C4:D9:AC:7A:68:F1:71:9E:7D:25:87:D4:FD:65:C4:B5:89:3A:7F X509v3 Authority Key Identifier: keyid:C7:ED:20:AA:4D:45:D5:61:E2:4D:92:6F:59:B1:75:27:8D:9B:01:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-0gqk1F1WHiTZJvWbF1J42bAcg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:38:66:6d:22:ab:25:a7:4d:db:07:7e:5a:bf:45:0f:13:fa: 47:fb:2d:c7:a8:c0:61:59:bf:8b:0e:e7:ee:f3:3d:6f:52:cf: 3b:d7:6f:a1:a2:52:ad:31:56:ca:8c:8a:73:de:83:61:46:a7: 17:8e:7a:9f:42:3f:51:0a:1c:ee:cb:ef:fd:d0:4f:36:a3:cc: ef:eb:8a:07:fd:32:33:a2:02:cd:f9:4f:bf:f1:02:9e:fd:45: d3:91:06:b7:28:ab:40:89:22:db:ad:4f:19:96:09:a1:9c:c0: 35:1f:a0:64:51:bf:51:89:33:00:1e:e5:b6:2f:84:4d:b6:0b: 1a:45:2c:4f:80:2e:51:d0:b9:82:15:11:af:f1:ed:1a:46:14: e0:35:7c:9b:a3:f0:32:0e:5b:44:c6:d6:97:7a:89:d1:ae:77: 65:1d:aa:2f:98:b1:0f:a3:16:d2:50:95:19:2b:55:ff:03:dd: 26:b1:a7:ec:e0:d3:47:66:4c:19:da:13:cf:fa:31:8d:23:d6: 72:e8:14:8c:89:cf:6a:1b:58:e0:8a:a1:d0:05:6c:b4:42:9f: 11:a3:be:85:67:f6:b6:aa:d4:48:e1:0f:3f:39:0f:4c:8f:3f: 04:d8:3e:47:fd:26:77:6c:6b:ca:7b:2e:0c:ef:93:69:7a:57: 6b:c7:f8:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEbBi17e2CKOAPsUqWqqRrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3ZWQyMGFhNGQ0NWQ1NjFlMjRkOTI2ZjU5YjE3NTI3OGQ5 YjAxYzgwHhcNMjYwMjA5MjIwMTAwWhcNMjYwMjEwMjIwMTAwWjAzMTEwLwYDVQQD Eyg3ZmM0ZDlhYzdhNjhmMTcxOWU3ZDI1ODdkNGZkNjVjNGI1ODkzYTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9C6wF3KHUPPtS/5rAzTxfRJcvdM FG4vv6STquO6cg2K5YL5KSAG7ftVPZFK9oLDBgPZ0srIPaA+1Lcyk6rbcBYdzMUs aVCD1xPv6qn2DV9tyifYqxEcFlCDIHzePGPbaJIPe8h4EClB+D8ufcCpCkEuIrgE uZjlidAKS0z0D3i0WtcJtIUn008q2fKN4P/kzMaLnsELWLhYarAcpSNPFZj9yuKB WCVJy9E1hNWwJhekBpHIYZ3Z0SoqaVkQEFcY9MljoxboWI+kJJAExflXg4yzfipj I4enL0I4U3HhrRTZu7qAuo20XEn4eFL+C2CmisQR5xzkU8CvPUWmM/Pu7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH/E2ax6aPFxnn0lh9T9ZcS1iTp/MB8GA1UdIwQY MBaAFMftIKpNRdVh4k2Sb1mxdSeNmwHIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveC0wZ3FrMUYxV0hpVFpKdldiRjFKNDJiQWNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC85ZWZlMTMtOGI5NC00YjYyLTg3YWMt NmE1ZThlYmRmZDEyLzEveC0wZ3FrMUYxV0hpVFpKdldiRjFKNDJiQWNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC85ZWZlMTMtOGI5NC00YjYyLTg3YWMtNmE1ZThlYmRmZDEy LzEveC0wZ3FrMUYxV0hpVFpKdldiRjFKNDJiQWNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHzhmbSKr JadN2wd+Wr9FDxP6R/stx6jAYVm/iw7n7vM9b1LPO9dvoaJSrTFWyoyKc96DYUan F456n0I/UQoc7svv/dBPNqPM7+uKB/0yM6ICzflPv/ECnv1F05EGtyirQIki261P GZYJoZzANR+gZFG/UYkzAB7lti+ETbYLGkUsT4AuUdC5ghURr/HtGkYU4DV8m6Pw Mg5bRMbWl3qJ0a53ZR2qL5ixD6MW0lCVGStV/wPdJrGn7ODTR2ZMGdoTz/oxjSPW cugUjInPahtY4Iqh0AVstEKfEaO+hWf2tqrUSOEPPzkPTI8/BNg+R/0md2xrynsu DO+TaXpXa8f45A== -----END CERTIFICATE-----Generated at Tue Feb 10 01:22:19 2026 by rpki-client