This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft File: 7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft (raw, json) Hash identifier: W24ufe3mIVHVtg9bNcT8bBb00Up/mRKgviF6hQhlNQo= Subject key identifier: BB:B5:38:DF:D7:D9:C7:5D:41:78:09:68:75:B3:1B:B0:F1:FF:5B:26 Authority key identifier: EF:F9:87:18:9D:A4:E3:83:85:B0:72:18:54:FE:CC:C3:EF:46:6A:96 Certificate issuer: /CN=eff987189da4e38385b0721854feccc3ef466a96 Certificate serial: 019C427D94B4FF9963A59260006754FF8F01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_mHGJ2k44OFsHIYVP7Mw-9GapY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft Manifest number: 0EA8 Signing time: Mon 09 Feb 2026 13:00:52 +0000 Manifest this update: Mon 09 Feb 2026 13:00:52 +0000 Manifest next update: Tue 10 Feb 2026 13:00:52 +0000 Files and hashes: 1: 7_mHGJ2k44OFsHIYVP7Mw-9GapY.crl (hash: Hbz2xQ8Ic5S5zUS/OkXm6YqraZqydqS5yyEWPo1AZMQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft rsync://rpki.ripe.net/repository/DEFAULT/7_mHGJ2k44OFsHIYVP7Mw-9GapY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:94:b4:ff:99:63:a5:92:60:00:67:54:ff:8f:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eff987189da4e38385b0721854feccc3ef466a96 Validity Not Before: Feb 9 13:00:52 2026 GMT Not After : Feb 10 13:00:52 2026 GMT Subject: CN=bbb538dfd7d9c75d4178096875b31bb0f1ff5b26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3f:c6:15:e7:16:b0:8c:e2:b0:ba:a5:0e:fe: b2:e4:a2:9b:c7:cd:89:7e:c5:c4:7f:aa:4b:f6:fc: a1:1e:69:b6:28:fd:1f:e0:fd:86:95:41:19:b9:a9: b2:04:13:01:8b:80:50:9c:b1:4b:1f:63:b8:db:b9: a2:05:a7:4c:bd:d4:4f:0c:b6:e6:1a:6d:c9:c8:1f: 28:70:94:fa:4e:e5:1e:d8:f8:bd:23:03:0a:9b:f5: 6e:f9:3e:82:59:a8:b3:93:52:58:61:73:98:8b:2f: 6b:2d:a3:44:3d:36:90:f5:28:ab:92:25:9f:7a:06: b3:8b:59:d8:34:9e:be:34:4a:ea:db:b5:8b:11:26: 59:5f:b5:06:1c:48:5a:76:a4:d8:e7:ad:04:61:f2: b5:3e:3f:32:c8:f8:b0:cf:cd:d1:bd:3b:6f:06:1c: c0:20:67:f2:e1:24:90:cd:2b:de:ca:3a:6f:ae:ea: 61:76:06:24:da:b9:71:3c:36:fa:2d:e1:8f:87:9c: 2f:5d:02:fa:58:65:d3:99:22:91:80:9e:0f:4e:6b: db:23:83:d6:90:b6:40:f1:67:4d:91:1a:17:03:98: 0b:af:d6:d6:cd:ba:4b:32:84:c1:91:30:5b:4e:29: 4b:2c:3a:9d:7a:1f:f7:47:4d:8f:db:bb:8b:ea:04: f4:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B5:38:DF:D7:D9:C7:5D:41:78:09:68:75:B3:1B:B0:F1:FF:5B:26 X509v3 Authority Key Identifier: keyid:EF:F9:87:18:9D:A4:E3:83:85:B0:72:18:54:FE:CC:C3:EF:46:6A:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_mHGJ2k44OFsHIYVP7Mw-9GapY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:74:25:67:4a:0f:0b:b2:b1:ac:f1:3f:c7:00:96:aa:d4:dd: c9:3c:1e:ce:26:61:94:4f:96:d5:64:1c:4f:7c:73:78:7f:8d: 60:ec:43:c5:f6:bd:fd:9d:12:c8:c1:00:cf:8b:7c:26:72:5f: 1a:46:35:58:b0:f4:64:e8:8c:45:a3:2c:5e:77:f0:7a:b3:94: 29:f2:91:ab:55:62:fc:ac:f8:7c:ec:ce:37:38:da:b7:56:43: 50:22:df:fe:6f:8d:3a:32:02:33:a7:a9:d7:0b:07:a8:fc:a0: 36:f4:40:b0:b4:fc:0f:17:7c:21:c1:ea:2a:e9:40:b6:2b:77: f1:32:79:83:61:2b:94:3d:0b:fd:fd:d0:8b:d4:e4:df:ea:a9: 84:56:6e:d6:e2:6b:f3:64:7e:e1:42:d0:72:e4:ed:dd:57:e6: f6:21:90:53:a5:20:ad:b2:f3:df:66:c0:87:7c:aa:24:ae:0a: b2:21:bb:cb:cf:20:2c:e8:f9:49:75:cb:9c:08:95:ac:b7:7a: 11:4d:2a:aa:2a:f7:4b:49:f7:01:9e:7b:e8:8f:ad:16:ce:1c: 2e:9a:99:79:03:9a:61:f0:61:d9:3c:b8:6b:5c:0d:e5:7d:3c: fc:ed:6d:ba:99:7d:03:71:eb:26:a1:6d:e2:9f:41:a5:97:64: b3:3d:49:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfZS0/5ljpZJgAGdU/48BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmZjk4NzE4OWRhNGUzODM4NWIwNzIxODU0ZmVjY2MzZWY0 NjZhOTYwHhcNMjYwMjA5MTMwMDUyWhcNMjYwMjEwMTMwMDUyWjAzMTEwLwYDVQQD EyhiYmI1MzhkZmQ3ZDljNzVkNDE3ODA5Njg3NWIzMWJiMGYxZmY1YjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoj/GFecWsIzisLqlDv6y5KKbx82J fsXEf6pL9vyhHmm2KP0f4P2GlUEZuamyBBMBi4BQnLFLH2O427miBadMvdRPDLbm Gm3JyB8ocJT6TuUe2Pi9IwMKm/Vu+T6CWaizk1JYYXOYiy9rLaNEPTaQ9SirkiWf egazi1nYNJ6+NErq27WLESZZX7UGHEhadqTY560EYfK1Pj8yyPiwz83RvTtvBhzA IGfy4SSQzSveyjpvruphdgYk2rlxPDb6LeGPh5wvXQL6WGXTmSKRgJ4PTmvbI4PW kLZA8WdNkRoXA5gLr9bWzbpLMoTBkTBbTilLLDqdeh/3R02P27uL6gT0KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLu1ON/X2cddQXgJaHWzG7Dx/1smMB8GA1UdIwQY MBaAFO/5hxidpOODhbByGFT+zMPvRmqWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN19tSEdKMms0NE9Gc0hJWVZQN013LTlHYXBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hOTMwMTAtZjI2Ny00M2ZmLWE3NjAt ODg1ZWUxOWVkNmJmLzEvN19tSEdKMms0NE9Gc0hJWVZQN013LTlHYXBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hOTMwMTAtZjI2Ny00M2ZmLWE3NjAtODg1ZWUxOWVkNmJm LzEvN19tSEdKMms0NE9Gc0hJWVZQN013LTlHYXBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUHQlZ0oP C7KxrPE/xwCWqtTdyTweziZhlE+W1WQcT3xzeH+NYOxDxfa9/Z0SyMEAz4t8JnJf GkY1WLD0ZOiMRaMsXnfwerOUKfKRq1Vi/Kz4fOzONzjat1ZDUCLf/m+NOjICM6ep 1wsHqPygNvRAsLT8Dxd8IcHqKulAtit38TJ5g2ErlD0L/f3Qi9Tk3+qphFZu1uJr 82R+4ULQcuTt3Vfm9iGQU6UgrbLz32bAh3yqJK4KsiG7y88gLOj5SXXLnAiVrLd6 EU0qqir3S0n3AZ576I+tFs4cLpqZeQOaYfBh2Ty4a1wN5X08/O1tupl9A3HrJqFt 4p9BpZdksz1JLg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:57:13 2026 by rpki-client