This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft File: 7iUCbllV3N0RFHb5toSdcoGFRps.mft (raw, json) Hash identifier: pR3mdPeMg5jT72wU5IfW9Mew47MW+VZ0hRHBz3YUYjI= Subject key identifier: F7:1B:C5:36:B0:74:16:C3:AD:78:24:D9:83:D0:EE:BD:F5:B5:0D:4C Authority key identifier: EE:25:02:6E:59:55:DC:DD:11:14:76:F9:B6:84:9D:72:81:85:46:9B Certificate issuer: /CN=ee25026e5955dcdd111476f9b6849d728185469b Certificate serial: 019C4390220B46CBF1FD026AC679B6683BB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft Manifest number: 067E Signing time: Mon 09 Feb 2026 18:00:45 +0000 Manifest this update: Mon 09 Feb 2026 18:00:45 +0000 Manifest next update: Tue 10 Feb 2026 18:00:45 +0000 Files and hashes: 1: 7iUCbllV3N0RFHb5toSdcoGFRps.crl (hash: pDjkm3Ju5wGYqSTaX25ePJyeSiyaPcQeY+Pgh3fL3LI=) 2: ZMb0v-oWgmW0S9DVSRLNECome6Q.roa (hash: kkThLxyKHt8WPy1uBNPV0DqDTG+95f3qdT0ehmPEep4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:22:0b:46:cb:f1:fd:02:6a:c6:79:b6:68:3b:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee25026e5955dcdd111476f9b6849d728185469b Validity Not Before: Feb 9 18:00:45 2026 GMT Not After : Feb 10 18:00:45 2026 GMT Subject: CN=f71bc536b07416c3ad7824d983d0eebdf5b50d4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0e:af:45:70:fb:6a:e5:d3:c8:5f:f6:f8:52: 1a:92:b2:6c:ec:05:9d:d0:c6:f6:96:1b:8f:25:7c: 32:62:d7:df:8f:f9:bb:eb:6c:f9:62:3b:7a:d3:d3: 90:d5:90:54:a4:6c:5b:87:09:7f:6a:c5:6e:6d:2f: 50:ec:19:b0:05:6d:78:1b:b0:17:d5:e1:1c:5f:64: 8c:77:e5:39:f9:f4:d0:af:dc:2a:af:9d:f9:22:50: 61:4a:1c:cb:02:84:b5:9c:8d:10:5c:59:44:6e:06: 53:5f:c2:09:03:c6:29:ef:a6:fb:06:3b:d7:1e:31: 61:b3:18:e8:79:2f:5a:8e:6b:f3:64:39:58:16:be: 6c:d2:01:90:45:4f:94:93:2e:79:d0:07:b1:a4:be: d7:e0:5f:d5:c8:65:5b:93:d7:c7:bc:90:23:29:7d: 14:29:5d:c9:fb:a4:81:d7:b8:b6:b3:26:a1:1e:10: 9c:b4:23:52:d0:d5:d2:4e:a7:9e:c8:9d:9b:60:76: 49:c6:28:b0:37:b5:7c:e0:cd:bd:1d:71:02:92:ea: f9:14:41:8b:84:f2:11:28:94:ac:32:df:7d:cf:34: 56:bb:36:e1:b2:cd:b6:7f:b9:87:bf:ba:99:72:94: 4b:1b:3a:b2:cd:a9:33:3d:f6:ef:a7:1b:33:32:6d: 98:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:1B:C5:36:B0:74:16:C3:AD:78:24:D9:83:D0:EE:BD:F5:B5:0D:4C X509v3 Authority Key Identifier: keyid:EE:25:02:6E:59:55:DC:DD:11:14:76:F9:B6:84:9D:72:81:85:46:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:7e:af:12:d5:ee:af:48:e6:49:68:39:b2:51:e3:01:b6:98: 82:f2:cf:19:3c:5c:0c:d8:5f:cb:5d:26:15:be:da:42:39:04: 94:3c:bb:4d:5f:8e:42:96:22:e9:db:ca:83:0f:cc:4e:c6:a6: 71:7e:a9:fb:e1:df:b3:16:30:95:e8:6d:69:5a:d8:19:f7:52: 1f:10:47:71:0f:b7:c1:4f:7f:26:d4:f6:a4:1a:ae:ec:aa:ed: e1:81:1c:56:01:ef:ea:9a:19:1a:b1:27:54:0d:2a:f8:65:c1: 0f:70:65:fb:74:1f:2f:80:e0:3c:c1:00:a1:06:02:d1:0c:5d: e1:c8:73:b6:17:02:b5:38:8a:bd:c6:95:27:48:d8:0c:b2:1c: fa:e5:b7:da:a0:42:69:8d:e5:2d:85:d3:9a:17:17:3c:94:0e: 0e:b9:eb:89:2c:80:3c:26:d4:a0:91:0e:88:b6:e4:3d:e0:92: d5:d5:97:c4:f6:3c:ac:58:54:c8:e6:52:6e:6a:15:15:25:6f: 0b:aa:9e:98:27:95:43:7e:8b:dd:35:3f:14:8b:8b:0e:ce:3c: aa:b2:66:1c:92:2e:9f:c9:fa:b3:50:91:f2:bd:31:4f:9c:04: d5:e6:63:58:12:1e:5b:9a:bf:26:56:fc:de:0b:76:1c:cf:a8: 5c:a8:df:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkCILRsvx/QJqxnm2aDuwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMjUwMjZlNTk1NWRjZGQxMTE0NzZmOWI2ODQ5ZDcyODE4 NTQ2OWIwHhcNMjYwMjA5MTgwMDQ1WhcNMjYwMjEwMTgwMDQ1WjAzMTEwLwYDVQQD EyhmNzFiYzUzNmIwNzQxNmMzYWQ3ODI0ZDk4M2QwZWViZGY1YjUwZDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqg6vRXD7auXTyF/2+FIakrJs7AWd 0Mb2lhuPJXwyYtffj/m762z5Yjt609OQ1ZBUpGxbhwl/asVubS9Q7BmwBW14G7AX 1eEcX2SMd+U5+fTQr9wqr535IlBhShzLAoS1nI0QXFlEbgZTX8IJA8Yp76b7BjvX HjFhsxjoeS9ajmvzZDlYFr5s0gGQRU+Uky550AexpL7X4F/VyGVbk9fHvJAjKX0U KV3J+6SB17i2syahHhCctCNS0NXSTqeeyJ2bYHZJxiiwN7V84M29HXECkur5FEGL hPIRKJSsMt99zzRWuzbhss22f7mHv7qZcpRLGzqyzakzPfbvpxszMm2YBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPcbxTawdBbDrXgk2YPQ7r31tQ1MMB8GA1UdIwQY MBaAFO4lAm5ZVdzdERR2+baEnXKBhUabMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2lVQ2JsbFYzTjBSRkhiNXRvU2Rjb0dGUnBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9mNzAwNjItYzE2ZC00ZTVjLTlhZTct MmE0NmY2ZmFjNGNhLzEvN2lVQ2JsbFYzTjBSRkhiNXRvU2Rjb0dGUnBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9mNzAwNjItYzE2ZC00ZTVjLTlhZTctMmE0NmY2ZmFjNGNh LzEvN2lVQ2JsbFYzTjBSRkhiNXRvU2Rjb0dGUnBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACH6vEtXu r0jmSWg5slHjAbaYgvLPGTxcDNhfy10mFb7aQjkElDy7TV+OQpYi6dvKgw/MTsam cX6p++HfsxYwlehtaVrYGfdSHxBHcQ+3wU9/JtT2pBqu7Krt4YEcVgHv6poZGrEn VA0q+GXBD3Bl+3QfL4DgPMEAoQYC0Qxd4chzthcCtTiKvcaVJ0jYDLIc+uW32qBC aY3lLYXTmhcXPJQODrnriSyAPCbUoJEOiLbkPeCS1dWXxPY8rFhUyOZSbmoVFSVv C6qemCeVQ36L3TU/FIuLDs48qrJmHJIun8n6s1CR8r0xT5wE1eZjWBIeW5q/Jlb8 3gt2HM+oXKjfLA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:39:58 2026 by rpki-client