This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.mft File: x7996xihKSBrrXc8-CId5UTj_YE.mft (raw, json) Hash identifier: 29cwprWzAzZllVeAs5zLeSaODCHy0OKocB3OLVaYHZc= Subject key identifier: 85:62:48:02:12:DC:9F:2E:39:29:A3:8F:47:D2:76:00:A2:76:1B:33 Authority key identifier: C7:BF:7D:EB:18:A1:29:20:6B:AD:77:3C:F8:22:1D:E5:44:E3:FD:81 Certificate issuer: /CN=c7bf7deb18a129206bad773cf8221de544e3fd81 Certificate serial: 019C41A27172ACFFF9406B7F80F98E43A15A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7996xihKSBrrXc8-CId5UTj_YE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.mft Manifest number: 0ADD Signing time: Mon 09 Feb 2026 09:01:30 +0000 Manifest this update: Mon 09 Feb 2026 09:01:30 +0000 Manifest next update: Tue 10 Feb 2026 09:01:30 +0000 Files and hashes: 1: x7996xihKSBrrXc8-CId5UTj_YE.crl (hash: idthG3GyqDNY9IXUeDFRuHjW/8yvEVqMRO42qrmV3yw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.mft rsync://rpki.ripe.net/repository/DEFAULT/x7996xihKSBrrXc8-CId5UTj_YE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:71:72:ac:ff:f9:40:6b:7f:80:f9:8e:43:a1:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7bf7deb18a129206bad773cf8221de544e3fd81 Validity Not Before: Feb 9 09:01:30 2026 GMT Not After : Feb 10 09:01:30 2026 GMT Subject: CN=8562480212dc9f2e3929a38f47d27600a2761b33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:20:93:80:c8:7b:41:71:f7:c8:fd:e3:19:02: 67:f1:f2:5e:e2:80:c3:ee:d6:1b:47:ff:7c:c8:c3: 8b:52:85:d6:3f:a5:fc:14:1b:04:a7:1b:bf:03:0f: 36:0f:47:bc:99:a7:a3:88:ec:23:c0:f3:8c:25:0a: 9b:d9:1e:73:76:19:ff:7f:8a:60:db:bc:b7:18:59: bd:de:75:46:95:9a:16:f2:b1:20:93:c5:b9:51:ea: a3:ad:7c:72:10:d0:22:7e:5c:69:c6:cf:88:b3:ed: 2d:3e:0d:39:95:75:d4:49:38:f3:6a:56:1f:d7:fd: 50:98:37:8e:e4:7f:b4:53:48:25:bd:5b:c2:76:0b: 38:6a:cb:be:6c:1c:15:2c:1f:83:28:2c:c0:28:db: d9:68:1b:14:a8:8d:8f:dc:3b:f5:20:34:42:7b:ff: 21:7a:87:f6:12:c1:b0:22:3d:9a:08:0e:e7:cf:3a: bf:26:26:f8:af:d3:56:7e:4c:63:44:63:dd:fa:ea: b9:fe:14:b1:e0:2b:80:7b:52:c6:9b:a7:67:93:25: 50:eb:55:63:16:c8:a4:c4:e6:99:71:f2:ae:a0:2d: f7:a6:d4:8e:31:7e:ab:7f:60:46:79:1d:fa:74:1e: 69:de:40:31:25:a8:f9:5a:67:7d:82:75:a0:34:19: 86:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:62:48:02:12:DC:9F:2E:39:29:A3:8F:47:D2:76:00:A2:76:1B:33 X509v3 Authority Key Identifier: keyid:C7:BF:7D:EB:18:A1:29:20:6B:AD:77:3C:F8:22:1D:E5:44:E3:FD:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7996xihKSBrrXc8-CId5UTj_YE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:35:6a:f3:55:90:b3:86:12:28:7b:f8:7b:94:57:9f:62:8f: 47:a1:29:ad:92:42:75:3a:00:a8:30:69:ad:55:9f:15:ee:1c: e4:28:47:a4:b3:c2:dd:5b:1d:42:cb:c4:d5:7d:03:0d:1a:03: fa:ec:39:21:a1:4d:f7:ed:31:3e:f0:4c:2e:8a:1b:cf:ca:f5: 6f:f9:93:82:32:38:04:a7:65:69:e7:99:de:ed:a8:52:59:19: 25:b7:92:50:ec:6c:23:be:ab:e6:0d:68:87:17:58:22:3f:30: 68:60:ad:c8:0a:54:b3:64:62:12:ea:93:f3:a7:11:88:0b:b9: 2f:b0:e9:a0:d6:a4:65:42:2e:0e:5f:64:11:08:b2:21:38:bb: 58:d3:5f:a5:60:d3:7c:ab:3b:89:6d:a8:80:26:c0:ca:7f:9e: de:a2:6e:db:d2:86:6a:74:1e:f0:c3:3d:10:05:ce:96:b6:a8: 38:8b:5e:e1:e3:bc:d7:a4:15:71:0b:d6:6a:1e:30:c6:bc:5c: a8:b6:58:2a:75:12:a2:cf:70:cb:86:b9:cc:f2:6f:f2:87:26: 1a:8a:3a:c1:48:15:0c:f4:d5:79:dd:af:43:f9:6d:84:03:90: b1:2b:74:33:11:42:7b:1d:0d:88:c3:28:d2:9b:1a:36:07:fe: f5:b6:c6:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBonFyrP/5QGt/gPmOQ6FaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3YmY3ZGViMThhMTI5MjA2YmFkNzczY2Y4MjIxZGU1NDRl M2ZkODEwHhcNMjYwMjA5MDkwMTMwWhcNMjYwMjEwMDkwMTMwWjAzMTEwLwYDVQQD Eyg4NTYyNDgwMjEyZGM5ZjJlMzkyOWEzOGY0N2QyNzYwMGEyNzYxYjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7SCTgMh7QXH3yP3jGQJn8fJe4oDD 7tYbR/98yMOLUoXWP6X8FBsEpxu/Aw82D0e8maejiOwjwPOMJQqb2R5zdhn/f4pg 27y3GFm93nVGlZoW8rEgk8W5UeqjrXxyENAiflxpxs+Is+0tPg05lXXUSTjzalYf 1/1QmDeO5H+0U0glvVvCdgs4asu+bBwVLB+DKCzAKNvZaBsUqI2P3Dv1IDRCe/8h eof2EsGwIj2aCA7nzzq/Jib4r9NWfkxjRGPd+uq5/hSx4CuAe1LGm6dnkyVQ61Vj FsikxOaZcfKuoC33ptSOMX6rf2BGeR36dB5p3kAxJaj5Wmd9gnWgNBmGbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIViSAIS3J8uOSmjj0fSdgCidhszMB8GA1UdIwQY MBaAFMe/fesYoSkga613PPgiHeVE4/2BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDc5OTZ4aWhLU0JyclhjOC1DSWQ1VVRqX1lFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83NTBlYWYtYjAzYy00NmQyLWJmYzYt MDE4ZmM5YzAyOGIwLzEveDc5OTZ4aWhLU0JyclhjOC1DSWQ1VVRqX1lFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy83NTBlYWYtYjAzYy00NmQyLWJmYzYtMDE4ZmM5YzAyOGIw LzEveDc5OTZ4aWhLU0JyclhjOC1DSWQ1VVRqX1lFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEzVq81WQ s4YSKHv4e5RXn2KPR6EprZJCdToAqDBprVWfFe4c5ChHpLPC3VsdQsvE1X0DDRoD +uw5IaFN9+0xPvBMLoobz8r1b/mTgjI4BKdlaeeZ3u2oUlkZJbeSUOxsI76r5g1o hxdYIj8waGCtyApUs2RiEuqT86cRiAu5L7DpoNakZUIuDl9kEQiyITi7WNNfpWDT fKs7iW2ogCbAyn+e3qJu29KGanQe8MM9EAXOlraoOIte4eO816QVcQvWah4wxrxc qLZYKnUSos9wy4a5zPJv8ocmGoo6wUgVDPTVed2vQ/lthAOQsSt0MxFCex0NiMMo 0psaNgf+9bbGJw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:37 2026 by rpki-client