This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft File: i7CxfdibOGQklyi5_C7q5RD95Ps.mft (raw, json) Hash identifier: HcIz6ylnU5Ay9TXOPccOCDFKhvHEJ0S6mwHT20AxJp0= Subject key identifier: 27:65:D0:C6:2D:E3:3D:6B:0A:E2:99:DD:95:9E:9F:12:54:44:90:A6 Authority key identifier: 8B:B0:B1:7D:D8:9B:38:64:24:97:28:B9:FC:2E:EA:E5:10:FD:E4:FB Certificate issuer: /CN=8bb0b17dd89b3864249728b9fc2eeae510fde4fb Certificate serial: 019C420F851C7362E478B8AE7B137D96104B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft Manifest number: 0A35 Signing time: Mon 09 Feb 2026 11:00:39 +0000 Manifest this update: Mon 09 Feb 2026 11:00:39 +0000 Manifest next update: Tue 10 Feb 2026 11:00:39 +0000 Files and hashes: 1: i7CxfdibOGQklyi5_C7q5RD95Ps.crl (hash: DCjW3XW4+ShguyUdKGX95RZBIoaU+3peLc2TB5RiP38=) 2: prj-gjU2FJGtEVAkFqN1UEoiuck.roa (hash: MBD1FKmACbSwTw7FTssOYwGdssDUFI7ku4bKYJP3LtI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:85:1c:73:62:e4:78:b8:ae:7b:13:7d:96:10:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bb0b17dd89b3864249728b9fc2eeae510fde4fb Validity Not Before: Feb 9 11:00:39 2026 GMT Not After : Feb 10 11:00:39 2026 GMT Subject: CN=2765d0c62de33d6b0ae299dd959e9f12544490a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f4:8b:b7:e7:30:62:c3:51:cd:49:5b:70:33: 17:33:8c:d0:fa:14:6b:bd:c1:5d:49:b6:77:d2:d9: 7c:15:fa:fb:f0:27:17:7a:c3:dd:2d:3a:9d:91:c1: fa:9d:0e:dc:cd:a9:06:0b:25:c8:3e:87:58:20:91: 12:ba:70:78:97:9b:be:94:74:54:3d:4c:a5:00:3d: 8d:c7:ef:74:f5:4a:7d:83:ee:bb:e0:b7:21:f0:9e: 36:15:15:83:a4:03:9d:62:f5:f1:9b:83:15:88:ee: 9e:19:8e:ff:55:8f:b8:73:f4:cb:cc:e4:05:93:ac: c3:83:4e:69:6f:9a:51:6b:b1:98:5c:a2:be:db:17: 1e:6b:ec:2d:cd:5f:aa:33:5b:4c:d3:a9:21:98:8e: 92:3e:f2:ac:53:bd:f6:83:20:5d:dc:e3:67:c2:57: 21:51:43:f5:87:ff:d0:13:3f:bd:81:e3:a2:aa:67: 27:8d:81:7b:ba:4e:fe:8b:69:76:58:41:da:3e:0f: c4:88:60:e6:94:c6:c5:eb:db:86:5d:4d:09:37:8d: aa:f5:00:4b:f6:17:e8:e3:de:c6:bd:04:a0:4c:68: a6:7a:66:79:60:ac:2c:fe:3a:ff:f3:e4:b2:be:e1: 86:eb:dc:5a:a4:ef:6d:97:80:53:d3:58:62:c4:c8: 08:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:65:D0:C6:2D:E3:3D:6B:0A:E2:99:DD:95:9E:9F:12:54:44:90:A6 X509v3 Authority Key Identifier: keyid:8B:B0:B1:7D:D8:9B:38:64:24:97:28:B9:FC:2E:EA:E5:10:FD:E4:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:23:83:b9:ae:a2:81:2f:f4:02:9f:af:f9:ff:ce:52:ea:80: fd:0d:64:fe:e5:ae:c7:ba:d0:6f:28:2f:f4:b7:83:f5:ff:7a: 7b:33:9a:1a:af:28:c0:37:b1:dd:14:95:a3:c5:e2:7d:91:26: 95:3c:f3:4a:48:5a:40:dc:22:86:af:a9:86:f4:46:6d:a9:1d: ef:48:9c:c7:db:51:25:1b:ea:df:3d:f2:59:ad:25:4e:4d:90: 0e:f9:53:4d:27:90:00:36:76:24:44:db:61:51:b6:ca:81:2e: 5c:31:a6:6c:21:69:cc:c5:9d:ae:19:e2:aa:48:5a:cc:ef:31: 04:57:f4:51:36:22:af:8d:f0:6f:2b:49:ab:d6:60:47:fa:b1: 46:eb:03:d0:4f:d6:2d:97:0e:1a:a6:b5:0d:f4:93:59:21:cb: 25:75:f4:97:c8:22:3c:f0:0d:75:aa:2c:bc:04:21:ff:3d:8f: 64:31:dd:c1:bd:de:3f:5e:89:f0:aa:b9:24:7d:0d:7f:e7:79: 93:8c:ad:18:4c:90:4f:eb:99:52:97:c4:f3:f4:30:26:21:2e: b1:9d:9f:9e:dc:14:ab:a8:b7:f4:0a:b7:35:f5:86:62:6f:4c: 24:92:26:6f:7d:a4:5f:cc:4b:6d:b3:af:99:a5:8e:fa:15:17: 7e:9b:4f:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD4Ucc2LkeLiuexN9lhBLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYjBiMTdkZDg5YjM4NjQyNDk3MjhiOWZjMmVlYWU1MTBm ZGU0ZmIwHhcNMjYwMjA5MTEwMDM5WhcNMjYwMjEwMTEwMDM5WjAzMTEwLwYDVQQD EygyNzY1ZDBjNjJkZTMzZDZiMGFlMjk5ZGQ5NTllOWYxMjU0NDQ5MGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfSLt+cwYsNRzUlbcDMXM4zQ+hRr vcFdSbZ30tl8Ffr78CcXesPdLTqdkcH6nQ7czakGCyXIPodYIJESunB4l5u+lHRU PUylAD2Nx+909Up9g+674Lch8J42FRWDpAOdYvXxm4MViO6eGY7/VY+4c/TLzOQF k6zDg05pb5pRa7GYXKK+2xcea+wtzV+qM1tM06khmI6SPvKsU732gyBd3ONnwlch UUP1h//QEz+9geOiqmcnjYF7uk7+i2l2WEHaPg/EiGDmlMbF69uGXU0JN42q9QBL 9hfo497GvQSgTGimemZ5YKws/jr/8+SyvuGG69xapO9tl4BT01hixMgIDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCdl0MYt4z1rCuKZ3ZWenxJURJCmMB8GA1UdIwQY MBaAFIuwsX3YmzhkJJcoufwu6uUQ/eT7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTdDeGZkaWJPR1FrbHlpNV9DN3E1UkQ5NVBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9iYTk1ZmUtNDU5OS00ZDgzLWI2YmQt ZTAxOTE5ZmNmZWRmLzEvaTdDeGZkaWJPR1FrbHlpNV9DN3E1UkQ5NVBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9iYTk1ZmUtNDU5OS00ZDgzLWI2YmQtZTAxOTE5ZmNmZWRm LzEvaTdDeGZkaWJPR1FrbHlpNV9DN3E1UkQ5NVBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmSODua6i gS/0Ap+v+f/OUuqA/Q1k/uWux7rQbygv9LeD9f96ezOaGq8owDex3RSVo8XifZEm lTzzSkhaQNwihq+phvRGbakd70icx9tRJRvq3z3yWa0lTk2QDvlTTSeQADZ2JETb YVG2yoEuXDGmbCFpzMWdrhniqkhazO8xBFf0UTYir43wbytJq9ZgR/qxRusD0E/W LZcOGqa1DfSTWSHLJXX0l8giPPANdaosvAQh/z2PZDHdwb3eP16J8Kq5JH0Nf+d5 k4ytGEyQT+uZUpfE8/QwJiEusZ2fntwUq6i39Aq3NfWGYm9MJJImb32kX8xLbbOv maWO+hUXfptPVw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:51 2026 by rpki-client