This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft File: 7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft (raw, json) Hash identifier: oQZWD5k9aXb6m3Ba1CS1mbx3L0287DE42zcA3iQ0Bmo= Subject key identifier: BB:E7:74:88:60:CB:69:D1:12:BB:B1:C4:7B:F0:31:04:60:62:7E:23 Authority key identifier: ED:24:15:01:3F:2E:9C:4E:E5:8D:7C:2D:FE:EE:AB:28:16:92:D8:57 Certificate issuer: /CN=ed2415013f2e9c4ee58d7c2dfeeeab281692d857 Certificate serial: 019C4390753988875F18A4FDD1EE7DD3DED1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7SQVAT8unE7ljXwt_u6rKBaS2Fc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft Manifest number: 17A0 Signing time: Mon 09 Feb 2026 18:01:06 +0000 Manifest this update: Mon 09 Feb 2026 18:01:06 +0000 Manifest next update: Tue 10 Feb 2026 18:01:06 +0000 Files and hashes: 1: 7SQVAT8unE7ljXwt_u6rKBaS2Fc.crl (hash: x7ifxpR674eizShngACChOClNBbFkUS36ZyLGS5znfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft rsync://rpki.ripe.net/repository/DEFAULT/7SQVAT8unE7ljXwt_u6rKBaS2Fc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:75:39:88:87:5f:18:a4:fd:d1:ee:7d:d3:de:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed2415013f2e9c4ee58d7c2dfeeeab281692d857 Validity Not Before: Feb 9 18:01:06 2026 GMT Not After : Feb 10 18:01:06 2026 GMT Subject: CN=bbe7748860cb69d112bbb1c47bf0310460627e23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:56:99:49:67:e8:68:2b:83:ea:fc:ba:4e:04: a2:99:72:44:ea:6d:0d:fc:6f:68:c1:69:a9:c6:98: e9:41:c2:ab:af:34:c3:06:71:91:38:81:26:c1:2b: aa:9d:af:a7:1d:a8:1d:08:62:20:44:4b:82:3e:f4: 86:34:33:9e:96:d7:ad:8e:f2:5d:09:42:18:f9:77: 8d:b1:fb:e1:81:da:68:0d:9e:65:f2:7a:e2:16:9a: ed:6c:44:9d:4f:03:8b:23:5f:95:ef:31:87:3f:04: 46:78:08:de:91:a2:c3:f5:bf:ad:18:f0:38:d3:68: 5a:e7:3f:20:f4:41:7a:b2:89:c2:30:62:ef:99:a5: 64:c5:9b:a1:ae:f6:ab:b5:b4:6b:dd:05:86:87:5a: 3d:33:b2:6b:d6:9c:df:7a:bb:cf:44:7b:5a:4d:5f: 89:33:74:bf:19:e2:eb:c1:15:de:f7:b3:d6:1d:56: 12:67:fd:aa:60:41:a3:fb:55:2a:88:c2:b5:49:33: 21:3d:fc:ee:1b:8e:bd:2b:ac:d7:20:2c:d3:f4:5e: cd:e1:dc:85:cf:29:2f:99:1f:12:4e:d7:36:6e:de: 80:c6:08:3c:8b:6d:db:f0:50:80:31:82:66:8c:04: 13:5c:1e:40:e7:5f:d9:6e:c7:10:16:6b:b5:27:d7: b9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E7:74:88:60:CB:69:D1:12:BB:B1:C4:7B:F0:31:04:60:62:7E:23 X509v3 Authority Key Identifier: keyid:ED:24:15:01:3F:2E:9C:4E:E5:8D:7C:2D:FE:EE:AB:28:16:92:D8:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7SQVAT8unE7ljXwt_u6rKBaS2Fc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:87:70:f1:58:61:7b:45:6d:c4:7f:5a:45:c9:9b:da:8f:08: d9:af:7f:2a:50:fd:0e:1c:3b:0a:6b:60:df:e2:5d:33:3e:4c: 75:97:52:4d:62:e0:99:b3:14:89:d6:b1:39:69:10:d2:9f:2f: d1:69:aa:d5:82:3d:ec:9e:18:82:28:b4:6a:eb:53:68:1c:3c: 08:c2:53:66:fa:a1:7d:66:16:87:d6:84:2d:7d:8e:bf:9b:59: 2c:ad:e7:95:21:1a:29:87:3c:ec:8e:87:9c:69:0f:e2:31:e2: 80:a3:86:47:23:4f:26:0e:84:80:74:81:f6:35:44:13:64:15: 95:54:06:88:ed:d2:7a:3f:63:d7:7f:cb:14:be:71:7e:f8:20: 38:50:c8:8c:bb:dd:7d:83:86:16:49:dc:3b:79:2c:5f:96:d3: 1a:0c:5c:c4:c5:e1:dc:fb:01:18:46:c6:65:4c:b8:0c:e6:6b: 4e:92:e4:37:b8:63:86:cb:ce:a2:c2:cd:29:8a:fa:38:b9:23: 6e:31:30:d3:9a:ce:92:78:fc:82:7e:5b:81:37:58:4c:74:61: f9:c7:5c:22:fd:3e:99:20:87:97:04:5e:58:96:f8:73:b4:e6: 5a:7d:6f:b1:fd:b5:c3:ca:ce:e9:b2:54:4e:bd:ee:2d:75:56: e7:e4:fe:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkHU5iIdfGKT90e59097RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkMjQxNTAxM2YyZTljNGVlNThkN2MyZGZlZWVhYjI4MTY5 MmQ4NTcwHhcNMjYwMjA5MTgwMTA2WhcNMjYwMjEwMTgwMTA2WjAzMTEwLwYDVQQD EyhiYmU3NzQ4ODYwY2I2OWQxMTJiYmIxYzQ3YmYwMzEwNDYwNjI3ZTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVaZSWfoaCuD6vy6TgSimXJE6m0N /G9owWmpxpjpQcKrrzTDBnGROIEmwSuqna+nHagdCGIgREuCPvSGNDOeltetjvJd CUIY+XeNsfvhgdpoDZ5l8nriFprtbESdTwOLI1+V7zGHPwRGeAjekaLD9b+tGPA4 02ha5z8g9EF6sonCMGLvmaVkxZuhrvartbRr3QWGh1o9M7Jr1pzfervPRHtaTV+J M3S/GeLrwRXe97PWHVYSZ/2qYEGj+1UqiMK1STMhPfzuG469K6zXICzT9F7N4dyF zykvmR8STtc2bt6Axgg8i23b8FCAMYJmjAQTXB5A51/ZbscQFmu1J9e5xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLvndIhgy2nREruxxHvwMQRgYn4jMB8GA1UdIwQY MBaAFO0kFQE/LpxO5Y18Lf7uqygWkthXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1NRVkFUOHVuRTdsalh3dF91NnJLQmFTMkZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi83ZGFiZTctZGZmMS00NjZjLWE2MDAt MDMxMWQwZDVkZGJiLzEvN1NRVkFUOHVuRTdsalh3dF91NnJLQmFTMkZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi83ZGFiZTctZGZmMS00NjZjLWE2MDAtMDMxMWQwZDVkZGJi LzEvN1NRVkFUOHVuRTdsalh3dF91NnJLQmFTMkZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEodw8Vhh e0VtxH9aRcmb2o8I2a9/KlD9Dhw7Cmtg3+JdMz5MdZdSTWLgmbMUidaxOWkQ0p8v 0Wmq1YI97J4Ygii0autTaBw8CMJTZvqhfWYWh9aELX2Ov5tZLK3nlSEaKYc87I6H nGkP4jHigKOGRyNPJg6EgHSB9jVEE2QVlVQGiO3Sej9j13/LFL5xfvggOFDIjLvd fYOGFkncO3ksX5bTGgxcxMXh3PsBGEbGZUy4DOZrTpLkN7hjhsvOosLNKYr6OLkj bjEw05rOknj8gn5bgTdYTHRh+cdcIv0+mSCHlwReWJb4c7TmWn1vsf21w8rO6bJU Tr3uLXVW5+T+ow== -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:26 2026 by rpki-client