This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft File: 7zxxAAZFDN50pBmnFDKY5VBm8mw.mft (raw, json) Hash identifier: P0l6STv8xLrf3RYcdL9Fq8eDIqv17zXyRl+hE5f6joM= Subject key identifier: 4C:5A:AB:FA:75:FD:64:60:11:73:6F:DF:3E:0D:7F:EB:E1:90:E0:5A Authority key identifier: EF:3C:71:00:06:45:0C:DE:74:A4:19:A7:14:32:98:E5:50:66:F2:6C Certificate issuer: /CN=ef3c710006450cde74a419a7143298e55066f26c Certificate serial: 019C446BB24FAFE4AC47F31607EE1081D146 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7zxxAAZFDN50pBmnFDKY5VBm8mw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft Manifest number: 070B Signing time: Mon 09 Feb 2026 22:00:34 +0000 Manifest this update: Mon 09 Feb 2026 22:00:34 +0000 Manifest next update: Tue 10 Feb 2026 22:00:34 +0000 Files and hashes: 1: 7zxxAAZFDN50pBmnFDKY5VBm8mw.crl (hash: UcmIR4aCBz4Aqhg9a1moemMdL1GwQW4GD6he7DqUDtg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft rsync://rpki.ripe.net/repository/DEFAULT/7zxxAAZFDN50pBmnFDKY5VBm8mw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6b:b2:4f:af:e4:ac:47:f3:16:07:ee:10:81:d1:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef3c710006450cde74a419a7143298e55066f26c Validity Not Before: Feb 9 22:00:34 2026 GMT Not After : Feb 10 22:00:34 2026 GMT Subject: CN=4c5aabfa75fd646011736fdf3e0d7febe190e05a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:8b:a0:72:48:79:db:f5:f8:55:6f:1a:a9:2c: 9e:77:e0:66:0e:67:2c:ff:ec:0e:86:df:51:31:6a: 58:f8:1d:39:bd:78:6f:d3:c7:ac:8c:d4:72:4a:1c: 85:c0:58:69:57:65:5c:4e:83:90:bc:e0:1b:df:e8: 91:a7:69:f5:6a:c0:28:04:7f:12:e2:81:8d:a1:49: f2:45:f8:d5:57:c0:82:b4:3e:ad:8a:8f:07:94:49: 2b:5c:8a:83:7e:94:72:d3:2a:70:0d:28:88:38:e1: 63:6b:48:d4:52:14:80:5b:98:0d:10:8a:82:13:9d: 9a:ef:00:9b:1b:c5:78:2d:f9:52:fb:61:9b:36:99: 68:50:57:54:52:91:7b:14:5f:05:6c:80:cd:80:a0: 0c:c2:6f:67:c9:d7:9e:c2:41:66:77:ab:10:9c:33: 46:de:50:8c:06:52:e0:45:2c:26:36:25:47:2d:bc: 55:c7:91:89:a9:45:53:49:fe:86:06:4f:ca:e2:55: f5:2d:f1:e7:96:c9:54:cd:7f:57:3a:f3:05:a9:4f: a2:25:22:c5:58:aa:a3:04:20:bf:8d:d7:62:a7:ab: 22:d0:f6:1a:47:8f:e2:d2:41:36:23:5f:b7:97:2e: 32:af:4a:7d:19:49:ff:38:f1:ca:86:f2:18:01:4b: b0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:5A:AB:FA:75:FD:64:60:11:73:6F:DF:3E:0D:7F:EB:E1:90:E0:5A X509v3 Authority Key Identifier: keyid:EF:3C:71:00:06:45:0C:DE:74:A4:19:A7:14:32:98:E5:50:66:F2:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zxxAAZFDN50pBmnFDKY5VBm8mw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:f7:93:10:a8:a2:07:88:95:04:e9:52:dc:d6:8b:ce:e5:d5: c2:a7:42:40:4e:ba:c5:60:b1:97:51:b7:a6:8a:f3:ec:eb:b5: 1f:4a:4d:a0:08:89:7f:4a:56:ee:13:90:c6:cf:72:38:0b:43: ce:86:a9:25:26:03:39:c8:21:a4:37:41:3a:b8:ea:bb:8f:b1: 56:c7:23:c2:a5:cb:9d:c2:c3:17:75:e2:eb:15:4a:15:7f:67: c1:0a:53:2b:2e:9a:73:19:a4:68:8f:18:fb:79:fb:28:33:2b: 01:b3:f1:5f:41:63:2b:a2:b7:4f:f4:32:ba:08:14:a7:ea:c3: 65:43:a9:7a:68:cf:92:c3:43:b7:13:08:66:dc:f9:e2:bc:01: aa:65:54:50:d0:e7:27:c8:49:83:3c:74:98:40:91:26:c2:65: d1:3f:c3:87:6f:a4:a4:37:33:d6:e9:0e:f8:2c:e1:92:df:c9: b5:90:33:b4:bf:51:b2:1f:5b:25:a4:66:df:20:10:6d:2b:51: 94:c4:75:34:66:10:21:c5:97:28:0b:fa:cc:c2:25:af:4b:69: d8:5a:c8:96:92:88:69:25:8a:55:f2:a0:40:c5:76:40:2f:eb: 3e:16:55:8c:fd:aa:d6:ea:27:a0:18:29:20:fd:3c:14:9d:51: 7a:dd:74:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEa7JPr+SsR/MWB+4QgdFGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmM2M3MTAwMDY0NTBjZGU3NGE0MTlhNzE0MzI5OGU1NTA2 NmYyNmMwHhcNMjYwMjA5MjIwMDM0WhcNMjYwMjEwMjIwMDM0WjAzMTEwLwYDVQQD Eyg0YzVhYWJmYTc1ZmQ2NDYwMTE3MzZmZGYzZTBkN2ZlYmUxOTBlMDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA74ugckh52/X4VW8aqSyed+BmDmcs /+wOht9RMWpY+B05vXhv08esjNRyShyFwFhpV2VcToOQvOAb3+iRp2n1asAoBH8S 4oGNoUnyRfjVV8CCtD6tio8HlEkrXIqDfpRy0ypwDSiIOOFja0jUUhSAW5gNEIqC E52a7wCbG8V4LflS+2GbNploUFdUUpF7FF8FbIDNgKAMwm9nydeewkFmd6sQnDNG 3lCMBlLgRSwmNiVHLbxVx5GJqUVTSf6GBk/K4lX1LfHnlslUzX9XOvMFqU+iJSLF WKqjBCC/jddip6si0PYaR4/i0kE2I1+3ly4yr0p9GUn/OPHKhvIYAUuwcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFExaq/p1/WRgEXNv3z4Nf+vhkOBaMB8GA1UdIwQY MBaAFO88cQAGRQzedKQZpxQymOVQZvJsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3p4eEFBWkZETjUwcEJtbkZES1k1VkJtOG13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9lYjE2ODMtNzgzNS00M2Y5LTg5NDAt NGRiZDUyZDQ1NDEwLzEvN3p4eEFBWkZETjUwcEJtbkZES1k1VkJtOG13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9lYjE2ODMtNzgzNS00M2Y5LTg5NDAtNGRiZDUyZDQ1NDEw LzEvN3p4eEFBWkZETjUwcEJtbkZES1k1VkJtOG13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV/eTEKii B4iVBOlS3NaLzuXVwqdCQE66xWCxl1G3porz7Ou1H0pNoAiJf0pW7hOQxs9yOAtD zoapJSYDOcghpDdBOrjqu4+xVscjwqXLncLDF3Xi6xVKFX9nwQpTKy6acxmkaI8Y +3n7KDMrAbPxX0FjK6K3T/QyuggUp+rDZUOpemjPksNDtxMIZtz54rwBqmVUUNDn J8hJgzx0mECRJsJl0T/Dh2+kpDcz1ukO+Czhkt/JtZAztL9Rsh9bJaRm3yAQbStR lMR1NGYQIcWXKAv6zMIlr0tp2FrIlpKIaSWKVfKgQMV2QC/rPhZVjP2q1uonoBgp IP08FJ1Ret10bg== -----END CERTIFICATE-----Generated at Tue Feb 10 00:16:03 2026 by rpki-client