This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft File: 17tVI2VJnAeu00tohPWy6TgOvuE.mft (raw, json) Hash identifier: a9cT2/mnbCqNkdMfKahJWz4Tz7r0Nfiy8dKxc7CSfqA= Subject key identifier: CF:C2:CC:86:27:7B:2F:59:F3:F1:B6:75:17:1D:22:1C:45:0C:EA:28 Authority key identifier: D7:BB:55:23:65:49:9C:07:AE:D3:4B:68:84:F5:B2:E9:38:0E:BE:E1 Certificate issuer: /CN=d7bb552365499c07aed34b6884f5b2e9380ebee1 Certificate serial: 019BF7D1D41B9A50848EBCD913C15398D517 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft Manifest number: 0ED3 Signing time: Mon 26 Jan 2026 01:01:22 +0000 Manifest this update: Mon 26 Jan 2026 01:01:22 +0000 Manifest next update: Tue 27 Jan 2026 01:01:22 +0000 Files and hashes: 1: 17tVI2VJnAeu00tohPWy6TgOvuE.crl (hash: dD6cgyfuB9PbD30wGOEKrgsyXuJRVn9DbwjD0gOgano=) 2: 7G0NCEWyAUUTld6dbhxspAdwKu8.roa (hash: x0W+qVErOolxMsYnIkgUBz4sjWMNnyVZEzok5cCvMGQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.crl rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d1:d4:1b:9a:50:84:8e:bc:d9:13:c1:53:98:d5:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7bb552365499c07aed34b6884f5b2e9380ebee1 Validity Not Before: Jan 26 01:01:22 2026 GMT Not After : Jan 27 01:01:22 2026 GMT Subject: CN=cfc2cc86277b2f59f3f1b675171d221c450cea28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:51:f2:5c:fb:9b:72:e7:f4:a3:fc:d1:af:49: ba:ee:9c:c6:74:ea:8e:d2:35:93:f1:61:31:9c:58: 30:e9:38:ad:37:04:82:68:7d:b2:5b:9e:bc:d4:1c: 93:37:25:9a:65:fa:db:2e:f1:f3:f1:ef:dc:61:3f: 80:67:36:b8:d5:22:9a:e7:9c:b8:5a:b1:b0:46:28: b3:0f:6c:3f:77:76:e6:66:2d:5f:86:ba:e1:e6:73: 2b:e5:87:a1:4f:b5:0f:cb:db:14:62:fd:59:58:b4: bb:95:f3:13:fe:fc:13:9c:fe:70:ef:9d:8d:d6:07: 8a:61:a1:5d:85:11:1d:29:c5:4f:41:59:c1:2b:ca: e9:27:04:a2:3a:e2:ae:04:fe:c7:2f:27:b8:08:d5: d6:4f:44:bb:45:8b:3a:d2:2d:64:a2:fe:ba:27:57: 82:6f:e9:a7:ab:a3:5e:c0:e9:44:81:5b:37:fe:18: 2f:6e:db:f9:9e:3f:52:00:ee:c1:f6:83:00:7a:aa: 8a:0d:09:80:62:4c:4f:2b:2f:7b:53:99:1f:cf:26: d1:d1:48:11:34:5c:b3:07:32:02:8d:17:76:c3:ba: f0:f7:61:af:47:37:04:ef:8a:90:86:92:4f:a2:46: 56:d7:7d:46:3d:a8:dc:e9:56:7c:50:2b:9a:7e:95: 54:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C2:CC:86:27:7B:2F:59:F3:F1:B6:75:17:1D:22:1C:45:0C:EA:28 X509v3 Authority Key Identifier: keyid:D7:BB:55:23:65:49:9C:07:AE:D3:4B:68:84:F5:B2:E9:38:0E:BE:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:e0:2d:e3:6c:e9:98:6b:32:c4:82:19:a0:58:7a:db:cd:a6: bd:13:95:d5:46:28:13:22:6e:93:a6:31:32:c0:25:af:1c:4b: 57:7e:0c:18:9a:0f:2a:be:72:df:bb:6f:1d:40:3e:ae:cb:43: b9:c6:ed:6a:da:76:7a:60:00:25:eb:33:ab:b7:b3:f1:b3:4b: 86:4e:ed:45:3d:e4:80:b6:d0:40:ce:45:c3:4c:52:46:74:d8: d9:02:a8:9f:ec:2d:27:5e:b9:c6:3a:68:30:b3:79:f0:bf:35: 63:8e:0f:58:3f:62:7f:44:15:a1:00:8e:d1:2d:92:4b:12:1e: 65:9c:29:c0:8b:d6:d1:23:6a:ed:fe:96:b4:c4:4a:97:41:62: 25:c5:5b:6d:b5:d1:b6:c7:e0:8e:65:6e:c9:32:7e:59:c7:27: 6d:e1:99:99:e3:61:3f:09:69:80:ab:3f:cc:4f:c3:37:eb:29: d0:13:9f:be:74:26:a4:89:4a:d8:1b:f2:5f:7c:e3:03:f9:bf: 41:f5:26:b5:24:a6:91:40:3f:ce:c8:8d:36:55:23:9a:d5:3f: c4:c9:6a:4e:f9:1b:b8:aa:e7:b1:80:9c:a7:35:34:70:cd:19: 28:f0:36:d4:5d:38:76:57:55:3b:48:b2:68:96:8a:3e:83:16: 72:e7:ee:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30dQbmlCEjrzZE8FTmNUXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3YmI1NTIzNjU0OTljMDdhZWQzNGI2ODg0ZjViMmU5Mzgw ZWJlZTEwHhcNMjYwMTI2MDEwMTIyWhcNMjYwMTI3MDEwMTIyWjAzMTEwLwYDVQQD EyhjZmMyY2M4NjI3N2IyZjU5ZjNmMWI2NzUxNzFkMjIxYzQ1MGNlYTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FHyXPubcuf0o/zRr0m67pzGdOqO 0jWT8WExnFgw6TitNwSCaH2yW5681ByTNyWaZfrbLvHz8e/cYT+AZza41SKa55y4 WrGwRiizD2w/d3bmZi1fhrrh5nMr5YehT7UPy9sUYv1ZWLS7lfMT/vwTnP5w752N 1geKYaFdhREdKcVPQVnBK8rpJwSiOuKuBP7HLye4CNXWT0S7RYs60i1kov66J1eC b+mnq6NewOlEgVs3/hgvbtv5nj9SAO7B9oMAeqqKDQmAYkxPKy97U5kfzybR0UgR NFyzBzICjRd2w7rw92GvRzcE74qQhpJPokZW131GPajc6VZ8UCuafpVUGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM/CzIYney9Z8/G2dRcdIhxFDOooMB8GA1UdIwQY MBaAFNe7VSNlSZwHrtNLaIT1suk4Dr7hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTd0VkkyVkpuQWV1MDB0b2hQV3k2VGdPdnVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82ZTY3MjgtZmYwNS00OTQ2LWIwOGUt M2ViZDQ1NWFjMmFlLzEvMTd0VkkyVkpuQWV1MDB0b2hQV3k2VGdPdnVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC82ZTY3MjgtZmYwNS00OTQ2LWIwOGUtM2ViZDQ1NWFjMmFl LzEvMTd0VkkyVkpuQWV1MDB0b2hQV3k2VGdPdnVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeuAt42zp mGsyxIIZoFh6282mvROV1UYoEyJuk6YxMsAlrxxLV34MGJoPKr5y37tvHUA+rstD ucbtatp2emAAJeszq7ez8bNLhk7tRT3kgLbQQM5Fw0xSRnTY2QKon+wtJ165xjpo MLN58L81Y44PWD9if0QVoQCO0S2SSxIeZZwpwIvW0SNq7f6WtMRKl0FiJcVbbbXR tsfgjmVuyTJ+WccnbeGZmeNhPwlpgKs/zE/DN+sp0BOfvnQmpIlK2BvyX3zjA/m/ QfUmtSSmkUA/zsiNNlUjmtU/xMlqTvkbuKrnsYCcpzU0cM0ZKPA21F04dldVO0iy aJaKPoMWcufu8Q== -----END CERTIFICATE-----Generated at Mon Jan 26 03:32:53 2026 by rpki-client