This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft File: 7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft (raw, json) Hash identifier: ntXwDNKFYQ6SQ50QDUKl1wnk99IeIWQok/pupVGFFAo= Subject key identifier: 23:F8:84:FC:62:5B:0A:67:4C:D3:77:A6:BF:92:F2:74:4C:FF:2E:69 Authority key identifier: ED:90:0A:55:51:8B:67:9E:DC:78:FA:A9:88:3E:C6:E6:03:5A:E7:1C Certificate issuer: /CN=ed900a55518b679edc78faa9883ec6e6035ae71c Certificate serial: 019BF6BF09D95050E18A33D59BF57C8596F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft Manifest number: 05A7 Signing time: Sun 25 Jan 2026 20:01:13 +0000 Manifest this update: Sun 25 Jan 2026 20:01:13 +0000 Manifest next update: Mon 26 Jan 2026 20:01:13 +0000 Files and hashes: 1: 7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl (hash: 7bPTwctmu5Hz3TmnNfAVbV/9VV+q7BxfRLD/4TuUsBs=) 2: DBz0WhaRA9wNrK9K1etEW30ajBM.roa (hash: TIvrus04yBKxsgpsBLzS8XeHM34FR+aAzVV81lSqNzA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:09:d9:50:50:e1:8a:33:d5:9b:f5:7c:85:96:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed900a55518b679edc78faa9883ec6e6035ae71c Validity Not Before: Jan 25 20:01:13 2026 GMT Not After : Jan 26 20:01:13 2026 GMT Subject: CN=23f884fc625b0a674cd377a6bf92f2744cff2e69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bb:1d:27:18:df:f0:21:12:68:e0:4d:11:87: ec:78:c2:08:09:1a:da:7b:ca:fd:33:8b:0f:04:e8: 7f:1e:c3:6e:83:3d:4c:10:ba:72:b9:a3:6f:bc:5a: ad:91:70:09:ca:2d:b4:ea:4d:eb:e5:50:75:31:a5: d8:91:3c:f4:5c:32:16:78:07:f7:b3:b5:96:55:59: f8:0f:e8:61:a2:7a:04:20:c9:1d:a8:35:85:f4:cd: 18:cb:13:96:6a:25:cb:92:18:f8:55:2b:0f:ba:9c: f3:4f:eb:69:8b:a2:ad:77:12:b2:07:b9:a0:e5:96: 37:72:21:5f:bb:b1:d3:9f:3c:40:cb:c7:31:16:26: 09:f2:21:09:97:65:ad:5f:27:f1:ab:e3:90:14:7e: 71:6e:8e:b9:67:78:66:e7:16:3c:d2:0a:7d:fc:87: a7:2c:78:1a:f7:78:58:f1:58:eb:af:5b:d0:40:fd: ad:14:5d:14:d4:17:ad:4c:86:a2:2e:6b:e0:e3:51: 76:9d:0b:f6:b6:ba:4f:6c:0b:e7:95:e1:4b:34:a1: 11:be:cf:f4:88:62:2a:0c:2c:35:d2:44:b2:93:19: b6:ca:36:de:97:8f:08:ab:ea:e3:21:6c:3d:8c:93: 20:0f:9f:10:c4:cd:12:7d:60:97:33:73:5c:f3:2e: dc:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:F8:84:FC:62:5B:0A:67:4C:D3:77:A6:BF:92:F2:74:4C:FF:2E:69 X509v3 Authority Key Identifier: keyid:ED:90:0A:55:51:8B:67:9E:DC:78:FA:A9:88:3E:C6:E6:03:5A:E7:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:85:ed:ff:ec:eb:75:ab:ad:e7:c4:82:34:4b:39:be:3f:2b: f5:be:a4:fb:17:23:d7:ac:e9:9c:e9:82:e5:28:2d:72:6d:b4: af:eb:f3:e9:3b:e1:82:28:8a:d4:8b:77:fd:de:c2:06:da:0f: ec:22:17:d2:7b:53:f6:a7:e6:55:76:5e:df:41:22:96:34:b7: 2b:4c:7e:e2:cc:83:09:47:1b:4f:43:34:0a:ba:33:47:80:73: 6a:7c:e7:83:23:35:c9:f5:df:9f:1b:9a:6f:99:9d:b8:1c:fd: f8:eb:34:0a:5c:d5:f9:ba:14:24:a2:56:ee:a8:27:fa:aa:76: 53:f0:29:c3:20:74:be:56:29:54:f6:52:d1:b9:28:79:95:8a: a5:f9:74:4c:eb:4f:18:f5:c2:5c:41:03:9b:7d:0e:4a:f3:d2: 62:b5:45:e8:82:0f:a5:9c:c9:0a:55:88:ea:8e:ea:ca:fa:0f: 9f:e9:13:17:80:00:1e:4a:97:3a:5e:cf:5e:74:3c:3b:8a:a1: 89:38:36:0f:e2:cf:55:ca:df:23:f2:e3:8b:a5:bb:07:e8:d5: a0:ad:c0:92:13:07:ad:11:93:b2:13:cf:ae:e1:ea:6b:6d:68: 41:cc:a9:91:02:5d:56:d8:d3:34:aa:8e:29:08:4c:aa:e3:ea: 85:7b:3a:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vwnZUFDhijPVm/V8hZbyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkOTAwYTU1NTE4YjY3OWVkYzc4ZmFhOTg4M2VjNmU2MDM1 YWU3MWMwHhcNMjYwMTI1MjAwMTEzWhcNMjYwMTI2MjAwMTEzWjAzMTEwLwYDVQQD EygyM2Y4ODRmYzYyNWIwYTY3NGNkMzc3YTZiZjkyZjI3NDRjZmYyZTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybsdJxjf8CESaOBNEYfseMIICRra e8r9M4sPBOh/HsNugz1MELpyuaNvvFqtkXAJyi206k3r5VB1MaXYkTz0XDIWeAf3 s7WWVVn4D+hhonoEIMkdqDWF9M0YyxOWaiXLkhj4VSsPupzzT+tpi6KtdxKyB7mg 5ZY3ciFfu7HTnzxAy8cxFiYJ8iEJl2WtXyfxq+OQFH5xbo65Z3hm5xY80gp9/Ien LHga93hY8Vjrr1vQQP2tFF0U1BetTIaiLmvg41F2nQv2trpPbAvnleFLNKERvs/0 iGIqDCw10kSykxm2yjbel48Iq+rjIWw9jJMgD58QxM0SfWCXM3Nc8y7c8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCP4hPxiWwpnTNN3pr+S8nRM/y5pMB8GA1UdIwQY MBaAFO2QClVRi2ee3Hj6qYg+xuYDWuccMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1pBS1ZWR0xaNTdjZVBxcGlEN0c1Z05hNXh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mYmZhY2MtYTRmMC00YmRiLWFiYmIt MGY3MzY2MWQ1ZjM1LzEvN1pBS1ZWR0xaNTdjZVBxcGlEN0c1Z05hNXh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9mYmZhY2MtYTRmMC00YmRiLWFiYmItMGY3MzY2MWQ1ZjM1 LzEvN1pBS1ZWR0xaNTdjZVBxcGlEN0c1Z05hNXh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQoXt/+zr daut58SCNEs5vj8r9b6k+xcj16zpnOmC5Sgtcm20r+vz6TvhgiiK1It3/d7CBtoP 7CIX0ntT9qfmVXZe30EiljS3K0x+4syDCUcbT0M0CrozR4BzanzngyM1yfXfnxua b5mduBz9+Os0ClzV+boUJKJW7qgn+qp2U/ApwyB0vlYpVPZS0bkoeZWKpfl0TOtP GPXCXEEDm30OSvPSYrVF6IIPpZzJClWI6o7qyvoPn+kTF4AAHkqXOl7PXnQ8O4qh iTg2D+LPVcrfI/Lji6W7B+jVoK3AkhMHrRGTshPPruHqa21oQcypkQJdVtjTNKqO KQhMquPqhXs6Hg== -----END CERTIFICATE-----Generated at Mon Jan 26 02:14:35 2026 by rpki-client