This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/21e032-073d-4068-ae45-c6613f9c14ca/1/tIWE7_oFHwy8OcMZFj5PIzhgSYI.mft File: tIWE7_oFHwy8OcMZFj5PIzhgSYI.mft (raw, json) Hash identifier: vep/WC/t2NzWlr6h4DePXpOxDPNUS0Us99uOGTGOfMc= Subject key identifier: C8:3D:FB:3A:A4:DE:7F:16:B9:7E:E6:EC:CF:81:2B:58:D9:E9:D7:54 Authority key identifier: B4:85:84:EF:FA:05:1F:0C:BC:39:C3:19:16:3E:4F:23:38:60:49:82 Certificate issuer: /CN=b48584effa051f0cbc39c319163e4f2338604982 Certificate serial: 019BF1CEF5B72594F174CD5CB3C3BA629D13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIWE7_oFHwy8OcMZFj5PIzhgSYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/21e032-073d-4068-ae45-c6613f9c14ca/1/tIWE7_oFHwy8OcMZFj5PIzhgSYI.mft Manifest number: 7E Signing time: Sat 24 Jan 2026 21:00:30 +0000 Manifest this update: Sat 24 Jan 2026 21:00:30 +0000 Manifest next update: Sun 25 Jan 2026 21:00:30 +0000 Files and hashes: 1: mTKfXNqZr-ethdBjOn6lFjS-PNs.roa (hash: HOGNlGeAoZ/b5RPWvVv+b+yxDspoiWHKwc8eGW2VV4w=) 2: tIWE7_oFHwy8OcMZFj5PIzhgSYI.crl (hash: Jgd1RNqeR1RIBTbZ9kC8aULVyDJB2KgHczspruBFnJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/21e032-073d-4068-ae45-c6613f9c14ca/1/tIWE7_oFHwy8OcMZFj5PIzhgSYI.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/21e032-073d-4068-ae45-c6613f9c14ca/1/tIWE7_oFHwy8OcMZFj5PIzhgSYI.mft rsync://rpki.ripe.net/repository/DEFAULT/tIWE7_oFHwy8OcMZFj5PIzhgSYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f1:ce:f5:b7:25:94:f1:74:cd:5c:b3:c3:ba:62:9d:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b48584effa051f0cbc39c319163e4f2338604982 Validity Not Before: Jan 24 21:00:30 2026 GMT Not After : Jan 25 21:00:30 2026 GMT Subject: CN=c83dfb3aa4de7f16b97ee6eccf812b58d9e9d754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:34:8b:c2:d2:ba:88:b7:05:07:d5:c8:56:5c: fe:43:ad:fc:27:c8:20:d4:c7:be:89:fa:d3:6b:fc: 35:05:9b:2a:a1:47:dc:4c:eb:c5:ef:ca:e4:34:14: 63:1c:5c:0d:8a:03:f8:02:24:6e:a0:84:24:1f:11: 82:2c:29:cf:03:e7:a3:36:04:0d:dd:1a:1c:58:61: f9:e4:c7:a2:fe:24:b1:24:07:d5:97:ba:f1:cf:25: 09:4e:1a:ab:db:72:09:4c:29:9b:ae:2a:49:0b:65: 88:eb:f8:bd:16:55:0c:86:92:a7:65:d7:28:12:87: a8:ee:02:89:b1:f2:e5:b2:ff:d2:08:e3:73:09:2d: 01:17:a9:2f:64:f6:fe:8e:91:68:ce:30:e7:c2:af: 6c:13:f3:ac:41:27:29:40:83:f5:0a:34:2a:c5:32: 0e:4d:14:f5:5e:66:e9:90:7e:69:6a:02:cd:ca:1b: 40:05:74:14:8b:54:8c:4a:a4:8c:cd:c3:00:41:fe: 34:c9:12:5e:ac:4e:7b:49:a9:c3:f3:18:7c:ed:73: b5:40:83:80:3a:d5:6b:1a:5f:3a:75:fb:58:41:bd: 2e:b1:84:90:6f:9e:b4:f6:1e:85:c0:1b:cc:4a:e1: 20:9b:ed:b1:e5:60:20:84:77:b2:66:13:90:e3:2c: 05:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:3D:FB:3A:A4:DE:7F:16:B9:7E:E6:EC:CF:81:2B:58:D9:E9:D7:54 X509v3 Authority Key Identifier: keyid:B4:85:84:EF:FA:05:1F:0C:BC:39:C3:19:16:3E:4F:23:38:60:49:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIWE7_oFHwy8OcMZFj5PIzhgSYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/21e032-073d-4068-ae45-c6613f9c14ca/1/tIWE7_oFHwy8OcMZFj5PIzhgSYI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/21e032-073d-4068-ae45-c6613f9c14ca/1/tIWE7_oFHwy8OcMZFj5PIzhgSYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:93:de:a4:1f:c9:da:c8:06:b8:60:b1:f1:21:68:0b:b1:b6: 8d:e2:01:ec:5d:15:83:17:24:d3:a4:1d:ed:6c:78:04:d0:dc: 5c:5f:ee:22:81:6c:22:5c:41:bf:dc:84:e7:f2:86:1f:30:ca: 89:a7:b0:32:86:37:d7:7d:6f:2f:cd:22:fd:d2:ac:c8:b8:b3: 30:59:07:44:4a:c3:20:dc:66:a0:89:16:1d:6a:af:a9:87:5d: 24:9e:75:d4:c5:04:1b:5c:af:98:2e:13:a8:a6:aa:db:ae:49: 82:44:ac:18:26:6e:1c:ea:4a:17:14:e9:5a:38:a4:df:9a:72: 8d:50:a8:d6:b2:69:05:c2:a0:15:7f:73:1a:67:d7:f5:75:6d: c0:92:11:a6:c1:a7:9f:98:6b:0e:de:8c:13:9a:09:6c:3f:26: ea:f7:71:05:7d:29:19:f7:a4:66:f1:61:b6:1d:71:26:94:5c: 9c:66:da:12:f7:e8:65:62:9c:33:6d:d8:76:a8:85:40:3b:29: a1:9d:83:0a:c8:7e:ae:81:af:76:c3:cb:2d:60:4b:62:96:6a: 1c:70:48:98:e3:58:9b:23:83:fe:b2:4e:7c:9a:82:ca:93:0b: 63:55:62:44:78:c3:b1:15:2e:8d:d6:4b:64:d6:b4:6b:7c:ad: 25:65:a2:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvxzvW3JZTxdM1cs8O6Yp0TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ODU4NGVmZmEwNTFmMGNiYzM5YzMxOTE2M2U0ZjIzMzg2 MDQ5ODIwHhcNMjYwMTI0MjEwMDMwWhcNMjYwMTI1MjEwMDMwWjAzMTEwLwYDVQQD EyhjODNkZmIzYWE0ZGU3ZjE2Yjk3ZWU2ZWNjZjgxMmI1OGQ5ZTlkNzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jSLwtK6iLcFB9XIVlz+Q638J8gg 1Me+ifrTa/w1BZsqoUfcTOvF78rkNBRjHFwNigP4AiRuoIQkHxGCLCnPA+ejNgQN 3RocWGH55Mei/iSxJAfVl7rxzyUJThqr23IJTCmbripJC2WI6/i9FlUMhpKnZdco Eoeo7gKJsfLlsv/SCONzCS0BF6kvZPb+jpFozjDnwq9sE/OsQScpQIP1CjQqxTIO TRT1XmbpkH5pagLNyhtABXQUi1SMSqSMzcMAQf40yRJerE57SanD8xh87XO1QIOA OtVrGl86dftYQb0usYSQb5609h6FwBvMSuEgm+2x5WAghHeyZhOQ4ywFwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMg9+zqk3n8WuX7m7M+BK1jZ6ddUMB8GA1UdIwQY MBaAFLSFhO/6BR8MvDnDGRY+TyM4YEmCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdElXRTdfb0ZId3k4T2NNWkZqNVBJemhnU1lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8yMWUwMzItMDczZC00MDY4LWFlNDUt YzY2MTNmOWMxNGNhLzEvdElXRTdfb0ZId3k4T2NNWkZqNVBJemhnU1lJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8yMWUwMzItMDczZC00MDY4LWFlNDUtYzY2MTNmOWMxNGNh LzEvdElXRTdfb0ZId3k4T2NNWkZqNVBJemhnU1lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPpPepB/J 2sgGuGCx8SFoC7G2jeIB7F0Vgxck06Qd7Wx4BNDcXF/uIoFsIlxBv9yE5/KGHzDK iaewMoY3131vL80i/dKsyLizMFkHRErDINxmoIkWHWqvqYddJJ511MUEG1yvmC4T qKaq265JgkSsGCZuHOpKFxTpWjik35pyjVCo1rJpBcKgFX9zGmfX9XVtwJIRpsGn n5hrDt6ME5oJbD8m6vdxBX0pGfekZvFhth1xJpRcnGbaEvfoZWKcM23YdqiFQDsp oZ2DCsh+roGvdsPLLWBLYpZqHHBImONYmyOD/rJOfJqCypMLY1ViRHjDsRUujdZL ZNa0a3ytJWWiXA== -----END CERTIFICATE-----Generated at Sun Jan 25 05:55:00 2026 by rpki-client