This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft File: 7b0rKHHAbl4h380BYDB1gWvRRIk.mft (raw, json) Hash identifier: e9NVCyWPTfn3/zgVnEF+wKKXLvcdH8vXIkBuas7NKXo= Subject key identifier: 9A:C7:F2:E9:D5:00:F1:5D:FB:59:A1:11:0D:A7:28:D1:E8:86:38:23 Authority key identifier: ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89 Certificate issuer: /CN=edbd2b2871c06e5e21dfcd01603075816bd14489 Certificate serial: 019BF53EE80A0843AE57DAD7E42EE01B51CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft Manifest number: 069E Signing time: Sun 25 Jan 2026 13:01:39 +0000 Manifest this update: Sun 25 Jan 2026 13:01:39 +0000 Manifest next update: Mon 26 Jan 2026 13:01:39 +0000 Files and hashes: 1: 7b0rKHHAbl4h380BYDB1gWvRRIk.crl (hash: fEZYK6DTzwZz0NEdOX+LY+Pp6Uq4qymKno2/94L7o24=) 2: QanxQFNXzm9WZ4FLagQm8rqjYVg.roa (hash: z/pk9haxpoiUwaj9wllu1rSy4e1+a+aVccYlUM/WIn8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:e8:0a:08:43:ae:57:da:d7:e4:2e:e0:1b:51:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edbd2b2871c06e5e21dfcd01603075816bd14489 Validity Not Before: Jan 25 13:01:39 2026 GMT Not After : Jan 26 13:01:39 2026 GMT Subject: CN=9ac7f2e9d500f15dfb59a1110da728d1e8863823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:57:fc:28:d1:c8:aa:1a:28:38:50:af:0a:7e: 32:39:aa:b1:4a:68:0f:d1:2d:ed:3e:64:34:44:18: 2d:45:f6:f2:e1:05:91:67:91:ce:de:67:7f:75:4d: da:6b:70:86:7d:6f:9b:52:8c:d1:07:eb:f0:70:2b: 7e:60:86:29:92:9b:08:92:e2:4e:16:3c:c2:de:60: e3:d7:11:42:bd:e9:8b:13:76:35:07:8d:8a:a8:27: 3c:f6:6f:6c:26:77:ae:24:8c:b1:bc:46:37:aa:9b: a8:fa:f8:83:2a:1b:5d:29:ff:12:39:33:bb:8f:6f: 80:a5:16:9f:b6:a1:c1:55:f1:f8:bc:1d:3e:64:93: f8:0b:39:8c:58:63:44:32:e7:b5:60:17:04:f4:34: 43:51:70:ab:7e:e8:7a:5f:52:4a:92:de:7a:bc:27: 02:76:5f:17:c2:a6:dc:a6:b6:c1:36:d1:6b:45:c8: 51:cd:a2:58:a8:15:f5:0c:aa:ea:49:f3:5b:ec:b5: 66:28:2d:c2:c2:35:cc:8e:9b:55:c8:99:d5:22:af: b7:08:65:a6:cb:67:05:a9:1a:40:b8:f8:16:96:e2: 9d:32:da:94:25:65:d7:05:2d:0a:25:58:e5:bf:e0: 26:b5:de:55:33:b0:75:8c:5f:10:4a:28:03:a3:60: 1d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C7:F2:E9:D5:00:F1:5D:FB:59:A1:11:0D:A7:28:D1:E8:86:38:23 X509v3 Authority Key Identifier: keyid:ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:72:b1:00:6b:8b:04:00:4f:0d:ce:d1:81:f1:42:9a:ce:bf: 0c:bb:3d:68:74:5c:7b:5d:0c:2e:3c:33:ef:1c:7f:c6:2a:b5: 51:16:83:c6:a0:4f:8d:e8:74:07:4c:e7:b3:27:0d:ea:aa:bf: 9a:41:38:26:97:d4:d6:24:ae:9f:12:3d:d0:36:a2:73:77:db: 8f:60:1e:17:de:dc:f1:ef:9c:49:c0:02:2e:d1:c0:e1:83:fa: 31:a1:03:03:51:ab:61:3e:92:51:75:22:2a:e1:8d:a6:82:1d: 3f:80:a3:36:2a:0f:38:64:39:9e:a1:67:54:06:e9:92:7f:78: 15:fe:dc:c5:1a:e5:d3:ed:d0:ef:23:bb:e3:c0:39:5c:1a:ce: fa:29:8f:0e:be:d8:2f:87:12:d8:43:d1:5c:de:93:d8:5b:42: bd:76:41:68:f6:e6:41:7b:d3:5a:63:57:dd:f7:13:41:18:96: 5d:ae:43:87:d5:8d:d0:f0:fd:e4:16:a6:3c:4f:15:3c:d5:65: 6c:04:7e:25:c1:05:90:a5:10:7a:3b:88:2e:4e:0a:bc:df:83: 13:35:09:63:dc:41:71:5e:f2:a2:22:f3:25:cf:8b:ea:8d:c1: bf:0e:7b:90:f3:a8:cb:74:4f:75:9a:bc:cf:8a:26:a3:e3:d6: 49:48:91:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PugKCEOuV9rX5C7gG1HPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkYmQyYjI4NzFjMDZlNWUyMWRmY2QwMTYwMzA3NTgxNmJk MTQ0ODkwHhcNMjYwMTI1MTMwMTM5WhcNMjYwMTI2MTMwMTM5WjAzMTEwLwYDVQQD Eyg5YWM3ZjJlOWQ1MDBmMTVkZmI1OWExMTEwZGE3MjhkMWU4ODYzODIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVf8KNHIqhooOFCvCn4yOaqxSmgP 0S3tPmQ0RBgtRfby4QWRZ5HO3md/dU3aa3CGfW+bUozRB+vwcCt+YIYpkpsIkuJO FjzC3mDj1xFCvemLE3Y1B42KqCc89m9sJneuJIyxvEY3qpuo+viDKhtdKf8SOTO7 j2+ApRaftqHBVfH4vB0+ZJP4CzmMWGNEMue1YBcE9DRDUXCrfuh6X1JKkt56vCcC dl8XwqbcprbBNtFrRchRzaJYqBX1DKrqSfNb7LVmKC3CwjXMjptVyJnVIq+3CGWm y2cFqRpAuPgWluKdMtqUJWXXBS0KJVjlv+Amtd5VM7B1jF8QSigDo2AdTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJrH8unVAPFd+1mhEQ2nKNHohjgjMB8GA1UdIwQY MBaAFO29KyhxwG5eId/NAWAwdYFr0USJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2IwcktISEFibDRoMzgwQllEQjFnV3ZSUklrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wZTRkZDMtOWRlNy00MzZlLWFiYTkt ZGU2YTljMDE3ZjdiLzEvN2IwcktISEFibDRoMzgwQllEQjFnV3ZSUklrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8wZTRkZDMtOWRlNy00MzZlLWFiYTktZGU2YTljMDE3Zjdi LzEvN2IwcktISEFibDRoMzgwQllEQjFnV3ZSUklrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABXKxAGuL BABPDc7RgfFCms6/DLs9aHRce10MLjwz7xx/xiq1URaDxqBPjeh0B0znsycN6qq/ mkE4JpfU1iSunxI90Daic3fbj2AeF97c8e+cScACLtHA4YP6MaEDA1GrYT6SUXUi KuGNpoIdP4CjNioPOGQ5nqFnVAbpkn94Ff7cxRrl0+3Q7yO748A5XBrO+imPDr7Y L4cS2EPRXN6T2FtCvXZBaPbmQXvTWmNX3fcTQRiWXa5Dh9WN0PD95BamPE8VPNVl bAR+JcEFkKUQejuILk4KvN+DEzUJY9xBcV7yoiLzJc+L6o3Bvw57kPOoy3RPdZq8 z4omo+PWSUiRxg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:01:22 2026 by rpki-client