This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft File: C7PnOqi38K872EAFctrnKw1G9Vw.mft (raw, json) Hash identifier: tpsf/q0xXE5LDgVfglCmSXEhoY4fl4ne1Tz8VVZNU1E= Subject key identifier: B7:7D:FA:9B:53:F4:3B:B1:3D:E4:3F:8C:19:F3:7A:9A:97:F0:A5:D8 Authority key identifier: 0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C Certificate issuer: /CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c Certificate serial: 019BF2E2BBDAFE5090F53F9BC23C666DE120 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft Manifest number: 0CBC Signing time: Sun 25 Jan 2026 02:01:44 +0000 Manifest this update: Sun 25 Jan 2026 02:01:44 +0000 Manifest next update: Mon 26 Jan 2026 02:01:44 +0000 Files and hashes: 1: 4oHL96070XVJFK5YR2z3SGTLdMY.roa (hash: FF1916bNfm13YDHdzfWvKY2B8uJg3LA5NBIqV3b8KEA=) 2: 7ZWwgnvwU4U_1-WB90W9zaIeApk.roa (hash: pXdrhZt6u9TZRpK/zMCuOmrnZo7nb4SnqRLes1rkitE=) 3: C7PnOqi38K872EAFctrnKw1G9Vw.crl (hash: v7624ciwil1sNXpgcAWr6fh2d/vwn2myiGA1tQL3dYE=) 4: dGGdzraFBMqQuQOaaYdWRwXkWRo.roa (hash: 2J+i3mFaVsHOA07pasr4FZkQypfzyjabfUuePsjfpFk=) 5: mCPvVZ52cqu_7fQiYfxNWTgmIyU.roa (hash: MKIXaK5pXObdOC8zIpNfkiNlH80bR9ObWjRqGl0bxns=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.crl rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:e2:bb:da:fe:50:90:f5:3f:9b:c2:3c:66:6d:e1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c Validity Not Before: Jan 25 02:01:44 2026 GMT Not After : Jan 26 02:01:44 2026 GMT Subject: CN=b77dfa9b53f43bb13de43f8c19f37a9a97f0a5d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f8:12:d0:ae:25:01:85:e1:a0:61:90:c7:b4: d6:79:06:36:0a:72:9e:cd:9d:39:78:9c:5e:5b:33: 7c:df:cf:f7:0d:d3:23:60:73:3f:bd:4f:4d:34:b6: c7:2e:35:dc:11:49:c4:14:a1:1f:04:ba:3f:6b:d7: 83:9b:ef:93:29:c2:d9:df:a7:7f:35:40:c8:a2:f1: 14:49:a1:20:df:8b:a2:c6:15:4f:cb:8c:d3:d7:46: 41:66:e3:af:10:b8:60:d3:34:ca:b8:85:d5:90:45: 03:cf:4c:ae:18:7f:6b:d5:cf:80:f0:52:0d:e0:65: f3:f2:4e:b2:ce:c9:76:5b:2d:e2:f5:9f:d6:25:3a: 25:38:0f:cf:c5:08:8c:b4:2e:87:25:03:05:14:99: 1b:f0:ac:f7:2a:13:b7:59:66:d8:b7:1f:67:12:b1: 22:86:9c:3a:8d:28:27:18:e1:52:60:cb:6e:f1:69: ab:aa:a3:bf:c6:fd:96:0b:c7:1b:48:4e:1f:c5:2c: e3:61:f4:e2:44:18:64:8c:47:79:40:09:7a:66:5e: 02:e0:b1:c2:53:43:af:12:ba:93:e5:30:e2:4d:1f: f9:09:26:fa:6e:9f:6a:9f:50:c0:31:a0:59:67:b5: 20:00:c3:20:4a:6c:06:c2:1d:ca:b7:91:d9:75:bb: 75:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:7D:FA:9B:53:F4:3B:B1:3D:E4:3F:8C:19:F3:7A:9A:97:F0:A5:D8 X509v3 Authority Key Identifier: keyid:0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:f9:10:90:91:ac:08:aa:26:36:d2:e3:dc:03:0f:e7:c5:63: 98:1f:b8:60:98:23:ac:e3:03:0f:a0:67:5e:dc:e4:69:0c:38: d5:f0:78:93:5b:fa:21:cf:08:5d:16:00:71:6e:e5:4c:ac:f1: 4c:be:06:41:69:c2:bf:34:45:50:55:c4:a7:87:b5:f7:9d:60: d9:ef:64:8b:df:28:f2:2a:1c:b1:2f:ca:35:03:d7:53:5c:5a: 71:56:a7:50:f9:a0:b7:43:a2:e2:b8:50:a8:34:77:61:92:9f: 77:f5:01:e4:c1:84:eb:86:6f:66:ad:d6:c3:bb:60:9f:82:77: bd:c1:43:9f:13:25:80:31:a5:92:d0:9a:5b:f6:45:bd:d3:48: e5:69:c6:b8:80:e6:59:7a:57:f3:b1:b1:b5:4a:7f:5d:c1:7f: e3:fb:b7:c4:42:c7:08:76:28:78:07:13:9b:42:29:b6:32:c4: 05:d3:4b:82:fc:eb:05:e3:05:8f:b1:7a:c5:42:85:a7:30:b3: e5:e8:2c:e3:d8:1e:f2:5c:2b:5a:75:c2:3c:2e:75:7f:af:31: 37:1b:47:96:ca:b5:dd:f6:fc:9d:c0:92:f9:4c:f4:32:b4:94: cc:34:97:96:bd:8e:82:00:56:e5:77:63:3b:c3:9b:e5:c8:08: bb:cd:8f:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvy4rva/lCQ9T+bwjxmbeEgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiYjNlNzNhYThiN2YwYWYzYmQ4NDAwNTcyZGFlNzJiMGQ0 NmY1NWMwHhcNMjYwMTI1MDIwMTQ0WhcNMjYwMTI2MDIwMTQ0WjAzMTEwLwYDVQQD EyhiNzdkZmE5YjUzZjQzYmIxM2RlNDNmOGMxOWYzN2E5YTk3ZjBhNWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfgS0K4lAYXhoGGQx7TWeQY2CnKe zZ05eJxeWzN838/3DdMjYHM/vU9NNLbHLjXcEUnEFKEfBLo/a9eDm++TKcLZ36d/ NUDIovEUSaEg34uixhVPy4zT10ZBZuOvELhg0zTKuIXVkEUDz0yuGH9r1c+A8FIN 4GXz8k6yzsl2Wy3i9Z/WJTolOA/PxQiMtC6HJQMFFJkb8Kz3KhO3WWbYtx9nErEi hpw6jSgnGOFSYMtu8WmrqqO/xv2WC8cbSE4fxSzjYfTiRBhkjEd5QAl6Zl4C4LHC U0OvErqT5TDiTR/5CSb6bp9qn1DAMaBZZ7UgAMMgSmwGwh3Kt5HZdbt1JQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLd9+ptT9DuxPeQ/jBnzepqX8KXYMB8GA1UdIwQY MBaAFAuz5zqot/CvO9hABXLa5ysNRvVcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzdQbk9xaTM4Szg3MkVBRmN0cm5LdzFHOVZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9lZmY2N2YtNDBhOS00Nzc1LWE5YzIt YWQyOGZhOTY2YjUxLzEvQzdQbk9xaTM4Szg3MkVBRmN0cm5LdzFHOVZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9lZmY2N2YtNDBhOS00Nzc1LWE5YzItYWQyOGZhOTY2YjUx LzEvQzdQbk9xaTM4Szg3MkVBRmN0cm5LdzFHOVZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArvkQkJGs CKomNtLj3AMP58VjmB+4YJgjrOMDD6BnXtzkaQw41fB4k1v6Ic8IXRYAcW7lTKzx TL4GQWnCvzRFUFXEp4e1951g2e9ki98o8iocsS/KNQPXU1xacVanUPmgt0Oi4rhQ qDR3YZKfd/UB5MGE64ZvZq3Ww7tgn4J3vcFDnxMlgDGlktCaW/ZFvdNI5WnGuIDm WXpX87GxtUp/XcF/4/u3xELHCHYoeAcTm0IptjLEBdNLgvzrBeMFj7F6xUKFpzCz 5egs49ge8lwrWnXCPC51f68xNxtHlsq13fb8ncCS+Uz0MrSUzDSXlr2OggBW5Xdj O8Ob5cgIu82P4Q== -----END CERTIFICATE-----Generated at Sun Jan 25 11:46:27 2026 by rpki-client