This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft File: g7d8noEHbPS0zv7V7vIQf3UsNjA.mft (raw, json) Hash identifier: 3X/EoEnyoi2aw/YZlqXgybaowRcDUfgKf77sEOdiIK0= Subject key identifier: 1C:4B:0D:79:F1:F2:E6:20:9D:A6:EF:55:03:5B:E8:B4:91:84:B4:5D Authority key identifier: 83:B7:7C:9E:81:07:6C:F4:B4:CE:FE:D5:EE:F2:10:7F:75:2C:36:30 Certificate issuer: /CN=83b77c9e81076cf4b4cefed5eef2107f752c3630 Certificate serial: 019BF3BDDD5ECF8E3EC30F4F4CA104C0D24B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 06:01:05 +0000 Manifest this update: Sun 25 Jan 2026 06:01:05 +0000 Manifest next update: Mon 26 Jan 2026 06:01:05 +0000 Files and hashes: 1: GHGkwEVylqYxr15hWfLzxHp9MA0.roa (hash: 6MgKNZ/wr6UP8/R75FjFSF75c2qdb4J/GZr8B0Cgj+s=) 2: g7d8noEHbPS0zv7V7vIQf3UsNjA.crl (hash: 22ceypMK32HPab3cU2vXlMwL2r9LxkgKSPCE4npf7Dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.crl rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:bd:dd:5e:cf:8e:3e:c3:0f:4f:4c:a1:04:c0:d2:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83b77c9e81076cf4b4cefed5eef2107f752c3630 Validity Not Before: Jan 25 06:01:05 2026 GMT Not After : Jan 26 06:01:05 2026 GMT Subject: CN=1c4b0d79f1f2e6209da6ef55035be8b49184b45d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d3:bb:f0:c2:4e:89:14:a2:8e:92:43:53:84: a8:8a:7c:a9:ac:94:8f:b8:f8:cc:6c:42:27:c2:60: 11:f7:96:0b:7c:96:c4:aa:ac:02:0a:45:78:17:b9: 5f:34:f8:a1:a0:63:0e:ac:0d:9d:52:cd:f4:b9:50: d8:ce:f7:95:09:5b:56:42:3c:e8:8d:55:f4:f6:f0: ae:c7:d1:f3:6a:bc:bd:ae:dc:d9:4e:49:3f:15:f2: b5:94:f6:2d:06:99:03:74:4a:86:40:f5:fb:6c:35: 63:ff:23:97:60:ca:41:49:ab:f4:e8:e2:7b:4f:38: a5:e3:50:17:0b:27:08:9d:c0:53:1c:95:19:51:39: f2:e9:63:5b:5b:b2:10:5e:e2:7b:90:70:60:21:58: 1c:35:6b:3c:d6:6f:7a:6f:38:4e:e6:1b:ae:d2:c8: 27:92:ba:91:6c:9c:7b:2b:a4:f1:54:6b:b2:af:ce: 63:ad:bd:da:a9:d1:28:f2:10:64:0b:f9:d5:f7:40: 6b:43:8a:06:98:23:af:70:5b:aa:9d:27:13:e6:2b: 67:0b:0e:bb:31:ed:f1:12:f6:9a:8f:01:83:50:d4: 73:5f:b2:31:1c:8a:7d:b0:3e:9e:30:8a:13:db:f1: 59:14:a1:cf:36:22:52:68:91:00:6d:32:d2:6e:98: bb:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:4B:0D:79:F1:F2:E6:20:9D:A6:EF:55:03:5B:E8:B4:91:84:B4:5D X509v3 Authority Key Identifier: keyid:83:B7:7C:9E:81:07:6C:F4:B4:CE:FE:D5:EE:F2:10:7F:75:2C:36:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:bb:38:0d:ed:54:42:7c:36:14:36:ba:fd:27:ff:4d:38:94: 22:de:f3:eb:6b:b8:39:48:a8:2e:87:15:85:fc:93:4f:ab:17: 51:f6:72:f6:71:b4:29:c5:a0:e3:0c:6c:4f:b5:0c:57:e1:55: e0:ee:cd:4c:29:cc:65:b3:52:5b:12:8d:21:ef:cf:1b:a6:6c: 5b:f7:4c:75:92:5a:5f:4d:9d:35:ba:70:49:0f:ee:6d:46:99: 57:1e:76:2e:be:bf:c5:76:b5:67:6c:c9:65:4c:4b:13:26:bf: 46:3d:ad:be:c0:95:29:37:97:c0:c8:cb:5a:6a:e5:73:f2:e6: 55:63:db:36:55:d6:42:b9:b4:4c:05:ee:69:a6:88:98:77:5b: aa:d3:47:5a:a2:29:e1:3e:84:a2:c7:9a:e2:97:0e:78:35:d7: a3:da:6d:06:64:54:fb:82:9f:ca:3c:c5:c1:03:32:0b:90:18: bd:de:72:36:ec:3b:e7:12:2c:e4:9f:ef:d3:df:2e:84:e4:57: 31:57:ee:00:39:1f:26:53:aa:b3:31:84:b4:c2:27:d6:96:1e: f5:52:7e:3a:84:c1:91:89:98:7a:1e:91:14:59:69:b8:e2:9a: a5:30:03:fc:e8:d5:39:5a:51:44:bb:9d:3b:23:59:f9:71:60: 66:e7:e5:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzvd1ez44+ww9PTKEEwNJLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzYjc3YzllODEwNzZjZjRiNGNlZmVkNWVlZjIxMDdmNzUy YzM2MzAwHhcNMjYwMTI1MDYwMTA1WhcNMjYwMTI2MDYwMTA1WjAzMTEwLwYDVQQD EygxYzRiMGQ3OWYxZjJlNjIwOWRhNmVmNTUwMzViZThiNDkxODRiNDVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9O78MJOiRSijpJDU4SoinyprJSP uPjMbEInwmAR95YLfJbEqqwCCkV4F7lfNPihoGMOrA2dUs30uVDYzveVCVtWQjzo jVX09vCux9Hzary9rtzZTkk/FfK1lPYtBpkDdEqGQPX7bDVj/yOXYMpBSav06OJ7 Tzil41AXCycIncBTHJUZUTny6WNbW7IQXuJ7kHBgIVgcNWs81m96bzhO5huu0sgn krqRbJx7K6TxVGuyr85jrb3aqdEo8hBkC/nV90BrQ4oGmCOvcFuqnScT5itnCw67 Me3xEvaajwGDUNRzX7IxHIp9sD6eMIoT2/FZFKHPNiJSaJEAbTLSbpi7IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBxLDXnx8uYgnabvVQNb6LSRhLRdMB8GA1UdIwQY MBaAFIO3fJ6BB2z0tM7+1e7yEH91LDYwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzdkOG5vRUhiUFMwenY3Vjd2SVFmM1VzTmpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8zZGM0ZGQtODBiYi00ZGY1LWFmNTgt YjdhZGYwNGU0MjNkLzEvZzdkOG5vRUhiUFMwenY3Vjd2SVFmM1VzTmpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC8zZGM0ZGQtODBiYi00ZGY1LWFmNTgtYjdhZGYwNGU0MjNk LzEvZzdkOG5vRUhiUFMwenY3Vjd2SVFmM1VzTmpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALLs4De1U Qnw2FDa6/Sf/TTiUIt7z62u4OUioLocVhfyTT6sXUfZy9nG0KcWg4wxsT7UMV+FV 4O7NTCnMZbNSWxKNIe/PG6ZsW/dMdZJaX02dNbpwSQ/ubUaZVx52Lr6/xXa1Z2zJ ZUxLEya/Rj2tvsCVKTeXwMjLWmrlc/LmVWPbNlXWQrm0TAXuaaaImHdbqtNHWqIp 4T6Eosea4pcOeDXXo9ptBmRU+4KfyjzFwQMyC5AYvd5yNuw75xIs5J/v098uhORX MVfuADkfJlOqszGEtMIn1pYe9VJ+OoTBkYmYeh6RFFlpuOKapTAD/OjVOVpRRLud OyNZ+XFgZufl+A== -----END CERTIFICATE-----Generated at Sun Jan 25 16:21:12 2026 by rpki-client