This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft File: 7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft (raw, json) Hash identifier: sbjZrFRh2xATQgWJ9nWlDOaAT1nBBtSfw54V4hnIm6Y= Subject key identifier: 64:6B:05:39:C2:4D:EE:77:01:A7:21:65:56:CB:23:08:2E:A5:C4:73 Authority key identifier: EC:CF:DA:EE:1E:9E:AB:D8:02:37:60:29:61:BA:A2:5A:BC:69:CD:64 Certificate issuer: /CN=eccfdaee1e9eabd80237602961baa25abc69cd64 Certificate serial: 019BF6F596428AE7CDCA445DC28379DBCCF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 21:00:48 +0000 Manifest this update: Sun 25 Jan 2026 21:00:48 +0000 Manifest next update: Mon 26 Jan 2026 21:00:48 +0000 Files and hashes: 1: 7M_a7h6eq9gCN2ApYbqiWrxpzWQ.crl (hash: fNwT6vUmLVJTZwiMLsJ6H3eNTpne08tUx5iCuCTgKlM=) 2: ice_LDnA6TShJ0tbBNY5iT0MS20.roa (hash: Ne/xr7FxI4PoMf09Z/160yY/95SJ/bfXY5TJhx10TCU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:96:42:8a:e7:cd:ca:44:5d:c2:83:79:db:cc:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eccfdaee1e9eabd80237602961baa25abc69cd64 Validity Not Before: Jan 25 21:00:48 2026 GMT Not After : Jan 26 21:00:48 2026 GMT Subject: CN=646b0539c24dee7701a7216556cb23082ea5c473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f6:79:31:12:a6:6e:34:5a:12:5d:25:22:8e: f4:b7:54:bb:17:a8:fb:f5:24:06:94:33:26:e4:a6: 40:2d:09:8b:a6:b3:86:10:1e:80:a9:af:55:2a:1b: 0c:71:de:e7:5a:4d:bb:b8:08:5c:19:87:ea:24:43: 41:3f:55:37:d2:2d:09:30:e4:f3:41:ee:0f:b6:cd: f5:df:d6:a2:25:43:e7:b1:e2:7a:f2:37:31:ae:2f: 6b:3b:80:0d:52:12:f6:86:1c:3b:f1:58:b9:b8:f7: 43:67:cd:6e:c7:e0:f7:32:8a:e9:d0:1a:23:85:43: f0:b1:ce:0a:67:d1:d2:d9:19:48:78:d7:9d:50:6b: 0b:b1:18:8f:81:97:f9:4e:03:31:1e:26:56:b6:a1: 03:55:77:79:fc:06:5c:e7:ba:d5:76:7a:55:19:26: d9:6a:b8:19:7a:24:8f:c9:8a:77:7e:2f:a1:ba:58: ec:5d:59:10:ce:32:a4:f7:f7:f4:5a:3d:98:5e:a0: 7a:9b:d1:67:e4:b0:76:41:8d:30:bd:81:be:db:aa: a4:d9:e7:19:71:55:d1:57:4d:58:d7:73:d0:b8:58: 98:60:bb:f6:e2:58:af:5a:13:2b:ae:1d:b5:f0:1c: 58:b8:d6:c6:67:d8:11:5c:90:0d:14:14:73:34:d2: 33:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:6B:05:39:C2:4D:EE:77:01:A7:21:65:56:CB:23:08:2E:A5:C4:73 X509v3 Authority Key Identifier: keyid:EC:CF:DA:EE:1E:9E:AB:D8:02:37:60:29:61:BA:A2:5A:BC:69:CD:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:30:d6:94:4c:3a:06:7e:d4:08:11:3e:41:0e:1e:fc:e6:bd: 78:81:9e:7d:5e:fd:53:94:61:1c:a5:c0:f9:d3:ff:a4:64:2d: 70:48:a2:56:0a:b9:88:dd:21:33:18:65:76:00:76:ff:8e:b6: 98:a0:2d:35:f0:f2:e6:96:66:7d:59:a2:91:98:c6:3d:7b:7f: f0:5a:3a:04:d2:f5:63:7d:84:6a:50:5a:95:eb:e7:58:28:57: 6c:f8:ea:b5:d8:94:42:fc:6f:c7:e9:2d:5b:27:2b:21:9f:ee: 9b:f5:27:67:59:ce:e6:95:1f:a1:48:69:01:12:92:d1:b1:ae: 3d:a9:cd:30:30:33:e6:d7:bb:d4:6b:65:44:76:a3:86:33:02: 22:01:7a:ac:08:8b:b2:11:48:a7:9e:60:4b:5b:f7:8e:1c:53: 52:a9:fe:29:7a:e8:d1:73:5e:eb:71:10:dd:59:6e:3c:b4:7f: 06:0d:0f:7a:23:67:bc:0c:eb:28:eb:65:96:21:3b:18:ae:b9: a6:1a:31:88:78:b0:7c:bc:4a:15:e6:1b:a9:7d:05:be:06:a8: c8:c9:97:38:30:82:19:56:50:1d:34:f1:9e:f8:b4:d5:b7:3c: ca:6f:b6:6c:d8:96:3b:92:17:8e:0a:26:e5:a4:11:b3:75:57: 40:b4:f3:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29ZZCiufNykRdwoN528z5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjY2ZkYWVlMWU5ZWFiZDgwMjM3NjAyOTYxYmFhMjVhYmM2 OWNkNjQwHhcNMjYwMTI1MjEwMDQ4WhcNMjYwMTI2MjEwMDQ4WjAzMTEwLwYDVQQD Eyg2NDZiMDUzOWMyNGRlZTc3MDFhNzIxNjU1NmNiMjMwODJlYTVjNDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvZ5MRKmbjRaEl0lIo70t1S7F6j7 9SQGlDMm5KZALQmLprOGEB6Aqa9VKhsMcd7nWk27uAhcGYfqJENBP1U30i0JMOTz Qe4Pts3139aiJUPnseJ68jcxri9rO4ANUhL2hhw78Vi5uPdDZ81ux+D3Morp0Boj hUPwsc4KZ9HS2RlIeNedUGsLsRiPgZf5TgMxHiZWtqEDVXd5/AZc57rVdnpVGSbZ argZeiSPyYp3fi+huljsXVkQzjKk9/f0Wj2YXqB6m9Fn5LB2QY0wvYG+26qk2ecZ cVXRV01Y13PQuFiYYLv24livWhMrrh218BxYuNbGZ9gRXJANFBRzNNIzXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGRrBTnCTe53AachZVbLIwgupcRzMB8GA1UdIwQY MBaAFOzP2u4enqvYAjdgKWG6olq8ac1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN01fYTdoNmVxOWdDTjJBcFlicWlXcnhweldRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9jMmE1YmQtNWYyOC00NmY5LWE0MTQt M2YxYzE1MjNhMTIzLzEvN01fYTdoNmVxOWdDTjJBcFlicWlXcnhweldRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9jMmE1YmQtNWYyOC00NmY5LWE0MTQtM2YxYzE1MjNhMTIz LzEvN01fYTdoNmVxOWdDTjJBcFlicWlXcnhweldRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbDDWlEw6 Bn7UCBE+QQ4e/Oa9eIGefV79U5RhHKXA+dP/pGQtcEiiVgq5iN0hMxhldgB2/462 mKAtNfDy5pZmfVmikZjGPXt/8Fo6BNL1Y32EalBalevnWChXbPjqtdiUQvxvx+kt WycrIZ/um/UnZ1nO5pUfoUhpARKS0bGuPanNMDAz5te71GtlRHajhjMCIgF6rAiL shFIp55gS1v3jhxTUqn+KXro0XNe63EQ3VluPLR/Bg0PeiNnvAzrKOtlliE7GK65 phoxiHiwfLxKFeYbqX0FvgaoyMmXODCCGVZQHTTxnvi01bc8ym+2bNiWO5IXjgom 5aQRs3VXQLTzkQ== -----END CERTIFICATE-----Generated at Mon Jan 26 03:32:49 2026 by rpki-client