This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft File: 7hzOkB5ft8kvCakVz25lb2k7oQA.mft (raw, json) Hash identifier: Bj5bLq6A8X68JS0nx6aq4ismlqF/ppVP44vd33aG5Nw= Subject key identifier: 6C:4C:FA:4A:B3:15:86:42:55:C9:63:24:CA:03:69:7B:8A:B9:64:DC Authority key identifier: EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00 Certificate issuer: /CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100 Certificate serial: 019BF5AC6938738312F00C52FAC6AD63DFD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft Manifest number: 15D1 Signing time: Sun 25 Jan 2026 15:01:15 +0000 Manifest this update: Sun 25 Jan 2026 15:01:15 +0000 Manifest next update: Mon 26 Jan 2026 15:01:15 +0000 Files and hashes: 1: 5wBvYH18mnYKydx8H19r86HtE0Q.roa (hash: VUGd6jaGsjCSaa2yqTqiiqwge8OaZ7jM3DegnmT+3+Q=) 2: 5zuquzvoPSv-HJr2QhNMX3OYMgA.roa (hash: bcYgeaY8QXTzK+9kyXA0UgosAczZtORy6M/Ez+Fizn8=) 3: 7hzOkB5ft8kvCakVz25lb2k7oQA.crl (hash: NpLVMR6C7/9Imyeh+/Vh+5XDRulgES87gz+5njm7XXs=) 4: kgnu5UR9Ocl-BiVCaC6wT07shm0.roa (hash: FpIRHnwVZMdLfpDIL1lnVTw2bZIMLJe4K4qr7pxMTCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:69:38:73:83:12:f0:0c:52:fa:c6:ad:63:df:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100 Validity Not Before: Jan 25 15:01:15 2026 GMT Not After : Jan 26 15:01:15 2026 GMT Subject: CN=6c4cfa4ab315864255c96324ca03697b8ab964dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cf:39:fe:8d:91:6d:4d:ca:35:b6:a4:93:54: 26:54:df:9c:2b:34:2d:94:25:98:55:5f:a7:9a:d9: ca:3c:f9:21:23:70:2e:08:e2:a0:65:fe:02:33:3d: f8:20:a2:5f:ad:39:f5:96:f5:42:23:60:7c:be:6a: c8:d0:c8:e9:9a:d8:ec:fc:7e:c7:b9:c9:fb:5e:c1: 50:ab:52:0e:62:4e:43:ab:83:4d:f9:82:cf:df:e5: 1d:c9:74:b6:3b:6c:82:b6:70:4c:f2:c1:01:e2:0c: c7:b6:29:66:13:51:89:7c:de:95:bf:b9:9c:13:cf: 82:10:85:9e:00:6b:5f:0b:c2:4d:09:95:8e:2f:77: 2f:1c:81:f7:f5:f8:a7:5a:d4:97:e3:97:a2:58:70: 59:7f:58:1b:e5:75:f2:e8:53:13:97:70:64:36:e5: 8e:b3:bc:41:1d:4d:7e:e5:b1:f0:18:80:76:7d:02: 2f:ed:fa:89:ef:a9:9e:53:e8:5b:d5:dc:b4:9f:f2: 37:a6:a2:ec:31:1c:ef:90:00:a3:7f:01:14:23:5f: 30:88:4f:86:2f:ef:d8:fc:3a:47:41:50:9d:cf:b3: c1:c7:d3:a9:48:f6:95:66:8e:82:05:82:c6:77:dc: a8:c2:e3:92:ff:e8:c7:a7:0c:c7:ef:c1:e0:8b:f8: f3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:4C:FA:4A:B3:15:86:42:55:C9:63:24:CA:03:69:7B:8A:B9:64:DC X509v3 Authority Key Identifier: keyid:EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:9e:35:86:12:99:12:cb:bf:41:87:b9:2c:7d:f0:91:36:bc: 64:9f:85:5b:a1:3e:fb:48:70:d8:e0:b0:8f:cb:bd:10:c7:88: 30:76:4c:b1:fa:f1:d7:a1:71:ca:0b:e1:87:e9:89:b7:f1:b1: 53:44:07:45:04:2e:51:23:98:3c:21:0e:f0:c3:33:d8:22:af: 2a:15:ca:50:8a:38:37:b3:05:77:b5:ad:bf:74:7d:06:b5:1a: 80:df:e2:62:bd:e0:b5:2c:08:04:1f:85:0a:a1:81:fc:f1:81: 4f:2e:44:bb:e5:bd:71:3f:0a:47:b9:4f:72:2a:20:59:5f:93: 60:be:79:46:05:f4:5b:bf:22:e3:ea:7b:47:1f:b3:34:27:db: 2a:e1:ed:9d:fe:f9:e0:cf:31:1e:de:39:6a:a6:ca:d9:72:ff: 90:c7:cc:56:3c:68:ba:ab:16:16:bb:26:73:a6:7b:6e:ee:03: d2:b6:a8:f1:6c:e9:82:e2:19:6e:c3:40:dc:9d:67:81:e5:5b: db:79:41:0c:8e:47:3e:ff:57:96:00:57:1d:c2:9c:24:0e:a3: f6:b0:5c:5e:c7:94:9c:52:76:f9:29:90:f1:fc:f4:3a:49:bf: 5a:a9:65:88:40:d5:c1:d6:6f:f5:b4:b4:56:70:0f:16:43:3f: f6:0b:1d:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rGk4c4MS8AxS+satY9/SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWNjZTkwMWU1ZmI3YzkyZjA5YTkxNWNmNmU2NTZmNjkz YmExMDAwHhcNMjYwMTI1MTUwMTE1WhcNMjYwMTI2MTUwMTE1WjAzMTEwLwYDVQQD Eyg2YzRjZmE0YWIzMTU4NjQyNTVjOTYzMjRjYTAzNjk3YjhhYjk2NGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvc85/o2RbU3KNbakk1QmVN+cKzQt lCWYVV+nmtnKPPkhI3AuCOKgZf4CMz34IKJfrTn1lvVCI2B8vmrI0Mjpmtjs/H7H ucn7XsFQq1IOYk5Dq4NN+YLP3+UdyXS2O2yCtnBM8sEB4gzHtilmE1GJfN6Vv7mc E8+CEIWeAGtfC8JNCZWOL3cvHIH39finWtSX45eiWHBZf1gb5XXy6FMTl3BkNuWO s7xBHU1+5bHwGIB2fQIv7fqJ76meU+hb1dy0n/I3pqLsMRzvkACjfwEUI18wiE+G L+/Y/DpHQVCdz7PBx9OpSPaVZo6CBYLGd9yowuOS/+jHpwzH78Hgi/jzBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGxM+kqzFYZCVcljJMoDaXuKuWTcMB8GA1UdIwQY MBaAFO4czpAeX7fJLwmpFc9uZW9pO6EAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h6T2tCNWZ0OGt2Q2FrVnoyNWxiMms3b1FBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zOWQ1ZjEtNjZmNy00OWQ4LWFmYmEt MTRhMTkwOWIxMjM3LzEvN2h6T2tCNWZ0OGt2Q2FrVnoyNWxiMms3b1FBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8zOWQ1ZjEtNjZmNy00OWQ4LWFmYmEtMTRhMTkwOWIxMjM3 LzEvN2h6T2tCNWZ0OGt2Q2FrVnoyNWxiMms3b1FBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqJ41hhKZ Esu/QYe5LH3wkTa8ZJ+FW6E++0hw2OCwj8u9EMeIMHZMsfrx16Fxygvhh+mJt/Gx U0QHRQQuUSOYPCEO8MMz2CKvKhXKUIo4N7MFd7Wtv3R9BrUagN/iYr3gtSwIBB+F CqGB/PGBTy5Eu+W9cT8KR7lPciogWV+TYL55RgX0W78i4+p7Rx+zNCfbKuHtnf75 4M8xHt45aqbK2XL/kMfMVjxouqsWFrsmc6Z7bu4D0rao8WzpguIZbsNA3J1ngeVb 23lBDI5HPv9XlgBXHcKcJA6j9rBcXseUnFJ2+SmQ8fz0Okm/WqlliEDVwdZv9bS0 VnAPFkM/9gsdmQ== -----END CERTIFICATE-----Generated at Sun Jan 25 21:10:27 2026 by rpki-client