This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.mft
File: 7xU1l4vmsK16nLcOsFIvjJUJgqk.mft (raw, json)
Hash identifier: ist/x51zyNvd3Gh9GExzQr/g7TYImZwaQsiIqSax078=
Subject key identifier: 91:C3:67:2A:47:D0:B7:86:19:A1:FD:4F:4F:2F:E4:C8:EA:27:F9:07
Authority key identifier: EF:15:35:97:8B:E6:B0:AD:7A:9C:B7:0E:B0:52:2F:8C:95:09:82:A9
Certificate issuer: /CN=ef1535978be6b0ad7a9cb70eb0522f8c950982a9
Certificate serial: 019BF2E1AD06ADB03D8EA868483283A046DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xU1l4vmsK16nLcOsFIvjJUJgqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.mft
Manifest number: F7
Signing time: Sun 25 Jan 2026 02:00:34 +0000
Manifest this update: Sun 25 Jan 2026 02:00:34 +0000
Manifest next update: Mon 26 Jan 2026 02:00:34 +0000
Files and hashes: 1: 1-iB6z21RZrpXkSnGvhiW2wYr8L0.roa (hash: 51tw/udP13YguOvYrb1xizkGBlXzZHexEK8HlcpRMGs=)
2: 2VIoG8QN-zjnAemqLtXlhO_Jltw.roa (hash: cZjTIR9f7TdWlH+cvp6k0DHUwZH3r7HLXpRNG9UZVIM=)
3: 7xU1l4vmsK16nLcOsFIvjJUJgqk.crl (hash: fUFswP+3DsxP4zyunYEFCO1o5rwvv3Zf2f1X8rXrbK0=)
4: EJwMuFYK1wsM5hee91ic9tZZCHs.roa (hash: AQoucDoJ40lM0+JsqQe1B2wvG+y+JOvu/h9zeWafMiQ=)
5: aMiNXiZTn0auDW0z6jWzMcVy5es.roa (hash: mTYhpZfI6W//js6v7bdR+EJfQ3pBaYPmRe515ss9poI=)
6: w_c3ITOoCkFf0DnaSmtgq6Rn678.asa (hash: J6tFhX6N1Hura0xZcR4F7V51t3AR4eoZPi1JRBlD4q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7xU1l4vmsK16nLcOsFIvjJUJgqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f2:e1:ad:06:ad:b0:3d:8e:a8:68:48:32:83:a0:46:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1535978be6b0ad7a9cb70eb0522f8c950982a9
Validity
Not Before: Jan 25 02:00:34 2026 GMT
Not After : Jan 26 02:00:34 2026 GMT
Subject: CN=91c3672a47d0b78619a1fd4f4f2fe4c8ea27f907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c8:90:49:e2:50:49:8a:d4:a3:0f:12:24:c9:
2c:16:52:68:52:4a:5e:d0:8f:2d:1a:22:a6:78:70:
41:80:48:f1:95:ca:e0:1e:54:8d:19:26:a1:37:02:
d8:64:a4:94:87:7a:01:a8:00:f4:21:31:51:a2:7a:
07:d6:52:05:84:fb:3d:37:4c:56:17:29:9f:ca:f2:
73:58:9d:9e:4e:8b:b5:8a:89:e0:f9:55:2e:5f:aa:
b9:d3:75:b2:f4:a8:28:14:92:ef:c2:0e:df:9f:9f:
b7:3c:49:d7:d8:5f:7e:1a:3b:8f:e7:90:79:ee:36:
42:28:a7:a2:cc:e1:f8:82:b7:52:9c:86:98:98:97:
78:81:35:30:cd:10:e5:da:39:31:29:c4:81:a8:ca:
d6:eb:62:71:5b:6f:28:2d:df:8a:45:ef:d9:7b:cc:
32:c3:2e:32:4d:2c:4c:33:8a:2a:11:05:97:e8:a2:
a9:04:01:28:b9:58:fc:96:4c:e1:80:b9:30:db:fc:
f8:70:41:74:ef:a6:f6:c2:f2:b6:d4:89:33:bf:11:
92:24:82:ec:99:ca:ed:6b:68:c2:36:6a:02:87:20:
c0:22:54:b6:7c:b5:4b:66:35:f3:3c:e1:6c:ee:14:
b0:93:60:34:a3:f9:b3:9f:a3:4b:24:6a:89:b4:bb:
96:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C3:67:2A:47:D0:B7:86:19:A1:FD:4F:4F:2F:E4:C8:EA:27:F9:07
X509v3 Authority Key Identifier:
keyid:EF:15:35:97:8B:E6:B0:AD:7A:9C:B7:0E:B0:52:2F:8C:95:09:82:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xU1l4vmsK16nLcOsFIvjJUJgqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:66:d4:64:95:25:1a:4f:9e:4f:66:42:68:72:71:96:30:38:
d0:d7:08:89:26:2b:80:45:da:57:7b:5e:ed:92:02:b8:eb:49:
99:0f:4c:a3:3b:23:26:37:cd:cd:d9:1a:c1:7d:90:1a:da:d1:
eb:db:6a:49:7d:e4:1d:74:15:6b:98:6b:3b:cb:98:15:3d:f1:
37:a9:51:06:32:01:4d:d7:03:92:67:cb:97:76:ac:95:34:83:
85:84:57:bb:39:98:cb:5b:71:94:b8:d0:ee:68:11:45:e9:88:
99:f7:39:cf:17:15:f4:55:1b:53:cf:84:32:a8:73:66:aa:29:
c2:48:55:de:60:1e:4c:8a:d2:65:97:3a:8b:1a:e2:83:fa:1f:
47:3b:b8:27:77:a5:e7:89:47:dd:46:9d:b9:e1:d5:f0:00:ba:
20:f7:38:b0:36:0e:9b:28:9f:be:5b:02:7d:e7:e8:96:e0:ea:
cb:09:a0:f7:7b:70:96:12:13:3c:c3:f6:06:63:b9:c0:62:a8:
c9:59:7b:2c:87:d2:49:a8:2f:af:b5:eb:a6:16:d6:ba:b1:58:
7b:82:54:f9:7a:26:f0:36:bd:32:d2:e3:8a:ea:bd:dc:b0:d7:
f5:9e:80:7f:1b:f8:8f:eb:e1:3e:70:07:c0:3d:28:54:81:3f:
31:69:50:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvy4a0GrbA9jqhoSDKDoEbaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMTUzNTk3OGJlNmIwYWQ3YTljYjcwZWIwNTIyZjhjOTUw
OTgyYTkwHhcNMjYwMTI1MDIwMDM0WhcNMjYwMTI2MDIwMDM0WjAzMTEwLwYDVQQD
Eyg5MWMzNjcyYTQ3ZDBiNzg2MTlhMWZkNGY0ZjJmZTRjOGVhMjdmOTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1siQSeJQSYrUow8SJMksFlJoUkpe
0I8tGiKmeHBBgEjxlcrgHlSNGSahNwLYZKSUh3oBqAD0ITFRonoH1lIFhPs9N0xW
FymfyvJzWJ2eTou1iong+VUuX6q503Wy9KgoFJLvwg7fn5+3PEnX2F9+GjuP55B5
7jZCKKeizOH4grdSnIaYmJd4gTUwzRDl2jkxKcSBqMrW62JxW28oLd+KRe/Ze8wy
wy4yTSxMM4oqEQWX6KKpBAEouVj8lkzhgLkw2/z4cEF076b2wvK21IkzvxGSJILs
mcrta2jCNmoChyDAIlS2fLVLZjXzPOFs7hSwk2A0o/mzn6NLJGqJtLuW9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJHDZypH0LeGGaH9T08v5MjqJ/kHMB8GA1UdIwQY
MBaAFO8VNZeL5rCtepy3DrBSL4yVCYKpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3hVMWw0dm1zSzE2bkxjT3NGSXZqSlVKZ3FrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8zYjZlYWItZjkwOS00MmM5LWI1ODgt
MTVjNjVmZjI1OGU4LzEvN3hVMWw0dm1zSzE2bkxjT3NGSXZqSlVKZ3FrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8zYjZlYWItZjkwOS00MmM5LWI1ODgtMTVjNjVmZjI1OGU4
LzEvN3hVMWw0dm1zSzE2bkxjT3NGSXZqSlVKZ3FrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHGbUZJUl
Gk+eT2ZCaHJxljA40NcIiSYrgEXaV3te7ZICuOtJmQ9MozsjJjfNzdkawX2QGtrR
69tqSX3kHXQVa5hrO8uYFT3xN6lRBjIBTdcDkmfLl3aslTSDhYRXuzmYy1txlLjQ
7mgRRemImfc5zxcV9FUbU8+EMqhzZqopwkhV3mAeTIrSZZc6ixrig/ofRzu4J3el
54lH3UadueHV8AC6IPc4sDYOmyifvlsCfefoluDqywmg93twlhITPMP2BmO5wGKo
yVl7LIfSSagvr7XrphbWurFYe4JU+Xom8Da9MtLjiuq93LDX9Z6Afxv4j+vhPnAH
wD0oVIE/MWlQfg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:44:50 2026 by rpki-client