This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft File: u7w9vRpPIkq4StYJwmgHn7Yktb0.mft (raw, json) Hash identifier: Yz3WfLDiblonQfX2ae148zakx385BksIzJoXp7+lihc= Subject key identifier: 94:02:10:28:45:25:94:47:C2:55:74:86:E6:8E:50:46:C5:45:8D:52 Authority key identifier: BB:BC:3D:BD:1A:4F:22:4A:B8:4A:D6:09:C2:68:07:9F:B6:24:B5:BD Certificate issuer: /CN=bbbc3dbd1a4f224ab84ad609c268079fb624b5bd Certificate serial: 019BF79AB6AEF400E20565BFF12B0C0668DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft Manifest number: 040C Signing time: Mon 26 Jan 2026 00:01:10 +0000 Manifest this update: Mon 26 Jan 2026 00:01:10 +0000 Manifest next update: Tue 27 Jan 2026 00:01:10 +0000 Files and hashes: 1: SvNmMoOS2D7ABYeycDZExPxmaNI.roa (hash: hAPQtadJ57I6XgA+8LOiB1aW1n0vaUnx78Tugxa2seU=) 2: u7w9vRpPIkq4StYJwmgHn7Yktb0.crl (hash: QywOgg8VC2pBOiKEEs4b8ZoP6144GgK7g8Y3kNIYq9M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:b6:ae:f4:00:e2:05:65:bf:f1:2b:0c:06:68:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbbc3dbd1a4f224ab84ad609c268079fb624b5bd Validity Not Before: Jan 26 00:01:10 2026 GMT Not After : Jan 27 00:01:10 2026 GMT Subject: CN=9402102845259447c2557486e68e5046c5458d52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a4:62:a3:9e:ce:e8:a0:5e:31:11:bd:c0:c2: 5f:6a:1f:18:51:d7:d6:3f:63:6c:a7:cc:e5:85:14: c9:a4:bf:6a:d2:2e:35:bf:01:87:bb:26:a4:83:62: 4a:67:a4:90:1e:0a:40:a9:23:21:81:09:df:a1:ea: 36:cd:66:50:0a:0f:de:37:74:7a:71:ae:d4:42:26: c9:3c:b1:fe:ef:03:36:9e:72:5f:34:b6:f9:0f:d1: 7a:40:b6:e8:0c:38:ac:bd:b0:f5:b3:5c:a2:57:b3: c0:2d:4f:5b:86:96:c2:de:9e:08:60:ec:e3:79:78: dc:3e:0b:10:06:21:06:7b:bb:d7:56:32:69:9d:ac: 70:bf:97:1a:10:63:c1:90:94:d0:bd:43:9d:5e:16: 6c:3c:16:83:f3:a9:c4:6b:d8:f7:6f:f8:93:a1:b0: 3e:5d:c3:10:dc:49:94:d5:5b:3a:46:3a:47:d7:6d: 99:7c:d0:76:0f:2b:cc:00:62:ba:eb:e4:2f:2f:5b: a9:47:d9:fe:6d:26:55:f0:d5:a3:1c:9f:e3:45:b0: ad:5b:dc:98:d2:49:67:23:88:a0:2b:3b:bb:d3:60: 8c:60:79:cc:05:0b:ae:df:32:63:b8:6f:43:b4:0e: 62:ea:f6:23:c8:61:b1:fe:d6:28:0b:94:62:82:9d: d7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:02:10:28:45:25:94:47:C2:55:74:86:E6:8E:50:46:C5:45:8D:52 X509v3 Authority Key Identifier: keyid:BB:BC:3D:BD:1A:4F:22:4A:B8:4A:D6:09:C2:68:07:9F:B6:24:B5:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:d9:49:b6:15:0b:bb:0f:30:1a:ba:fd:48:c7:49:25:fe:56: 6f:71:c8:88:ba:f1:14:6c:84:28:20:ad:e0:91:e9:07:ea:98: 99:30:c6:9a:32:0d:88:4d:3d:7a:67:ea:41:f1:dd:a9:b2:bc: aa:05:03:1e:6d:cd:98:b1:1b:6f:2c:19:c9:5d:2c:29:9a:25: 1f:c6:cc:18:ef:e7:5a:fc:bf:12:5b:ea:86:42:18:c2:1b:4e: 34:f5:44:1a:e7:80:1f:bd:fe:42:4a:4b:aa:f1:62:72:93:c2: 6f:22:de:f1:42:11:f4:93:2d:49:2c:45:89:b7:f1:a8:73:40: 68:81:31:39:b2:79:da:19:21:45:95:30:40:14:5d:a1:8e:1f: 2d:37:ee:2c:95:20:5a:d2:d4:02:b2:83:e5:e6:99:6a:ed:43: 26:81:a7:1f:71:a6:d8:06:c0:9c:7a:07:48:e9:29:4c:6f:7b: 88:c8:91:bf:15:99:87:eb:29:67:6c:a9:81:d7:6a:26:f4:b6: 01:ca:70:8e:14:76:21:ec:70:b9:dd:2f:7d:eb:14:f3:e0:1a: 1b:55:89:ae:25:eb:18:22:e8:b7:6d:cb:aa:8a:8a:1a:28:f4: 8b:d1:ff:d6:1f:af:66:b7:a5:c4:0b:f3:37:ee:b3:9e:8e:bc: 0f:20:59:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mrau9ADiBWW/8SsMBmjdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiYmMzZGJkMWE0ZjIyNGFiODRhZDYwOWMyNjgwNzlmYjYy NGI1YmQwHhcNMjYwMTI2MDAwMTEwWhcNMjYwMTI3MDAwMTEwWjAzMTEwLwYDVQQD Eyg5NDAyMTAyODQ1MjU5NDQ3YzI1NTc0ODZlNjhlNTA0NmM1NDU4ZDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6Rio57O6KBeMRG9wMJfah8YUdfW P2Nsp8zlhRTJpL9q0i41vwGHuyakg2JKZ6SQHgpAqSMhgQnfoeo2zWZQCg/eN3R6 ca7UQibJPLH+7wM2nnJfNLb5D9F6QLboDDisvbD1s1yiV7PALU9bhpbC3p4IYOzj eXjcPgsQBiEGe7vXVjJpnaxwv5caEGPBkJTQvUOdXhZsPBaD86nEa9j3b/iTobA+ XcMQ3EmU1Vs6RjpH122ZfNB2DyvMAGK66+QvL1upR9n+bSZV8NWjHJ/jRbCtW9yY 0klnI4igKzu702CMYHnMBQuu3zJjuG9DtA5i6vYjyGGx/tYoC5Rigp3XtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJQCEChFJZRHwlV0huaOUEbFRY1SMB8GA1UdIwQY MBaAFLu8Pb0aTyJKuErWCcJoB5+2JLW9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTd3OXZScFBJa3E0U3RZSndtZ0huN1lrdGIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi81NGIwMDYtNjgwOS00NDFiLTg0ZDct YTI0Y2I1NzIyOThlLzEvdTd3OXZScFBJa3E0U3RZSndtZ0huN1lrdGIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi81NGIwMDYtNjgwOS00NDFiLTg0ZDctYTI0Y2I1NzIyOThl LzEvdTd3OXZScFBJa3E0U3RZSndtZ0huN1lrdGIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZNlJthUL uw8wGrr9SMdJJf5Wb3HIiLrxFGyEKCCt4JHpB+qYmTDGmjINiE09emfqQfHdqbK8 qgUDHm3NmLEbbywZyV0sKZolH8bMGO/nWvy/ElvqhkIYwhtONPVEGueAH73+QkpL qvFicpPCbyLe8UIR9JMtSSxFibfxqHNAaIExObJ52hkhRZUwQBRdoY4fLTfuLJUg WtLUArKD5eaZau1DJoGnH3Gm2AbAnHoHSOkpTG97iMiRvxWZh+spZ2ypgddqJvS2 AcpwjhR2Iexwud0vfesU8+AaG1WJriXrGCLot23LqoqKGij0i9H/1h+vZrelxAvz N+6zno68DyBZ3Q== -----END CERTIFICATE-----Generated at Mon Jan 26 07:12:07 2026 by rpki-client