This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft File: h7l24qq5IySO6A7lfL00rYe87zQ.mft (raw, json) Hash identifier: KcWTJIHMUQAdwcd/bPtAbJiqUcB4x714FLtP3D2ZRJ4= Subject key identifier: A5:3F:33:C5:5F:2E:54:C1:61:89:01:1B:14:57:88:0E:91:A5:8A:AA Authority key identifier: 87:B9:76:E2:AA:B9:23:24:8E:E8:0E:E5:7C:BD:34:AD:87:BC:EF:34 Certificate issuer: /CN=87b976e2aab923248ee80ee57cbd34ad87bcef34 Certificate serial: 019BF763680D2CFE9FB694090D9FA0BBB2A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft Manifest number: 0EDD Signing time: Sun 25 Jan 2026 23:00:45 +0000 Manifest this update: Sun 25 Jan 2026 23:00:45 +0000 Manifest next update: Mon 26 Jan 2026 23:00:45 +0000 Files and hashes: 1: K3q7rDAAcTkhLcTgXHyQCl5GQuI.roa (hash: XY2CV23nGfpFfkmgGkboOd40b6zMjm8v5H58JjAU0/Y=) 2: h7l24qq5IySO6A7lfL00rYe87zQ.crl (hash: EX+I6GZYNraQH3UqHQ2lMCKMQmXcHLu8LmkssDPNjq4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:68:0d:2c:fe:9f:b6:94:09:0d:9f:a0:bb:b2:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87b976e2aab923248ee80ee57cbd34ad87bcef34 Validity Not Before: Jan 25 23:00:45 2026 GMT Not After : Jan 26 23:00:45 2026 GMT Subject: CN=a53f33c55f2e54c16189011b1457880e91a58aaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:db:a9:ee:4c:7a:b1:4e:9f:1f:6e:b9:dd:6a: e9:e4:ce:4d:47:ce:6f:da:85:01:b2:73:a6:5e:06: 02:da:12:5b:a8:d7:88:d3:d0:6d:58:eb:f1:aa:c3: 0e:41:e4:99:ac:d7:c4:40:81:23:a9:57:47:f0:89: 78:09:51:69:d1:e1:da:0f:c3:75:45:ca:e7:92:4f: d4:8c:4e:18:dc:30:c6:0e:74:c7:b8:c9:c2:75:ca: 3d:c9:c8:a6:87:35:d8:41:c1:b9:22:30:b1:a8:c9: f6:0d:11:7d:dc:a7:19:91:d3:07:26:14:d4:aa:98: 1f:61:8a:d0:73:3d:09:ca:5c:45:eb:ac:1b:5c:c6: 65:02:cd:0b:f9:8d:3e:74:0c:a5:8e:85:12:16:1c: 4f:b3:db:1d:4b:db:bf:45:46:3a:5d:36:84:a5:b3: 75:cd:96:cc:16:25:24:b8:5e:de:3a:62:15:0e:a1: 76:08:62:7c:17:7d:59:e9:08:b4:31:ba:b0:65:d6: d4:90:c4:23:d5:db:d0:34:9a:11:d1:78:fa:8d:ed: 0d:80:89:12:37:78:a4:99:f7:b3:ab:81:3e:f2:07: 0c:c8:04:ff:cd:aa:35:c1:19:78:69:29:b2:8b:0e: 7d:a9:79:dc:34:e6:b4:ea:85:4e:92:81:29:cc:07: 5e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:3F:33:C5:5F:2E:54:C1:61:89:01:1B:14:57:88:0E:91:A5:8A:AA X509v3 Authority Key Identifier: keyid:87:B9:76:E2:AA:B9:23:24:8E:E8:0E:E5:7C:BD:34:AD:87:BC:EF:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:7b:87:fc:f4:4c:b3:26:41:72:40:c4:4a:41:71:6d:be:fb: 43:1f:f5:a9:7e:42:d7:b8:48:d3:bc:5e:90:02:fd:5c:f9:3d: e4:26:f4:84:0a:4b:36:9b:dc:32:c3:32:1c:93:c9:21:8c:c1: 57:ec:c4:9f:73:ca:f4:a3:57:77:95:5a:b8:b3:41:67:d2:5e: 35:3c:d2:a3:78:b3:6a:28:70:38:89:00:7f:5a:38:32:49:2e: 6d:38:d9:83:53:c4:8a:0a:dc:37:a3:f4:2d:54:84:40:5a:a7: 5a:64:f5:4f:be:64:e0:6c:4f:48:18:6c:08:3f:99:ca:50:5e: ea:c5:24:c2:33:3c:c5:1e:df:ed:92:7b:5d:50:8a:cb:51:05: d1:bb:44:12:60:7d:8b:80:dc:f6:28:ad:62:7c:bc:58:5e:41: 6f:0b:a6:0f:b0:c0:a3:80:a0:cf:65:16:61:67:72:72:bc:fd: a5:55:2c:d7:60:df:ae:13:fd:70:b4:89:ac:1b:14:f1:d2:33: d1:e3:ad:cf:e5:81:b5:04:82:c7:8f:b6:a5:93:b1:87:20:2e: 83:2a:cf:0e:50:1a:75:b1:eb:26:c7:ee:75:7a:71:f9:59:fa: a3:24:48:08:78:89:11:3c:b2:dd:f4:bd:f8:12:c4:e0:2d:5a: 82:75:36:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y2gNLP6ftpQJDZ+gu7KiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3Yjk3NmUyYWFiOTIzMjQ4ZWU4MGVlNTdjYmQzNGFkODdi Y2VmMzQwHhcNMjYwMTI1MjMwMDQ1WhcNMjYwMTI2MjMwMDQ1WjAzMTEwLwYDVQQD EyhhNTNmMzNjNTVmMmU1NGMxNjE4OTAxMWIxNDU3ODgwZTkxYTU4YWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNup7kx6sU6fH2653Wrp5M5NR85v 2oUBsnOmXgYC2hJbqNeI09BtWOvxqsMOQeSZrNfEQIEjqVdH8Il4CVFp0eHaD8N1 Rcrnkk/UjE4Y3DDGDnTHuMnCdco9ycimhzXYQcG5IjCxqMn2DRF93KcZkdMHJhTU qpgfYYrQcz0JylxF66wbXMZlAs0L+Y0+dAyljoUSFhxPs9sdS9u/RUY6XTaEpbN1 zZbMFiUkuF7eOmIVDqF2CGJ8F31Z6Qi0MbqwZdbUkMQj1dvQNJoR0Xj6je0NgIkS N3ikmfezq4E+8gcMyAT/zao1wRl4aSmyiw59qXncNOa06oVOkoEpzAdeHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKU/M8VfLlTBYYkBGxRXiA6RpYqqMB8GA1UdIwQY MBaAFIe5duKquSMkjugO5Xy9NK2HvO80MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDdsMjRxcTVJeVNPNkE3bGZMMDByWWU4N3pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi85MjM5OWItMWJlZC00NWUyLTljOTMt ZTFiOGZmMjVmNjBiLzEvaDdsMjRxcTVJeVNPNkE3bGZMMDByWWU4N3pRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi85MjM5OWItMWJlZC00NWUyLTljOTMtZTFiOGZmMjVmNjBi LzEvaDdsMjRxcTVJeVNPNkE3bGZMMDByWWU4N3pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABnuH/PRM syZBckDESkFxbb77Qx/1qX5C17hI07xekAL9XPk95Cb0hApLNpvcMsMyHJPJIYzB V+zEn3PK9KNXd5VauLNBZ9JeNTzSo3izaihwOIkAf1o4MkkubTjZg1PEigrcN6P0 LVSEQFqnWmT1T75k4GxPSBhsCD+ZylBe6sUkwjM8xR7f7ZJ7XVCKy1EF0btEEmB9 i4Dc9iitYny8WF5BbwumD7DAo4Cgz2UWYWdycrz9pVUs12DfrhP9cLSJrBsU8dIz 0eOtz+WBtQSCx4+2pZOxhyAugyrPDlAadbHrJsfudXpx+Vn6oyRICHiJETyy3fS9 +BLE4C1agnU2Xw== -----END CERTIFICATE-----Generated at Mon Jan 26 02:15:12 2026 by rpki-client