This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft File: eXfk4sKqJsENBx-hBFwTHm0WD3A.mft (raw, json) Hash identifier: BA6KXLRhChh5wB/wlORnrVtEfCufhhRy6Ug+Q70FWp4= Subject key identifier: AB:64:56:01:E3:4F:D1:2E:F7:53:9C:79:78:AC:C4:A2:AB:F5:D9:6F Authority key identifier: 79:77:E4:E2:C2:AA:26:C1:0D:07:1F:A1:04:5C:13:1E:6D:16:0F:70 Certificate issuer: /CN=7977e4e2c2aa26c10d071fa1045c131e6d160f70 Certificate serial: 019BF38706E8BB13F6837B9F47D0A7CCC360 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXfk4sKqJsENBx-hBFwTHm0WD3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft Manifest number: 9F Signing time: Sun 25 Jan 2026 05:01:10 +0000 Manifest this update: Sun 25 Jan 2026 05:01:10 +0000 Manifest next update: Mon 26 Jan 2026 05:01:10 +0000 Files and hashes: 1: Fw8PMiL8XbMvdKq8X17Je2tMF2E.roa (hash: NpJsXlY3046ddjEeyCOq10eq8sScmSmiV1XiKlKV9B0=) 2: eXfk4sKqJsENBx-hBFwTHm0WD3A.crl (hash: GziSNJi+tYZOqm4CTqXEXLkH8zDe1zN5Bf4GHCAsZH8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.crl rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft rsync://rpki.ripe.net/repository/DEFAULT/eXfk4sKqJsENBx-hBFwTHm0WD3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:87:06:e8:bb:13:f6:83:7b:9f:47:d0:a7:cc:c3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7977e4e2c2aa26c10d071fa1045c131e6d160f70 Validity Not Before: Jan 25 05:01:10 2026 GMT Not After : Jan 26 05:01:10 2026 GMT Subject: CN=ab645601e34fd12ef7539c7978acc4a2abf5d96f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:84:75:22:a3:ea:49:43:35:2a:24:d6:aa:67: 73:10:ec:7a:61:f0:65:33:21:a5:f2:02:6d:0f:c3: cb:da:94:48:5c:e8:d2:42:c5:c4:4b:ad:d1:c5:c6: 09:a3:a8:a0:ad:de:19:bb:b5:01:a3:b4:92:40:b4: 05:ac:04:8e:68:30:b6:06:38:8f:3b:46:8f:4c:b8: 2e:ef:79:bd:14:cc:57:dc:42:1c:59:bb:28:23:6a: 4d:88:e6:23:69:2b:04:87:ce:df:1e:58:e5:a1:35: e6:70:9b:54:d0:02:2f:d8:3a:dc:cd:cb:79:4f:4d: 59:ea:07:3c:06:5a:c0:a6:d5:78:9a:f4:4b:cb:50: 48:d5:da:02:be:35:31:80:08:cc:8b:9f:61:87:a0: b6:be:b0:8c:a1:01:ea:ee:9f:f1:74:3e:28:b0:e9: d9:15:e0:0e:22:80:72:14:a9:10:cb:5c:37:80:1a: 9b:2b:b2:05:c8:0e:1f:4e:67:7d:c5:8d:44:52:2b: da:1f:2e:bf:a5:19:2a:fe:02:07:77:d3:cf:62:f0: e2:5d:ed:61:5a:0f:8d:83:6f:20:a6:fb:8e:62:fe: 5b:cf:12:8d:1c:43:96:ce:cf:54:f7:17:e7:67:a8: 30:64:a5:5f:0c:48:e2:3d:aa:48:2c:d8:62:3a:fa: 0b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:64:56:01:E3:4F:D1:2E:F7:53:9C:79:78:AC:C4:A2:AB:F5:D9:6F X509v3 Authority Key Identifier: keyid:79:77:E4:E2:C2:AA:26:C1:0D:07:1F:A1:04:5C:13:1E:6D:16:0F:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXfk4sKqJsENBx-hBFwTHm0WD3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:ab:cf:fb:5c:03:86:eb:8d:74:3a:4a:64:c1:41:c2:16:c3: e5:74:e6:82:c4:5a:3a:7d:b7:60:4f:9f:30:c7:79:7b:75:66: 73:78:90:2c:57:95:69:f3:d7:cb:60:b8:7f:fc:d8:1c:8b:7d: a5:51:b7:e8:86:72:22:d2:cf:ff:51:40:a7:0e:42:7e:80:78: 3d:b9:9d:c7:1d:62:fc:c1:fc:95:42:29:62:e0:6f:1f:e6:b0: 6d:da:ff:7a:0f:32:2d:55:af:34:68:92:e9:fb:af:aa:87:4f: d4:db:56:6e:c8:c7:35:2d:e8:0c:9d:1e:24:19:34:56:b3:8c: f5:13:0f:e8:45:d7:c6:68:25:95:a1:56:6d:29:5d:26:41:42: 50:f7:be:32:a2:db:c7:b3:71:5d:45:4e:51:e3:b5:26:45:68: fc:ab:1d:7b:4a:8f:48:47:23:6a:06:b5:71:59:eb:dd:24:25: 66:0e:9d:62:ec:53:97:e9:48:95:64:be:e5:e5:b0:fd:7c:5a: 0a:36:26:e4:9e:cf:10:75:88:63:c4:9c:69:2e:60:4a:1d:c2: d5:a9:52:12:4a:e6:4a:6e:95:09:4e:94:c7:61:de:c1:ec:fb: 1f:8e:05:67:4c:7f:b5:c3:87:da:87:2b:0e:32:05:50:ee:b6: 51:b7:64:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzhwbouxP2g3ufR9CnzMNgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5NzdlNGUyYzJhYTI2YzEwZDA3MWZhMTA0NWMxMzFlNmQx NjBmNzAwHhcNMjYwMTI1MDUwMTEwWhcNMjYwMTI2MDUwMTEwWjAzMTEwLwYDVQQD EyhhYjY0NTYwMWUzNGZkMTJlZjc1MzljNzk3OGFjYzRhMmFiZjVkOTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYR1IqPqSUM1KiTWqmdzEOx6YfBl MyGl8gJtD8PL2pRIXOjSQsXES63RxcYJo6igrd4Zu7UBo7SSQLQFrASOaDC2BjiP O0aPTLgu73m9FMxX3EIcWbsoI2pNiOYjaSsEh87fHljloTXmcJtU0AIv2Drczct5 T01Z6gc8BlrAptV4mvRLy1BI1doCvjUxgAjMi59hh6C2vrCMoQHq7p/xdD4osOnZ FeAOIoByFKkQy1w3gBqbK7IFyA4fTmd9xY1EUivaHy6/pRkq/gIHd9PPYvDiXe1h Wg+Ng28gpvuOYv5bzxKNHEOWzs9U9xfnZ6gwZKVfDEjiPapILNhiOvoLewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKtkVgHjT9Eu91OceXisxKKr9dlvMB8GA1UdIwQY MBaAFHl35OLCqibBDQcfoQRcEx5tFg9wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVhmazRzS3FKc0VOQngtaEJGd1RIbTBXRDNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS82NzE3ZDktODY3MS00YzYwLThmZDkt MjIxNmMzOTU3NTk4LzEvZVhmazRzS3FKc0VOQngtaEJGd1RIbTBXRDNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS82NzE3ZDktODY3MS00YzYwLThmZDktMjIxNmMzOTU3NTk4 LzEvZVhmazRzS3FKc0VOQngtaEJGd1RIbTBXRDNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh6vP+1wD huuNdDpKZMFBwhbD5XTmgsRaOn23YE+fMMd5e3Vmc3iQLFeVafPXy2C4f/zYHIt9 pVG36IZyItLP/1FApw5CfoB4Pbmdxx1i/MH8lUIpYuBvH+awbdr/eg8yLVWvNGiS 6fuvqodP1NtWbsjHNS3oDJ0eJBk0VrOM9RMP6EXXxmgllaFWbSldJkFCUPe+MqLb x7NxXUVOUeO1JkVo/Ksde0qPSEcjaga1cVnr3SQlZg6dYuxTl+lIlWS+5eWw/Xxa CjYm5J7PEHWIY8ScaS5gSh3C1alSEkrmSm6VCU6Ux2Hewez7H44FZ0x/tcOH2ocr DjIFUO62UbdkEg== -----END CERTIFICATE-----Generated at Sun Jan 25 12:31:10 2026 by rpki-client