This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft File: b7u17BJ6BjLSJq8H-snE0oS9G6w.mft (raw, json) Hash identifier: o1UjDraePbNZX5NU5H/uY37YiycvteENmf0tMuIZl/8= Subject key identifier: DF:2E:C9:30:57:58:6E:A6:5F:3D:35:7C:DC:16:D0:26:BC:13:03:BD Authority key identifier: 6F:BB:B5:EC:12:7A:06:32:D2:26:AF:07:FA:C9:C4:D2:84:BD:1B:AC Certificate issuer: /CN=6fbbb5ec127a0632d226af07fac9c4d284bd1bac Certificate serial: 019BF7637F5B54C3B98F77FC42693E5CBB1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 23:00:51 +0000 Manifest this update: Sun 25 Jan 2026 23:00:51 +0000 Manifest next update: Mon 26 Jan 2026 23:00:51 +0000 Files and hashes: 1: QowN0LD_MpyH9XeoraRCQC23xeg.roa (hash: hLxc7NbhUpaHA5kGsA3jfQYRDHphB6U/6NiFfrvj7Nw=) 2: b7u17BJ6BjLSJq8H-snE0oS9G6w.crl (hash: yv1DT3VszJ/1bG5USae7BJW0TvGM1dou/6xA80+k058=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.crl rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:7f:5b:54:c3:b9:8f:77:fc:42:69:3e:5c:bb:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fbbb5ec127a0632d226af07fac9c4d284bd1bac Validity Not Before: Jan 25 23:00:51 2026 GMT Not After : Jan 26 23:00:51 2026 GMT Subject: CN=df2ec93057586ea65f3d357cdc16d026bc1303bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:20:8c:5a:98:22:1a:28:f1:f6:e6:b3:3c:c9: 25:87:59:8e:54:7f:70:53:1f:1e:91:84:23:bb:e1: ff:21:30:a4:68:53:77:42:67:0a:c5:31:5e:6e:14: 61:28:f8:d4:20:ae:52:e0:23:54:a6:dd:0b:10:e6: 07:63:7f:8c:c3:e2:e3:9d:f1:2a:88:04:e9:c4:c9: 15:38:80:37:32:18:15:4f:d2:54:15:2e:71:bd:55: 68:ff:79:1f:92:06:92:46:66:8a:3c:76:55:89:03: 10:6c:33:91:7a:ec:66:7a:a3:93:12:a3:bb:71:8a: db:0b:8e:1a:d5:20:01:20:89:5a:89:59:ea:dd:f8: 60:3d:1b:c4:33:a4:4a:1a:50:b6:dc:27:77:07:6e: 88:8f:37:79:a9:05:4d:96:4a:02:ad:df:2c:6d:36: 8e:b0:62:d9:42:d1:7a:f0:e2:e4:a1:fd:1c:2e:a5: 03:e1:96:8e:c6:76:3c:ff:85:c8:f3:24:40:f7:e2: 22:81:09:10:cd:11:59:69:5e:3a:49:c2:45:7b:f5: e0:0f:14:63:cb:4a:f5:50:d9:81:37:3c:6e:3e:af: c7:80:4d:1f:03:17:6c:fb:45:57:29:95:cf:fa:2d: 5a:f6:14:d2:9d:11:fd:29:1f:7c:2d:4f:a0:ea:4f: 5f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:2E:C9:30:57:58:6E:A6:5F:3D:35:7C:DC:16:D0:26:BC:13:03:BD X509v3 Authority Key Identifier: keyid:6F:BB:B5:EC:12:7A:06:32:D2:26:AF:07:FA:C9:C4:D2:84:BD:1B:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:8f:24:a9:1b:b3:40:57:10:46:3c:b0:f2:63:b3:c3:1f:df: 77:a8:b4:d8:66:ce:2a:3e:78:b2:df:65:24:47:36:2e:7f:65: f7:66:7f:5c:f5:f1:66:b0:d3:40:b4:33:33:a9:24:13:e4:c6: 0d:f3:f7:81:62:8e:36:4a:47:83:67:54:ea:23:9d:1b:70:74: 9b:d7:c0:17:bd:1d:ab:d2:51:f1:67:1e:39:e4:79:62:3a:d7: bb:11:d9:9d:e1:3e:1f:3d:61:c6:e7:e8:61:19:6b:3f:e6:af: 3c:3f:82:6c:5b:af:d6:f2:a5:9f:9d:da:9c:87:6a:5d:c8:7a: 68:21:69:d1:5c:e2:15:27:e6:10:56:bf:3c:9d:9a:78:00:6a: 32:c3:0f:be:62:74:eb:de:01:b2:9b:06:e4:a2:b8:55:4f:24: 19:f6:52:b0:5e:70:43:86:34:5a:4f:12:cd:0d:6a:ba:b4:9a: 46:14:da:4e:67:89:45:70:80:62:dd:27:e2:45:30:78:05:c0: 1d:2a:7e:e7:68:7b:22:20:b0:6c:cb:9e:93:67:25:fe:0f:c7: f5:38:30:2b:b1:e2:c8:49:90:db:f1:a8:cf:4a:c8:09:bd:6c: 65:21:e2:e4:b7:21:5f:64:7b:b1:7b:6c:50:b4:d4:8e:67:d5: 47:4b:06:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y39bVMO5j3f8Qmk+XLscMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYmJiNWVjMTI3YTA2MzJkMjI2YWYwN2ZhYzljNGQyODRi ZDFiYWMwHhcNMjYwMTI1MjMwMDUxWhcNMjYwMTI2MjMwMDUxWjAzMTEwLwYDVQQD EyhkZjJlYzkzMDU3NTg2ZWE2NWYzZDM1N2NkYzE2ZDAyNmJjMTMwM2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5CCMWpgiGijx9uazPMklh1mOVH9w Ux8ekYQju+H/ITCkaFN3QmcKxTFebhRhKPjUIK5S4CNUpt0LEOYHY3+Mw+LjnfEq iATpxMkVOIA3MhgVT9JUFS5xvVVo/3kfkgaSRmaKPHZViQMQbDOReuxmeqOTEqO7 cYrbC44a1SABIIlaiVnq3fhgPRvEM6RKGlC23Cd3B26Ijzd5qQVNlkoCrd8sbTaO sGLZQtF68OLkof0cLqUD4ZaOxnY8/4XI8yRA9+IigQkQzRFZaV46ScJFe/XgDxRj y0r1UNmBNzxuPq/HgE0fAxds+0VXKZXP+i1a9hTSnRH9KR98LU+g6k9fjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN8uyTBXWG6mXz01fNwW0Ca8EwO9MB8GA1UdIwQY MBaAFG+7tewSegYy0iavB/rJxNKEvRusMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjd1MTdCSjZCakxTSnE4SC1zbkUwb1M5RzZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8zNjRlMjctNTdmMC00NmE3LTkzOWEt NjU0OTA4Mzg0ZGQ4LzEvYjd1MTdCSjZCakxTSnE4SC1zbkUwb1M5RzZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8zNjRlMjctNTdmMC00NmE3LTkzOWEtNjU0OTA4Mzg0ZGQ4 LzEvYjd1MTdCSjZCakxTSnE4SC1zbkUwb1M5RzZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARI8kqRuz QFcQRjyw8mOzwx/fd6i02GbOKj54st9lJEc2Ln9l92Z/XPXxZrDTQLQzM6kkE+TG DfP3gWKONkpHg2dU6iOdG3B0m9fAF70dq9JR8WceOeR5YjrXuxHZneE+Hz1hxufo YRlrP+avPD+CbFuv1vKln53anIdqXch6aCFp0VziFSfmEFa/PJ2aeABqMsMPvmJ0 694BspsG5KK4VU8kGfZSsF5wQ4Y0Wk8SzQ1qurSaRhTaTmeJRXCAYt0n4kUweAXA HSp+52h7IiCwbMuek2cl/g/H9TgwK7HiyEmQ2/Goz0rICb1sZSHi5LchX2R7sXts ULTUjmfVR0sGPQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:57:00 2026 by rpki-client