This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft File: C7rRuSXg5WPbhdQdJwcF1xhApYg.mft (raw, json) Hash identifier: 9hqOOBy5M1broYj4+ST936iZy9TSOLDKXDyULCCzsx4= Subject key identifier: BD:19:4F:E7:EB:B1:D1:5B:B8:62:8A:43:CA:87:CF:61:D3:A1:84:C2 Authority key identifier: 0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88 Certificate issuer: /CN=0bbad1b925e0e563db85d41d270705d71840a588 Certificate serial: 019BF6F5ED6085B12D9181768116A070E8D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft Manifest number: 0F70 Signing time: Sun 25 Jan 2026 21:01:10 +0000 Manifest this update: Sun 25 Jan 2026 21:01:10 +0000 Manifest next update: Mon 26 Jan 2026 21:01:10 +0000 Files and hashes: 1: 1K0i2XyGKd7Bi4qw3JSXv-7t3uo.roa (hash: RPMjT2FQ9x0V2uqd3ChoSH8foN5RoM/gd5M/7fF5CR0=) 2: C7rRuSXg5WPbhdQdJwcF1xhApYg.crl (hash: 6zm3qrjogoLyPrOVJIclBn/jSajfhrocMMbCcuNwKJo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:ed:60:85:b1:2d:91:81:76:81:16:a0:70:e8:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bbad1b925e0e563db85d41d270705d71840a588 Validity Not Before: Jan 25 21:01:10 2026 GMT Not After : Jan 26 21:01:10 2026 GMT Subject: CN=bd194fe7ebb1d15bb8628a43ca87cf61d3a184c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2b:e6:83:9b:83:8a:73:7d:47:1e:0a:30:4e: b9:f5:bd:d1:55:d8:21:13:3b:37:ad:3b:a9:07:b7: aa:08:c1:d6:c8:7c:40:7e:86:5f:16:8f:1b:54:7e: a0:e2:a6:2a:fc:52:15:23:4b:44:24:57:00:9b:38: ac:71:1a:46:b7:eb:5d:74:45:41:bf:ce:9c:65:c7: b3:ec:ad:d6:42:06:5d:46:d4:0d:6c:2a:9c:5a:54: 57:a8:b2:80:6c:55:1e:b2:99:ad:21:5b:ed:cd:fd: 84:a8:1c:e9:6e:a8:97:dd:19:15:58:5f:2a:36:f9: 2a:5b:85:cc:28:9e:e3:19:1d:fa:7e:dd:2b:a9:15: 92:b1:a2:23:db:bd:4e:85:47:c8:74:a1:be:e1:57: 42:88:2e:ef:05:fb:03:95:8e:c6:cb:f1:3d:b1:55: db:bd:f5:d2:76:78:42:5c:bd:17:1c:8b:4f:38:05: a3:88:c1:f8:38:c5:8c:1c:53:6c:8d:b3:a2:24:8f: 05:76:7f:ce:06:e6:f2:bc:24:7a:72:7e:c4:6e:8b: 95:e9:80:30:5a:9f:3f:3b:88:88:38:69:62:fa:42: 8c:bf:fc:f5:2a:34:cc:a9:17:b2:99:17:3b:ac:fb: 14:73:77:e2:a5:de:96:cd:bf:a8:e0:b3:ed:e3:1d: 05:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:19:4F:E7:EB:B1:D1:5B:B8:62:8A:43:CA:87:CF:61:D3:A1:84:C2 X509v3 Authority Key Identifier: keyid:0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:00:84:e1:02:3a:1d:9a:98:09:82:3b:cf:f5:cd:22:83:3a: a6:23:f4:da:d7:68:09:81:ad:6f:05:fc:76:c7:02:f8:24:10: e1:3c:8e:e0:39:4a:c3:b2:f2:4b:0e:59:5b:ba:4a:dd:f9:99: 4e:2e:3b:98:56:0e:41:4c:dd:6a:ea:c6:e7:10:4b:f8:1b:12: 0b:ba:7e:b8:e0:fa:79:3f:be:fa:5e:b9:6f:5f:09:7a:e9:d1: 95:79:6d:a1:43:d4:c8:56:bb:37:29:ce:cc:a5:86:54:88:85: 57:f1:81:c4:2e:9d:24:c3:91:bf:a5:33:10:c2:cc:f3:f6:66: cf:70:8a:57:0e:f9:59:6a:92:3d:eb:15:dd:fc:dc:b5:ee:70: e8:ee:58:42:cd:e0:8b:3a:f8:35:f5:ae:82:fb:92:bb:eb:7a: 7c:ac:a6:13:5c:0f:95:c8:5c:90:ad:28:43:7d:82:ff:3c:7b: 08:61:3e:a2:62:f2:33:e1:57:25:1c:52:c3:6e:8b:f1:a3:f8: 3f:df:73:f0:d3:39:a6:31:35:3e:a7:21:b6:5a:7b:98:99:71: 5c:b2:44:e4:57:3b:30:ba:60:9b:50:b9:23:43:90:df:fb:8f: 23:8e:e7:78:d8:04:95:c3:7f:b4:52:db:63:93:69:2d:c8:12: 9a:bb:d5:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29e1ghbEtkYF2gRagcOjUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiYmFkMWI5MjVlMGU1NjNkYjg1ZDQxZDI3MDcwNWQ3MTg0 MGE1ODgwHhcNMjYwMTI1MjEwMTEwWhcNMjYwMTI2MjEwMTEwWjAzMTEwLwYDVQQD EyhiZDE5NGZlN2ViYjFkMTViYjg2MjhhNDNjYTg3Y2Y2MWQzYTE4NGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSvmg5uDinN9Rx4KME659b3RVdgh Ezs3rTupB7eqCMHWyHxAfoZfFo8bVH6g4qYq/FIVI0tEJFcAmziscRpGt+tddEVB v86cZcez7K3WQgZdRtQNbCqcWlRXqLKAbFUespmtIVvtzf2EqBzpbqiX3RkVWF8q NvkqW4XMKJ7jGR36ft0rqRWSsaIj271OhUfIdKG+4VdCiC7vBfsDlY7Gy/E9sVXb vfXSdnhCXL0XHItPOAWjiMH4OMWMHFNsjbOiJI8Fdn/OBubyvCR6cn7EbouV6YAw Wp8/O4iIOGli+kKMv/z1KjTMqReymRc7rPsUc3fipd6Wzb+o4LPt4x0FVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL0ZT+frsdFbuGKKQ8qHz2HToYTCMB8GA1UdIwQY MBaAFAu60bkl4OVj24XUHScHBdcYQKWIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzdyUnVTWGc1V1BiaGRRZEp3Y0YxeGhBcFlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8yMmQ5YjMtZmEwYi00Y2YwLTk3NDAt MmY3ZmQxZjBlOWMzLzEvQzdyUnVTWGc1V1BiaGRRZEp3Y0YxeGhBcFlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi8yMmQ5YjMtZmEwYi00Y2YwLTk3NDAtMmY3ZmQxZjBlOWMz LzEvQzdyUnVTWGc1V1BiaGRRZEp3Y0YxeGhBcFlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgQCE4QI6 HZqYCYI7z/XNIoM6piP02tdoCYGtbwX8dscC+CQQ4TyO4DlKw7LySw5ZW7pK3fmZ Ti47mFYOQUzdaurG5xBL+BsSC7p+uOD6eT+++l65b18JeunRlXltoUPUyFa7NynO zKWGVIiFV/GBxC6dJMORv6UzEMLM8/Zmz3CKVw75WWqSPesV3fzcte5w6O5YQs3g izr4NfWugvuSu+t6fKymE1wPlchckK0oQ32C/zx7CGE+omLyM+FXJRxSw26L8aP4 P99z8NM5pjE1Pqchtlp7mJlxXLJE5Fc7MLpgm1C5I0OQ3/uPI47neNgElcN/tFLb Y5NpLcgSmrvVDQ== -----END CERTIFICATE-----Generated at Mon Jan 26 06:37:40 2026 by rpki-client