This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft File: a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft (raw, json) Hash identifier: mlnvqfYtu9hw0PYZGcx1hfKqihnEw/Y/NKc7ZDqzIMY= Subject key identifier: 62:B9:07:F1:E2:1F:9C:DA:92:04:A5:06:EA:B4:94:80:31:79:AA:F9 Authority key identifier: 6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35 Certificate issuer: /CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535 Certificate serial: 019BF4D015D5CF37EC5389C00E529D932F8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft Manifest number: 17E6 Signing time: Sun 25 Jan 2026 11:00:36 +0000 Manifest this update: Sun 25 Jan 2026 11:00:36 +0000 Manifest next update: Mon 26 Jan 2026 11:00:36 +0000 Files and hashes: 1: Yg6FVNZBl1w2Rze2Thsw4t3zCtA.roa (hash: r0yjU3GNEbU4eEC9QPmI7gQD6DPzo++uXSGijCopcR8=) 2: a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl (hash: PxlLYPY7Bx5Q9dPkPlcNVxwBUCgPg5oc07ypOrjowDE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:15:d5:cf:37:ec:53:89:c0:0e:52:9d:93:2f:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535 Validity Not Before: Jan 25 11:00:36 2026 GMT Not After : Jan 26 11:00:36 2026 GMT Subject: CN=62b907f1e21f9cda9204a506eab494803179aaf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2a:41:e5:a9:d7:aa:71:fb:05:6f:3c:ae:c3: eb:66:e1:d0:39:8d:60:ce:91:9e:e4:87:e1:6a:4a: 60:16:24:29:ae:14:b3:d6:cc:ba:5d:ed:8f:9a:c0: 16:d8:ae:c7:e9:fe:4a:c2:07:4c:b7:bb:1e:59:e6: ac:79:db:6c:26:b4:be:63:a6:86:a5:95:1d:9a:14: e5:bb:96:f3:a0:9d:e0:76:fc:69:d2:dd:09:cd:0f: 82:6d:c9:f3:b8:ec:28:2f:49:a4:69:7e:f1:24:8a: af:62:be:37:03:3a:20:2f:3f:46:de:a5:a8:69:71: 46:df:d9:c6:7a:f9:07:23:84:0b:ec:01:5d:b2:fc: fd:a6:ec:56:4c:01:96:98:b2:97:4e:e8:83:b6:ea: ee:10:81:01:d8:43:63:55:46:6d:c5:3c:a1:b3:ea: 63:a4:31:78:27:65:15:f1:cf:ca:d5:2b:f0:af:5d: 8c:26:cf:fe:b7:aa:e9:9f:6f:2e:ac:bb:59:92:0d: c3:c3:81:eb:e0:b1:95:36:ad:ae:58:1e:b9:82:e9: 19:79:0e:50:00:b1:d9:a2:b9:5a:80:51:eb:d9:9c: 71:40:b1:df:99:43:c9:b8:54:40:f7:5f:00:eb:0d: 85:22:38:cc:3f:ab:ce:4c:56:21:27:ec:47:06:a6: 50:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:B9:07:F1:E2:1F:9C:DA:92:04:A5:06:EA:B4:94:80:31:79:AA:F9 X509v3 Authority Key Identifier: keyid:6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:47:36:a9:6b:0b:65:0a:dd:de:37:fa:f8:a2:cd:16:d2:27: d4:a1:e9:0f:ec:d8:32:b3:b7:39:8e:3f:e3:40:f8:5f:82:7e: 3e:13:40:5d:49:a5:69:b3:6b:77:b2:23:2b:19:a6:9b:c6:cc: 96:0a:ab:1b:95:19:7c:a5:ab:a2:a2:33:11:73:c8:7b:38:a7: d6:2e:63:0c:ad:6a:aa:19:ea:85:98:dc:1e:8f:a4:12:78:e1: de:23:d6:af:77:11:3a:bc:57:ab:d7:7e:1c:69:70:e9:03:9b: ed:a1:6c:17:39:a9:c6:e8:98:3d:87:f3:94:f1:b7:06:ef:3b: 6c:0b:ba:85:23:0c:bf:35:c9:28:09:47:98:36:19:0d:e6:98: bd:30:56:0e:9a:8a:10:2a:75:d7:eb:63:21:bf:25:4b:18:04: 9a:d6:9c:a3:7a:0d:9d:63:c6:2a:f3:79:f0:c9:a6:48:99:97: 7b:69:89:3b:aa:b3:f2:b4:98:1e:5d:57:94:a5:1a:f2:c6:98: b7:5d:b4:fb:24:ee:b0:05:d6:70:0b:fa:5b:4d:83:89:1c:ad: 50:50:ee:2d:6f:60:87:a4:ac:21:ab:4f:7e:db:37:3f:35:f7: 4a:fd:64:83:02:c4:3d:88:e5:24:c6:ac:d1:3d:89:ef:0b:61: d8:a9:f1:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00BXVzzfsU4nADlKdky+MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYjkxMjViOGExMGQzMjIzNDg2ODFhMmQyYWM3ZDY3ZDJh ZDI1MzUwHhcNMjYwMTI1MTEwMDM2WhcNMjYwMTI2MTEwMDM2WjAzMTEwLwYDVQQD Eyg2MmI5MDdmMWUyMWY5Y2RhOTIwNGE1MDZlYWI0OTQ4MDMxNzlhYWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAripB5anXqnH7BW88rsPrZuHQOY1g zpGe5IfhakpgFiQprhSz1sy6Xe2PmsAW2K7H6f5KwgdMt7seWeasedtsJrS+Y6aG pZUdmhTlu5bzoJ3gdvxp0t0JzQ+CbcnzuOwoL0mkaX7xJIqvYr43AzogLz9G3qWo aXFG39nGevkHI4QL7AFdsvz9puxWTAGWmLKXTuiDturuEIEB2ENjVUZtxTyhs+pj pDF4J2UV8c/K1Svwr12MJs/+t6rpn28urLtZkg3Dw4Hr4LGVNq2uWB65gukZeQ5Q ALHZorlagFHr2ZxxQLHfmUPJuFRA918A6w2FIjjMP6vOTFYhJ+xHBqZQkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGK5B/HiH5zakgSlBuq0lIAxear5MB8GA1UdIwQY MBaAFGu5EluKENMiNIaBotKsfWfSrSU1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTdrU1c0b1EweUkwaG9HaTBxeDlaOUt0SlRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS80YjI4YjgtNzdmNi00NmQzLWI4ZDUt ODNiYzQxM2EwNDhkLzEvYTdrU1c0b1EweUkwaG9HaTBxeDlaOUt0SlRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS80YjI4YjgtNzdmNi00NmQzLWI4ZDUtODNiYzQxM2EwNDhk LzEvYTdrU1c0b1EweUkwaG9HaTBxeDlaOUt0SlRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZkc2qWsL ZQrd3jf6+KLNFtIn1KHpD+zYMrO3OY4/40D4X4J+PhNAXUmlabNrd7IjKxmmm8bM lgqrG5UZfKWroqIzEXPIezin1i5jDK1qqhnqhZjcHo+kEnjh3iPWr3cROrxXq9d+ HGlw6QOb7aFsFzmpxuiYPYfzlPG3Bu87bAu6hSMMvzXJKAlHmDYZDeaYvTBWDpqK ECp11+tjIb8lSxgEmtaco3oNnWPGKvN58MmmSJmXe2mJO6qz8rSYHl1XlKUa8saY t120+yTusAXWcAv6W02DiRytUFDuLW9gh6SsIatPfts3PzX3Sv1kgwLEPYjlJMas 0T2J7wth2KnxVg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:01:02 2026 by rpki-client