This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft File: 71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft (raw, json) Hash identifier: TdybqVr1Wh1d0EXZY0SbuJ39mbligCuV54GEv7V+WtE= Subject key identifier: 3F:EA:82:FD:0A:34:19:1B:CF:CA:22:0E:B2:CA:AA:63:FA:86:26:FB Authority key identifier: EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14 Certificate issuer: /CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14 Certificate serial: 019BF31893CAE1FD6E4B47A3F66878BB647F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft Manifest number: 1250 Signing time: Sun 25 Jan 2026 03:00:32 +0000 Manifest this update: Sun 25 Jan 2026 03:00:32 +0000 Manifest next update: Mon 26 Jan 2026 03:00:32 +0000 Files and hashes: 1: 71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl (hash: JmcqwHmm78VLQNsUv1+Al2Jh61FiPocVDF1qsbTNR5s=) 2: FUAG3jq8oW-DG-4OVip2j9_K6zM.roa (hash: X1mjWztgnVQSSGLyPzOsDPZqwti1AiSyexfKdPbUPdM=) 3: MkcX9GenTKmR5jedlZaDXtOqlb8.roa (hash: HYFxXiizcZIEgsQl7ewj/koOWIU6qo+dNkAHdlTz/+A=) 4: U0tl-UVjdgoquFk_RP8dvu9_bzA.roa (hash: fvBK5Ool8MKV1KD0bY966e8iK9zhJNvA5b6LpcKGcn8=) 5: WTuF7GM_g7zyE_8wXHuTXrCUE8Q.roa (hash: ToxcyUtODIjk+vfIoE2fDiyxO6Xp7CGXZG+vHQsn3hA=) 6: i8DSsz1zrzQenpw3T2bP8cFRsq8.roa (hash: oEuQy5j/C31ArjuLYoalrrQGCWj0f7zf2ngtaCvBjYo=) 7: sUrIEpm5C4rBhagjdZq3jf6wqrY.roa (hash: jRLTkZKX0jd/Ii5LEPQsVlaAGfAK0xdao7SE2gBfvAA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:18:93:ca:e1:fd:6e:4b:47:a3:f6:68:78:bb:64:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14 Validity Not Before: Jan 25 03:00:32 2026 GMT Not After : Jan 26 03:00:32 2026 GMT Subject: CN=3fea82fd0a34191bcfca220eb2caaa63fa8626fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e3:5a:68:e1:44:fb:5c:f9:b0:2a:d8:0b:bd: d7:07:47:c4:2c:b2:86:27:0d:e8:f6:e7:bb:bf:0e: 90:db:3d:a6:d4:8d:a9:db:01:be:9c:d2:05:e8:4e: fb:8a:22:0a:79:f0:6c:40:f1:9a:0a:60:bc:34:13: 6d:41:5a:50:0f:9b:5a:11:77:08:d8:90:54:49:79: c8:bc:a1:e9:6c:fb:58:a5:94:7a:60:a5:3f:e1:32: b1:ab:78:3e:17:ae:af:52:d4:4a:e5:16:11:a6:bd: d3:bf:ea:2e:3d:0f:69:a1:ea:c6:d7:3b:1a:4d:bb: d8:70:2d:98:79:25:a5:c2:6d:83:83:c0:f2:d7:fa: f5:0a:d1:4a:dc:41:99:b1:0e:3e:ba:fb:85:eb:71: 49:16:cf:fe:c7:b8:28:0c:6d:42:58:3e:cf:67:c4: b6:0e:21:20:13:e5:0a:6a:8f:15:1a:e6:68:b6:fe: 00:10:3c:39:df:ab:0d:37:e0:5b:8f:cc:f8:e0:b2: 7e:b5:de:e7:26:3a:42:11:75:7b:63:f3:fb:04:43: bf:c4:92:2e:c8:dc:03:83:42:de:1e:b8:85:52:70: f8:cc:d2:f0:3c:b0:43:ff:ae:9c:e1:34:10:13:f4: a7:21:c3:f3:dc:ca:f6:e0:20:06:40:7d:3d:13:46: e1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:EA:82:FD:0A:34:19:1B:CF:CA:22:0E:B2:CA:AA:63:FA:86:26:FB X509v3 Authority Key Identifier: keyid:EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:f0:b7:be:75:f4:09:66:52:62:df:a5:4e:d3:67:ca:66:92: 04:62:a6:f0:58:97:dc:df:19:00:bf:98:59:16:a1:96:71:ce: dc:89:7d:09:b6:94:b6:47:12:aa:fa:25:d7:00:cc:8c:e6:df: 96:84:e3:f8:31:fa:5d:6b:9d:18:3d:ea:80:8a:74:33:49:a1: b3:ee:66:7f:3f:2d:b3:e4:8d:ca:53:3e:b4:18:bd:41:1c:68: d5:6b:da:3d:5f:a2:cc:c5:42:dc:f5:55:83:27:8f:74:a2:4a: 94:20:a5:70:76:0b:07:ea:df:42:c0:a2:fb:0c:34:37:9e:0b: ab:87:c4:51:2c:72:71:9f:56:12:96:bc:1f:60:99:b7:98:05: 5e:12:84:d0:32:3a:a2:9e:90:5b:70:0b:6c:1a:99:2e:90:09: e7:1f:e0:9b:df:87:df:a0:b9:6c:10:ad:7a:88:b5:b7:38:9e: e5:17:34:f9:1a:8d:e1:70:2b:1e:6e:98:6a:00:8a:a0:1e:7a: 39:01:a1:94:ef:d2:f0:98:93:c8:ce:bb:7b:a2:25:61:3d:b9: b4:ed:9f:45:29:ae:c8:be:df:27:28:2e:d8:61:15:ba:47:41: c2:f3:00:e6:15:0d:03:50:ec:00:fe:48:3f:b9:cc:f6:35:2d: cc:07:3e:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzGJPK4f1uS0ej9mh4u2R/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTRkOWU0MWVhNWUyZDE2MWI3YzRjZGIyZTQ3MDJjNGYy NDhlMTQwHhcNMjYwMTI1MDMwMDMyWhcNMjYwMTI2MDMwMDMyWjAzMTEwLwYDVQQD EygzZmVhODJmZDBhMzQxOTFiY2ZjYTIyMGViMmNhYWE2M2ZhODYyNmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlONaaOFE+1z5sCrYC73XB0fELLKG Jw3o9ue7vw6Q2z2m1I2p2wG+nNIF6E77iiIKefBsQPGaCmC8NBNtQVpQD5taEXcI 2JBUSXnIvKHpbPtYpZR6YKU/4TKxq3g+F66vUtRK5RYRpr3Tv+ouPQ9poerG1zsa TbvYcC2YeSWlwm2Dg8Dy1/r1CtFK3EGZsQ4+uvuF63FJFs/+x7goDG1CWD7PZ8S2 DiEgE+UKao8VGuZotv4AEDw536sNN+Bbj8z44LJ+td7nJjpCEXV7Y/P7BEO/xJIu yNwDg0LeHriFUnD4zNLwPLBD/66c4TQQE/SnIcPz3Mr24CAGQH09E0bhNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD/qgv0KNBkbz8oiDrLKqmP6hib7MB8GA1UdIwQY MBaAFO9U2eQepeLRYbfEzbLkcCxPJI4UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFUWjVCNmw0dEZodDhUTnN1UndMRThramhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9lYzAwZTItY2JkYS00YjMyLThjMzIt ZmJjNmZjYjVlN2E2LzEvNzFUWjVCNmw0dEZodDhUTnN1UndMRThramhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9lYzAwZTItY2JkYS00YjMyLThjMzItZmJjNmZjYjVlN2E2 LzEvNzFUWjVCNmw0dEZodDhUTnN1UndMRThramhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe/C3vnX0 CWZSYt+lTtNnymaSBGKm8FiX3N8ZAL+YWRahlnHO3Il9CbaUtkcSqvol1wDMjObf loTj+DH6XWudGD3qgIp0M0mhs+5mfz8ts+SNylM+tBi9QRxo1WvaPV+izMVC3PVV gyePdKJKlCClcHYLB+rfQsCi+ww0N54Lq4fEUSxycZ9WEpa8H2CZt5gFXhKE0DI6 op6QW3ALbBqZLpAJ5x/gm9+H36C5bBCteoi1tzie5Rc0+RqN4XArHm6YagCKoB56 OQGhlO/S8JiTyM67e6IlYT25tO2fRSmuyL7fJygu2GEVukdBwvMA5hUNA1DsAP5I P7nM9jUtzAc+JA== -----END CERTIFICATE-----Generated at Sun Jan 25 10:41:33 2026 by rpki-client