This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft File: 7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft (raw, json) Hash identifier: pL3byJ3qQDqFJNPzNI3cyBs1v/rGrmkAFGTwe2puO0M= Subject key identifier: 03:02:9E:E4:16:DB:DE:C9:6D:BB:B5:F0:2B:DE:48:A0:69:79:C7:59 Authority key identifier: EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C Certificate issuer: /CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c Certificate serial: 019BF87647AF624C348570F635671E2BEF8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft Manifest number: 17EE Signing time: Mon 26 Jan 2026 04:00:59 +0000 Manifest this update: Mon 26 Jan 2026 04:00:59 +0000 Manifest next update: Tue 27 Jan 2026 04:00:59 +0000 Files and hashes: 1: 7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl (hash: TzhDl6kGZHS+8AMoh7olSPByaDK0Y6rd0oA1inPm+K8=) 2: Y1SgnZdGMmo9fGpuJl7wUQaxlkc.roa (hash: c5a6z6fFSi3Ksmn1qg/vCHzequVOvVzrYowSPYYXoZY=) 3: zgjOZSAzojMMAhNOHNiG97-1lKs.roa (hash: 9AqyfTSVIr04hBsXGR4iW4XjBoNFR8P2652xVPdhD0s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:76:47:af:62:4c:34:85:70:f6:35:67:1e:2b:ef:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c Validity Not Before: Jan 26 04:00:59 2026 GMT Not After : Jan 27 04:00:59 2026 GMT Subject: CN=03029ee416dbdec96dbbb5f02bde48a06979c759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:64:ea:68:f3:13:02:26:42:87:ab:fc:37:08: d8:0a:4b:d9:bc:56:2e:f7:38:7a:28:dc:8c:7f:53: 13:35:7c:94:38:69:27:9c:43:a9:8f:e7:ee:64:be: 16:0c:e7:5b:d9:c1:2b:8d:7e:65:1f:7c:02:11:77: 94:5e:4a:fb:be:7d:0f:f2:07:84:28:f5:f1:5f:bb: 0e:e8:fb:6c:0d:9c:47:48:c6:a4:3f:e5:88:8b:7d: f6:3b:6d:bf:71:95:b5:db:82:6c:56:ac:9f:4f:71: 75:1d:fa:af:66:9d:c7:e2:40:fe:41:94:2d:4c:57: 62:90:bd:4a:89:cb:f0:57:31:17:9f:02:59:68:9e: 71:ad:a2:9d:cf:1a:94:53:d9:89:44:70:16:24:e7: ec:f2:cb:1a:20:2a:65:21:9c:74:43:2d:b6:a7:23: ea:2e:08:52:fc:dc:5e:64:c9:5a:29:b4:41:25:04: 0c:f6:3b:fa:c3:fd:65:80:f1:5e:5c:f0:33:fa:cb: 81:d4:b4:5d:9a:07:10:a4:22:1d:63:1d:5b:f6:31: 37:fe:86:75:9d:49:8a:25:ad:11:34:38:fc:b4:21: b2:34:72:7f:be:ea:56:81:c6:85:88:0a:26:d3:a1: 21:a6:77:ac:90:d9:1e:87:b5:e9:20:df:72:83:41: 93:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:02:9E:E4:16:DB:DE:C9:6D:BB:B5:F0:2B:DE:48:A0:69:79:C7:59 X509v3 Authority Key Identifier: keyid:EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:b0:ed:f1:fe:93:5b:4c:0e:51:52:74:33:48:a9:35:77:a5: c9:99:62:78:d1:46:d2:6c:a2:9d:d1:19:2a:ec:8c:4f:a1:ee: a2:b7:4c:dc:63:0d:f4:a7:e6:6b:cf:1b:5e:f5:b8:f0:68:59: 45:f3:84:5c:a7:f3:fb:bd:5f:ab:de:dd:04:34:ce:e6:e7:c8: 5f:48:db:5a:83:c2:99:fa:de:cc:af:65:71:7f:76:80:fa:68: bb:fa:39:9d:59:b6:de:77:c5:66:7d:57:80:5b:2f:0b:3a:bd: 10:ec:d4:80:dd:35:ad:70:87:e5:2b:28:7f:fe:b4:77:31:a7: db:d4:63:b2:7c:50:7c:81:d7:bc:72:ce:fd:58:3a:e0:fe:f0: 15:f7:26:1f:eb:4c:2e:0f:e1:d4:34:5e:3a:fb:ab:b1:05:ad: 54:95:3f:fc:7e:df:57:5a:86:9a:a1:03:16:72:de:51:39:28: 09:7a:16:1f:bb:3c:14:e9:01:44:58:d4:2c:56:32:11:f0:3b: 19:59:df:6e:11:b2:17:ec:81:d1:aa:97:68:9a:0f:49:47:03: 70:53:9a:d6:f0:00:ff:c5:dc:1d:6d:fe:3b:fb:88:bb:e9:49: bb:11:8c:77:11:cb:d2:e7:5f:10:a1:f1:0f:48:9b:eb:c1:5c: 74:32:c3:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4dkevYkw0hXD2NWceK++KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjYjFlYTVhMTA1MGE4MjkyMjRlYTQ4NmMwZTIyZWJmYzc1 ZDY0MGMwHhcNMjYwMTI2MDQwMDU5WhcNMjYwMTI3MDQwMDU5WjAzMTEwLwYDVQQD EygwMzAyOWVlNDE2ZGJkZWM5NmRiYmI1ZjAyYmRlNDhhMDY5NzljNzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGTqaPMTAiZCh6v8NwjYCkvZvFYu 9zh6KNyMf1MTNXyUOGknnEOpj+fuZL4WDOdb2cErjX5lH3wCEXeUXkr7vn0P8geE KPXxX7sO6PtsDZxHSMakP+WIi332O22/cZW124JsVqyfT3F1HfqvZp3H4kD+QZQt TFdikL1KicvwVzEXnwJZaJ5xraKdzxqUU9mJRHAWJOfs8ssaICplIZx0Qy22pyPq LghS/NxeZMlaKbRBJQQM9jv6w/1lgPFeXPAz+suB1LRdmgcQpCIdYx1b9jE3/oZ1 nUmKJa0RNDj8tCGyNHJ/vupWgcaFiAom06EhpneskNkeh7XpIN9yg0GTHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAMCnuQW297Jbbu18CveSKBpecdZMB8GA1UdIwQY MBaAFOyx6loQUKgpIk6khsDiLr/HXWQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0xIcVdoQlFxQ2tpVHFTR3dPSXV2OGRkWkF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8yMWE5MjctOGRkMy00OGY3LTkyY2Ut MDJmZmNlZmYxYWNjLzEvN0xIcVdoQlFxQ2tpVHFTR3dPSXV2OGRkWkF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8yMWE5MjctOGRkMy00OGY3LTkyY2UtMDJmZmNlZmYxYWNj LzEvN0xIcVdoQlFxQ2tpVHFTR3dPSXV2OGRkWkF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVbDt8f6T W0wOUVJ0M0ipNXelyZlieNFG0myindEZKuyMT6HuordM3GMN9Kfma88bXvW48GhZ RfOEXKfz+71fq97dBDTO5ufIX0jbWoPCmfrezK9lcX92gPpou/o5nVm23nfFZn1X gFsvCzq9EOzUgN01rXCH5Ssof/60dzGn29RjsnxQfIHXvHLO/Vg64P7wFfcmH+tM Lg/h1DReOvursQWtVJU//H7fV1qGmqEDFnLeUTkoCXoWH7s8FOkBRFjULFYyEfA7 GVnfbhGyF+yB0aqXaJoPSUcDcFOa1vAA/8XcHW3+O/uIu+lJuxGMdxHL0udfEKHx D0ib68FcdDLD0w== -----END CERTIFICATE-----Generated at Mon Jan 26 10:18:38 2026 by rpki-client