This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft File: 7W2oLbx9figY-WaAtm787bEIeUc.mft (raw, json) Hash identifier: oqfAWujGRLqzw+RswLU1a7dt7v97NglNLfADmXU6EcI= Subject key identifier: F2:AC:A1:CA:37:BE:0F:2C:25:1D:E2:55:AC:AC:DC:ED:3F:E7:DB:F3 Authority key identifier: ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47 Certificate issuer: /CN=ed6da82dbc7d7e2818f96680b66efcedb1087947 Certificate serial: 019BF6BE920F7201EF62977DBD842624DC09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft Manifest number: 17FE Signing time: Sun 25 Jan 2026 20:00:42 +0000 Manifest this update: Sun 25 Jan 2026 20:00:42 +0000 Manifest next update: Mon 26 Jan 2026 20:00:42 +0000 Files and hashes: 1: 7W2oLbx9figY-WaAtm787bEIeUc.crl (hash: NNcr74+vhZ/ZxTEmAb1T5aH7LNdO5+4rxuv3uzqSJHc=) 2: JsIYFyLR74GQysEIqnGykpSJQUI.roa (hash: iaHnb3OAMXTWsBgbEKrwhuTvCOgUBCodv1kDk+4mavA=) 3: NKy6Tyf5RyRglBk0yV_ExDPmxuo.roa (hash: ebb1VqS7aGDzvUXqYNWhDAqOkeGUT55XR6ggJqYbSMU=) 4: OUVdt4o2LS_i-Gunl0nnzrdW_jI.roa (hash: LG7q3NWzE4G2vBN3PTFInwdMW/gtEeHrNbl3IVaBPnE=) 5: YH5NKMifzBmhf3nIG20jcgRcBU0.roa (hash: V5cTAFBzO7CMX8CCIxzqRfhGsna670gP9hgi/NVqRBc=) 6: mCt7UGq2s1qnA69MYZljhYxWiD4.roa (hash: qi5pYWU2cgvvhT1J3aGpMqhq1J2xvA8Deh0/Hh6j/Rg=) 7: sRMtAiiTomuNQjvyhVAd07KYQM0.roa (hash: 1ZDSFc07GgvbF2RmQMqVaUItzv9tv/zTWoNdPvDIoXs=) 8: sjgUHUj_TSMku2aB-f61amSIyCM.roa (hash: /+JjugGAK765zafXtIVOVPtipqmOZ3WaKKGK25tgoO4=) 9: zhcr9I3s3OVNgzaih7vQHJr6C0Y.roa (hash: nLQ289DooRLgqJOtJaVgt01KECd6y0NdXrqka7CO4Ko=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:92:0f:72:01:ef:62:97:7d:bd:84:26:24:dc:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed6da82dbc7d7e2818f96680b66efcedb1087947 Validity Not Before: Jan 25 20:00:42 2026 GMT Not After : Jan 26 20:00:42 2026 GMT Subject: CN=f2aca1ca37be0f2c251de255acacdced3fe7dbf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6a:0a:06:87:77:86:53:8b:e5:a9:ca:fa:33: 06:6b:df:b6:cc:23:2e:8b:8b:b6:fe:64:31:b3:5c: bc:bf:33:d9:57:c3:37:a3:bc:a0:bd:56:10:72:42: c2:b1:23:c1:47:5c:61:88:b1:6e:23:95:cc:2c:2b: eb:8c:21:ec:7f:e5:42:a3:dd:6f:dd:56:d3:c9:fb: 86:cd:fd:12:7b:9b:c8:2b:bb:30:86:7a:11:b1:4c: c0:cb:1b:91:62:c8:a5:44:59:13:7e:74:67:b6:3e: 9b:93:01:ec:64:4d:9a:ab:b5:a7:df:c4:cf:9b:b6: 0a:7b:6b:33:d4:ce:67:26:98:32:69:31:f2:68:6d: 20:69:9a:08:31:0a:5d:9e:b6:12:40:a0:ee:a1:4b: 98:9d:65:64:a2:4e:9f:e3:02:64:13:ef:44:78:81: ef:d9:66:38:09:ed:53:d3:fd:3a:ea:04:e1:a9:ee: 2f:21:d7:2d:94:38:cc:36:ac:21:cc:37:5d:83:04: 5d:7f:d3:b9:ab:8b:3d:d3:9c:63:f7:da:42:b6:8f: 27:40:e2:16:31:f7:41:00:e2:8d:3a:18:a7:4f:22: ed:11:2a:c5:f0:a0:b3:80:27:2b:a5:51:44:f8:b3: 20:58:8b:2f:66:6b:09:ab:07:b8:79:ca:d4:86:c8: 08:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:AC:A1:CA:37:BE:0F:2C:25:1D:E2:55:AC:AC:DC:ED:3F:E7:DB:F3 X509v3 Authority Key Identifier: keyid:ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:07:34:e7:09:c8:75:71:74:56:20:c3:67:34:3a:a2:c1:94: 4b:28:ce:62:91:66:5f:c1:ee:ab:d3:83:fa:92:f0:fd:72:9a: 07:be:9f:71:a3:31:21:2e:e5:10:73:8b:2f:cc:a4:35:30:0b: cb:0f:bc:f0:08:35:69:34:85:fb:ca:47:64:ae:c0:24:c4:ca: 9d:38:2f:2e:2a:69:21:81:c1:d3:55:cb:b2:25:a3:76:5f:a9: 7e:1b:f2:bd:4c:4a:e7:b6:85:62:e7:d9:01:4a:7e:6e:d9:5e: cc:5e:57:71:71:f7:e8:2b:8f:84:5f:14:d5:4b:54:cc:e5:5a: 73:0f:c0:c5:c5:dc:a6:ca:0b:cd:c2:ac:96:e3:66:75:2c:34: 7e:55:db:ac:7b:d3:29:9c:dd:70:70:8a:c9:eb:0a:37:7d:bb: b3:c6:80:e9:b3:8a:06:b0:3d:2b:08:79:90:f5:6e:41:56:b9: ec:0b:84:b0:93:5f:39:bc:cc:76:e1:93:f5:98:42:65:7c:96: a9:d9:85:83:8c:ce:70:2c:be:8d:39:0a:3d:af:63:8b:98:18: 2b:1c:40:67:ea:81:0b:f2:e3:1a:44:29:64:59:72:8a:e0:9e: b8:e2:8b:3f:07:53:a3:b4:ec:7c:27:b0:e0:ba:36:c9:11:1e: 86:62:48:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vpIPcgHvYpd9vYQmJNwJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNmRhODJkYmM3ZDdlMjgxOGY5NjY4MGI2NmVmY2VkYjEw ODc5NDcwHhcNMjYwMTI1MjAwMDQyWhcNMjYwMTI2MjAwMDQyWjAzMTEwLwYDVQQD EyhmMmFjYTFjYTM3YmUwZjJjMjUxZGUyNTVhY2FjZGNlZDNmZTdkYmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWoKBod3hlOL5anK+jMGa9+2zCMu i4u2/mQxs1y8vzPZV8M3o7ygvVYQckLCsSPBR1xhiLFuI5XMLCvrjCHsf+VCo91v 3VbTyfuGzf0Se5vIK7swhnoRsUzAyxuRYsilRFkTfnRntj6bkwHsZE2aq7Wn38TP m7YKe2sz1M5nJpgyaTHyaG0gaZoIMQpdnrYSQKDuoUuYnWVkok6f4wJkE+9EeIHv 2WY4Ce1T0/066gThqe4vIdctlDjMNqwhzDddgwRdf9O5q4s905xj99pCto8nQOIW MfdBAOKNOhinTyLtESrF8KCzgCcrpVFE+LMgWIsvZmsJqwe4ecrUhsgIMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPKsoco3vg8sJR3iVays3O0/59vzMB8GA1UdIwQY MBaAFO1tqC28fX4oGPlmgLZu/O2xCHlHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1cyb0xieDlmaWdZLVdhQXRtNzg3YkVJZVVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8zNTQ5ZmItZTNhMy00MTI0LWIzYjAt NTk5NTc3ODdiMDE1LzEvN1cyb0xieDlmaWdZLVdhQXRtNzg3YkVJZVVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8zNTQ5ZmItZTNhMy00MTI0LWIzYjAtNTk5NTc3ODdiMDE1 LzEvN1cyb0xieDlmaWdZLVdhQXRtNzg3YkVJZVVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhAc05wnI dXF0ViDDZzQ6osGUSyjOYpFmX8Huq9OD+pLw/XKaB76fcaMxIS7lEHOLL8ykNTAL yw+88Ag1aTSF+8pHZK7AJMTKnTgvLippIYHB01XLsiWjdl+pfhvyvUxK57aFYufZ AUp+btlezF5XcXH36CuPhF8U1UtUzOVacw/AxcXcpsoLzcKsluNmdSw0flXbrHvT KZzdcHCKyesKN327s8aA6bOKBrA9Kwh5kPVuQVa57AuEsJNfObzMduGT9ZhCZXyW qdmFg4zOcCy+jTkKPa9ji5gYKxxAZ+qBC/LjGkQpZFlyiuCeuOKLPwdTo7TsfCew 4Lo2yREehmJIoQ== -----END CERTIFICATE-----Generated at Mon Jan 26 03:10:55 2026 by rpki-client