This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.mft File: 7v_0DYu0okhy4Bun9C465j7ghfU.mft (raw, json) Hash identifier: xctf/a69GLlBMdP8t1FepnBSG44A4H7mWdbJckAAGQA= Subject key identifier: 3A:08:41:54:0B:6C:87:21:44:70:95:AF:6B:5C:68:81:37:00:38:75 Authority key identifier: EE:FF:F4:0D:8B:B4:A2:48:72:E0:1B:A7:F4:2E:3A:E6:3E:E0:85:F5 Certificate issuer: /CN=eefff40d8bb4a24872e01ba7f42e3ae63ee085f5 Certificate serial: 019BF1CF37CF249CB00A5612D451DC232B97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7v_0DYu0okhy4Bun9C465j7ghfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.mft Manifest number: C6 Signing time: Sat 24 Jan 2026 21:00:47 +0000 Manifest this update: Sat 24 Jan 2026 21:00:47 +0000 Manifest next update: Sun 25 Jan 2026 21:00:47 +0000 Files and hashes: 1: 0ZqH99V57Xuf54z1hwypjXXPfTk.roa (hash: a/D66uiFnK78JnobNYVCxo0xT6Yj6YVtDbbQ8ijoyQo=) 2: 7v_0DYu0okhy4Bun9C465j7ghfU.crl (hash: MxqcsLYAxxFtpAU5k8YF8Q4x4O0T1u9ip/AaKegodCM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.crl rsync://rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.mft rsync://rpki.ripe.net/repository/DEFAULT/7v_0DYu0okhy4Bun9C465j7ghfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f1:cf:37:cf:24:9c:b0:0a:56:12:d4:51:dc:23:2b:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eefff40d8bb4a24872e01ba7f42e3ae63ee085f5 Validity Not Before: Jan 24 21:00:47 2026 GMT Not After : Jan 25 21:00:47 2026 GMT Subject: CN=3a0841540b6c8721447095af6b5c688137003875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:47:2d:a1:09:6e:31:66:ee:07:39:37:ff:ae: 7f:5f:ca:9b:3c:5a:a8:98:cf:db:ca:54:43:3e:24: cf:00:26:11:8d:ae:4a:c4:d1:7d:07:4d:60:fe:ae: 1f:4c:4d:84:62:f1:e6:f4:c3:55:bf:26:ba:f7:90: f2:dc:ea:ea:35:d9:51:c7:f8:eb:13:62:2a:a0:68: d3:1e:0c:a7:27:8b:cd:c4:49:56:a3:ca:0c:a7:72: 4e:2d:38:d4:8d:f7:e9:84:52:95:f8:a9:15:19:76: ca:cc:50:c3:6a:b0:d8:c3:81:90:6e:be:3b:bb:da: 7b:07:25:35:df:1a:81:e5:2f:57:fe:af:92:2e:6d: 42:dd:e1:3b:96:c6:23:f4:c2:7d:d6:48:9a:44:98: 6e:18:0f:ca:ca:67:bf:0c:32:78:4e:f7:b1:f5:c4: 37:e1:0e:e6:3a:b9:e5:30:f8:6d:c1:5d:26:fe:3c: 0f:bb:5f:43:ae:4e:2d:b6:45:07:6d:db:d9:9a:06: 3d:a0:c1:7b:03:08:44:2c:f8:43:b4:f7:b3:e2:75: 56:91:58:ae:61:42:d1:05:de:e3:ff:31:86:9e:6e: 3c:a0:81:69:12:12:2d:fc:8a:3e:8e:01:23:9c:09: 33:c0:1e:7a:a5:7f:23:23:ee:be:1e:99:78:4e:b0: 2d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:08:41:54:0B:6C:87:21:44:70:95:AF:6B:5C:68:81:37:00:38:75 X509v3 Authority Key Identifier: keyid:EE:FF:F4:0D:8B:B4:A2:48:72:E0:1B:A7:F4:2E:3A:E6:3E:E0:85:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7v_0DYu0okhy4Bun9C465j7ghfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:ad:e1:db:fb:7a:39:60:d7:6d:aa:9b:a5:db:31:7e:89:2f: 85:37:d0:75:6e:39:c7:ee:5b:cd:1c:7a:14:8d:9b:02:92:f0: 10:3b:b0:df:be:21:25:f3:f5:f7:69:82:84:6d:e9:21:34:57: 36:65:cf:dc:a9:a0:34:72:93:35:23:bd:fc:84:8e:87:b4:c1: 15:00:00:da:94:d4:39:2d:38:60:1f:f3:6f:2d:1b:4f:4d:80: d1:a8:13:58:c0:32:4e:04:f1:cf:e3:15:0e:b6:bf:fd:78:29: f8:6a:f2:74:04:b7:d3:7b:3a:13:25:d2:c5:27:dd:ef:df:cc: f2:d4:20:3c:b7:75:3b:1b:2a:dd:4d:8f:cc:68:31:76:4c:2c: c3:a9:6e:35:a1:81:3b:e6:9a:bc:cd:98:23:2b:20:b8:73:9a: d8:f2:56:e7:01:f4:29:0e:1c:e6:0b:26:ff:93:93:50:c8:c0: 21:a5:93:af:64:7e:80:12:ca:68:73:09:80:48:29:ba:17:d4: de:02:75:ec:b1:ea:07:61:82:8d:a6:29:7a:db:ac:35:ac:c1: dd:60:05:5c:3a:b3:6c:41:54:4d:85:9e:28:aa:75:0a:54:02: 7f:8e:3e:d4:25:dd:b2:50:ef:74:2a:08:ba:94:6a:6c:25:34: fe:c8:c4:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvxzzfPJJywClYS1FHcIyuXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlZmZmNDBkOGJiNGEyNDg3MmUwMWJhN2Y0MmUzYWU2M2Vl MDg1ZjUwHhcNMjYwMTI0MjEwMDQ3WhcNMjYwMTI1MjEwMDQ3WjAzMTEwLwYDVQQD EygzYTA4NDE1NDBiNmM4NzIxNDQ3MDk1YWY2YjVjNjg4MTM3MDAzODc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA60ctoQluMWbuBzk3/65/X8qbPFqo mM/bylRDPiTPACYRja5KxNF9B01g/q4fTE2EYvHm9MNVvya695Dy3OrqNdlRx/jr E2IqoGjTHgynJ4vNxElWo8oMp3JOLTjUjffphFKV+KkVGXbKzFDDarDYw4GQbr47 u9p7ByU13xqB5S9X/q+SLm1C3eE7lsYj9MJ91kiaRJhuGA/Kyme/DDJ4Tvex9cQ3 4Q7mOrnlMPhtwV0m/jwPu19Drk4ttkUHbdvZmgY9oMF7AwhELPhDtPez4nVWkViu YULRBd7j/zGGnm48oIFpEhIt/Io+jgEjnAkzwB56pX8jI+6+Hpl4TrAtuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDoIQVQLbIchRHCVr2tcaIE3ADh1MB8GA1UdIwQY MBaAFO7/9A2LtKJIcuAbp/QuOuY+4IX1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3ZfMERZdTBva2h5NEJ1bjlDNDY1ajdnaGZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8zZWJkYmEtNDZjOS00MDNjLThhMGQt MTQxZDMzYzc0M2RmLzEvN3ZfMERZdTBva2h5NEJ1bjlDNDY1ajdnaGZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8zZWJkYmEtNDZjOS00MDNjLThhMGQtMTQxZDMzYzc0M2Rm LzEvN3ZfMERZdTBva2h5NEJ1bjlDNDY1ajdnaGZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArK3h2/t6 OWDXbaqbpdsxfokvhTfQdW45x+5bzRx6FI2bApLwEDuw374hJfP192mChG3pITRX NmXP3KmgNHKTNSO9/ISOh7TBFQAA2pTUOS04YB/zby0bT02A0agTWMAyTgTxz+MV Dra//Xgp+GrydAS303s6EyXSxSfd79/M8tQgPLd1Oxsq3U2PzGgxdkwsw6luNaGB O+aavM2YIysguHOa2PJW5wH0KQ4c5gsm/5OTUMjAIaWTr2R+gBLKaHMJgEgpuhfU 3gJ17LHqB2GCjaYpetusNazB3WAFXDqzbEFUTYWeKKp1ClQCf44+1CXdslDvdCoI upRqbCU0/sjEZQ== -----END CERTIFICATE-----Generated at Sun Jan 25 09:25:48 2026 by rpki-client