This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft File: 7_ktk2igmtNvelft-9CgXZ_UDh0.mft (raw, json) Hash identifier: 09efhJR0Q+tI6nlDjL33gwya5J0/8dTqrvcBlhU8Kts= Subject key identifier: AB:D9:6C:01:0C:F2:D9:18:0F:CE:8B:4C:65:58:6C:FA:E2:95:92:60 Authority key identifier: EF:F9:2D:93:68:A0:9A:D3:6F:7A:57:ED:FB:D0:A0:5D:9F:D4:0E:1D Certificate issuer: /CN=eff92d9368a09ad36f7a57edfbd0a05d9fd40e1d Certificate serial: 019BF83F1637D2894B57B09B877E1DB34F22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft Manifest number: 17EB Signing time: Mon 26 Jan 2026 03:00:42 +0000 Manifest this update: Mon 26 Jan 2026 03:00:42 +0000 Manifest next update: Tue 27 Jan 2026 03:00:42 +0000 Files and hashes: 1: 7_ktk2igmtNvelft-9CgXZ_UDh0.crl (hash: BNkq1NlgdBBxIEBv5ekIQ8wEO9FhwoprNfd2xaia0Os=) 2: krZVBDiWkvm4PD1vJnwzxrmFRBs.roa (hash: U9k/zcmCxVKcnCozIhgmcwJH3uFDUp/Q9q36sgU5rBk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.crl rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:16:37:d2:89:4b:57:b0:9b:87:7e:1d:b3:4f:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eff92d9368a09ad36f7a57edfbd0a05d9fd40e1d Validity Not Before: Jan 26 03:00:42 2026 GMT Not After : Jan 27 03:00:42 2026 GMT Subject: CN=abd96c010cf2d9180fce8b4c65586cfae2959260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9a:d9:eb:6c:a0:c8:15:7b:9c:0a:6a:a7:ab: ef:10:da:9a:57:ce:a0:a4:b3:73:d0:b4:fb:2e:5d: 6a:eb:86:4a:32:ad:27:c1:3f:34:ab:01:1f:d8:40: 9c:ac:6c:4e:14:3a:30:79:9c:28:e2:85:6a:d5:d3: 44:37:d3:01:7d:93:55:29:46:00:7b:fa:b5:59:37: 00:31:b5:5d:70:e0:c3:18:41:bb:34:fb:bf:30:4c: 6d:2d:79:08:e7:a6:dd:4d:64:29:74:0b:94:f6:32: b9:cd:b8:5a:64:a5:13:61:49:bc:9a:54:fa:d6:1c: 42:f6:d5:55:7c:9e:98:57:58:ea:82:fc:45:05:7b: e8:63:fa:67:9d:ad:13:d6:a8:6e:9a:1c:7b:6b:33: 65:8c:fb:12:a5:50:14:18:6c:61:88:a4:65:44:97: c5:0a:86:12:51:53:09:23:55:44:72:11:bf:7c:ea: f7:52:7e:f7:b1:67:34:16:b5:c9:6f:66:e1:68:8b: 5d:45:ce:5a:c9:8a:b5:b5:cb:e8:87:a6:83:1a:d5: aa:10:db:56:9f:22:86:00:fb:96:54:2e:46:b5:af: c8:61:02:12:42:5d:93:eb:c1:39:a2:30:d1:94:4e: a7:18:4b:31:e5:12:15:4d:87:f4:3c:8a:56:49:64: ea:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:D9:6C:01:0C:F2:D9:18:0F:CE:8B:4C:65:58:6C:FA:E2:95:92:60 X509v3 Authority Key Identifier: keyid:EF:F9:2D:93:68:A0:9A:D3:6F:7A:57:ED:FB:D0:A0:5D:9F:D4:0E:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:bc:4c:0f:d6:70:9d:71:51:64:55:f2:82:c6:b6:ee:02:ff: fb:af:65:d6:58:ec:5e:f6:e5:0f:37:85:d7:6c:3e:18:11:11: 75:e4:0f:2e:95:ea:1d:d9:68:ae:c4:0e:d3:31:fa:97:e9:54: 75:57:ca:49:69:6e:49:4a:55:66:ef:67:9d:5b:73:ed:04:2c: 54:af:bc:9e:c4:12:ca:6e:1d:08:ab:31:dd:88:bf:9e:bb:53: 3e:af:9c:83:45:6f:66:b2:26:5a:78:f7:ba:92:75:e4:09:b5: 3f:12:b6:a5:1b:b0:46:83:7a:8e:8b:f8:e3:eb:a4:3f:2f:f0: e6:a7:4d:93:fd:52:e3:cb:03:e4:f2:b2:29:17:ea:b6:4a:f0: e2:12:c2:c5:0d:35:e0:89:4a:64:9f:6e:66:f0:c0:c0:98:0a: b6:e9:2f:5b:08:8c:76:42:8f:6c:54:6d:fa:55:f9:be:91:14: 5a:33:b1:bf:74:50:ef:0b:47:16:a1:93:ed:5d:de:81:b9:08: ea:14:03:d7:0f:67:80:b5:b6:f0:e6:f3:d2:ec:23:13:41:13: c8:90:bc:af:b3:ee:cc:b2:68:4f:e1:49:ea:a3:90:f8:21:a3: 95:9d:df:1d:29:78:6e:7c:bf:fb:48:c0:e1:13:bb:08:86:82: f9:e4:ed:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4PxY30olLV7Cbh34ds08iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmZjkyZDkzNjhhMDlhZDM2ZjdhNTdlZGZiZDBhMDVkOWZk NDBlMWQwHhcNMjYwMTI2MDMwMDQyWhcNMjYwMTI3MDMwMDQyWjAzMTEwLwYDVQQD EyhhYmQ5NmMwMTBjZjJkOTE4MGZjZThiNGM2NTU4NmNmYWUyOTU5MjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJrZ62ygyBV7nApqp6vvENqaV86g pLNz0LT7Ll1q64ZKMq0nwT80qwEf2ECcrGxOFDoweZwo4oVq1dNEN9MBfZNVKUYA e/q1WTcAMbVdcODDGEG7NPu/MExtLXkI56bdTWQpdAuU9jK5zbhaZKUTYUm8mlT6 1hxC9tVVfJ6YV1jqgvxFBXvoY/pnna0T1qhumhx7azNljPsSpVAUGGxhiKRlRJfF CoYSUVMJI1VEchG/fOr3Un73sWc0FrXJb2bhaItdRc5ayYq1tcvoh6aDGtWqENtW nyKGAPuWVC5Gta/IYQISQl2T68E5ojDRlE6nGEsx5RIVTYf0PIpWSWTqswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKvZbAEM8tkYD86LTGVYbPrilZJgMB8GA1UdIwQY MBaAFO/5LZNooJrTb3pX7fvQoF2f1A4dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN19rdGsyaWdtdE52ZWxmdC05Q2dYWl9VRGgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83ZjcyNTktNTNkMC00MWFlLTk1MWQt NDAwNDE3Yzk3MTdlLzEvN19rdGsyaWdtdE52ZWxmdC05Q2dYWl9VRGgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi83ZjcyNTktNTNkMC00MWFlLTk1MWQtNDAwNDE3Yzk3MTdl LzEvN19rdGsyaWdtdE52ZWxmdC05Q2dYWl9VRGgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMbxMD9Zw nXFRZFXygsa27gL/+69l1ljsXvblDzeF12w+GBERdeQPLpXqHdlorsQO0zH6l+lU dVfKSWluSUpVZu9nnVtz7QQsVK+8nsQSym4dCKsx3Yi/nrtTPq+cg0VvZrImWnj3 upJ15Am1PxK2pRuwRoN6jov44+ukPy/w5qdNk/1S48sD5PKyKRfqtkrw4hLCxQ01 4IlKZJ9uZvDAwJgKtukvWwiMdkKPbFRt+lX5vpEUWjOxv3RQ7wtHFqGT7V3egbkI 6hQD1w9ngLW28Obz0uwjE0ETyJC8r7PuzLJoT+FJ6qOQ+CGjlZ3fHSl4bny/+0jA 4RO7CIaC+eTtrg== -----END CERTIFICATE-----Generated at Mon Jan 26 09:01:57 2026 by rpki-client