This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft File: iNEpp8ePtm0Hc7yZAINX5QfB574.mft (raw, json) Hash identifier: qYfv7I0OgACsRxANarFz+BIFOeEdrsuTGVsmTPIFayc= Subject key identifier: 7C:EC:FD:CC:7F:45:AD:A8:CC:71:B2:6F:6F:59:3F:A3:9B:48:16:E4 Authority key identifier: 88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE Certificate issuer: /CN=88d129a7c78fb66d0773bc99008357e507c1e7be Certificate serial: 019BF462998998A593B64774BB488E9EF81C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft Manifest number: 0919 Signing time: Sun 25 Jan 2026 09:01:01 +0000 Manifest this update: Sun 25 Jan 2026 09:01:01 +0000 Manifest next update: Mon 26 Jan 2026 09:01:01 +0000 Files and hashes: 1: WJ4tfO6kiSMSkG1grDmRdHg6U_4.roa (hash: Eb3yXv0Sg6PPztcKbZR4VGFXGGjS4jiVBjwDazfbRcs=) 2: iNEpp8ePtm0Hc7yZAINX5QfB574.crl (hash: ERwox0AQTmQRzmTnskmUhjB96S42xQwsLE6AUHVvpj4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:99:89:98:a5:93:b6:47:74:bb:48:8e:9e:f8:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88d129a7c78fb66d0773bc99008357e507c1e7be Validity Not Before: Jan 25 09:01:01 2026 GMT Not After : Jan 26 09:01:01 2026 GMT Subject: CN=7cecfdcc7f45ada8cc71b26f6f593fa39b4816e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:66:8f:b9:43:37:47:d3:e8:0c:8e:89:02:1f: c0:75:f0:fe:83:9c:94:16:fa:37:6c:eb:2b:7a:a8: cc:4f:b8:02:05:56:8b:9a:ec:1f:9c:8d:ea:f6:05: 0e:71:e7:09:dd:6a:1f:2c:01:a2:c8:a8:aa:2a:57: 93:b6:ab:27:b1:32:66:61:92:d5:c0:ec:56:50:79: 0e:2f:cb:a7:98:a4:4f:dc:d7:87:51:2f:bb:26:a6: 64:c2:d4:50:f5:92:2f:06:52:e4:13:d1:4f:cc:07: 78:77:06:ba:ae:68:de:34:3f:d9:0e:f1:a7:24:83: 5a:d1:62:28:7f:f3:99:b1:21:b2:e9:08:9a:f3:06: e4:90:69:e1:11:77:37:1a:47:0c:58:df:6e:0d:d3: 7e:ae:07:ce:47:43:c9:68:ae:b8:22:78:90:2c:00: 38:57:be:31:05:2e:ae:71:b6:d7:d4:2e:ad:c0:f8: 70:37:50:e8:d2:f2:6e:52:c0:d9:89:5a:6b:19:1a: 84:46:b4:5c:ad:07:07:9e:f2:0e:a7:ba:17:93:a3: fa:b3:a0:89:45:98:c6:bf:5c:87:06:c2:9d:e1:89: f9:df:13:d7:fc:5a:29:f9:b3:95:ed:46:2b:65:c2: ba:1e:a1:4d:84:2f:7c:64:47:db:b3:64:16:26:89: bd:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:EC:FD:CC:7F:45:AD:A8:CC:71:B2:6F:6F:59:3F:A3:9B:48:16:E4 X509v3 Authority Key Identifier: keyid:88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:a9:1f:14:5e:c7:c7:6c:95:a1:c8:c9:df:9c:8d:65:54:fb: ed:eb:6c:83:7d:e2:4c:1d:2e:5e:02:4e:28:44:57:f6:c3:a9: 85:d9:2e:c6:3a:e2:94:92:83:22:5a:52:bb:19:c8:34:09:d9: fa:4b:87:12:43:ef:cb:26:65:f2:a5:b9:b4:19:81:51:be:88: 57:0c:5a:3a:90:c2:99:40:ef:54:37:f2:d2:ad:f2:09:7f:f5: b2:f3:6a:cb:be:49:b5:90:9c:38:2d:b6:f0:39:af:f5:88:9b: 36:7d:f0:3c:37:90:e6:56:f6:df:65:53:b0:42:34:39:9a:a2: 80:51:cf:34:08:2b:2c:78:21:02:20:28:64:ba:8e:da:f1:e9: 5e:1e:2c:9b:3d:92:04:04:2f:81:43:e9:c6:4f:c9:00:b4:db: 3e:76:3a:ab:98:7e:fa:ff:20:c8:10:42:fe:db:2a:5a:8f:af: 80:97:12:7e:b8:92:16:3d:e1:7c:d1:dd:31:f2:30:33:a3:66: a2:cd:86:f8:80:2f:60:27:b1:d6:ac:19:bd:95:4a:9f:97:19: 8d:f8:77:82:70:24:54:cb:53:35:38:b7:a7:08:45:d3:e6:a3: cb:f2:eb:bd:43:44:e8:ef:52:ed:64:9d:b6:2a:50:17:8e:8d: 48:11:e7:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YpmJmKWTtkd0u0iOnvgcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZDEyOWE3Yzc4ZmI2NmQwNzczYmM5OTAwODM1N2U1MDdj MWU3YmUwHhcNMjYwMTI1MDkwMTAxWhcNMjYwMTI2MDkwMTAxWjAzMTEwLwYDVQQD Eyg3Y2VjZmRjYzdmNDVhZGE4Y2M3MWIyNmY2ZjU5M2ZhMzliNDgxNmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2aPuUM3R9PoDI6JAh/AdfD+g5yU Fvo3bOsreqjMT7gCBVaLmuwfnI3q9gUOcecJ3WofLAGiyKiqKleTtqsnsTJmYZLV wOxWUHkOL8unmKRP3NeHUS+7JqZkwtRQ9ZIvBlLkE9FPzAd4dwa6rmjeND/ZDvGn JINa0WIof/OZsSGy6Qia8wbkkGnhEXc3GkcMWN9uDdN+rgfOR0PJaK64IniQLAA4 V74xBS6ucbbX1C6twPhwN1Do0vJuUsDZiVprGRqERrRcrQcHnvIOp7oXk6P6s6CJ RZjGv1yHBsKd4Yn53xPX/Fop+bOV7UYrZcK6HqFNhC98ZEfbs2QWJom9RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHzs/cx/Ra2ozHGyb29ZP6ObSBbkMB8GA1UdIwQY MBaAFIjRKafHj7ZtB3O8mQCDV+UHwee+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaU5FcHA4ZVB0bTBIYzd5WkFJTlg1UWZCNTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9kODZmYzQtMTc1Zi00MjNkLTk4NGUt ODU5ZjdmYWNlNjk1LzEvaU5FcHA4ZVB0bTBIYzd5WkFJTlg1UWZCNTc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9kODZmYzQtMTc1Zi00MjNkLTk4NGUtODU5ZjdmYWNlNjk1 LzEvaU5FcHA4ZVB0bTBIYzd5WkFJTlg1UWZCNTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFKkfFF7H x2yVocjJ35yNZVT77etsg33iTB0uXgJOKERX9sOphdkuxjrilJKDIlpSuxnINAnZ +kuHEkPvyyZl8qW5tBmBUb6IVwxaOpDCmUDvVDfy0q3yCX/1svNqy75JtZCcOC22 8Dmv9YibNn3wPDeQ5lb232VTsEI0OZqigFHPNAgrLHghAiAoZLqO2vHpXh4smz2S BAQvgUPpxk/JALTbPnY6q5h++v8gyBBC/tsqWo+vgJcSfriSFj3hfNHdMfIwM6Nm os2G+IAvYCex1qwZvZVKn5cZjfh3gnAkVMtTNTi3pwhF0+ajy/LrvUNE6O9S7WSd tipQF46NSBHnFg== -----END CERTIFICATE-----Generated at Sun Jan 25 17:36:45 2026 by rpki-client