This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft File: en7OlN5d9qGjTJjsZtPZaOWymyE.mft (raw, json) Hash identifier: fIohBIunRC5YPEWXjCityBU27PVnn2OKAKtuWWR2Pe8= Subject key identifier: F1:DF:34:B2:B6:68:27:02:5B:39:22:56:0B:25:CE:07:C7:A0:5A:F5 Authority key identifier: 7A:7E:CE:94:DE:5D:F6:A1:A3:4C:98:EC:66:D3:D9:68:E5:B2:9B:21 Certificate issuer: /CN=7a7ece94de5df6a1a34c98ec66d3d968e5b29b21 Certificate serial: 019BF5E2F62971E7680A6ABA9B7F5F48D9F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft Manifest number: 0EC9 Signing time: Sun 25 Jan 2026 16:00:50 +0000 Manifest this update: Sun 25 Jan 2026 16:00:50 +0000 Manifest next update: Mon 26 Jan 2026 16:00:50 +0000 Files and hashes: 1: 1-kxWXv05LSEshrBJnjD59T0FQ7Q.roa (hash: rHapWpK9pigcf/GGIQp1nmEJbzSoQssokoPt9LrVksY=) 2: en7OlN5d9qGjTJjsZtPZaOWymyE.crl (hash: BB0CqM31SQ795z5R3mpV9lOd5Smj5c0KaKq0vMoNyw8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.crl rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e2:f6:29:71:e7:68:0a:6a:ba:9b:7f:5f:48:d9:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a7ece94de5df6a1a34c98ec66d3d968e5b29b21 Validity Not Before: Jan 25 16:00:50 2026 GMT Not After : Jan 26 16:00:50 2026 GMT Subject: CN=f1df34b2b66827025b3922560b25ce07c7a05af5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:58:50:ca:32:80:2e:fa:ac:c1:7e:97:c8:7d: 60:8a:74:1e:57:75:83:9d:95:7a:20:0f:b1:94:d5: cc:5a:dd:14:5b:cb:eb:28:d8:04:1f:7d:5a:fe:3a: 95:de:d7:bb:6c:af:aa:17:ff:86:00:96:b0:41:7a: 91:eb:76:33:c8:9c:6d:22:d3:a6:49:95:56:f1:9d: c9:e9:48:4e:83:47:23:8b:df:aa:e2:b8:ce:6e:91: 37:b0:9e:48:d3:03:a4:c7:78:87:40:3b:27:28:c9: 8f:fc:6b:a9:3b:2b:4d:af:36:37:87:b9:6c:61:33: 4d:61:3f:ee:08:3a:81:c1:19:04:7e:9f:c4:7d:a6: 5c:b0:24:68:a6:db:08:9c:45:e5:2d:fc:ac:9a:5f: b7:e1:cc:05:1b:40:0c:46:b4:82:f4:a8:9e:e0:22: 32:42:c1:78:ad:80:b5:c4:0e:28:54:ec:c5:b8:12: 9d:6b:17:1c:a2:05:77:99:12:1a:bd:59:31:67:2a: cb:2e:f4:32:9e:17:63:63:50:d5:5d:37:24:f3:98: 69:da:93:7f:e3:d9:fe:b1:39:c4:91:bb:47:22:74: 94:82:cb:f1:bc:42:be:75:a4:a2:5d:69:72:03:16: 46:70:0a:9d:e3:1c:21:32:9d:15:90:bf:78:3b:29: 7d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:DF:34:B2:B6:68:27:02:5B:39:22:56:0B:25:CE:07:C7:A0:5A:F5 X509v3 Authority Key Identifier: keyid:7A:7E:CE:94:DE:5D:F6:A1:A3:4C:98:EC:66:D3:D9:68:E5:B2:9B:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:5b:d2:02:66:f0:39:c8:16:e8:a9:79:ec:e7:e8:62:eb:35: e8:ff:e4:ac:76:b8:1f:69:14:60:5e:94:15:0f:2a:bb:46:51: 39:90:ce:71:4a:55:6b:b7:39:68:bf:99:b5:09:49:d2:c1:54: 1e:15:1b:e5:9c:bd:a4:6c:43:48:be:47:f9:b8:77:0a:16:3d: 70:67:5e:9b:b4:a5:1b:ec:a1:92:d7:de:81:8b:64:c4:68:10: 37:15:8d:0c:df:63:19:59:7a:cf:5d:92:73:9b:e4:ce:a1:a7: e7:bc:d9:61:28:c6:62:60:75:38:6f:85:5c:9a:2e:05:8e:8c: a0:6d:23:64:7c:fc:ce:72:cd:67:a3:8d:a9:e7:90:a1:25:3e: e2:ba:65:b8:c8:61:61:58:a2:0e:87:fb:48:81:19:be:2c:16: 8b:00:7d:f7:4e:62:9d:8d:8a:9c:11:ef:ff:f0:c5:e3:49:63: ee:2e:32:06:25:a6:be:a0:03:90:aa:57:90:c8:f4:88:15:12: 8f:84:b0:29:b3:73:f2:13:7a:f2:82:d1:b4:7a:d6:a9:b4:3b: f4:05:67:ba:96:b1:48:b4:50:91:ee:c1:be:df:90:97:42:b8: 9a:fd:df:f5:10:73:a3:a2:ff:10:17:95:c4:88:dd:fd:c3:87: 0e:9d:70:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv14vYpcedoCmq6m39fSNnxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhN2VjZTk0ZGU1ZGY2YTFhMzRjOThlYzY2ZDNkOTY4ZTVi MjliMjEwHhcNMjYwMTI1MTYwMDUwWhcNMjYwMTI2MTYwMDUwWjAzMTEwLwYDVQQD EyhmMWRmMzRiMmI2NjgyNzAyNWIzOTIyNTYwYjI1Y2UwN2M3YTA1YWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FhQyjKALvqswX6XyH1ginQeV3WD nZV6IA+xlNXMWt0UW8vrKNgEH31a/jqV3te7bK+qF/+GAJawQXqR63YzyJxtItOm SZVW8Z3J6UhOg0cji9+q4rjObpE3sJ5I0wOkx3iHQDsnKMmP/GupOytNrzY3h7ls YTNNYT/uCDqBwRkEfp/EfaZcsCRoptsInEXlLfysml+34cwFG0AMRrSC9Kie4CIy QsF4rYC1xA4oVOzFuBKdaxccogV3mRIavVkxZyrLLvQynhdjY1DVXTck85hp2pN/ 49n+sTnEkbtHInSUgsvxvEK+daSiXWlyAxZGcAqd4xwhMp0VkL94Oyl9ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPHfNLK2aCcCWzkiVgslzgfHoFr1MB8GA1UdIwQY MBaAFHp+zpTeXfaho0yY7GbT2WjlspshMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZW43T2xONWQ5cUdqVEpqc1p0UFphT1d5bXlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9iZjRlODgtMDA1OC00ZGY4LTk5OWEt ZmFlNWZlOTAwY2JkLzEvZW43T2xONWQ5cUdqVEpqc1p0UFphT1d5bXlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9iZjRlODgtMDA1OC00ZGY4LTk5OWEtZmFlNWZlOTAwY2Jk LzEvZW43T2xONWQ5cUdqVEpqc1p0UFphT1d5bXlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvlvSAmbw OcgW6Kl57OfoYus16P/krHa4H2kUYF6UFQ8qu0ZROZDOcUpVa7c5aL+ZtQlJ0sFU HhUb5Zy9pGxDSL5H+bh3ChY9cGdem7SlG+yhktfegYtkxGgQNxWNDN9jGVl6z12S c5vkzqGn57zZYSjGYmB1OG+FXJouBY6MoG0jZHz8znLNZ6ONqeeQoSU+4rpluMhh YViiDof7SIEZviwWiwB9905inY2KnBHv//DF40lj7i4yBiWmvqADkKpXkMj0iBUS j4SwKbNz8hN68oLRtHrWqbQ79AVnupaxSLRQke7Bvt+Ql0K4mv3f9RBzo6L/EBeV xIjd/cOHDp1wag== -----END CERTIFICATE-----Generated at Sun Jan 25 20:37:41 2026 by rpki-client