This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft File: exSNtC-Q6WRHvX9j7dinzL7qqEI.mft (raw, json) Hash identifier: 12nNmonie/t7dF4DiaKZ+7aagcwp/K5DIZIrW9eBaC0= Subject key identifier: 5A:87:0B:B3:34:3D:6D:ED:42:C9:F8:5A:9B:00:0B:63:6D:51:BF:5E Authority key identifier: 7B:14:8D:B4:2F:90:E9:64:47:BD:7F:63:ED:D8:A7:CC:BE:EA:A8:42 Certificate issuer: /CN=7b148db42f90e96447bd7f63edd8a7ccbeeaa842 Certificate serial: 019BF988EBDFD4823130439B0E30E216340C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft Manifest number: 17EF Signing time: Mon 26 Jan 2026 09:00:58 +0000 Manifest this update: Mon 26 Jan 2026 09:00:58 +0000 Manifest next update: Tue 27 Jan 2026 09:00:58 +0000 Files and hashes: 1: dHzF4P3tNtzyJNFvhC01ek08kYc.roa (hash: bUI0+2xFTsseXiv/I8zBJZyi3U6hUXamNCOgX/NaEog=) 2: exSNtC-Q6WRHvX9j7dinzL7qqEI.crl (hash: rcX7RBJlvNa191lQM+axbv55Y04unRakp+tZyzgvcHE=) 3: iJCNoTkoUBkVfoOgCHAYe4clnEA.roa (hash: Hly0g7qbNz9e8/TcngsSJ9Ic9Kq0693Z1zASWnuVzzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:88:eb:df:d4:82:31:30:43:9b:0e:30:e2:16:34:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b148db42f90e96447bd7f63edd8a7ccbeeaa842 Validity Not Before: Jan 26 09:00:58 2026 GMT Not After : Jan 27 09:00:58 2026 GMT Subject: CN=5a870bb3343d6ded42c9f85a9b000b636d51bf5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:28:e0:65:2e:61:80:45:ab:8a:45:a6:73:c4: 22:1e:24:7b:ec:2d:93:80:c2:57:36:36:7f:9c:4e: 7c:b1:c7:aa:56:69:d6:df:2d:90:20:5d:e0:30:6b: 3c:85:43:42:51:30:7d:72:70:4c:16:77:ab:96:f7: df:5e:62:a6:3c:88:64:36:7e:f6:88:9f:0f:26:fe: b1:6a:83:03:76:5b:8e:84:c6:79:6a:40:a7:f3:33: 28:ac:f1:16:e2:5f:02:81:ba:20:18:12:6a:4d:7c: 4f:cb:d0:ee:f1:4c:ee:64:64:73:8b:e1:ca:25:d3: bb:76:23:f6:0d:63:51:24:33:47:9f:53:02:3c:d0: bf:b7:43:c3:85:5c:95:f0:ac:89:4f:93:33:3c:cf: 84:f7:63:e4:87:15:5b:fb:f5:8c:09:0d:07:fb:27: 40:49:33:62:ee:f3:04:1f:9d:2e:4e:e1:25:0f:f6: e0:7c:ca:dd:4b:fa:f3:90:1b:71:c1:f7:1a:2a:f5: 7c:89:38:a8:bd:5f:44:5b:6d:51:24:4c:f9:ba:04: 23:3c:81:d4:e8:67:43:ee:46:e1:02:c7:7d:e1:2e: 0a:96:6e:32:23:81:4e:a4:6b:a8:e0:9a:20:38:b5: f6:b7:0e:84:c0:ff:e9:f7:58:05:a6:f0:a7:4b:7a: 04:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:87:0B:B3:34:3D:6D:ED:42:C9:F8:5A:9B:00:0B:63:6D:51:BF:5E X509v3 Authority Key Identifier: keyid:7B:14:8D:B4:2F:90:E9:64:47:BD:7F:63:ED:D8:A7:CC:BE:EA:A8:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:02:60:63:63:7d:31:8d:a4:17:3a:35:a2:ee:3c:98:e8:17: 13:6b:51:66:bf:37:3d:44:f9:eb:f6:26:a4:d1:2e:8e:f5:a2: a6:bf:66:ac:02:c6:26:9d:5a:e9:bd:fb:f5:ae:a1:e2:bc:e8: 86:83:f3:3b:96:fa:0f:06:ea:e2:a5:5f:8b:73:fe:c2:3b:89: c5:3a:11:0c:80:7c:3f:09:ef:c4:a5:bf:1a:76:a8:7e:24:57: 77:b4:42:33:96:39:c8:12:0e:38:ee:28:67:5d:dc:b9:9a:ab: 51:7c:f2:37:3c:aa:34:a4:af:2f:15:88:e3:4e:fe:22:fe:1e: 5f:2c:fe:e9:0c:6a:58:b8:cc:2f:ee:27:80:f8:e3:71:7c:12: 59:eb:b8:fc:18:b8:39:6c:cf:11:d2:69:72:56:85:e0:2d:94: 5d:d4:99:a5:83:5b:2e:ae:f2:d5:6e:52:2b:18:d9:39:b7:04: 48:be:3c:6f:d1:12:3f:ac:a7:db:e3:b7:ff:53:59:8b:e9:de: 66:ae:53:2f:63:94:3f:eb:15:aa:ad:0e:9f:e8:88:69:5d:f9: 56:57:0b:b9:32:31:28:4b:57:88:d4:dd:ec:66:e1:ec:78:45: 71:e0:77:e6:9c:52:7e:f0:71:86:2b:e2:06:5f:9c:6b:8f:2b: fb:67:a3:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5iOvf1IIxMEObDjDiFjQMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMTQ4ZGI0MmY5MGU5NjQ0N2JkN2Y2M2VkZDhhN2NjYmVl YWE4NDIwHhcNMjYwMTI2MDkwMDU4WhcNMjYwMTI3MDkwMDU4WjAzMTEwLwYDVQQD Eyg1YTg3MGJiMzM0M2Q2ZGVkNDJjOWY4NWE5YjAwMGI2MzZkNTFiZjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yjgZS5hgEWrikWmc8QiHiR77C2T gMJXNjZ/nE58sceqVmnW3y2QIF3gMGs8hUNCUTB9cnBMFnerlvffXmKmPIhkNn72 iJ8PJv6xaoMDdluOhMZ5akCn8zMorPEW4l8CgbogGBJqTXxPy9Du8UzuZGRzi+HK JdO7diP2DWNRJDNHn1MCPNC/t0PDhVyV8KyJT5MzPM+E92PkhxVb+/WMCQ0H+ydA STNi7vMEH50uTuElD/bgfMrdS/rzkBtxwfcaKvV8iTiovV9EW21RJEz5ugQjPIHU 6GdD7kbhAsd94S4Klm4yI4FOpGuo4JogOLX2tw6EwP/p91gFpvCnS3oEiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFqHC7M0PW3tQsn4WpsAC2NtUb9eMB8GA1UdIwQY MBaAFHsUjbQvkOlkR71/Y+3Yp8y+6qhCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXhTTnRDLVE2V1JIdlg5ajdkaW56TDdxcUVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9mMjQ4ODUtYTRkYi00ZmExLWE3MmQt ODZkNmMxMzA1MzU3LzEvZXhTTnRDLVE2V1JIdlg5ajdkaW56TDdxcUVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9mMjQ4ODUtYTRkYi00ZmExLWE3MmQtODZkNmMxMzA1MzU3 LzEvZXhTTnRDLVE2V1JIdlg5ajdkaW56TDdxcUVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADAJgY2N9 MY2kFzo1ou48mOgXE2tRZr83PUT56/YmpNEujvWipr9mrALGJp1a6b379a6h4rzo hoPzO5b6Dwbq4qVfi3P+wjuJxToRDIB8PwnvxKW/GnaofiRXd7RCM5Y5yBIOOO4o Z13cuZqrUXzyNzyqNKSvLxWI407+Iv4eXyz+6QxqWLjML+4ngPjjcXwSWeu4/Bi4 OWzPEdJpclaF4C2UXdSZpYNbLq7y1W5SKxjZObcESL48b9ESP6yn2+O3/1NZi+ne Zq5TL2OUP+sVqq0On+iIaV35VlcLuTIxKEtXiNTd7Gbh7HhFceB35pxSfvBxhivi Bl+ca48r+2ejmQ== -----END CERTIFICATE-----Generated at Mon Jan 26 15:40:03 2026 by rpki-client