This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft File: M7S1t7Icrr89IICfbFcFmfHWBGg.mft (raw, json) Hash identifier: upNDSSbcrquLnzVIPfEN5AMNBuiUs0xRP8IB9jIaEaI= Subject key identifier: 4B:02:8C:4A:6A:DC:81:03:C6:DE:4A:1D:5F:B3:DA:0A:3F:D2:69:10 Authority key identifier: 33:B4:B5:B7:B2:1C:AE:BF:3D:20:80:9F:6C:57:05:99:F1:D6:04:68 Certificate issuer: /CN=33b4b5b7b21caebf3d20809f6c570599f1d60468 Certificate serial: 019BF91BA6DBF8AE82A06D50E165520B4944 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7S1t7Icrr89IICfbFcFmfHWBGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft Manifest number: 17EE Signing time: Mon 26 Jan 2026 07:01:37 +0000 Manifest this update: Mon 26 Jan 2026 07:01:37 +0000 Manifest next update: Tue 27 Jan 2026 07:01:37 +0000 Files and hashes: 1: 53AAbOBBkXvtwzFCRKhN2YER9wI.roa (hash: J04OcUQtPBWoHYiXQ+dSEt3YhPfELs053aa/pbV3cuA=) 2: M7S1t7Icrr89IICfbFcFmfHWBGg.crl (hash: xS82KHwg7gCm+OM4uCVWQ1n7OROPJ5RA4mAlDeTFgMs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft rsync://rpki.ripe.net/repository/DEFAULT/M7S1t7Icrr89IICfbFcFmfHWBGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:a6:db:f8:ae:82:a0:6d:50:e1:65:52:0b:49:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33b4b5b7b21caebf3d20809f6c570599f1d60468 Validity Not Before: Jan 26 07:01:37 2026 GMT Not After : Jan 27 07:01:37 2026 GMT Subject: CN=4b028c4a6adc8103c6de4a1d5fb3da0a3fd26910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3b:34:2d:f1:5d:c8:5a:a3:80:ae:0e:d0:90: e4:aa:3c:87:e1:7f:3a:e6:4c:51:cd:50:1e:41:5a: 67:48:c4:3b:66:bb:9c:26:d7:e8:0e:29:80:86:83: 27:20:f1:0f:76:43:35:15:25:8c:ca:46:df:8b:37: 3b:f9:0c:36:c7:e6:bb:5d:ce:1c:ef:c7:74:b0:07: 12:3b:6c:15:a6:48:40:b2:e7:58:5c:49:72:5f:9d: 85:aa:d7:31:ca:cd:94:95:be:bb:0f:10:06:c1:e3: ea:f9:09:8c:6a:65:f5:6f:2e:91:68:ec:f0:da:36: 2e:a6:ce:55:8d:17:c4:e2:8e:c2:aa:6c:63:11:8e: 11:10:06:b1:0c:05:54:50:e4:35:ad:40:57:f5:d5: fe:0b:9d:2f:88:62:53:81:ef:be:96:17:da:4f:b0: 8a:10:6a:bb:21:a0:81:c0:c4:fc:ce:9e:15:28:e8: b9:c3:f7:06:15:90:17:b5:c9:d9:e2:ee:e3:1f:37: 61:37:b8:ef:34:26:e1:7d:7c:e4:ed:9d:3c:0a:a2: 13:fb:ff:8a:ea:e2:85:a9:96:ad:0d:ef:70:a0:42: 89:6b:2a:6f:28:b1:54:73:5b:06:8b:bf:f9:a1:18: a4:5e:bc:8c:a4:26:86:5f:23:f5:ce:9f:44:5c:bc: 0d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:02:8C:4A:6A:DC:81:03:C6:DE:4A:1D:5F:B3:DA:0A:3F:D2:69:10 X509v3 Authority Key Identifier: keyid:33:B4:B5:B7:B2:1C:AE:BF:3D:20:80:9F:6C:57:05:99:F1:D6:04:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7S1t7Icrr89IICfbFcFmfHWBGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:29:8d:a9:79:04:f9:5b:1e:01:d9:7d:a5:46:2e:39:48:0f: 1a:f2:58:8f:9b:ff:d7:6a:33:32:b3:0e:e7:15:3d:9d:b3:ac: 0a:9e:87:73:8f:1f:b6:a6:0d:cb:d5:f3:f3:33:fd:31:e3:0d: ac:53:e7:ee:d4:95:bd:1e:85:d9:21:ed:cb:ee:bc:db:23:7f: 1c:97:18:9d:f1:08:af:32:93:51:44:82:ea:7a:c0:d9:15:e9: 66:35:9b:de:dd:68:ec:a2:0d:65:c1:9e:66:05:7f:e2:69:cf: 19:fe:0f:4c:c8:75:3b:65:b9:9d:0d:37:e0:bd:9d:3a:4c:0b: 44:75:d3:f5:a1:31:fa:dc:a6:2a:4b:0b:97:84:a9:f5:22:11: d0:93:72:cb:38:07:ec:47:1a:91:63:d6:f7:fa:59:aa:67:7b: 16:f8:ab:ba:42:1d:dd:04:13:3d:43:39:c6:b3:1a:82:80:0d: 1c:0b:c2:28:91:41:11:40:fc:7f:ee:55:0d:10:1a:e5:0e:1f: ea:13:a7:30:90:bf:b8:f6:66:56:aa:18:82:a2:b9:d3:f2:4d: 08:16:6a:60:b9:a3:1a:49:41:1d:b6:90:d7:ed:f5:7d:48:66: 2e:b6:06:e4:12:12:b0:75:cb:8d:bd:48:0b:1d:84:64:66:37: 60:1f:96:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5G6bb+K6CoG1Q4WVSC0lEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzYjRiNWI3YjIxY2FlYmYzZDIwODA5ZjZjNTcwNTk5ZjFk NjA0NjgwHhcNMjYwMTI2MDcwMTM3WhcNMjYwMTI3MDcwMTM3WjAzMTEwLwYDVQQD Eyg0YjAyOGM0YTZhZGM4MTAzYzZkZTRhMWQ1ZmIzZGEwYTNmZDI2OTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDs0LfFdyFqjgK4O0JDkqjyH4X86 5kxRzVAeQVpnSMQ7ZrucJtfoDimAhoMnIPEPdkM1FSWMykbfizc7+Qw2x+a7Xc4c 78d0sAcSO2wVpkhAsudYXElyX52Fqtcxys2Ulb67DxAGwePq+QmMamX1by6RaOzw 2jYups5VjRfE4o7CqmxjEY4REAaxDAVUUOQ1rUBX9dX+C50viGJTge++lhfaT7CK EGq7IaCBwMT8zp4VKOi5w/cGFZAXtcnZ4u7jHzdhN7jvNCbhfXzk7Z08CqIT+/+K 6uKFqZatDe9woEKJaypvKLFUc1sGi7/5oRikXryMpCaGXyP1zp9EXLwNpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEsCjEpq3IEDxt5KHV+z2go/0mkQMB8GA1UdIwQY MBaAFDO0tbeyHK6/PSCAn2xXBZnx1gRoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTdTMXQ3SWNycjg5SUlDZmJGY0ZtZkhXQkdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi84NDZkNmUtMDRlYy00MjE5LTgyMjMt ODYyMzMzNWMwZWUwLzEvTTdTMXQ3SWNycjg5SUlDZmJGY0ZtZkhXQkdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi84NDZkNmUtMDRlYy00MjE5LTgyMjMtODYyMzMzNWMwZWUw LzEvTTdTMXQ3SWNycjg5SUlDZmJGY0ZtZkhXQkdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgymNqXkE +VseAdl9pUYuOUgPGvJYj5v/12ozMrMO5xU9nbOsCp6Hc48ftqYNy9Xz8zP9MeMN rFPn7tSVvR6F2SHty+682yN/HJcYnfEIrzKTUUSC6nrA2RXpZjWb3t1o7KINZcGe ZgV/4mnPGf4PTMh1O2W5nQ034L2dOkwLRHXT9aEx+tymKksLl4Sp9SIR0JNyyzgH 7EcakWPW9/pZqmd7FvirukId3QQTPUM5xrMagoANHAvCKJFBEUD8f+5VDRAa5Q4f 6hOnMJC/uPZmVqoYgqK50/JNCBZqYLmjGklBHbaQ1+31fUhmLrYG5BISsHXLjb1I Cx2EZGY3YB+WXg== -----END CERTIFICATE-----Generated at Mon Jan 26 11:47:31 2026 by rpki-client