This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft File: k7MitZBI4Qe5Sm2wZVevXwycKQw.mft (raw, json) Hash identifier: SyxkT47M0GXgyEkLFLDnxFqUx18M0mlAvLHZyP+F10c= Subject key identifier: 0B:0D:5E:5E:1C:5B:AF:79:30:3D:E3:00:AF:8C:6D:D8:4C:6E:79:F7 Authority key identifier: 93:B3:22:B5:90:48:E1:07:B9:4A:6D:B0:65:57:AF:5F:0C:9C:29:0C Certificate issuer: /CN=93b322b59048e107b94a6db06557af5f0c9c290c Certificate serial: 019BF72D92A8EBC94774795C4A76FF35553E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7MitZBI4Qe5Sm2wZVevXwycKQw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft Manifest number: 177B Signing time: Sun 25 Jan 2026 22:01:57 +0000 Manifest this update: Sun 25 Jan 2026 22:01:57 +0000 Manifest next update: Mon 26 Jan 2026 22:01:57 +0000 Files and hashes: 1: 8Na-R2PqVFyNzA5u6KAFRMf11HE.roa (hash: 8IZEcdLtXy5KbQ5iic2lrmgZO3w7ovtbGyG4T1KJfkY=) 2: k7MitZBI4Qe5Sm2wZVevXwycKQw.crl (hash: hp4FNLxnJyBL2Ui0KPolnUrt9/dAwdxRspsOeHJfDmA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.crl rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft rsync://rpki.ripe.net/repository/DEFAULT/k7MitZBI4Qe5Sm2wZVevXwycKQw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:92:a8:eb:c9:47:74:79:5c:4a:76:ff:35:55:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93b322b59048e107b94a6db06557af5f0c9c290c Validity Not Before: Jan 25 22:01:57 2026 GMT Not After : Jan 26 22:01:57 2026 GMT Subject: CN=0b0d5e5e1c5baf79303de300af8c6dd84c6e79f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2b:27:29:80:bc:ab:46:b4:1d:f4:2d:de:65: 69:d5:81:56:6f:de:e4:c9:7d:c2:f3:c1:df:24:bf: 57:84:6b:04:ac:a7:02:7a:78:bc:83:43:1e:53:f1: 72:6d:12:a5:7e:dc:57:a6:cf:f2:9a:6a:d9:16:6e: 8f:ad:95:94:74:b6:41:52:65:49:c0:8f:9c:17:bb: 09:8c:7a:87:d4:43:1e:0c:71:20:11:32:07:3f:35: c0:be:87:ea:26:61:cc:ea:5a:fe:d6:1c:14:4a:8a: 2f:ba:69:7e:5e:6a:94:a9:87:02:88:cc:2e:3e:08: 36:7b:55:e8:3d:12:a6:9c:44:29:7b:ee:66:8b:0b: 4f:a9:fd:16:3d:5e:7a:36:88:86:cf:19:c2:9c:1b: 23:44:63:57:e9:aa:c6:9d:65:d5:05:11:8d:ab:ab: df:2d:20:40:5a:ff:23:46:37:5d:98:00:de:41:c6: 00:a3:34:3e:38:7d:15:60:10:f7:17:60:ba:c7:8d: 99:c4:15:ee:f4:fc:a3:94:bb:f7:61:3c:48:7f:8d: e4:65:ec:ce:f7:62:a5:ee:04:cb:83:d6:2f:32:3b: 8c:2f:d2:45:ec:8f:c7:2c:60:b8:2a:7e:c7:da:20: e7:08:4d:8a:ae:b0:ed:2d:a2:97:a8:77:23:54:d2: d1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:0D:5E:5E:1C:5B:AF:79:30:3D:E3:00:AF:8C:6D:D8:4C:6E:79:F7 X509v3 Authority Key Identifier: keyid:93:B3:22:B5:90:48:E1:07:B9:4A:6D:B0:65:57:AF:5F:0C:9C:29:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7MitZBI4Qe5Sm2wZVevXwycKQw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:94:e8:b7:39:22:27:f1:40:04:f5:d9:80:60:5e:5f:c1:bf: d7:87:72:7b:15:71:34:38:23:b6:24:0c:41:a7:1d:52:3e:60: c8:bf:aa:33:61:ec:f0:b5:8f:84:14:2c:25:40:8a:87:71:dc: d8:04:af:7c:0e:b0:3e:6d:d6:c9:44:be:1d:26:0a:d8:22:60: 24:24:b9:c8:fb:3a:c8:29:0c:34:13:94:f3:4c:9f:4f:97:f1: 1a:be:c8:be:2e:b7:1c:ae:19:70:2d:e6:0b:92:e4:af:be:32: 70:ed:c7:01:18:bf:e2:43:a9:fa:77:9b:7d:64:7c:77:13:6c: d4:ac:48:5b:d3:a2:d6:cf:37:f8:12:bc:2b:bd:64:34:63:03: aa:0e:1e:cd:45:2f:e2:f7:41:83:0e:43:3c:71:4b:b6:07:16: 7b:be:40:e3:93:0d:a3:c7:38:43:8c:60:f0:b5:03:0f:df:e2: 10:64:17:b9:14:2d:81:21:b8:01:d9:45:2c:83:41:cb:cc:ee: 9d:ac:2e:c4:1a:bf:e2:78:5e:01:18:8d:dd:58:1d:41:02:64: 18:d9:c5:d5:b5:47:2e:bd:a0:e8:26:52:85:30:f3:d9:59:4a: 2d:67:5f:be:1b:c9:3d:3b:3b:d1:4e:ce:07:43:42:39:90:d5: 6b:bc:76:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LZKo68lHdHlcSnb/NVU+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzYjMyMmI1OTA0OGUxMDdiOTRhNmRiMDY1NTdhZjVmMGM5 YzI5MGMwHhcNMjYwMTI1MjIwMTU3WhcNMjYwMTI2MjIwMTU3WjAzMTEwLwYDVQQD EygwYjBkNWU1ZTFjNWJhZjc5MzAzZGUzMDBhZjhjNmRkODRjNmU3OWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApysnKYC8q0a0HfQt3mVp1YFWb97k yX3C88HfJL9XhGsErKcCeni8g0MeU/FybRKlftxXps/ymmrZFm6PrZWUdLZBUmVJ wI+cF7sJjHqH1EMeDHEgETIHPzXAvofqJmHM6lr+1hwUSoovuml+XmqUqYcCiMwu Pgg2e1XoPRKmnEQpe+5miwtPqf0WPV56NoiGzxnCnBsjRGNX6arGnWXVBRGNq6vf LSBAWv8jRjddmADeQcYAozQ+OH0VYBD3F2C6x42ZxBXu9PyjlLv3YTxIf43kZezO 92Kl7gTLg9YvMjuML9JF7I/HLGC4Kn7H2iDnCE2KrrDtLaKXqHcjVNLRgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAsNXl4cW695MD3jAK+MbdhMbnn3MB8GA1UdIwQY MBaAFJOzIrWQSOEHuUptsGVXr18MnCkMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazdNaXRaQkk0UWU1U20yd1pWZXZYd3ljS1F3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83ZmY1MjAtNzI3MC00YTk4LWFlYzkt ZWY2MDRkNDE2YzM3LzEvazdNaXRaQkk0UWU1U20yd1pWZXZYd3ljS1F3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi83ZmY1MjAtNzI3MC00YTk4LWFlYzktZWY2MDRkNDE2YzM3 LzEvazdNaXRaQkk0UWU1U20yd1pWZXZYd3ljS1F3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAJTotzki J/FABPXZgGBeX8G/14dyexVxNDgjtiQMQacdUj5gyL+qM2Hs8LWPhBQsJUCKh3Hc 2ASvfA6wPm3WyUS+HSYK2CJgJCS5yPs6yCkMNBOU80yfT5fxGr7Ivi63HK4ZcC3m C5Lkr74ycO3HARi/4kOp+nebfWR8dxNs1KxIW9Oi1s83+BK8K71kNGMDqg4ezUUv 4vdBgw5DPHFLtgcWe75A45MNo8c4Q4xg8LUDD9/iEGQXuRQtgSG4AdlFLINBy8zu nawuxBq/4nheARiN3VgdQQJkGNnF1bVHLr2g6CZShTDz2VlKLWdfvhvJPTs70U7O B0NCOZDVa7x2HA== -----END CERTIFICATE-----Generated at Mon Jan 26 03:12:03 2026 by rpki-client