This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.mft File: 7JJpGF9j3DNWA39xPOigkJ_wciU.mft (raw, json) Hash identifier: KaFpFOiDaVbntGzVk0lNRCQ1WX71Z0SNBsWo1yPtLkM= Subject key identifier: 41:8C:50:04:49:8D:D5:19:57:43:3F:03:31:DA:AE:C0:B3:39:C2:40 Authority key identifier: EC:92:69:18:5F:63:DC:33:56:03:7F:71:3C:E8:A0:90:9F:F0:72:25 Certificate issuer: /CN=ec9269185f63dc3356037f713ce8a0909ff07225 Certificate serial: 019BF5AC658C0EC58E0F316726FCF74FE186 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JJpGF9j3DNWA39xPOigkJ_wciU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.mft Manifest number: 0CE0 Signing time: Sun 25 Jan 2026 15:01:14 +0000 Manifest this update: Sun 25 Jan 2026 15:01:14 +0000 Manifest next update: Mon 26 Jan 2026 15:01:14 +0000 Files and hashes: 1: 7JJpGF9j3DNWA39xPOigkJ_wciU.crl (hash: IXMXjG5qYjiinp106w11wHqqDP+WzS/7KhoeQ3AhPsA=) 2: svvoqJIRYC-HEv4mFDJ4yabrIfA.roa (hash: DylecbDSgd1YsXawir60/ZUXc9wMtcV4PzlLtSqtsUc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.crl rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.mft rsync://rpki.ripe.net/repository/DEFAULT/7JJpGF9j3DNWA39xPOigkJ_wciU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:65:8c:0e:c5:8e:0f:31:67:26:fc:f7:4f:e1:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec9269185f63dc3356037f713ce8a0909ff07225 Validity Not Before: Jan 25 15:01:14 2026 GMT Not After : Jan 26 15:01:14 2026 GMT Subject: CN=418c5004498dd51957433f0331daaec0b339c240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1d:22:ca:a4:5f:39:6d:65:c9:3b:34:d5:b2: 1f:e5:91:5e:d0:cf:a5:90:2c:02:4d:63:e4:e7:ac: f4:1a:3c:63:c2:8a:fb:c0:fe:d1:df:e4:1c:59:92: a3:43:6a:b6:3b:36:7a:0a:c3:76:6f:10:f9:f8:c3: 2a:93:53:e4:9d:30:4f:99:ba:0f:20:12:01:e8:60: 6a:66:b7:da:5d:b3:da:73:85:c7:9a:f3:5b:70:71: d0:83:97:32:9f:6c:6a:f6:1e:be:9f:04:09:8b:b2: e0:b6:f4:3c:4d:6f:fc:1e:53:98:15:a1:28:bf:1c: 91:38:b3:1c:27:51:47:d4:36:8c:b3:a7:02:98:6a: 32:ea:44:65:f8:24:1a:01:f9:13:15:64:0b:3b:15: c0:1a:63:07:b6:2f:21:81:1a:f7:41:b4:2a:95:f3: 04:a6:b6:db:79:69:f1:2f:bb:4f:b0:80:c7:41:da: 7b:02:f0:96:18:49:5c:4e:e0:fd:bb:93:e6:4d:3d: 3c:24:a0:84:7b:6f:e9:87:b2:e2:fc:ee:c1:2e:38: e7:f6:31:8c:f3:ed:7f:51:a1:e9:27:e8:20:51:95: bb:07:e0:72:83:18:8a:91:66:16:4c:cd:c2:a6:8b: 4d:fc:23:b4:7f:d8:b3:36:ee:df:4d:62:a5:13:c4: b4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:8C:50:04:49:8D:D5:19:57:43:3F:03:31:DA:AE:C0:B3:39:C2:40 X509v3 Authority Key Identifier: keyid:EC:92:69:18:5F:63:DC:33:56:03:7F:71:3C:E8:A0:90:9F:F0:72:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JJpGF9j3DNWA39xPOigkJ_wciU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:94:69:51:d9:74:72:4c:e3:b4:95:bf:f9:f3:e0:d6:06:54: 4c:0a:a7:4b:66:59:e4:a6:f3:80:5b:85:55:13:53:39:34:26: b1:42:89:d5:54:ad:1f:5b:8f:d2:3f:cc:eb:f7:b4:dc:6a:48: 42:de:5b:49:15:9c:1b:b9:7f:99:4d:d2:db:77:ee:21:41:59: 22:ed:c2:d0:5f:e2:14:fe:35:68:e4:13:51:10:86:81:35:ff: 95:43:d5:ee:31:66:88:e1:e1:0f:99:79:5d:07:8a:95:09:7d: 6c:8b:50:5e:27:99:df:08:a9:98:8d:e1:7d:95:b3:22:59:48: cf:a1:95:12:3a:2d:8c:42:c7:d1:f9:87:4e:3a:24:3b:44:c6: db:1c:cb:a3:41:c9:5f:fe:0d:8f:64:76:9a:cd:f2:9a:60:83: a2:08:2b:42:7d:4f:97:fd:d9:13:2b:5e:05:6b:8b:a7:b9:0b: f4:b2:74:88:ff:d4:a4:76:73:6d:32:be:42:f0:66:7b:fa:4d: 55:3e:db:db:9a:f9:01:da:4f:cc:2b:ae:66:56:95:48:de:24: 5e:25:9f:ab:39:da:63:1d:d9:4b:be:3a:fb:a2:08:86:8e:23: de:f2:91:af:48:85:4c:39:c3:f7:d3:52:6e:8a:52:15:b5:ea: 73:dc:ae:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rGWMDsWODzFnJvz3T+GGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjOTI2OTE4NWY2M2RjMzM1NjAzN2Y3MTNjZThhMDkwOWZm MDcyMjUwHhcNMjYwMTI1MTUwMTE0WhcNMjYwMTI2MTUwMTE0WjAzMTEwLwYDVQQD Eyg0MThjNTAwNDQ5OGRkNTE5NTc0MzNmMDMzMWRhYWVjMGIzMzljMjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyB0iyqRfOW1lyTs01bIf5ZFe0M+l kCwCTWPk56z0Gjxjwor7wP7R3+QcWZKjQ2q2OzZ6CsN2bxD5+MMqk1PknTBPmboP IBIB6GBqZrfaXbPac4XHmvNbcHHQg5cyn2xq9h6+nwQJi7LgtvQ8TW/8HlOYFaEo vxyROLMcJ1FH1DaMs6cCmGoy6kRl+CQaAfkTFWQLOxXAGmMHti8hgRr3QbQqlfME prbbeWnxL7tPsIDHQdp7AvCWGElcTuD9u5PmTT08JKCEe2/ph7Li/O7BLjjn9jGM 8+1/UaHpJ+ggUZW7B+BygxiKkWYWTM3CpotN/CO0f9izNu7fTWKlE8S0/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEGMUARJjdUZV0M/AzHarsCzOcJAMB8GA1UdIwQY MBaAFOySaRhfY9wzVgN/cTzooJCf8HIlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0pKcEdGOWozRE5XQTM5eFBPaWdrSl93Y2lVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9kNTA5MDUtMDA3YS00MDc0LTlhMDUt YTZjOGJkODc0MmE0LzEvN0pKcEdGOWozRE5XQTM5eFBPaWdrSl93Y2lVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9kNTA5MDUtMDA3YS00MDc0LTlhMDUtYTZjOGJkODc0MmE0 LzEvN0pKcEdGOWozRE5XQTM5eFBPaWdrSl93Y2lVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjpRpUdl0 ckzjtJW/+fPg1gZUTAqnS2ZZ5KbzgFuFVRNTOTQmsUKJ1VStH1uP0j/M6/e03GpI Qt5bSRWcG7l/mU3S23fuIUFZIu3C0F/iFP41aOQTURCGgTX/lUPV7jFmiOHhD5l5 XQeKlQl9bItQXieZ3wipmI3hfZWzIllIz6GVEjotjELH0fmHTjokO0TG2xzLo0HJ X/4Nj2R2ms3ymmCDoggrQn1Pl/3ZEyteBWuLp7kL9LJ0iP/UpHZzbTK+QvBme/pN VT7b25r5AdpPzCuuZlaVSN4kXiWfqznaYx3ZS746+6IIho4j3vKRr0iFTDnD99NS bopSFbXqc9yuTg== -----END CERTIFICATE-----Generated at Sun Jan 25 19:04:21 2026 by rpki-client