This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.mft File: _7JidnKHfQ9t6bxOfhhu7dE1YRA.mft (raw, json) Hash identifier: id/Xpg+RtrcUPr0on4frVGcsduWRQeAnMmGQjZl/HxE= Subject key identifier: 19:BE:77:0B:4F:50:CC:F9:5A:E3:12:72:D5:24:FA:F6:46:3B:AA:E2 Authority key identifier: FF:B2:62:76:72:87:7D:0F:6D:E9:BC:4E:7E:18:6E:ED:D1:35:61:10 Certificate issuer: /CN=ffb2627672877d0f6de9bc4e7e186eedd1356110 Certificate serial: 019BF6F57EFDEBB0585C29BC9313787B2F12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.mft Manifest number: 05CD Signing time: Sun 25 Jan 2026 21:00:42 +0000 Manifest this update: Sun 25 Jan 2026 21:00:42 +0000 Manifest next update: Mon 26 Jan 2026 21:00:42 +0000 Files and hashes: 1: 3jq3JT05Xk8RZ2a5qjD2FUJa1Vg.roa (hash: BN7qrk5PhVCDMZZc/gkWTb+z7DTTxiTcCVTVZQiCQ5A=) 2: R4HUGaPeCwpmGyYfmB_w_FLU9aU.roa (hash: 9kclGgorPQiy/7RiiESZuIbnKKNKbn26RfPmhg3Nf9M=) 3: XKlT2jqfx7mUYQGQILaSz-pvr70.roa (hash: djPN7IeVrJFgIcui84THNQwdVbzribIolkuZJaf/8h0=) 4: _7JidnKHfQ9t6bxOfhhu7dE1YRA.crl (hash: tSpIkHBXYTbCKDGqGN3BsM5YxgHlIUr8dV1fvkVo6T4=) 5: ff-7UUK3Nr75A4sqHWJNBL8K3Qc.roa (hash: XWnpB5O/LzDqWZHyZuA/VcqD8rKxfQyaQ/Qn1INNnM4=) 6: r6x-mCfX6y2HE8Fca-6L19rnZBI.roa (hash: uQHVblgOp1wekrgJVHdlCHMrkJ9aLpwbv/ZWjTHqqwM=) 7: rrn-hLlASc3QfQ_2G9XagIYTuhQ.roa (hash: 6mhOZyZWiBej5y33Jy7KbJNVz0VK2ieBWiaEGjbBwok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.crl rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.mft rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:7e:fd:eb:b0:58:5c:29:bc:93:13:78:7b:2f:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffb2627672877d0f6de9bc4e7e186eedd1356110 Validity Not Before: Jan 25 21:00:42 2026 GMT Not After : Jan 26 21:00:42 2026 GMT Subject: CN=19be770b4f50ccf95ae31272d524faf6463baae2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ad:66:ed:c8:f3:a5:fd:f1:db:b3:88:49:85: 5d:79:65:ba:d1:d9:5c:c5:5f:01:28:22:f9:27:01: 7c:37:62:1a:79:85:a5:09:c3:69:d3:33:7d:d4:76: ac:b4:07:79:4d:d0:20:d2:3c:f5:1a:1e:0d:90:0f: 6e:86:fb:4d:d7:77:4e:98:80:05:00:26:95:da:3a: 4e:70:48:b3:99:28:20:7a:9c:c5:45:47:44:96:d6: f6:1c:14:8a:5f:44:47:48:77:27:b1:21:66:76:3d: 98:15:16:b3:49:52:92:64:a8:b8:8c:dd:e9:12:35: ab:ad:92:45:b9:66:60:f9:43:8c:8c:9c:2d:41:91: 40:2c:cf:65:91:fa:fb:3e:d2:53:71:28:e0:bb:23: 50:1c:28:b8:a7:de:2f:95:83:80:4d:65:b4:d6:5c: db:24:22:f1:74:e6:c4:aa:ac:62:76:90:af:a5:26: 39:b0:45:9b:89:b7:d9:d2:b3:b7:21:e8:75:ec:6e: 6d:e7:06:95:3e:00:64:8e:5f:7f:68:13:7a:13:2a: cc:31:c1:d0:d2:0d:62:5e:b7:cc:a3:60:cf:e5:5b: b0:7d:23:3a:6f:38:cd:56:8b:fe:1c:5b:dd:46:ec: 45:3a:c0:b8:b1:67:54:5a:c3:49:25:e5:98:fe:d6: 74:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:BE:77:0B:4F:50:CC:F9:5A:E3:12:72:D5:24:FA:F6:46:3B:AA:E2 X509v3 Authority Key Identifier: keyid:FF:B2:62:76:72:87:7D:0F:6D:E9:BC:4E:7E:18:6E:ED:D1:35:61:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:6e:44:7b:2e:e8:4e:10:e1:c6:39:4d:46:7e:6e:aa:2d:1c: 99:5e:b5:4b:61:d0:d9:09:a2:e2:ac:ac:51:49:97:37:44:98: 20:57:83:2c:60:87:5d:b6:c6:31:b7:88:40:32:a2:95:b5:1e: fe:fa:4a:1d:9b:15:0d:55:c0:43:57:e5:84:36:7b:37:41:9a: a1:de:97:66:d5:e1:c2:fb:08:4c:86:49:cc:d3:ff:65:a1:c7: 7a:b2:8a:45:d6:6b:6b:fb:00:4b:33:c2:5b:21:4c:d2:53:06: 51:8b:a8:87:4c:95:82:66:00:73:aa:65:1b:16:aa:67:55:34: d2:d8:7e:f5:1c:bd:9e:0e:51:8d:bd:29:f4:32:e5:a1:04:76: 57:58:cb:3e:bf:57:2a:7f:6d:b3:e4:e6:5f:4f:4c:c0:fe:b3: 8d:f0:70:f7:00:f7:31:34:f3:98:b2:9d:d3:04:c4:88:9b:35: 94:46:cd:46:01:6e:42:7c:fb:53:86:46:43:0e:1b:e6:cf:5e: 25:60:5d:90:29:8f:4d:eb:f9:0a:6c:a5:fe:02:55:b1:9e:68: 5b:d9:c3:9c:52:6e:54:1c:52:13:c0:72:6a:39:e8:7d:7a:7e: 7d:36:b3:d4:9b:6f:be:23:89:9d:c4:9f:92:e6:d7:4f:3c:90: 0b:f6:82:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29X7967BYXCm8kxN4ey8SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYjI2Mjc2NzI4NzdkMGY2ZGU5YmM0ZTdlMTg2ZWVkZDEz NTYxMTAwHhcNMjYwMTI1MjEwMDQyWhcNMjYwMTI2MjEwMDQyWjAzMTEwLwYDVQQD EygxOWJlNzcwYjRmNTBjY2Y5NWFlMzEyNzJkNTI0ZmFmNjQ2M2JhYWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4a1m7cjzpf3x27OISYVdeWW60dlc xV8BKCL5JwF8N2IaeYWlCcNp0zN91HastAd5TdAg0jz1Gh4NkA9uhvtN13dOmIAF ACaV2jpOcEizmSggepzFRUdEltb2HBSKX0RHSHcnsSFmdj2YFRazSVKSZKi4jN3p EjWrrZJFuWZg+UOMjJwtQZFALM9lkfr7PtJTcSjguyNQHCi4p94vlYOATWW01lzb JCLxdObEqqxidpCvpSY5sEWbibfZ0rO3Ieh17G5t5waVPgBkjl9/aBN6EyrMMcHQ 0g1iXrfMo2DP5VuwfSM6bzjNVov+HFvdRuxFOsC4sWdUWsNJJeWY/tZ0XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBm+dwtPUMz5WuMSctUk+vZGO6riMB8GA1UdIwQY MBaAFP+yYnZyh30Pbem8Tn4Ybu3RNWEQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzdKaWRuS0hmUTl0NmJ4T2ZoaHU3ZEUxWVJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8yMmM1MTAtMzQ4MC00Y2UxLThkZDgt MTk3NDY5NDc1NThkLzEvXzdKaWRuS0hmUTl0NmJ4T2ZoaHU3ZEUxWVJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS8yMmM1MTAtMzQ4MC00Y2UxLThkZDgtMTk3NDY5NDc1NThk LzEvXzdKaWRuS0hmUTl0NmJ4T2ZoaHU3ZEUxWVJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALW5Eey7o ThDhxjlNRn5uqi0cmV61S2HQ2Qmi4qysUUmXN0SYIFeDLGCHXbbGMbeIQDKilbUe /vpKHZsVDVXAQ1flhDZ7N0Gaod6XZtXhwvsITIZJzNP/ZaHHerKKRdZra/sASzPC WyFM0lMGUYuoh0yVgmYAc6plGxaqZ1U00th+9Ry9ng5Rjb0p9DLloQR2V1jLPr9X Kn9ts+TmX09MwP6zjfBw9wD3MTTzmLKd0wTEiJs1lEbNRgFuQnz7U4ZGQw4b5s9e JWBdkCmPTev5Cmyl/gJVsZ5oW9nDnFJuVBxSE8ByajnofXp+fTaz1JtvviOJncSf kubXTzyQC/aCww== -----END CERTIFICATE-----Generated at Mon Jan 26 04:25:14 2026 by rpki-client