This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft File: s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft (raw, json) Hash identifier: t53s1XS/48oRdM8YLMLDGDyQNHTYhs04tGB7dN2tsN8= Subject key identifier: FF:36:B3:E5:2F:5F:F5:8A:A5:4A:7C:65:7F:2E:E7:62:5A:B6:1C:2F Authority key identifier: B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F Certificate issuer: /CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f Certificate serial: 019BF2AB22CA69F178A9B9566E08AF3D7926 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft Manifest number: 17F0 Signing time: Sun 25 Jan 2026 01:01:00 +0000 Manifest this update: Sun 25 Jan 2026 01:01:00 +0000 Manifest next update: Mon 26 Jan 2026 01:01:00 +0000 Files and hashes: 1: 6k_8Ry46ufIMlLNL3Vyss6dmqJg.roa (hash: ckIzjsDp2tzcwJkmRuzZHNnhVct2HecFAgceUTxWQmI=) 2: F3O8-dZr8u4d-bBHpUAIaVdBxYs.roa (hash: nGzmqxCVgUOHa3kRFVvwgOvg2hHgbd0FVIdzBnCIcS8=) 3: LadvVkKu3wXT617aXlUlsKUiwvs.roa (hash: 5tkpntbZyp0kecx0i9/sz7tiG+x/tBJaYqWhzJ+ue10=) 4: bRgCnNYxProDC3XWcoK1RwC3iRo.roa (hash: TdmHYWnUww+1ilHLweinppnHuzhkh+7SLt4lxkgAHBM=) 5: gUsfRW5v6N4S4q5wR9juMArT4gY.roa (hash: 75aFyyp5OXyu2pt0nss+h3JtO3zNLiVM+h5iKxCtB54=) 6: maMxYhW9A6VAq_vow3Vq5mrJeV8.roa (hash: iGK/wAfndjwmPr7EChSqOCdboy0xOaABeT0HtMm54R8=) 7: s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl (hash: mMI1fops5RUF9AOTMazJTKnFKA0E8CPeoN8QKJpv314=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:ab:22:ca:69:f1:78:a9:b9:56:6e:08:af:3d:79:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f Validity Not Before: Jan 25 01:01:00 2026 GMT Not After : Jan 26 01:01:00 2026 GMT Subject: CN=ff36b3e52f5ff58aa54a7c657f2ee7625ab61c2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:27:03:88:ab:95:b1:56:d7:da:c3:28:28:d3: 03:ed:5c:1a:eb:af:25:bb:3a:f0:b3:07:55:df:e9: a1:1b:09:19:63:c9:67:c9:ee:e2:68:78:8b:fb:7e: fc:71:f6:70:f4:98:e2:af:4e:77:dd:bf:e0:ca:26: 7a:11:a6:e1:9a:76:79:66:08:71:fc:14:e8:cf:09: 12:b4:4e:cf:b8:1a:93:1a:2e:62:e3:88:da:fe:1c: e4:33:c6:f4:95:0b:44:5d:0d:2c:d5:96:28:2d:2f: 64:9b:36:54:31:47:1d:3e:dc:6a:7f:69:d8:ec:f7: 15:c2:98:cf:56:22:1d:fb:4f:5d:45:6f:c6:65:0e: 87:88:38:1e:31:b2:ab:85:16:14:cc:58:b7:aa:94: 3e:01:be:5a:49:ac:3a:32:d5:bc:09:8c:28:c0:24: 14:32:86:3a:f1:6f:b7:88:66:6c:41:9a:b0:eb:7c: 12:d3:c6:9c:6a:79:8c:5b:9f:af:00:ca:6f:b7:03: 21:2d:3a:9e:7a:10:16:41:bc:a0:23:b2:7d:b4:69: aa:14:a5:6b:30:a7:de:c8:1a:df:b2:0e:0a:e5:8d: f0:88:3f:d8:be:9a:09:c6:b5:97:59:cd:c2:b2:da: ba:c8:e5:b7:f5:5c:f5:b1:a8:43:4b:12:e0:ec:7a: 86:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:36:B3:E5:2F:5F:F5:8A:A5:4A:7C:65:7F:2E:E7:62:5A:B6:1C:2F X509v3 Authority Key Identifier: keyid:B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:26:b0:bb:4c:8f:b6:c1:aa:0d:4d:3d:8e:7e:54:b8:25:a5: 0a:22:00:74:11:ed:96:eb:e7:58:97:e0:1e:23:72:74:77:8d: fe:a3:95:2b:c9:c0:ee:4c:9d:fc:6a:6f:9e:67:26:8c:72:c0: 0c:f4:ca:a7:dc:4f:9f:33:b9:95:cc:9f:1d:6b:36:d5:46:86: af:fc:56:2d:68:84:e9:4e:2a:71:4b:1e:80:6f:c0:6e:4a:6d: f0:06:e9:bb:f3:42:a9:bd:ec:e3:a9:48:f1:8b:f3:75:0b:16: bc:3d:cc:89:a8:c3:0e:13:d2:30:a4:58:75:56:49:69:5d:bc: 05:0a:71:1a:9c:ce:29:63:59:aa:8f:d8:f7:38:18:65:e2:c4: 48:9b:a7:8d:c1:83:e1:1c:b9:14:b4:ef:b2:6d:49:f8:8b:0e: bc:e6:0c:90:88:96:fb:c8:d2:dc:49:da:dc:ad:10:4c:c7:39: 37:a1:9c:1b:b2:73:30:9a:a3:b7:3f:ed:85:d0:3e:a1:3d:df: 55:f7:08:b9:92:3f:53:f7:a5:bc:ca:ef:ea:10:2c:93:9c:79: 7b:42:8b:06:87:c2:9d:5a:47:57:9e:f8:1f:43:b7:7a:b3:e3: 76:7e:28:f6:af:13:67:c7:76:05:69:72:09:57:c7:c6:ee:6c: f4:ca:b1:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvyqyLKafF4qblWbgivPXkmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYjZkOTAyNjM3MmNmY2U4ZmRlODIzYzNlZjljOWY3OTBh YWUxNGYwHhcNMjYwMTI1MDEwMTAwWhcNMjYwMTI2MDEwMTAwWjAzMTEwLwYDVQQD EyhmZjM2YjNlNTJmNWZmNThhYTU0YTdjNjU3ZjJlZTc2MjVhYjYxYzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqScDiKuVsVbX2sMoKNMD7Vwa668l uzrwswdV3+mhGwkZY8lnye7iaHiL+378cfZw9Jjir0533b/gyiZ6EabhmnZ5Zghx /BTozwkStE7PuBqTGi5i44ja/hzkM8b0lQtEXQ0s1ZYoLS9kmzZUMUcdPtxqf2nY 7PcVwpjPViId+09dRW/GZQ6HiDgeMbKrhRYUzFi3qpQ+Ab5aSaw6MtW8CYwowCQU MoY68W+3iGZsQZqw63wS08acanmMW5+vAMpvtwMhLTqeehAWQbygI7J9tGmqFKVr MKfeyBrfsg4K5Y3wiD/YvpoJxrWXWc3Cstq6yOW39Vz1sahDSxLg7HqGSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP82s+UvX/WKpUp8ZX8u52JathwvMB8GA1UdIwQY MBaAFLO22QJjcs/Oj96CPD75yfeQquFPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczdiWkFtTnl6ODZQM29JOFB2bko5NUNxNFU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy84MzFkNTMtMDRlMC00NTczLWFjZjct ZDRmMTJiMzdhMzE4LzEvczdiWkFtTnl6ODZQM29JOFB2bko5NUNxNFU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy84MzFkNTMtMDRlMC00NTczLWFjZjctZDRmMTJiMzdhMzE4 LzEvczdiWkFtTnl6ODZQM29JOFB2bko5NUNxNFU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANiawu0yP tsGqDU09jn5UuCWlCiIAdBHtluvnWJfgHiNydHeN/qOVK8nA7kyd/GpvnmcmjHLA DPTKp9xPnzO5lcyfHWs21UaGr/xWLWiE6U4qcUsegG/Abkpt8Abpu/NCqb3s46lI 8YvzdQsWvD3MiajDDhPSMKRYdVZJaV28BQpxGpzOKWNZqo/Y9zgYZeLESJunjcGD 4Ry5FLTvsm1J+IsOvOYMkIiW+8jS3Ena3K0QTMc5N6GcG7JzMJqjtz/thdA+oT3f VfcIuZI/U/elvMrv6hAsk5x5e0KLBofCnVpHV574H0O3erPjdn4o9q8TZ8d2BWly CVfHxu5s9MqxOQ== -----END CERTIFICATE-----Generated at Sun Jan 25 09:52:26 2026 by rpki-client