This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft File: 7GXTFEC_ddJcYG95FcI2ymFEZKI.mft (raw, json) Hash identifier: 6rXLUVm3phXR5/h83KYhxjB3O0OoYMcFS1qN+9esdEc= Subject key identifier: 1F:A0:79:6C:F2:14:2F:9F:DD:FD:86:EA:07:2E:87:0C:BA:1D:34:07 Authority key identifier: EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2 Certificate issuer: /CN=ec65d31440bf75d25c606f7915c236ca614464a2 Certificate serial: 019BF5E307FC17C7A7FDA825498A84A1C489 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 16:00:55 +0000 Manifest this update: Sun 25 Jan 2026 16:00:55 +0000 Manifest next update: Mon 26 Jan 2026 16:00:55 +0000 Files and hashes: 1: 0_75cziqkrd_avFDUZ9rg7qilxA.roa (hash: pSQt5ocfFcDKXdLoPRHR826k+pr8i3n1PKJhobyxS7Y=) 2: 7GXTFEC_ddJcYG95FcI2ymFEZKI.crl (hash: wmDFVd4ZPTmLruVKscUoGL7qNElmgFhmEb8/KoI9DPs=) 3: HkkRPwqU3p5aRopaf6XmKJHJOS0.roa (hash: rwteSwkgkB56v9QAYH409kxEVNO2s78pdzGxZ9J+cBI=) 4: OLd3XQLlCLw9LdNyxml8_t8xuEg.roa (hash: CeqIhEYWVzjJk4bpmS5ELgvmNglk0SZVe+OxNRFsLsg=) 5: YFvRu6poI8Ij__cAkw9ZXzn1ELA.roa (hash: TFdZLvuT5jh6qUmHTvzmxP9xeFFqlGN1y9JFOGD2i4E=) 6: YeiOtzdwnFZaRqUumW9LmExU9wM.roa (hash: MQxdsF/k+I/4Kf6o+ulDftRoc2iIVZbE/JYfdEq0Q2c=) 7: fXNtDKuxKl9PcIOvEE_JPpC6Emk.roa (hash: d9XcOkmKMoLj3DydzQnJz/zsoCrdK+ingQkEPwtmOSU=) 8: vKDDTdeKpC38SOoCmTQDNYKcN_A.roa (hash: 1c+RNvMiXqFMlXYtXBUL17aJsh89UBFVQ2ryMtknJE4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.crl rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:07:fc:17:c7:a7:fd:a8:25:49:8a:84:a1:c4:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec65d31440bf75d25c606f7915c236ca614464a2 Validity Not Before: Jan 25 16:00:55 2026 GMT Not After : Jan 26 16:00:55 2026 GMT Subject: CN=1fa0796cf2142f9fddfd86ea072e870cba1d3407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:81:f1:81:97:bd:2f:94:c1:56:3a:cc:6b:0c: 98:5a:17:bb:dc:ba:99:2c:ea:c6:92:af:66:bb:28: e0:0e:ce:4a:c9:95:76:c0:0b:52:ff:26:e0:7f:0e: f1:f9:86:bd:e8:ad:bd:1a:cc:28:73:12:7d:26:b4: 8d:19:18:79:e7:d1:22:19:a5:54:22:20:ff:65:bc: ca:8c:92:cd:fc:31:2b:d6:a4:96:3b:19:9e:0d:a1: cb:57:98:32:b9:0c:98:36:2b:f8:6c:3e:b0:f3:42: cd:0c:90:02:c0:c4:57:5b:6f:74:25:27:01:13:9b: 32:b8:5a:c2:92:58:87:28:04:15:3a:f8:a7:89:20: e1:48:66:af:48:a4:a6:d6:dc:13:e4:e9:a5:52:33: d7:f0:9e:e6:ea:f0:36:a7:83:bd:bb:90:cb:5b:cd: 79:4d:38:cc:0a:ca:11:7c:2b:73:0c:12:88:09:fb: c6:87:42:59:43:cd:29:bc:ed:ad:c8:88:8c:76:f9: b8:e1:5e:f7:85:82:d2:1f:53:7b:18:aa:3f:88:80: a5:9a:fb:7a:73:54:cf:44:89:5e:20:46:ac:92:57: 27:c9:6a:34:61:3d:31:3a:68:3c:74:00:d1:e6:2b: 75:b2:1d:81:04:cd:d0:83:09:17:d8:dd:c1:55:c2: 22:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:A0:79:6C:F2:14:2F:9F:DD:FD:86:EA:07:2E:87:0C:BA:1D:34:07 X509v3 Authority Key Identifier: keyid:EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:0e:a3:02:6f:b2:7c:40:9f:06:5c:af:1c:c7:3d:9f:bb:97: bd:f2:83:da:fd:62:46:db:bc:63:a5:69:68:14:d9:07:e7:b1: 7e:9b:9e:31:7b:6a:9f:b7:15:f1:d5:d7:48:44:47:c7:e2:64: 25:fb:39:4b:d7:55:6b:e0:42:27:dc:69:27:65:db:c5:26:f2: d2:7b:5e:24:47:a7:df:41:d7:68:da:f0:7a:98:81:9a:94:73: af:9d:a1:ef:9e:da:f3:e5:53:70:35:7f:0b:7e:6c:4c:e6:a0: 07:a3:d9:32:43:f5:6f:c8:9a:fd:98:c4:c8:a7:f7:09:f1:dc: 40:7d:b1:76:7d:6e:ab:71:d9:ce:04:bf:c4:e3:e0:b0:91:04: 54:80:ac:ae:fe:42:f1:ef:2c:30:af:e2:1f:3e:ef:1a:72:01: dc:dc:a2:b9:34:0f:71:a5:eb:df:5b:70:78:c8:be:d6:04:4c: 02:1f:f4:d5:ce:86:36:74:af:80:01:63:ae:b5:d7:66:2a:86: fe:a0:24:8f:e4:3e:dc:98:62:da:05:b8:7b:fc:78:11:53:5d: a1:e2:4d:fd:20:07:c8:e2:89:ed:87:cd:03:71:a8:b2:6d:91: 5c:f1:db:25:95:94:7f:ee:99:11:fb:26:a9:70:f8:d0:b9:3c: fd:10:6a:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv14wf8F8en/aglSYqEocSJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNjVkMzE0NDBiZjc1ZDI1YzYwNmY3OTE1YzIzNmNhNjE0 NDY0YTIwHhcNMjYwMTI1MTYwMDU1WhcNMjYwMTI2MTYwMDU1WjAzMTEwLwYDVQQD EygxZmEwNzk2Y2YyMTQyZjlmZGRmZDg2ZWEwNzJlODcwY2JhMWQzNDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6YHxgZe9L5TBVjrMawyYWhe73LqZ LOrGkq9muyjgDs5KyZV2wAtS/ybgfw7x+Ya96K29GswocxJ9JrSNGRh559EiGaVU IiD/ZbzKjJLN/DEr1qSWOxmeDaHLV5gyuQyYNiv4bD6w80LNDJACwMRXW290JScB E5syuFrCkliHKAQVOviniSDhSGavSKSm1twT5OmlUjPX8J7m6vA2p4O9u5DLW815 TTjMCsoRfCtzDBKICfvGh0JZQ80pvO2tyIiMdvm44V73hYLSH1N7GKo/iIClmvt6 c1TPRIleIEasklcnyWo0YT0xOmg8dADR5it1sh2BBM3QgwkX2N3BVcIiYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB+geWzyFC+f3f2G6gcuhwy6HTQHMB8GA1UdIwQY MBaAFOxl0xRAv3XSXGBveRXCNsphRGSiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0dYVEZFQ19kZEpjWUc5NUZjSTJ5bUZFWktJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8yYTZkZjUtODIzNi00MTJkLWFkNzkt ZTI5NTg5ZTg5NjRhLzEvN0dYVEZFQ19kZEpjWUc5NUZjSTJ5bUZFWktJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My8yYTZkZjUtODIzNi00MTJkLWFkNzktZTI5NTg5ZTg5NjRh LzEvN0dYVEZFQ19kZEpjWUc5NUZjSTJ5bUZFWktJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJQ6jAm+y fECfBlyvHMc9n7uXvfKD2v1iRtu8Y6VpaBTZB+exfpueMXtqn7cV8dXXSERHx+Jk Jfs5S9dVa+BCJ9xpJ2XbxSby0nteJEen30HXaNrwepiBmpRzr52h757a8+VTcDV/ C35sTOagB6PZMkP1b8ia/ZjEyKf3CfHcQH2xdn1uq3HZzgS/xOPgsJEEVICsrv5C 8e8sMK/iHz7vGnIB3NyiuTQPcaXr31tweMi+1gRMAh/01c6GNnSvgAFjrrXXZiqG /qAkj+Q+3Jhi2gW4e/x4EVNdoeJN/SAHyOKJ7YfNA3Gosm2RXPHbJZWUf+6ZEfsm qXD40Lk8/RBqTQ== -----END CERTIFICATE-----Generated at Sun Jan 25 23:54:46 2026 by rpki-client