This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.mft File: 7PQndr5TK9BXUzKFXYxCxJUu2TE.mft (raw, json) Hash identifier: b/djx/u3jHO7OEPVSA8v3mSsIcpkqthS1fRWeM8OyQs= Subject key identifier: 90:00:B3:A5:D5:62:42:8F:E9:C9:25:FA:84:5B:F5:C0:62:54:04:4E Authority key identifier: EC:F4:27:76:BE:53:2B:D0:57:53:32:85:5D:8C:42:C4:95:2E:D9:31 Certificate issuer: /CN=ecf42776be532bd0575332855d8c42c4952ed931 Certificate serial: 019BF34FF7D06037CA6BE9D86CF09677BCD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 04:01:02 +0000 Manifest this update: Sun 25 Jan 2026 04:01:02 +0000 Manifest next update: Mon 26 Jan 2026 04:01:02 +0000 Files and hashes: 1: 7PQndr5TK9BXUzKFXYxCxJUu2TE.crl (hash: 73RfsNzT3r5v5gh+rqak5/xzCpgZcjYtaejqx6IMPVU=) 2: FE713c5vfxbQIGSVdFNk2cWFSNM.roa (hash: JgjcAo4jgA6vPRnMC9MOKVjzjQ9dpKh8w3rh7WLC4i8=) 3: MzmWO7LoBcnanX-oi0jTnFog8Sk.roa (hash: 5odMEIfNAjn0z/TvPiyQ2V/cG1Zv5Ya9/4mq6vD/C1A=) 4: ZFxceImgdOll43mTIb-2CEd5iZU.roa (hash: LEd9mfjkTgsQciD0Ian4mosID5/HXYAOaKPSHE8Z4vM=) 5: gb4eoozvCl4ZVVJkvwRFKCXlEQ4.roa (hash: K81jA4IV1mFJAtA8ax5fpPdJJ+koFS4vN7Zd8+4wcqc=) 6: nL83DswPZjOseSZh-M_SsVEMmMI.roa (hash: +wx/HPeXcm/ZjhRslTkWTgSvYpXyWghawfhk/xaSRoc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.crl rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.mft rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:4f:f7:d0:60:37:ca:6b:e9:d8:6c:f0:96:77:bc:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecf42776be532bd0575332855d8c42c4952ed931 Validity Not Before: Jan 25 04:01:02 2026 GMT Not After : Jan 26 04:01:02 2026 GMT Subject: CN=9000b3a5d562428fe9c925fa845bf5c06254044e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:35:c1:99:e8:37:73:64:45:d4:60:b0:7f:c3: 76:e5:13:a9:73:3e:34:0b:7b:6d:75:f3:90:ee:67: ae:a6:ef:c6:30:32:5d:ce:45:c2:0f:0a:2a:8a:94: 05:cd:81:d4:81:76:3f:2a:00:a0:d6:fc:ed:1b:9d: 59:61:4d:b5:31:e8:72:22:8c:ab:c7:dc:07:79:02: 1f:84:09:66:c6:80:1f:6d:ce:a1:92:c0:24:fc:51: c4:27:81:58:14:57:ea:b3:40:01:0d:c2:87:84:48: 49:ee:9e:d5:b5:a8:94:04:45:5c:1a:a1:45:7c:05: 8b:9d:7f:6a:e4:c6:5e:94:b9:b6:54:04:e6:11:6d: 7f:55:22:3e:14:74:7d:a3:31:11:b2:d5:c4:f7:23: a2:2d:5e:38:4b:bf:91:c0:df:d3:91:44:98:79:66: 65:88:85:eb:b0:f2:c2:7d:a4:eb:8e:d8:b4:15:98: 8e:82:37:be:d9:a7:d5:2e:84:d1:16:c6:cc:84:b0: 41:6a:40:bc:af:22:ac:c9:a6:cc:2d:54:1e:c2:c5: 18:39:63:d4:cf:a1:67:57:ae:44:00:19:51:1c:16: 26:38:07:d1:16:aa:b9:77:ec:85:79:37:65:c1:49: 56:19:29:b9:c7:78:86:4a:d8:db:c3:3c:e9:cf:f2: c6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:00:B3:A5:D5:62:42:8F:E9:C9:25:FA:84:5B:F5:C0:62:54:04:4E X509v3 Authority Key Identifier: keyid:EC:F4:27:76:BE:53:2B:D0:57:53:32:85:5D:8C:42:C4:95:2E:D9:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:1f:08:3c:4d:f9:3d:10:83:cf:c0:25:19:5a:4c:04:cd:3c: be:34:73:7c:eb:ae:14:7c:17:ca:c5:96:91:7c:ed:55:d4:ad: d5:3c:e7:11:7e:5a:cd:0e:8d:a8:0f:9c:b0:f3:96:1d:4f:af: 2b:3e:74:23:c9:79:fb:d3:68:de:b3:be:b6:3a:82:0d:30:b1: 72:83:34:ef:2b:5b:ff:65:37:10:f0:3c:a8:46:ae:29:3d:40: 04:52:4b:76:76:96:db:a2:bb:33:c1:3d:79:3d:d8:26:13:fd: 00:76:c1:e1:da:e7:f4:66:f2:9a:07:e5:7e:9c:d6:ff:52:68: 75:46:0c:e4:63:fe:17:58:2c:34:15:ff:17:6c:dc:fc:96:05: 27:fe:93:f3:12:56:bf:fc:d8:80:b9:e8:63:0d:eb:7d:fd:6b: 2f:e9:71:e6:c2:37:12:ef:f7:6e:10:44:79:bc:24:b2:fc:5d: 8c:83:9f:59:ae:55:b7:ac:db:b2:81:ea:8d:15:fc:af:20:91: 25:3e:f0:89:1f:86:7b:26:ed:d6:52:de:4d:b4:fa:25:fc:1e: 49:7e:80:c8:e4:ee:9e:01:2d:46:cb:08:cd:7e:c3:29:e5:45: 35:47:0a:b3:aa:9f:5a:30:f2:91:63:dc:98:86:23:7b:8b:94: 36:39:61:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzT/fQYDfKa+nYbPCWd7zZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjZjQyNzc2YmU1MzJiZDA1NzUzMzI4NTVkOGM0MmM0OTUy ZWQ5MzEwHhcNMjYwMTI1MDQwMTAyWhcNMjYwMTI2MDQwMTAyWjAzMTEwLwYDVQQD Eyg5MDAwYjNhNWQ1NjI0MjhmZTljOTI1ZmE4NDViZjVjMDYyNTQwNDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TXBmeg3c2RF1GCwf8N25ROpcz40 C3ttdfOQ7meupu/GMDJdzkXCDwoqipQFzYHUgXY/KgCg1vztG51ZYU21MehyIoyr x9wHeQIfhAlmxoAfbc6hksAk/FHEJ4FYFFfqs0ABDcKHhEhJ7p7VtaiUBEVcGqFF fAWLnX9q5MZelLm2VATmEW1/VSI+FHR9ozERstXE9yOiLV44S7+RwN/TkUSYeWZl iIXrsPLCfaTrjti0FZiOgje+2afVLoTRFsbMhLBBakC8ryKsyabMLVQewsUYOWPU z6FnV65EABlRHBYmOAfRFqq5d+yFeTdlwUlWGSm5x3iGStjbwzzpz/LGzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJAAs6XVYkKP6ckl+oRb9cBiVAROMB8GA1UdIwQY MBaAFOz0J3a+UyvQV1MyhV2MQsSVLtkxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1BRbmRyNVRLOUJYVXpLRlhZeEN4SlV1MlRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9lYmQ0OWYtZjU2OS00MTUyLWIwYjgt NWU1M2MyM2I1NWIwLzEvN1BRbmRyNVRLOUJYVXpLRlhZeEN4SlV1MlRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9lYmQ0OWYtZjU2OS00MTUyLWIwYjgtNWU1M2MyM2I1NWIw LzEvN1BRbmRyNVRLOUJYVXpLRlhZeEN4SlV1MlRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdx8IPE35 PRCDz8AlGVpMBM08vjRzfOuuFHwXysWWkXztVdSt1TznEX5azQ6NqA+csPOWHU+v Kz50I8l5+9No3rO+tjqCDTCxcoM07ytb/2U3EPA8qEauKT1ABFJLdnaW26K7M8E9 eT3YJhP9AHbB4drn9GbymgflfpzW/1JodUYM5GP+F1gsNBX/F2zc/JYFJ/6T8xJW v/zYgLnoYw3rff1rL+lx5sI3Eu/3bhBEebwksvxdjIOfWa5Vt6zbsoHqjRX8ryCR JT7wiR+Geybt1lLeTbT6JfweSX6AyOTungEtRssIzX7DKeVFNUcKs6qfWjDykWPc mIYje4uUNjlhCw== -----END CERTIFICATE-----Generated at Sun Jan 25 12:43:34 2026 by rpki-client