This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft File: 7hsImeOKlrVPxMvNEO9TnFTtTTg.mft (raw, json) Hash identifier: XfXWzo2gJkrpYzpy2HHVBrcKLVM6OoKCWzsKLXI9aHM= Subject key identifier: 18:03:14:F9:E6:9E:56:99:84:C7:49:54:12:30:EF:DC:F0:1A:E1:D0 Authority key identifier: EE:1B:08:99:E3:8A:96:B5:4F:C4:CB:CD:10:EF:53:9C:54:ED:4D:38 Certificate issuer: /CN=ee1b0899e38a96b54fc4cbcd10ef539c54ed4d38 Certificate serial: 019BF42BF8F2A4162D68F6B4002644847044 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 08:01:20 +0000 Manifest this update: Sun 25 Jan 2026 08:01:20 +0000 Manifest next update: Mon 26 Jan 2026 08:01:20 +0000 Files and hashes: 1: 6ukkUq47_d2FjDn2mGzCVotpwug.roa (hash: BSpIOmqaO5YAgsvsZQqH6+DD7MhtSJv4k++NTBFYMhA=) 2: 7hsImeOKlrVPxMvNEO9TnFTtTTg.crl (hash: YPRbOZXneqlX/E+9awco2XME1+Aq1BUFtLusBaImBu4=) 3: lOdlGRTCbIpEqR9qatoRPkmZsSo.roa (hash: puduhtYoMCBO2MogdQIQ/qqMbhZcm/6N0DD1bqrK4NU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2b:f8:f2:a4:16:2d:68:f6:b4:00:26:44:84:70:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1b0899e38a96b54fc4cbcd10ef539c54ed4d38 Validity Not Before: Jan 25 08:01:20 2026 GMT Not After : Jan 26 08:01:20 2026 GMT Subject: CN=180314f9e69e569984c749541230efdcf01ae1d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:38:1b:12:e0:3f:80:1a:af:c5:10:29:78:e8: 86:99:fb:06:46:f8:45:43:3f:59:3e:f1:a9:56:17: 80:64:0c:d0:69:d4:fd:70:a9:de:09:0a:ed:43:0d: eb:52:9a:79:65:2e:86:ae:8e:76:a6:07:4e:78:72: eb:74:bc:26:90:34:88:a3:73:ec:27:3f:2e:ff:ae: d1:d1:53:ae:13:23:0d:90:19:be:dc:68:a1:1d:a1: fe:9c:97:12:8d:1b:d2:c9:fb:b7:77:ae:ff:d8:a3: a6:72:fb:47:fe:a7:66:94:27:31:a7:df:f6:63:a2: 9d:be:b3:79:66:a5:df:ca:4b:cf:f2:3c:ea:3c:51: 21:59:e6:78:25:30:e1:2f:8b:43:cf:3d:a4:c9:06: a2:35:4a:98:10:27:a5:1a:fb:c6:07:a5:a3:09:b6: 85:78:4f:66:67:d7:25:3d:c6:56:69:16:55:58:c3: 9d:9d:7f:c8:ce:e6:27:de:de:57:0a:06:ce:b9:60: 86:fc:fe:ac:f5:de:1c:81:7e:f0:44:19:41:28:8a: ab:8b:cf:ac:90:6e:09:3c:cf:c5:00:e0:4b:73:46: ce:cf:a7:e7:7e:5d:39:7d:12:fa:04:8f:30:23:1e: 28:35:10:e0:e7:46:e1:e9:ae:e5:83:76:b3:67:78: 98:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:03:14:F9:E6:9E:56:99:84:C7:49:54:12:30:EF:DC:F0:1A:E1:D0 X509v3 Authority Key Identifier: keyid:EE:1B:08:99:E3:8A:96:B5:4F:C4:CB:CD:10:EF:53:9C:54:ED:4D:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:c3:a2:a3:ca:a5:64:bb:5e:7e:c3:76:00:0c:77:c6:b6:cf: f8:27:31:17:e4:2e:10:5b:15:16:7c:c3:9a:81:dd:0c:fb:da: f8:15:6a:da:0b:10:9e:60:5a:d3:aa:32:90:b9:ab:7a:38:19: 5e:60:03:e9:68:b7:a3:92:60:59:06:eb:78:61:da:6c:d4:e6: 27:03:a4:88:26:1f:d9:30:ca:d6:c7:83:37:a3:8f:06:1d:db: 01:95:60:9b:bd:4c:18:d8:a1:d5:be:75:39:99:f8:71:4c:58: ee:b9:00:02:35:50:c1:09:36:a9:46:91:6e:31:7e:49:14:d0: 78:2d:51:70:79:9a:f9:ec:9d:aa:89:66:fa:b4:e8:b8:b6:da: 45:25:e7:27:9a:f0:f8:1a:55:43:b6:bd:11:71:bb:e4:8c:bf: d2:80:13:4a:04:77:6e:06:c4:d5:8c:19:c8:3b:bb:b5:a1:ce: 8d:0d:71:36:11:e9:92:19:bd:72:64:52:e5:28:27:57:7e:f9: 60:e5:e8:9a:a1:ff:bb:09:b5:f7:68:62:d0:d8:d1:fa:1b:1f: 96:c8:93:d3:a6:35:f5:ae:a0:3e:a1:62:46:36:ae:3b:83:f0: 10:ef:34:e3:fa:05:01:ce:d7:fa:ec:5b:81:b2:09:39:8d:7c: 6a:0c:1a:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0K/jypBYtaPa0ACZEhHBEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWIwODk5ZTM4YTk2YjU0ZmM0Y2JjZDEwZWY1MzljNTRl ZDRkMzgwHhcNMjYwMTI1MDgwMTIwWhcNMjYwMTI2MDgwMTIwWjAzMTEwLwYDVQQD EygxODAzMTRmOWU2OWU1Njk5ODRjNzQ5NTQxMjMwZWZkY2YwMWFlMWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzgbEuA/gBqvxRApeOiGmfsGRvhF Qz9ZPvGpVheAZAzQadT9cKneCQrtQw3rUpp5ZS6Gro52pgdOeHLrdLwmkDSIo3Ps Jz8u/67R0VOuEyMNkBm+3GihHaH+nJcSjRvSyfu3d67/2KOmcvtH/qdmlCcxp9/2 Y6KdvrN5ZqXfykvP8jzqPFEhWeZ4JTDhL4tDzz2kyQaiNUqYECelGvvGB6WjCbaF eE9mZ9clPcZWaRZVWMOdnX/IzuYn3t5XCgbOuWCG/P6s9d4cgX7wRBlBKIqri8+s kG4JPM/FAOBLc0bOz6fnfl05fRL6BI8wIx4oNRDg50bh6a7lg3azZ3iYjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBgDFPnmnlaZhMdJVBIw79zwGuHQMB8GA1UdIwQY MBaAFO4bCJnjipa1T8TLzRDvU5xU7U04MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2hzSW1lT0tsclZQeE12TkVPOVRuRlR0VFRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mYjVhNDMtODE3Yi00NDliLWJjZmMt YWRmNmRhYjg4Yzg0LzEvN2hzSW1lT0tsclZQeE12TkVPOVRuRlR0VFRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9mYjVhNDMtODE3Yi00NDliLWJjZmMtYWRmNmRhYjg4Yzg0 LzEvN2hzSW1lT0tsclZQeE12TkVPOVRuRlR0VFRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgsOio8ql ZLtefsN2AAx3xrbP+CcxF+QuEFsVFnzDmoHdDPva+BVq2gsQnmBa06oykLmrejgZ XmAD6Wi3o5JgWQbreGHabNTmJwOkiCYf2TDK1seDN6OPBh3bAZVgm71MGNih1b51 OZn4cUxY7rkAAjVQwQk2qUaRbjF+SRTQeC1RcHma+eydqolm+rTouLbaRSXnJ5rw +BpVQ7a9EXG75Iy/0oATSgR3bgbE1YwZyDu7taHOjQ1xNhHpkhm9cmRS5SgnV375 YOXomqH/uwm192hi0NjR+hsflsiT06Y19a6gPqFiRjauO4PwEO804/oFAc7X+uxb gbIJOY18agwa8Q== -----END CERTIFICATE-----Generated at Sun Jan 25 17:01:38 2026 by rpki-client