This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft File: 7FOM3K-fkkZJfceuRYRTef5qcXQ.mft (raw, json) Hash identifier: PPo3jB2i0aNa0hFnijcxFQ2Jc3yPb+RMsR8ROI2ogsM= Subject key identifier: 11:43:5E:17:C3:5B:2D:29:17:F8:AB:7E:E2:AA:03:08:BA:6F:6D:FB Authority key identifier: EC:53:8C:DC:AF:9F:92:46:49:7D:C7:AE:45:84:53:79:FE:6A:71:74 Certificate issuer: /CN=ec538cdcaf9f9246497dc7ae45845379fe6a7174 Certificate serial: 019BF2069BFA8974D0BF37D62EA905864D22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft Manifest number: 0BDF Signing time: Sat 24 Jan 2026 22:01:17 +0000 Manifest this update: Sat 24 Jan 2026 22:01:17 +0000 Manifest next update: Sun 25 Jan 2026 22:01:17 +0000 Files and hashes: 1: 1-WOlFKgJ5fyuJ0mK_WXzxZSjJZ8.roa (hash: mA5SaPX5hOKD8NX3Hv1/uNqyTzg2PYZjKEyCT2Stnms=) 2: 7FOM3K-fkkZJfceuRYRTef5qcXQ.crl (hash: QzufOYDT069ysw3+UghW2OIhyBwhc70NngFdGWp6CbQ=) 3: qCla3aYy8lmkCd9GDBwAGdRopPY.roa (hash: yq0d/UWqcKfbvqZVTTAHu+E8rSvKS7DJ77n7pL88Lw8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:06:9b:fa:89:74:d0:bf:37:d6:2e:a9:05:86:4d:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec538cdcaf9f9246497dc7ae45845379fe6a7174 Validity Not Before: Jan 24 22:01:17 2026 GMT Not After : Jan 25 22:01:17 2026 GMT Subject: CN=11435e17c35b2d2917f8ab7ee2aa0308ba6f6dfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:0f:8b:36:e9:20:0f:63:3b:44:36:6c:f7:bc: 2c:42:64:38:f6:96:6f:dd:b2:7b:e3:35:e5:fd:04: d6:11:91:87:c9:02:e5:d4:c5:a3:4f:2f:4e:7a:c5: 5f:fc:74:35:51:72:fb:c4:b5:13:bf:34:d5:55:37: b0:e0:7d:2a:35:2a:47:2a:e6:65:2c:f4:aa:a4:65: a8:20:e4:65:1c:01:69:11:29:00:2e:8c:69:b4:51: 3e:00:3d:5b:4b:05:5a:9e:3b:ac:13:25:44:a1:12: 57:e0:7f:3c:19:03:bf:f3:fe:18:21:fc:2b:6d:c0: 18:94:e0:51:a7:f3:14:35:c2:4e:b9:02:b8:f7:3c: 62:d0:f6:e3:47:96:8b:09:7d:3e:50:e2:21:cd:45: 43:e8:9c:a6:f3:9b:ba:07:42:ff:be:53:88:87:f1: 62:08:20:02:09:68:51:37:dc:55:b0:c8:80:8d:e9: 58:a7:ca:80:8b:97:90:06:0b:07:71:93:94:bd:5c: ee:60:44:73:1b:4f:7d:2f:37:e5:bf:bd:3a:66:cb: 11:40:d1:0f:1a:fa:aa:2d:4f:27:74:fa:2e:88:17: 43:55:63:52:b5:9f:5d:1e:4f:36:a4:e7:a2:e6:6e: 0e:6e:35:30:2b:9d:c1:6a:d9:98:2b:93:21:50:12: 8f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:43:5E:17:C3:5B:2D:29:17:F8:AB:7E:E2:AA:03:08:BA:6F:6D:FB X509v3 Authority Key Identifier: keyid:EC:53:8C:DC:AF:9F:92:46:49:7D:C7:AE:45:84:53:79:FE:6A:71:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:b2:aa:db:d9:8b:e7:42:49:48:52:8d:9d:05:19:e1:15:e2: 34:80:14:13:e8:b7:87:1e:73:38:0c:22:c1:fb:d2:3b:7c:7f: d4:77:ef:b3:30:ae:4c:1e:57:40:b6:22:75:99:28:29:c2:fb: ef:50:44:6a:2b:60:d9:13:c0:bf:ef:8e:08:9e:f4:5d:7b:a3: 6c:b1:fe:09:f9:6f:7c:06:de:d8:30:c5:77:a7:e3:bb:b1:31: 85:58:1e:43:a8:29:23:f1:be:ab:76:81:09:91:1c:ac:43:1e: 53:ab:76:9e:b9:65:7a:f9:0e:d2:ae:82:f0:be:37:ad:39:c9: 4a:2b:50:e0:6d:0c:34:d0:87:78:ac:4f:94:4a:72:2c:1f:ad: 43:e1:63:e3:57:0a:14:a7:79:c9:7c:fc:92:8a:2b:c9:a5:68: 68:ee:30:1d:3b:11:52:42:d2:0a:75:b8:cd:fa:5b:b0:85:55: f4:dc:09:b4:1d:4c:86:93:f7:41:e0:74:42:85:6a:6f:c5:e0: c2:29:01:c3:61:b6:62:9f:81:c5:a9:32:e4:f3:11:2c:2b:3c: 4e:36:b6:4b:07:6f:17:02:d9:ad:bf:f1:81:a3:7e:4a:9f:2b: da:76:fb:9c:48:fe:3f:c5:f9:17:6c:ec:a1:5a:10:b4:ae:40: 8a:42:e1:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvyBpv6iXTQvzfWLqkFhk0iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNTM4Y2RjYWY5ZjkyNDY0OTdkYzdhZTQ1ODQ1Mzc5ZmU2 YTcxNzQwHhcNMjYwMTI0MjIwMTE3WhcNMjYwMTI1MjIwMTE3WjAzMTEwLwYDVQQD EygxMTQzNWUxN2MzNWIyZDI5MTdmOGFiN2VlMmFhMDMwOGJhNmY2ZGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjA+LNukgD2M7RDZs97wsQmQ49pZv 3bJ74zXl/QTWEZGHyQLl1MWjTy9OesVf/HQ1UXL7xLUTvzTVVTew4H0qNSpHKuZl LPSqpGWoIORlHAFpESkALoxptFE+AD1bSwVanjusEyVEoRJX4H88GQO/8/4YIfwr bcAYlOBRp/MUNcJOuQK49zxi0PbjR5aLCX0+UOIhzUVD6Jym85u6B0L/vlOIh/Fi CCACCWhRN9xVsMiAjelYp8qAi5eQBgsHcZOUvVzuYERzG099Lzflv706ZssRQNEP GvqqLU8ndPouiBdDVWNStZ9dHk82pOei5m4ObjUwK53BatmYK5MhUBKPGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBFDXhfDWy0pF/irfuKqAwi6b237MB8GA1UdIwQY MBaAFOxTjNyvn5JGSX3HrkWEU3n+anF0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0ZPTTNLLWZra1pKZmNldVJZUlRlZjVxY1hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS83ZDY0ZjgtZGRlMi00YTdmLTk1MWEt YzA2YzYyYWY5ZGE1LzEvN0ZPTTNLLWZra1pKZmNldVJZUlRlZjVxY1hRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS83ZDY0ZjgtZGRlMi00YTdmLTk1MWEtYzA2YzYyYWY5ZGE1 LzEvN0ZPTTNLLWZra1pKZmNldVJZUlRlZjVxY1hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABLKq29mL 50JJSFKNnQUZ4RXiNIAUE+i3hx5zOAwiwfvSO3x/1HfvszCuTB5XQLYidZkoKcL7 71BEaitg2RPAv++OCJ70XXujbLH+CflvfAbe2DDFd6fju7ExhVgeQ6gpI/G+q3aB CZEcrEMeU6t2nrllevkO0q6C8L43rTnJSitQ4G0MNNCHeKxPlEpyLB+tQ+Fj41cK FKd5yXz8kooryaVoaO4wHTsRUkLSCnW4zfpbsIVV9NwJtB1MhpP3QeB0QoVqb8Xg wikBw2G2Yp+Bxaky5PMRLCs8Tja2SwdvFwLZrb/xgaN+Sp8r2nb7nEj+P8X5F2zs oVoQtK5AikLh6A== -----END CERTIFICATE-----Generated at Sun Jan 25 05:39:36 2026 by rpki-client