This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft File: rIpp7LeHzOmJLcZUgEY_sIi2E98.mft (raw, json) Hash identifier: t/OeMRw/Q3N37pIJltSNXlTRdgTOC9boE0xry+cbKbY= Subject key identifier: B3:EE:84:54:B5:CB:6D:59:13:70:D7:C3:9A:F1:28:90:4D:EF:AE:4D Authority key identifier: AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF Certificate issuer: /CN=ac8a69ecb787cce9892dc65480463fb088b613df Certificate serial: 019BF91BC780CF512B94E172332C70AF4BE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 07:01:45 +0000 Manifest this update: Mon 26 Jan 2026 07:01:45 +0000 Manifest next update: Tue 27 Jan 2026 07:01:45 +0000 Files and hashes: 1: FKys4Xiow33v_h270A8VpmNDWTw.roa (hash: o4z6GWQar87z6QyuQkA9LK7MGeo2/aW3AYlCX5HnTz4=) 2: eJGdRqR19npkYtvPHiGG4FtsJ9I.roa (hash: 0EM+2GV5EUJcYRTF87nIhzm0VJnMFJsOgKeMDspDH20=) 3: rIpp7LeHzOmJLcZUgEY_sIi2E98.crl (hash: PjoE8rwT0TX9W+UJCemx/3i3s2+/jE/gLU6KLUlBzy8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:c7:80:cf:51:2b:94:e1:72:33:2c:70:af:4b:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac8a69ecb787cce9892dc65480463fb088b613df Validity Not Before: Jan 26 07:01:45 2026 GMT Not After : Jan 27 07:01:45 2026 GMT Subject: CN=b3ee8454b5cb6d591370d7c39af128904defae4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b1:af:45:e4:10:09:22:2c:c3:bb:70:a1:e9: bb:bf:e7:8d:4f:5f:c6:11:b9:5f:8e:d5:ae:5f:ee: dd:62:c6:e6:39:d1:7e:e5:6d:63:1c:50:67:9a:2a: 5c:67:58:ed:51:ec:5a:76:cf:9f:eb:cb:1c:9b:75: 7a:e7:41:2a:38:f5:ec:9a:a1:15:99:90:69:7e:a0: 3d:77:7a:d5:42:32:57:85:17:5a:36:b8:93:90:9e: f3:fa:82:01:99:b2:18:f4:2d:7c:95:8b:fb:38:30: cb:f2:b8:fe:96:62:1c:dd:ad:dd:da:c5:b8:2e:b8: dc:89:2d:af:1e:95:3c:96:30:29:5c:e9:3d:fb:89: 31:0a:69:1a:5d:ef:52:1c:ec:ee:73:9f:db:cf:87: 34:b9:25:1d:d0:bf:fe:1d:02:a6:b4:b2:12:a6:dd: 5e:3b:9f:cd:bc:b8:10:f9:62:a9:82:3e:bb:1f:9c: c3:bc:00:fb:e0:79:09:57:99:45:75:2f:53:76:5c: fe:41:a2:fb:14:2b:86:76:03:2b:9c:a1:41:13:f2: 9a:83:21:5a:29:48:6a:45:14:14:16:56:7d:be:de: 99:26:84:07:48:cb:59:e3:e1:48:69:4c:80:57:ea: 25:36:e7:63:9b:03:36:cc:78:83:ae:72:19:0b:6a: d0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:EE:84:54:B5:CB:6D:59:13:70:D7:C3:9A:F1:28:90:4D:EF:AE:4D X509v3 Authority Key Identifier: keyid:AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:f9:27:66:86:99:83:29:54:c6:ce:43:83:f8:6a:0f:5d:d2: 56:27:b3:59:1e:7b:0b:db:24:31:da:e4:bd:fb:b8:d4:b6:e9: d9:44:6e:82:c9:cc:4e:c6:32:6c:4f:95:9a:eb:9c:1d:8b:4a: e4:dd:1e:74:66:89:83:a1:71:59:19:89:16:76:c3:53:c9:de: f8:73:ef:cc:ad:11:59:28:04:d5:77:1a:0f:24:0e:59:15:fe: a5:2a:1c:1b:ee:1e:a9:54:c3:78:23:c9:5f:98:16:d1:20:fe: 7d:c7:85:b3:f4:b5:1a:ae:c3:82:d6:9a:04:9f:cc:01:52:e5: 5e:b0:e6:63:c8:e8:95:e8:ec:f3:46:4f:8a:07:69:8d:16:a8: de:4e:f2:b5:e8:7e:dd:55:ab:44:cd:61:da:ba:17:31:26:e7: e3:7b:fc:ae:da:a3:8d:e8:11:28:7e:49:f3:ef:56:d2:f4:89: 02:bd:a0:a8:b7:d5:26:b8:d0:d0:de:1e:67:23:81:0b:49:69: bc:0b:87:7e:a6:de:45:33:7a:17:52:f5:64:69:f6:2c:77:03: d6:c1:78:88:df:75:b7:1a:47:b0:78:72:e3:e7:eb:8d:27:cd: b8:c9:62:43:fa:52:4c:62:96:f9:00:3e:8c:20:8a:d2:f4:bc: d1:39:a4:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5G8eAz1ErlOFyMyxwr0vhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjOGE2OWVjYjc4N2NjZTk4OTJkYzY1NDgwNDYzZmIwODhi NjEzZGYwHhcNMjYwMTI2MDcwMTQ1WhcNMjYwMTI3MDcwMTQ1WjAzMTEwLwYDVQQD EyhiM2VlODQ1NGI1Y2I2ZDU5MTM3MGQ3YzM5YWYxMjg5MDRkZWZhZTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrGvReQQCSIsw7twoem7v+eNT1/G EblfjtWuX+7dYsbmOdF+5W1jHFBnmipcZ1jtUexads+f68scm3V650EqOPXsmqEV mZBpfqA9d3rVQjJXhRdaNriTkJ7z+oIBmbIY9C18lYv7ODDL8rj+lmIc3a3d2sW4 LrjciS2vHpU8ljApXOk9+4kxCmkaXe9SHOzuc5/bz4c0uSUd0L/+HQKmtLISpt1e O5/NvLgQ+WKpgj67H5zDvAD74HkJV5lFdS9Tdlz+QaL7FCuGdgMrnKFBE/KagyFa KUhqRRQUFlZ9vt6ZJoQHSMtZ4+FIaUyAV+olNudjmwM2zHiDrnIZC2rQOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLPuhFS1y21ZE3DXw5rxKJBN765NMB8GA1UdIwQY MBaAFKyKaey3h8zpiS3GVIBGP7CIthPfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcklwcDdMZUh6T21KTGNaVWdFWV9zSWkyRTk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84N2RhZGYtMjlkOS00OWQzLThhYzYt NGNjNDBmZmQ3OTZkLzEvcklwcDdMZUh6T21KTGNaVWdFWV9zSWkyRTk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi84N2RhZGYtMjlkOS00OWQzLThhYzYtNGNjNDBmZmQ3OTZk LzEvcklwcDdMZUh6T21KTGNaVWdFWV9zSWkyRTk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU/knZoaZ gylUxs5Dg/hqD13SViezWR57C9skMdrkvfu41Lbp2URugsnMTsYybE+VmuucHYtK 5N0edGaJg6FxWRmJFnbDU8ne+HPvzK0RWSgE1XcaDyQOWRX+pSocG+4eqVTDeCPJ X5gW0SD+fceFs/S1Gq7DgtaaBJ/MAVLlXrDmY8jolejs80ZPigdpjRao3k7yteh+ 3VWrRM1h2roXMSbn43v8rtqjjegRKH5J8+9W0vSJAr2gqLfVJrjQ0N4eZyOBC0lp vAuHfqbeRTN6F1L1ZGn2LHcD1sF4iN91txpHsHhy4+frjSfNuMliQ/pSTGKW+QA+ jCCK0vS80TmkUg== -----END CERTIFICATE-----Generated at Mon Jan 26 16:02:31 2026 by rpki-client