This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft File: m7S5jjWbTJLDEYP790kjjmtvCMI.mft (raw, json) Hash identifier: rFDJkNW/rNKQIK4NHnvKQPaj3gZh9AOA3FXdPfT5dtQ= Subject key identifier: E6:23:F1:74:DE:5A:2B:E3:D8:34:3B:8A:62:B5:67:37:42:60:52:0B Authority key identifier: 9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2 Certificate issuer: /CN=9bb4b98e359b4c92c31183fbf749238e6b6f08c2 Certificate serial: 019BF462BF863547B0491702D2CB71D9C968 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft Manifest number: 17E6 Signing time: Sun 25 Jan 2026 09:01:10 +0000 Manifest this update: Sun 25 Jan 2026 09:01:10 +0000 Manifest next update: Mon 26 Jan 2026 09:01:10 +0000 Files and hashes: 1: SKpYBqwn6udQHU20Uf2pG2NVjSc.roa (hash: 0Drji27vy2Cr4dvgFBfhAgVdOvdDdCwXZsDdSfaarcA=) 2: m7S5jjWbTJLDEYP790kjjmtvCMI.crl (hash: xgYkZI16Niaer/AFRHnn+Td7QBhAUrxq1SC2LmRA9Qk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:bf:86:35:47:b0:49:17:02:d2:cb:71:d9:c9:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bb4b98e359b4c92c31183fbf749238e6b6f08c2 Validity Not Before: Jan 25 09:01:10 2026 GMT Not After : Jan 26 09:01:10 2026 GMT Subject: CN=e623f174de5a2be3d8343b8a62b567374260520b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:16:15:0d:9b:74:f5:6d:7d:db:56:89:f4:b6: 04:ac:49:82:87:1c:12:bd:5f:1e:bb:32:90:92:c1: 5f:f4:a4:f9:52:17:0c:cb:76:27:84:ba:13:05:47: 13:03:ac:9e:8f:1f:9f:a3:df:09:84:2c:0e:8d:95: 9a:85:b0:e0:50:95:92:a8:db:a7:ac:9d:3e:dd:16: 5a:66:8d:b2:c0:cb:16:52:35:0b:59:c4:76:3b:51: 78:54:3f:1d:a0:3c:f1:b9:7b:37:9d:b2:70:b8:9a: b8:3f:55:f4:d8:60:9a:d8:0d:77:2f:ca:ac:c4:b5: e3:f7:11:38:85:29:39:8a:96:a6:11:54:d7:7d:68: 51:e8:4c:fc:90:86:e2:af:c6:35:18:49:60:78:33: e3:15:1d:28:34:8c:10:78:eb:2b:7f:32:74:6e:6d: 74:23:14:68:d9:cd:bf:ae:2f:37:76:b1:2f:99:f6: 4d:85:da:30:9a:cb:eb:72:90:c4:46:cf:25:a1:36: b5:c3:6e:95:f0:8e:96:bb:75:1c:d2:3a:bf:5c:3c: 15:eb:26:87:26:69:be:62:ef:4e:82:83:d3:00:63: 8d:2b:a2:92:3c:60:85:10:70:24:e0:0a:58:77:43: bd:e9:0f:6c:78:c5:08:6f:58:d1:6b:c8:c3:32:66: c3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:23:F1:74:DE:5A:2B:E3:D8:34:3B:8A:62:B5:67:37:42:60:52:0B X509v3 Authority Key Identifier: keyid:9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:93:97:96:59:16:ec:cf:2f:cb:b1:19:6f:15:15:1d:b4:ff: 69:10:27:db:45:76:f7:82:2a:6c:8c:31:d3:53:b7:59:1c:1f: ab:cf:e2:8a:b8:01:ad:f1:03:39:ed:8f:dd:12:01:71:b5:cf: ef:a8:af:c9:f4:34:19:97:89:8c:1f:0e:dd:e8:28:74:43:6e: c8:3f:44:e7:7c:9e:43:2d:b2:94:5b:f6:1c:fb:3c:d7:32:42: 93:c6:31:2a:95:99:53:8d:a7:61:37:13:3d:8b:c5:77:13:30: 5f:e2:9e:3d:17:e6:c1:a6:8b:90:85:2e:65:7b:61:22:49:86: 81:bc:12:a0:ab:ce:66:10:ad:d5:53:ce:9d:5d:36:6a:cf:d8: 5f:71:6a:1b:cb:c2:9f:39:4e:0b:a8:e9:53:4c:47:7e:0a:26: 25:53:d5:3f:58:40:04:95:eb:ec:d0:5f:66:19:7c:23:1a:9a: 03:d8:3d:7a:10:ef:d3:1f:e5:82:35:ef:5b:64:11:0a:ab:8a: b9:98:4f:1d:d6:61:e7:ea:df:8f:d4:8d:16:fc:3e:f4:3a:79: 9f:8c:1f:a5:6a:6f:2c:1f:9b:52:eb:57:dd:4c:ef:cb:e3:71: 23:56:1a:50:5e:bf:e5:de:8e:b4:07:e8:af:2e:8c:a9:75:c1: e7:9e:eb:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0Yr+GNUewSRcC0stx2cloMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliYjRiOThlMzU5YjRjOTJjMzExODNmYmY3NDkyMzhlNmI2 ZjA4YzIwHhcNMjYwMTI1MDkwMTEwWhcNMjYwMTI2MDkwMTEwWjAzMTEwLwYDVQQD EyhlNjIzZjE3NGRlNWEyYmUzZDgzNDNiOGE2MmI1NjczNzQyNjA1MjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBYVDZt09W1921aJ9LYErEmChxwS vV8euzKQksFf9KT5UhcMy3YnhLoTBUcTA6yejx+fo98JhCwOjZWahbDgUJWSqNun rJ0+3RZaZo2ywMsWUjULWcR2O1F4VD8doDzxuXs3nbJwuJq4P1X02GCa2A13L8qs xLXj9xE4hSk5ipamEVTXfWhR6Ez8kIbir8Y1GElgeDPjFR0oNIwQeOsrfzJ0bm10 IxRo2c2/ri83drEvmfZNhdowmsvrcpDERs8loTa1w26V8I6Wu3Uc0jq/XDwV6yaH Jmm+Yu9OgoPTAGONK6KSPGCFEHAk4ApYd0O96Q9seMUIb1jRa8jDMmbD/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOYj8XTeWivj2DQ7imK1ZzdCYFILMB8GA1UdIwQY MBaAFJu0uY41m0ySwxGD+/dJI45rbwjCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTdTNWpqV2JUSkxERVlQNzkwa2pqbXR2Q01JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9jOWQ0YmItMzEzNS00YTljLWIzNzEt YmIwZDA0YTI3NzI3LzEvbTdTNWpqV2JUSkxERVlQNzkwa2pqbXR2Q01JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9jOWQ0YmItMzEzNS00YTljLWIzNzEtYmIwZDA0YTI3NzI3 LzEvbTdTNWpqV2JUSkxERVlQNzkwa2pqbXR2Q01JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb5OXllkW 7M8vy7EZbxUVHbT/aRAn20V294IqbIwx01O3WRwfq8/iirgBrfEDOe2P3RIBcbXP 76ivyfQ0GZeJjB8O3egodENuyD9E53yeQy2ylFv2HPs81zJCk8YxKpWZU42nYTcT PYvFdxMwX+KePRfmwaaLkIUuZXthIkmGgbwSoKvOZhCt1VPOnV02as/YX3FqG8vC nzlOC6jpU0xHfgomJVPVP1hABJXr7NBfZhl8IxqaA9g9ehDv0x/lgjXvW2QRCquK uZhPHdZh5+rfj9SNFvw+9Dp5n4wfpWpvLB+bUutX3Uzvy+NxI1YaUF6/5d6OtAfo ry6MqXXB557rDw== -----END CERTIFICATE-----Generated at Sun Jan 25 16:00:40 2026 by rpki-client