This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft File: m7S5jjWbTJLDEYP790kjjmtvCMI.mft (raw, json) Hash identifier: ZWstuPitZAciDQQwp2/WaXanP4kMpm2DQjmh4TTJeKo= Subject key identifier: 53:1A:A1:3A:0F:44:74:30:6B:07:B5:28:BA:89:12:95:C1:9C:5C:C3 Authority key identifier: 9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2 Certificate issuer: /CN=9bb4b98e359b4c92c31183fbf749238e6b6f08c2 Certificate serial: 019BF274C0CAC6273B44829B5496D939B200 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft Manifest number: 17E5 Signing time: Sun 25 Jan 2026 00:01:36 +0000 Manifest this update: Sun 25 Jan 2026 00:01:36 +0000 Manifest next update: Mon 26 Jan 2026 00:01:36 +0000 Files and hashes: 1: SKpYBqwn6udQHU20Uf2pG2NVjSc.roa (hash: 0Drji27vy2Cr4dvgFBfhAgVdOvdDdCwXZsDdSfaarcA=) 2: m7S5jjWbTJLDEYP790kjjmtvCMI.crl (hash: +JxDWuOTXGoAGUv9A604E5tY+sCfi4ExPyhZpr087UI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:74:c0:ca:c6:27:3b:44:82:9b:54:96:d9:39:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bb4b98e359b4c92c31183fbf749238e6b6f08c2 Validity Not Before: Jan 25 00:01:36 2026 GMT Not After : Jan 26 00:01:36 2026 GMT Subject: CN=531aa13a0f4474306b07b528ba891295c19c5cc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:00:af:e4:27:81:36:57:ce:8a:6f:e8:7a:af: 9d:68:97:58:4d:0e:49:8d:7c:d5:ef:04:17:d5:35: 9a:8d:03:51:1c:db:98:5c:45:cc:3f:02:8f:89:e3: e0:e3:20:4f:b3:d6:08:b3:7b:63:16:dc:3c:39:24: c0:d4:d9:b0:83:d3:89:98:a8:9d:34:96:c9:21:34: 3f:6e:4b:81:69:20:65:ec:79:18:61:b6:8b:55:13: 0f:4a:09:d3:2b:34:69:75:ac:eb:06:9d:a4:b7:19: 3d:9a:c6:ce:8f:0c:47:3c:bd:2b:c3:c4:f3:22:9b: 42:95:44:1a:9b:91:67:ab:b1:0c:be:7f:63:b7:99: b5:e5:43:b8:17:17:1c:0b:7f:29:de:15:4e:b8:04: 69:eb:58:2c:3b:50:60:1d:99:10:90:54:2c:0d:32: d4:d8:4e:70:e0:be:e0:29:2a:20:ff:9e:7a:92:a5: 02:74:9a:ab:2d:66:9f:03:44:86:11:c2:23:33:cd: c4:15:fd:c1:b1:34:7b:d3:a1:8b:06:56:6b:dc:49: 28:25:54:03:90:13:55:2d:b4:13:d6:1d:79:0e:1d: 83:8d:3e:73:32:d7:14:fe:da:9a:6d:d7:2c:c1:66: ba:12:8a:95:b8:61:3c:87:ef:2e:9b:7e:18:2a:3d: a9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:1A:A1:3A:0F:44:74:30:6B:07:B5:28:BA:89:12:95:C1:9C:5C:C3 X509v3 Authority Key Identifier: keyid:9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:b9:9b:8e:87:8f:b0:95:fd:69:80:e3:44:5a:ec:80:a6:f5: 45:04:11:79:06:75:49:d9:6b:0c:c3:01:3f:04:b5:a0:fb:b6: 30:a2:ec:b2:42:dc:92:8c:a7:13:c6:0a:e5:34:cd:b7:55:10: c7:aa:77:2b:ff:c3:5e:b6:38:5d:8d:4b:db:ad:2b:c6:54:90: 9a:d7:f8:f3:d2:08:a1:7d:34:84:76:b0:3d:de:5c:e3:92:1f: 13:0f:9d:6d:aa:4c:60:86:25:f5:a1:f2:f0:23:7c:fb:f0:fe: 6b:34:c1:ad:ff:06:e6:1c:9e:48:e3:a1:88:08:14:d0:73:c5: 63:57:7e:dd:00:06:59:ae:e1:de:92:4f:b5:1f:aa:59:b8:88: a8:99:f7:58:a8:61:61:fe:18:e0:42:f2:21:ea:70:00:da:d3: 94:11:d3:c4:f1:a4:fe:75:f9:58:5e:f0:8c:48:5d:1b:9c:a7: 71:d1:98:8f:56:0d:b1:53:87:58:41:35:d9:15:39:4d:8c:35: 61:41:7a:7d:81:cd:71:fd:53:51:04:8d:12:2f:5c:c2:be:5e: 85:8f:88:3b:0b:02:1a:8b:b4:93:64:68:73:08:af:83:f6:ad: e9:45:50:e9:00:6f:6f:ed:92:8e:bf:31:0d:18:4c:b9:c5:df: 1c:d7:dc:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvydMDKxic7RIKbVJbZObIAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliYjRiOThlMzU5YjRjOTJjMzExODNmYmY3NDkyMzhlNmI2 ZjA4YzIwHhcNMjYwMTI1MDAwMTM2WhcNMjYwMTI2MDAwMTM2WjAzMTEwLwYDVQQD Eyg1MzFhYTEzYTBmNDQ3NDMwNmIwN2I1MjhiYTg5MTI5NWMxOWM1Y2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQCv5CeBNlfOim/oeq+daJdYTQ5J jXzV7wQX1TWajQNRHNuYXEXMPwKPiePg4yBPs9YIs3tjFtw8OSTA1Nmwg9OJmKid NJbJITQ/bkuBaSBl7HkYYbaLVRMPSgnTKzRpdazrBp2ktxk9msbOjwxHPL0rw8Tz IptClUQam5Fnq7EMvn9jt5m15UO4FxccC38p3hVOuARp61gsO1BgHZkQkFQsDTLU 2E5w4L7gKSog/556kqUCdJqrLWafA0SGEcIjM83EFf3BsTR706GLBlZr3EkoJVQD kBNVLbQT1h15Dh2DjT5zMtcU/tqabdcswWa6EoqVuGE8h+8um34YKj2psQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFMaoToPRHQwawe1KLqJEpXBnFzDMB8GA1UdIwQY MBaAFJu0uY41m0ySwxGD+/dJI45rbwjCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTdTNWpqV2JUSkxERVlQNzkwa2pqbXR2Q01JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9jOWQ0YmItMzEzNS00YTljLWIzNzEt YmIwZDA0YTI3NzI3LzEvbTdTNWpqV2JUSkxERVlQNzkwa2pqbXR2Q01JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9jOWQ0YmItMzEzNS00YTljLWIzNzEtYmIwZDA0YTI3NzI3 LzEvbTdTNWpqV2JUSkxERVlQNzkwa2pqbXR2Q01JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbLmbjoeP sJX9aYDjRFrsgKb1RQQReQZ1SdlrDMMBPwS1oPu2MKLsskLckoynE8YK5TTNt1UQ x6p3K//DXrY4XY1L260rxlSQmtf489IIoX00hHawPd5c45IfEw+dbapMYIYl9aHy 8CN8+/D+azTBrf8G5hyeSOOhiAgU0HPFY1d+3QAGWa7h3pJPtR+qWbiIqJn3WKhh Yf4Y4ELyIepwANrTlBHTxPGk/nX5WF7wjEhdG5yncdGYj1YNsVOHWEE12RU5TYw1 YUF6fYHNcf1TUQSNEi9cwr5ehY+IOwsCGou0k2Rocwivg/at6UVQ6QBvb+2Sjr8x DRhMucXfHNfc2g== -----END CERTIFICATE-----Generated at Sun Jan 25 05:41:53 2026 by rpki-client