This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft File: 7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft (raw, json) Hash identifier: 5sYjIom1WwkavYU//CbNA8ZHn8zExYWsgDdARyTgrNE= Subject key identifier: 0E:63:B8:94:56:06:F4:E5:62:F9:CA:8D:F3:94:55:C9:CB:7E:D6:D6 Authority key identifier: EF:24:E3:B3:28:D1:19:1E:FE:11:55:21:C6:FE:C6:AD:B5:56:DC:36 Certificate issuer: /CN=ef24e3b328d1191efe115521c6fec6adb556dc36 Certificate serial: 019BF53E60178DA22BCF00E1C8B2A145D381 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft Manifest number: 0E74 Signing time: Sun 25 Jan 2026 13:01:03 +0000 Manifest this update: Sun 25 Jan 2026 13:01:03 +0000 Manifest next update: Mon 26 Jan 2026 13:01:03 +0000 Files and hashes: 1: 7yTjsyjRGR7-EVUhxv7GrbVW3DY.crl (hash: GoLPw9sReInLp0eZ1eXb41rmVGfRGo//xkwS7XN3mpg=) 2: rC0spcl-pdrTbDRKzG5ofIHYKcI.roa (hash: lCBqHzXRs9Yu91X4wPPiBVftfQRsm2XGgS23G8xgYj0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:60:17:8d:a2:2b:cf:00:e1:c8:b2:a1:45:d3:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef24e3b328d1191efe115521c6fec6adb556dc36 Validity Not Before: Jan 25 13:01:03 2026 GMT Not After : Jan 26 13:01:03 2026 GMT Subject: CN=0e63b8945606f4e562f9ca8df39455c9cb7ed6d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b9:eb:37:79:55:c5:00:ec:3c:ef:0c:6e:21: 19:25:fc:ed:51:db:c3:8b:53:5a:fa:2b:d7:0b:a7: f8:3e:53:3d:e0:2c:ab:16:b4:ec:b7:54:9d:34:08: ff:a0:c0:ad:1a:ce:51:be:10:8c:2e:06:a0:fb:97: 01:54:3b:12:1e:73:4f:ff:ea:6a:46:b5:6c:d8:74: 83:46:ed:f5:36:e4:9a:d4:a5:9d:07:79:66:78:ba: d4:47:bf:6a:ae:95:d8:93:3f:d7:3e:7d:3e:79:56: d8:18:ba:c4:ad:06:f2:0b:e1:1a:8e:77:fe:5e:de: 5c:27:c7:09:08:89:cb:91:64:a9:23:ac:04:e5:69: 76:52:11:eb:38:43:33:96:f7:36:83:05:e2:05:aa: d6:5b:cf:a4:ea:cb:34:3e:77:30:2b:28:14:83:40: e2:34:8f:71:10:18:b7:d8:22:0a:c7:fe:a0:22:f1: 49:f5:dd:dd:8f:89:5d:18:83:37:a6:4d:23:02:92: 96:67:bc:e1:5f:23:a3:32:54:46:45:0b:ff:93:ee: 56:ae:cc:69:b8:dd:a6:f5:73:4b:7b:3b:d2:8c:39: 28:6c:4e:1c:59:54:b4:db:9d:e4:26:16:d3:b7:74: e8:ab:36:27:f5:ee:ed:95:e0:76:66:d1:9f:22:a2: f4:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:63:B8:94:56:06:F4:E5:62:F9:CA:8D:F3:94:55:C9:CB:7E:D6:D6 X509v3 Authority Key Identifier: keyid:EF:24:E3:B3:28:D1:19:1E:FE:11:55:21:C6:FE:C6:AD:B5:56:DC:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:30:e5:56:56:61:c5:de:3c:96:e6:ec:82:09:50:c0:7e:16: 44:ba:81:60:45:9e:85:5d:90:30:3b:bb:da:86:bc:1e:3b:59: a9:f1:d8:21:57:ab:58:f4:91:0d:7e:d3:39:59:20:0a:a7:91: 6e:e6:fa:60:34:04:d4:fc:99:24:49:fa:08:80:2f:ad:11:13: 44:8b:79:83:3d:34:a3:e1:1c:02:66:66:c7:10:1f:7a:2b:c8: 01:4b:93:c6:20:bf:b0:1f:11:04:f2:c9:8e:dc:8d:b9:07:34: 17:b3:93:c6:49:88:dc:6d:6e:dc:fa:da:10:4a:43:96:b4:42: 31:20:27:1d:45:f5:d6:f9:a1:c7:be:38:c6:1d:00:a6:62:db: 97:d3:47:a3:03:a1:b4:c5:91:d3:86:3e:cc:8c:e9:97:88:e6: cd:10:f9:cc:96:f8:fa:a6:a7:82:f9:37:82:42:98:2b:72:15: 8d:43:95:88:19:f0:58:5e:67:fa:8e:9e:6c:e3:03:87:ba:77: bc:d6:2e:84:22:0f:60:95:06:e7:de:c0:3f:65:e7:92:a7:a8: 71:20:70:f7:55:f0:8c:a4:2c:7f:d4:90:ec:06:aa:ec:91:6e: 11:8c:8a:d9:0a:ca:4b:aa:2f:d1:a2:8d:57:75:b4:36:3b:cb: 39:94:56:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PmAXjaIrzwDhyLKhRdOBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMjRlM2IzMjhkMTE5MWVmZTExNTUyMWM2ZmVjNmFkYjU1 NmRjMzYwHhcNMjYwMTI1MTMwMTAzWhcNMjYwMTI2MTMwMTAzWjAzMTEwLwYDVQQD EygwZTYzYjg5NDU2MDZmNGU1NjJmOWNhOGRmMzk0NTVjOWNiN2VkNmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbnrN3lVxQDsPO8MbiEZJfztUdvD i1Na+ivXC6f4PlM94CyrFrTst1SdNAj/oMCtGs5RvhCMLgag+5cBVDsSHnNP/+pq RrVs2HSDRu31NuSa1KWdB3lmeLrUR79qrpXYkz/XPn0+eVbYGLrErQbyC+Eajnf+ Xt5cJ8cJCInLkWSpI6wE5Wl2UhHrOEMzlvc2gwXiBarWW8+k6ss0PncwKygUg0Di NI9xEBi32CIKx/6gIvFJ9d3dj4ldGIM3pk0jApKWZ7zhXyOjMlRGRQv/k+5Wrsxp uN2m9XNLezvSjDkobE4cWVS0253kJhbTt3ToqzYn9e7tleB2ZtGfIqL0cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA5juJRWBvTlYvnKjfOUVcnLftbWMB8GA1UdIwQY MBaAFO8k47Mo0Rke/hFVIcb+xq21Vtw2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3lUanN5alJHUjctRVZVaHh2N0dyYlZXM0RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9mNGJmYzEtZTNmMS00ZmM5LWFlZTYt MDgyMzBjYzUwZWE5LzEvN3lUanN5alJHUjctRVZVaHh2N0dyYlZXM0RZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9mNGJmYzEtZTNmMS00ZmM5LWFlZTYtMDgyMzBjYzUwZWE5 LzEvN3lUanN5alJHUjctRVZVaHh2N0dyYlZXM0RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhTDlVlZh xd48lubsgglQwH4WRLqBYEWehV2QMDu72oa8HjtZqfHYIVerWPSRDX7TOVkgCqeR bub6YDQE1PyZJEn6CIAvrRETRIt5gz00o+EcAmZmxxAfeivIAUuTxiC/sB8RBPLJ jtyNuQc0F7OTxkmI3G1u3PraEEpDlrRCMSAnHUX11vmhx744xh0ApmLbl9NHowOh tMWR04Y+zIzpl4jmzRD5zJb4+qangvk3gkKYK3IVjUOViBnwWF5n+o6ebOMDh7p3 vNYuhCIPYJUG597AP2XnkqeocSBw91XwjKQsf9SQ7Aaq7JFuEYyK2QrKS6ov0aKN V3W0NjvLOZRWBA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:01:02 2026 by rpki-client