This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft File: 7qq8oRa05zqZRKuXAs-YZleANYA.mft (raw, json) Hash identifier: 90Od+YjmMbb6YPte35jIMoYZ9m+nJhT67Y/a/Gxn3Qs= Subject key identifier: 0E:20:70:85:CD:61:D8:93:DF:FB:4F:54:38:14:35:77:06:2A:9C:FB Authority key identifier: EE:AA:BC:A1:16:B4:E7:3A:99:44:AB:97:02:CF:98:66:57:80:35:80 Certificate issuer: /CN=eeaabca116b4e73a9944ab9702cf986657803580 Certificate serial: 019BF6F60627FBA99BFCB0265049DC27E3F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft Manifest number: 0432 Signing time: Sun 25 Jan 2026 21:01:17 +0000 Manifest this update: Sun 25 Jan 2026 21:01:17 +0000 Manifest next update: Mon 26 Jan 2026 21:01:17 +0000 Files and hashes: 1: 7qq8oRa05zqZRKuXAs-YZleANYA.crl (hash: m/adr6OkBUuiUXy3tRuuMpMAEiHlKDVdYCKsCj+JbvE=) 2: QsP30C5AyyrplhJOQtwBFKHc2pI.roa (hash: 1rl1zPT5VgUb8N7x1I4JvxDOw2OsxnlXtnTYVUm9hGQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f6:06:27:fb:a9:9b:fc:b0:26:50:49:dc:27:e3:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eeaabca116b4e73a9944ab9702cf986657803580 Validity Not Before: Jan 25 21:01:17 2026 GMT Not After : Jan 26 21:01:17 2026 GMT Subject: CN=0e207085cd61d893dffb4f5438143577062a9cfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:35:b5:76:75:ef:cc:41:79:2e:50:02:e8:a6: 25:9b:fa:ed:62:cf:0d:f6:1b:86:35:3b:3e:dd:53: 8a:03:76:20:88:d8:b4:96:ec:2d:08:0b:bc:67:17: 2a:18:60:eb:8f:07:d3:b9:db:e7:09:98:eb:aa:bf: 46:bb:2a:3f:74:de:96:52:25:bb:2d:ea:5a:ab:15: a0:56:9c:02:b1:53:a0:39:a1:49:bb:8b:27:e4:83: b4:bd:8b:de:1c:4e:f2:f3:dd:d4:b2:47:c4:33:0a: 2e:3b:74:dd:b5:f3:bb:19:6f:66:75:f5:b0:ce:8e: 08:3a:ed:da:4a:66:7f:35:cd:d7:ae:5d:76:62:bc: 50:00:fe:1a:6f:26:e7:14:5a:e3:d5:c7:31:0e:8d: b3:a9:87:7c:de:18:ac:0a:5a:02:d6:80:22:cd:e3: 24:0d:21:dd:a5:11:e5:36:76:fd:48:e6:4f:99:bf: 58:af:43:e1:6e:33:d0:fe:90:ae:c5:e4:f0:2b:d9: 98:f0:2d:a9:69:2b:07:93:95:3b:0a:4e:06:d0:ee: 0d:21:4b:3b:e4:ac:e8:db:e5:2b:25:e2:64:18:28: af:ba:d2:3b:7d:0b:7b:88:d6:af:0e:eb:5f:cd:fe: 27:dc:de:63:55:74:0c:3c:ba:bb:a4:02:58:8e:4f: 61:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:20:70:85:CD:61:D8:93:DF:FB:4F:54:38:14:35:77:06:2A:9C:FB X509v3 Authority Key Identifier: keyid:EE:AA:BC:A1:16:B4:E7:3A:99:44:AB:97:02:CF:98:66:57:80:35:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:ce:3f:c1:6d:e6:fa:08:b6:c0:29:a7:0c:bc:6d:75:fe:29: 58:51:38:ff:f4:76:41:f9:c9:35:4d:50:55:67:ca:f3:51:6d: 4b:19:d6:53:d4:7b:f8:1a:4d:91:7e:92:55:42:9a:01:5b:37: 8b:86:bd:57:7d:e4:59:d3:af:14:56:99:0c:b9:33:21:93:16: a4:0e:f7:f1:f3:4a:c5:57:6e:77:af:57:a0:db:d9:85:9b:b5: 5c:94:da:26:8c:18:7d:21:51:b3:2d:fe:4c:e9:0f:dd:95:f9: 5f:6e:06:b0:e6:70:39:bb:40:55:32:8f:d2:99:86:f4:49:9b: 3f:7e:ef:38:84:6d:49:a6:4a:23:15:eb:8f:3e:9a:f5:48:9f: bc:6c:67:26:28:86:94:22:21:fa:e1:ba:84:79:64:79:26:fa: bd:f5:e3:fc:4b:71:de:57:a6:07:2f:db:2f:87:ca:a0:d7:8d: fc:1b:77:a3:37:58:ce:08:c1:0f:e4:54:5e:fb:11:7b:09:b9: a9:31:7c:25:07:bf:ad:a7:a0:da:6b:44:b0:70:26:b4:ee:cb: 5f:94:b9:54:ab:c8:f5:4c:3f:77:c8:97:53:ae:92:6c:db:12: e5:bd:11:0e:34:ad:aa:d7:10:b8:89:0c:99:d9:8e:b5:d8:3e: 62:c4:45:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29gYn+6mb/LAmUEncJ+P1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYWFiY2ExMTZiNGU3M2E5OTQ0YWI5NzAyY2Y5ODY2NTc4 MDM1ODAwHhcNMjYwMTI1MjEwMTE3WhcNMjYwMTI2MjEwMTE3WjAzMTEwLwYDVQQD EygwZTIwNzA4NWNkNjFkODkzZGZmYjRmNTQzODE0MzU3NzA2MmE5Y2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzW1dnXvzEF5LlAC6KYlm/rtYs8N 9huGNTs+3VOKA3YgiNi0luwtCAu8ZxcqGGDrjwfTudvnCZjrqr9Guyo/dN6WUiW7 LepaqxWgVpwCsVOgOaFJu4sn5IO0vYveHE7y893UskfEMwouO3TdtfO7GW9mdfWw zo4IOu3aSmZ/Nc3Xrl12YrxQAP4abybnFFrj1ccxDo2zqYd83hisCloC1oAizeMk DSHdpRHlNnb9SOZPmb9Yr0PhbjPQ/pCuxeTwK9mY8C2paSsHk5U7Ck4G0O4NIUs7 5Kzo2+UrJeJkGCivutI7fQt7iNavDutfzf4n3N5jVXQMPLq7pAJYjk9hXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA4gcIXNYdiT3/tPVDgUNXcGKpz7MB8GA1UdIwQY MBaAFO6qvKEWtOc6mUSrlwLPmGZXgDWAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3FxOG9SYTA1enFaUkt1WEFzLVlabGVBTllBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9hZWJkNDgtYTAwMi00NWY1LWIzMDct ZGI0MTVhOWJlYmY1LzEvN3FxOG9SYTA1enFaUkt1WEFzLVlabGVBTllBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9hZWJkNDgtYTAwMi00NWY1LWIzMDctZGI0MTVhOWJlYmY1 LzEvN3FxOG9SYTA1enFaUkt1WEFzLVlabGVBTllBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIc4/wW3m +gi2wCmnDLxtdf4pWFE4//R2QfnJNU1QVWfK81FtSxnWU9R7+BpNkX6SVUKaAVs3 i4a9V33kWdOvFFaZDLkzIZMWpA738fNKxVdud69XoNvZhZu1XJTaJowYfSFRsy3+ TOkP3ZX5X24GsOZwObtAVTKP0pmG9EmbP37vOIRtSaZKIxXrjz6a9UifvGxnJiiG lCIh+uG6hHlkeSb6vfXj/Etx3lemBy/bL4fKoNeN/Bt3ozdYzgjBD+RUXvsRewm5 qTF8JQe/raeg2mtEsHAmtO7LX5S5VKvI9Uw/d8iXU66SbNsS5b0RDjStqtcQuIkM mdmOtdg+YsRFQw== -----END CERTIFICATE-----Generated at Mon Jan 26 05:08:55 2026 by rpki-client