This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft File: K7wAKis1mxqoh54cTXBFWzGS76w.mft (raw, json) Hash identifier: MZsuTnvjUTKuB3chOKykjl0Kc4Ab2VWdPuN0koXtpJ4= Subject key identifier: 5D:6E:58:9C:BE:69:21:42:D7:65:65:CD:F5:20:08:2C:07:0C:96:F2 Authority key identifier: 2B:BC:00:2A:2B:35:9B:1A:A8:87:9E:1C:4D:70:45:5B:31:92:EF:AC Certificate issuer: /CN=2bbc002a2b359b1aa8879e1c4d70455b3192efac Certificate serial: 019BF763AB66DF3C557670806BD95CCA3A33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 23:01:02 +0000 Manifest this update: Sun 25 Jan 2026 23:01:02 +0000 Manifest next update: Mon 26 Jan 2026 23:01:02 +0000 Files and hashes: 1: 2UmZFRrJ0P-2mwYSao7Xzkep2iA.roa (hash: N9+wOT3ic7u1Pc0UnkkcEFa7DljVTAIJF/p2BSuaQHw=) 2: K7wAKis1mxqoh54cTXBFWzGS76w.crl (hash: bOjjWPNBEj/luEwS0x5Yn21RripX4azsyegxivXUgC8=) 3: a8hAdaOdxZFivnzP3avRHvD9kUw.roa (hash: FzlX7CBWyvP5RQUSSHhztLWIzIWu2YtxzCw2ArYeCTU=) 4: ncypf2iinEe-q_LnbnKjYSF5rJc.roa (hash: X77xC4nNcyrrbUpykZ9gvEucbXtxd0H2H3Sybmc5J48=) 5: sZzlwoV7VUnP0rnAO0okZeo6Iak.roa (hash: WXgl70GjiFz6sqLRQIYx3xNCuabeBF1y/DzdVPV9mJg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:ab:66:df:3c:55:76:70:80:6b:d9:5c:ca:3a:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bbc002a2b359b1aa8879e1c4d70455b3192efac Validity Not Before: Jan 25 23:01:02 2026 GMT Not After : Jan 26 23:01:02 2026 GMT Subject: CN=5d6e589cbe692142d76565cdf520082c070c96f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:75:8b:59:31:29:30:79:04:7c:75:50:83:6a: 36:ba:38:30:52:06:2b:de:de:cc:93:cd:03:53:d3: 1f:2c:d5:a6:29:b4:98:e1:dc:60:07:b9:e0:64:c7: a8:dd:0d:9c:0a:c0:0d:af:bc:39:d5:66:1f:09:a7: d4:83:39:b2:bb:c9:12:c7:77:1b:03:43:67:4d:25: c7:cb:df:7a:aa:c7:47:02:25:37:48:de:af:82:0c: 48:91:82:49:35:47:53:1c:5a:6f:64:f6:1f:63:c6: d0:40:e7:18:5d:ae:82:9a:e6:2a:be:c2:03:5e:15: c3:c7:44:93:3f:d7:ae:6c:a1:26:9c:a0:f7:ec:8f: a7:12:d0:21:3d:a0:94:5a:f8:7f:80:f4:96:43:3f: d1:ba:a6:89:fe:ac:d8:89:57:ba:1e:8e:64:83:30: 23:fd:88:9d:51:e3:30:03:59:67:49:b5:06:71:e5: 88:4c:2b:d5:71:cf:35:16:76:10:7c:77:a4:5c:70: 51:92:6e:11:4d:ca:db:5f:0e:23:5f:4d:b6:ea:71: c1:2c:e9:61:d8:da:1d:cc:a4:e3:74:56:e6:ed:98: b8:ac:24:49:9a:ef:3a:63:1a:c7:13:8a:f4:9f:03: 30:98:8a:f4:1d:1b:67:a2:c0:3c:d7:4c:5a:a8:2f: 38:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:6E:58:9C:BE:69:21:42:D7:65:65:CD:F5:20:08:2C:07:0C:96:F2 X509v3 Authority Key Identifier: keyid:2B:BC:00:2A:2B:35:9B:1A:A8:87:9E:1C:4D:70:45:5B:31:92:EF:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:3f:f2:d1:8f:1f:0b:a8:e3:82:2d:b1:9c:2a:0c:b5:13:55: ff:66:ea:39:24:bd:ee:3c:13:a9:83:df:12:91:a6:04:20:a7: 9d:81:39:1d:6f:c1:27:d4:31:61:da:40:65:33:52:25:db:d2: 29:8a:2b:0c:3c:ef:25:2c:66:cf:a6:f4:7e:39:94:3f:59:c3: 9b:26:46:fa:0d:f0:4f:f0:ce:54:95:89:6d:1c:95:40:b5:a1: ca:8a:dc:47:c0:67:d4:1f:20:ca:e2:e0:d8:0f:ca:e8:45:bd: 4b:da:51:88:e3:a5:91:46:42:21:57:55:2f:3b:87:6e:f7:21: 0a:f6:4e:63:22:47:73:a3:d6:7c:ff:1d:45:38:40:90:96:66: 84:eb:73:99:58:99:d5:64:68:be:35:81:22:82:5f:78:c1:a1: af:be:b2:4a:06:eb:1e:e8:c5:bd:d1:1c:a0:4d:0f:81:eb:fc: 4a:57:56:12:c8:21:41:6d:08:f3:ad:5a:8a:32:fb:c3:14:9a: 0c:74:18:89:62:3f:61:98:58:99:eb:92:5c:a0:10:c8:90:89: 87:b4:6d:7e:1c:65:bc:79:b2:79:ff:88:b8:32:ac:6e:7d:21: ea:22:5d:62:1a:82:a6:03:bd:a0:8b:02:59:46:e8:b7:7c:13: 46:41:e8:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y6tm3zxVdnCAa9lcyjozMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiYmMwMDJhMmIzNTliMWFhODg3OWUxYzRkNzA0NTViMzE5 MmVmYWMwHhcNMjYwMTI1MjMwMTAyWhcNMjYwMTI2MjMwMTAyWjAzMTEwLwYDVQQD Eyg1ZDZlNTg5Y2JlNjkyMTQyZDc2NTY1Y2RmNTIwMDgyYzA3MGM5NmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnWLWTEpMHkEfHVQg2o2ujgwUgYr 3t7Mk80DU9MfLNWmKbSY4dxgB7ngZMeo3Q2cCsANr7w51WYfCafUgzmyu8kSx3cb A0NnTSXHy996qsdHAiU3SN6vggxIkYJJNUdTHFpvZPYfY8bQQOcYXa6CmuYqvsID XhXDx0STP9eubKEmnKD37I+nEtAhPaCUWvh/gPSWQz/RuqaJ/qzYiVe6Ho5kgzAj /YidUeMwA1lnSbUGceWITCvVcc81FnYQfHekXHBRkm4RTcrbXw4jX0226nHBLOlh 2NodzKTjdFbm7Zi4rCRJmu86YxrHE4r0nwMwmIr0HRtnosA810xaqC84twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF1uWJy+aSFC12VlzfUgCCwHDJbyMB8GA1UdIwQY MBaAFCu8ACorNZsaqIeeHE1wRVsxku+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzd3QUtpczFteHFvaDU0Y1RYQkZXekdTNzZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83YzM3MjYtMmRiZS00MTc0LWIxNjQt YTg5ODg5Y2U1Zjg0LzEvSzd3QUtpczFteHFvaDU0Y1RYQkZXekdTNzZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83YzM3MjYtMmRiZS00MTc0LWIxNjQtYTg5ODg5Y2U1Zjg0 LzEvSzd3QUtpczFteHFvaDU0Y1RYQkZXekdTNzZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATD/y0Y8f C6jjgi2xnCoMtRNV/2bqOSS97jwTqYPfEpGmBCCnnYE5HW/BJ9QxYdpAZTNSJdvS KYorDDzvJSxmz6b0fjmUP1nDmyZG+g3wT/DOVJWJbRyVQLWhyorcR8Bn1B8gyuLg 2A/K6EW9S9pRiOOlkUZCIVdVLzuHbvchCvZOYyJHc6PWfP8dRThAkJZmhOtzmViZ 1WRovjWBIoJfeMGhr76ySgbrHujFvdEcoE0Pgev8SldWEsghQW0I861aijL7wxSa DHQYiWI/YZhYmeuSXKAQyJCJh7RtfhxlvHmyef+IuDKsbn0h6iJdYhqCpgO9oIsC WUbot3wTRkHoAw== -----END CERTIFICATE-----Generated at Mon Jan 26 03:11:53 2026 by rpki-client