This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft File: h7E5b9Eccw7yBEgSmygoVqxQTLc.mft (raw, json) Hash identifier: rPAQLbvGHgO/G7X9Hlr3n/hpNNEOk9Cg+MipiBEHvFo= Subject key identifier: 31:FC:D3:54:B8:67:A7:D2:52:3C:55:EF:A9:9B:AC:9E:A6:09:8A:68 Authority key identifier: 87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7 Certificate issuer: /CN=87b1396fd11c730ef20448129b282856ac504cb7 Certificate serial: 019BF3BD88AC6D1611BA0E517096B032E73F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft Manifest number: 06FF Signing time: Sun 25 Jan 2026 06:00:43 +0000 Manifest this update: Sun 25 Jan 2026 06:00:43 +0000 Manifest next update: Mon 26 Jan 2026 06:00:43 +0000 Files and hashes: 1: c1HdnsaldKTIKaEky6ateQiz5kY.roa (hash: C5p2Kdt/yLKTGq1QeYyJYKudSwTzAauf7jP1eJuSAr8=) 2: h7E5b9Eccw7yBEgSmygoVqxQTLc.crl (hash: KAAT6pR/kf9jIpllM+XqGYCZxr9HLJ38osZtA0+CCfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:bd:88:ac:6d:16:11:ba:0e:51:70:96:b0:32:e7:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87b1396fd11c730ef20448129b282856ac504cb7 Validity Not Before: Jan 25 06:00:43 2026 GMT Not After : Jan 26 06:00:43 2026 GMT Subject: CN=31fcd354b867a7d2523c55efa99bac9ea6098a68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:65:c7:b8:b2:4d:58:11:da:ec:75:de:2f:fb: 55:ef:58:74:c6:c9:e4:af:5c:a1:fc:8b:91:70:4f: a7:cd:09:6d:fa:8c:66:36:ea:58:be:ae:0e:23:aa: dd:89:69:83:9e:28:4e:88:8e:38:ae:26:49:f5:10: b8:ea:23:0a:60:18:41:06:1d:ca:11:09:a1:70:56: b7:82:23:1b:39:9c:38:c7:52:ab:69:c4:1d:0e:87: 70:6f:bb:1f:e8:de:09:cf:9c:55:ed:0c:4e:bf:ea: 3d:a0:9a:fb:5d:ce:13:45:25:93:12:f4:f3:5e:d2: af:f7:51:9b:07:49:15:49:c9:ef:3b:a6:b4:a4:ef: ae:2e:4e:eb:3b:eb:c7:37:8e:3a:fc:ec:e1:f9:3f: 8e:ca:91:da:52:1f:35:60:ac:3a:5f:0d:08:ad:6c: b1:f4:3d:88:08:ed:c8:46:f8:16:7f:2e:db:5d:7f: b9:67:c6:02:62:63:7b:dc:ea:04:b7:20:51:a4:2d: 7c:7a:74:2c:75:86:b0:93:6c:b0:f6:e2:4b:f9:26: 18:6e:2d:12:a7:d2:be:81:96:1a:ce:fa:27:a8:a8: 85:6a:e6:b4:76:91:ad:89:85:06:0b:b0:d5:06:f5: e7:6c:e4:01:94:b3:99:1f:45:14:1c:2a:f8:4b:f6: c9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:FC:D3:54:B8:67:A7:D2:52:3C:55:EF:A9:9B:AC:9E:A6:09:8A:68 X509v3 Authority Key Identifier: keyid:87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:9e:ba:cd:09:6e:4a:9e:18:bf:6e:17:33:39:bd:4b:93:14: 1a:b1:12:90:8c:8b:d1:b7:11:0e:78:23:83:60:ad:02:45:b5: 51:4c:bd:2b:e8:0c:f6:a4:c2:24:c5:5e:aa:3d:3e:c5:68:00: e6:85:e4:ef:74:a5:01:75:b1:fd:b7:6d:f9:b9:19:53:2c:1d: d9:80:88:54:a8:cc:ab:85:05:c7:50:25:a5:96:ed:f7:87:33: b4:b8:5c:d3:22:08:dd:4a:59:bd:f4:1a:c3:42:1a:5e:5e:18: 66:7f:b0:2e:d1:f8:92:35:cc:55:3b:83:b7:25:f2:69:6d:73: 79:75:60:5c:7c:26:32:8f:91:80:40:2d:31:63:6b:c4:38:ee: 9d:44:6e:64:c3:e7:04:c8:ac:a9:57:9a:92:c7:92:f0:65:4e: 09:48:06:50:a1:93:7b:fb:9c:48:70:cb:59:ee:9d:45:7c:fe: cd:6c:5c:0b:de:1f:71:43:0b:03:52:09:6e:c0:c0:bc:e0:4d: 97:89:5d:ab:03:b1:1f:f9:bd:c1:74:fc:28:f8:6e:ea:16:09: 34:c9:2d:f0:45:bb:80:e1:9b:18:ee:1a:b8:bb:c3:12:87:3e: 56:a2:ec:fd:9c:28:5e:71:b5:de:65:38:e2:1d:a1:a2:b5:9f: 19:39:d8:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzvYisbRYRug5RcJawMuc/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3YjEzOTZmZDExYzczMGVmMjA0NDgxMjliMjgyODU2YWM1 MDRjYjcwHhcNMjYwMTI1MDYwMDQzWhcNMjYwMTI2MDYwMDQzWjAzMTEwLwYDVQQD EygzMWZjZDM1NGI4NjdhN2QyNTIzYzU1ZWZhOTliYWM5ZWE2MDk4YTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2XHuLJNWBHa7HXeL/tV71h0xsnk r1yh/IuRcE+nzQlt+oxmNupYvq4OI6rdiWmDnihOiI44riZJ9RC46iMKYBhBBh3K EQmhcFa3giMbOZw4x1KracQdDodwb7sf6N4Jz5xV7QxOv+o9oJr7Xc4TRSWTEvTz XtKv91GbB0kVScnvO6a0pO+uLk7rO+vHN446/Ozh+T+OypHaUh81YKw6Xw0IrWyx 9D2ICO3IRvgWfy7bXX+5Z8YCYmN73OoEtyBRpC18enQsdYawk2yw9uJL+SYYbi0S p9K+gZYazvonqKiFaua0dpGtiYUGC7DVBvXnbOQBlLOZH0UUHCr4S/bJUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDH801S4Z6fSUjxV76mbrJ6mCYpoMB8GA1UdIwQY MBaAFIexOW/RHHMO8gRIEpsoKFasUEy3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDdFNWI5RWNjdzd5QkVnU215Z29WcXhRVExjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8zOGJjOTAtMWQ1My00ZDQ3LWJiZGIt ZjRlN2M5Y2M0M2ZmLzEvaDdFNWI5RWNjdzd5QkVnU215Z29WcXhRVExjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8zOGJjOTAtMWQ1My00ZDQ3LWJiZGItZjRlN2M5Y2M0M2Zm LzEvaDdFNWI5RWNjdzd5QkVnU215Z29WcXhRVExjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgp66zQlu Sp4Yv24XMzm9S5MUGrESkIyL0bcRDngjg2CtAkW1UUy9K+gM9qTCJMVeqj0+xWgA 5oXk73SlAXWx/bdt+bkZUywd2YCIVKjMq4UFx1AlpZbt94cztLhc0yII3UpZvfQa w0IaXl4YZn+wLtH4kjXMVTuDtyXyaW1zeXVgXHwmMo+RgEAtMWNrxDjunURuZMPn BMisqVeakseS8GVOCUgGUKGTe/ucSHDLWe6dRXz+zWxcC94fcUMLA1IJbsDAvOBN l4ldqwOxH/m9wXT8KPhu6hYJNMkt8EW7gOGbGO4auLvDEoc+VqLs/ZwoXnG13mU4 4h2horWfGTnYDQ== -----END CERTIFICATE-----Generated at Sun Jan 25 16:19:25 2026 by rpki-client