This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.mft File: 7iNCg3Pc6KX5f0XvxsKLn7581U0.mft (raw, json) Hash identifier: INuoP4YvJdn8g1m9AcV0z7gicG8axkgoECUjdjpUBgQ= Subject key identifier: 14:BB:02:B6:C2:29:ED:96:14:0D:FB:34:D6:0D:00:5F:84:AC:E0:CC Authority key identifier: EE:23:42:83:73:DC:E8:A5:F9:7F:45:EF:C6:C2:8B:9F:BE:7C:D5:4D Certificate issuer: /CN=ee23428373dce8a5f97f45efc6c28b9fbe7cd54d Certificate serial: 019BF4625B96033D9FB92EB5EDD2AF8B0C7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iNCg3Pc6KX5f0XvxsKLn7581U0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.mft Manifest number: 014F Signing time: Sun 25 Jan 2026 09:00:45 +0000 Manifest this update: Sun 25 Jan 2026 09:00:45 +0000 Manifest next update: Mon 26 Jan 2026 09:00:45 +0000 Files and hashes: 1: 7iNCg3Pc6KX5f0XvxsKLn7581U0.crl (hash: HxzDwFjtZNHJIPuxJ6haUFCh7dHeqtQbbfFdbDuCdpc=) 2: qwQxCub0ZLxdSIPTyyt0hid0rjE.roa (hash: 45em9x7vt23Yzt9V9VCNiHhaJfkIP4nZW7OBnn0WqDM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.mft rsync://rpki.ripe.net/repository/DEFAULT/7iNCg3Pc6KX5f0XvxsKLn7581U0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:5b:96:03:3d:9f:b9:2e:b5:ed:d2:af:8b:0c:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee23428373dce8a5f97f45efc6c28b9fbe7cd54d Validity Not Before: Jan 25 09:00:45 2026 GMT Not After : Jan 26 09:00:45 2026 GMT Subject: CN=14bb02b6c229ed96140dfb34d60d005f84ace0cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bf:63:d6:76:5c:14:bd:41:cb:d3:15:40:80: 63:3d:f2:c3:c6:79:83:53:2e:c2:8f:f5:9c:77:8a: c7:39:45:74:76:90:ea:8d:dc:8e:66:11:68:7d:53: a9:5f:6c:d0:42:0b:6e:26:f5:ce:6c:0a:77:53:db: 1e:15:84:dc:8c:ce:9c:3f:ca:18:25:bc:4c:78:e0: b3:c5:20:5c:ff:69:9d:96:d1:18:82:21:e3:20:73: d3:5f:0a:11:8f:6e:81:b1:6f:92:04:68:c4:1d:61: a8:1d:cd:2c:cf:20:d7:b0:80:b7:56:dc:58:82:b1: 4a:bc:af:7b:a4:6c:b8:2d:df:50:c8:d4:6a:08:2a: f0:24:1b:eb:0d:76:ef:dd:30:ee:2a:32:9b:a7:ba: 91:29:f1:f7:51:97:58:73:b8:f3:29:90:15:a7:22: 2a:11:f4:aa:7f:60:22:c8:6f:6c:93:2c:33:1f:f0: 13:40:b7:68:5f:48:2f:41:3b:a9:89:6b:d9:f3:d0: 58:37:0b:e8:cd:27:45:ce:63:ce:4a:0b:d9:5c:74: ec:99:fa:85:b4:77:2b:15:3f:1d:41:6c:59:1d:e6: 88:9c:f4:52:72:fe:7a:10:9d:ba:72:54:bd:7f:5b: 80:c3:6a:38:57:86:86:e6:17:6e:09:1d:6a:3c:a2: f9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:BB:02:B6:C2:29:ED:96:14:0D:FB:34:D6:0D:00:5F:84:AC:E0:CC X509v3 Authority Key Identifier: keyid:EE:23:42:83:73:DC:E8:A5:F9:7F:45:EF:C6:C2:8B:9F:BE:7C:D5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iNCg3Pc6KX5f0XvxsKLn7581U0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:3c:9e:b5:e9:34:ea:0c:6a:22:ed:81:db:cd:6a:d0:b4:5a: 21:2a:a5:37:e3:d6:e5:80:3c:e9:7b:8f:84:0e:55:d9:e8:dd: 15:03:9e:46:77:39:c2:63:bc:1b:3f:1d:95:6a:30:54:3e:da: 38:fa:35:68:4d:7a:7a:e1:20:f5:18:26:3e:59:f0:a1:91:13: bd:66:35:32:73:75:97:54:78:c3:10:9c:9b:15:a0:89:4e:42: 3e:ea:4f:c5:33:0f:dc:2d:64:14:5b:b6:d4:98:08:d4:60:8a: 81:ab:ee:d2:01:e9:48:65:10:7c:24:12:5f:3c:52:f9:47:d6: b4:0c:85:09:2b:c3:ba:d7:05:11:42:bf:92:cf:f5:24:60:65: da:2f:a4:9d:70:09:f3:4c:0a:b3:38:67:6a:7a:3c:e0:c0:58: c9:ac:75:d1:5d:81:59:b4:a2:c3:ea:a0:11:b9:8a:12:76:07: be:9a:47:3d:68:c7:01:9e:d3:3e:a5:0f:dd:b4:ef:ed:a4:64: 20:78:93:da:86:82:b4:49:99:ac:9a:b5:1b:c6:68:de:47:51: 1e:a0:f4:bd:dc:ee:45:9f:43:a9:47:dc:57:f3:da:cf:63:ba: cc:ca:00:01:8b:05:96:1d:a4:8d:fb:f2:4e:79:e8:72:51:e5: 03:42:91:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YluWAz2fuS617dKviwx/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMjM0MjgzNzNkY2U4YTVmOTdmNDVlZmM2YzI4YjlmYmU3 Y2Q1NGQwHhcNMjYwMTI1MDkwMDQ1WhcNMjYwMTI2MDkwMDQ1WjAzMTEwLwYDVQQD EygxNGJiMDJiNmMyMjllZDk2MTQwZGZiMzRkNjBkMDA1Zjg0YWNlMGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvr9j1nZcFL1By9MVQIBjPfLDxnmD Uy7Cj/Wcd4rHOUV0dpDqjdyOZhFofVOpX2zQQgtuJvXObAp3U9seFYTcjM6cP8oY JbxMeOCzxSBc/2mdltEYgiHjIHPTXwoRj26BsW+SBGjEHWGoHc0szyDXsIC3VtxY grFKvK97pGy4Ld9QyNRqCCrwJBvrDXbv3TDuKjKbp7qRKfH3UZdYc7jzKZAVpyIq EfSqf2AiyG9skywzH/ATQLdoX0gvQTupiWvZ89BYNwvozSdFzmPOSgvZXHTsmfqF tHcrFT8dQWxZHeaInPRScv56EJ26clS9f1uAw2o4V4aG5hduCR1qPKL5YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBS7ArbCKe2WFA37NNYNAF+ErODMMB8GA1UdIwQY MBaAFO4jQoNz3Oil+X9F78bCi5++fNVNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2lOQ2czUGM2S1g1ZjBYdnhzS0xuNzU4MVUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZmE4NTQtMDU5Ny00YzBkLWIwYjUt M2Y3N2ZkNDI3OTlhLzEvN2lOQ2czUGM2S1g1ZjBYdnhzS0xuNzU4MVUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZmE4NTQtMDU5Ny00YzBkLWIwYjUtM2Y3N2ZkNDI3OTlh LzEvN2lOQ2czUGM2S1g1ZjBYdnhzS0xuNzU4MVUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABjyetek0 6gxqIu2B281q0LRaISqlN+PW5YA86XuPhA5V2ejdFQOeRnc5wmO8Gz8dlWowVD7a OPo1aE16euEg9RgmPlnwoZETvWY1MnN1l1R4wxCcmxWgiU5CPupPxTMP3C1kFFu2 1JgI1GCKgavu0gHpSGUQfCQSXzxS+UfWtAyFCSvDutcFEUK/ks/1JGBl2i+knXAJ 80wKszhnano84MBYyax10V2BWbSiw+qgEbmKEnYHvppHPWjHAZ7TPqUP3bTv7aRk IHiT2oaCtEmZrJq1G8Zo3kdRHqD0vdzuRZ9DqUfcV/Paz2O6zMoAAYsFlh2kjfvy TnnoclHlA0KR0Q== -----END CERTIFICATE-----Generated at Sun Jan 25 14:44:56 2026 by rpki-client