This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft File: D-v7_W-TfFrjnj446KuDhBB0IaY.mft (raw, json) Hash identifier: Q0za1vZoac1xuk+fyj+O3Sr8on2LmBC2ougnBU15Zdo= Subject key identifier: 9E:4E:67:15:31:7D:51:9C:5A:67:62:DA:AE:8A:04:5D:85:1F:E8:8F Authority key identifier: 0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6 Certificate issuer: /CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6 Certificate serial: 019BF5E3F0976F2F2BF0179D789AF1D72A16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft Manifest number: 0F17 Signing time: Sun 25 Jan 2026 16:01:54 +0000 Manifest this update: Sun 25 Jan 2026 16:01:54 +0000 Manifest next update: Mon 26 Jan 2026 16:01:54 +0000 Files and hashes: 1: BHTm56F1JX3tXmfckS4aLIINLII.roa (hash: wAMHg65t7IQsW4KtiIHLr9C0peG2e2YbKnGvB0suYrg=) 2: D-v7_W-TfFrjnj446KuDhBB0IaY.crl (hash: Le4AyNsxxA8ZNN4q0H0FBZmi9VLkqmbKbSIMDk4UQ9w=) 3: D1EnaHTj-AJNUSG4LTsC1UQ4qk8.roa (hash: WC0GFesLWZ4czPu/IpF6t8u9F9QhVLHf9b3CwH0ZjjQ=) 4: IFrQrnZlcDy6Cg2Rsz5QrR_ViKw.roa (hash: 5NDZ9fYEk6QjwvvjIgarKP6mtzbMjVq5FS8+N6De1Yk=) 5: cSi7_OAuX-rLMOiqKcF2agOjyuY.roa (hash: SyyfBcCCktRPddt1j77ZoKfvba/2lQeJcmhdFBczGME=) 6: ljGQpGa82Fq4AfYrsYkkXWHmbQ4.roa (hash: XBY4/UtnM0b8oNJm9u2YyPgXyoTfFMPyMfliMhcU86s=) 7: oJ_9gZWX0-HZBwO501St9llybTk.roa (hash: TLUGLY8S71f/0cvwgOTLfE6brs5a4M3ghefdEt5ZM+k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:f0:97:6f:2f:2b:f0:17:9d:78:9a:f1:d7:2a:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6 Validity Not Before: Jan 25 16:01:54 2026 GMT Not After : Jan 26 16:01:54 2026 GMT Subject: CN=9e4e6715317d519c5a6762daae8a045d851fe88f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:93:94:b1:f0:e8:79:3b:54:25:6e:81:61:98: 5e:6b:a8:ce:27:fa:dc:b2:2b:64:24:55:e7:3f:d6: 48:c2:f0:82:20:98:74:80:a8:e0:e3:e2:60:39:7e: 6e:ee:a9:85:f8:8c:79:3d:78:b7:c6:04:c7:71:e7: 94:62:44:be:c6:26:a6:1b:f5:6d:e7:1d:5e:aa:17: 41:51:33:e8:85:d4:2a:5c:d9:30:66:13:82:0b:15: 3d:1f:13:ee:39:0a:6a:7a:22:0f:9b:2d:ef:41:75: 74:96:fa:1b:0d:41:bc:ab:e1:46:92:73:4b:86:cf: e9:d8:44:5e:f0:8a:b1:fd:20:67:c4:b5:fe:9e:a6: 11:4c:6a:56:49:42:c2:37:e0:71:af:6a:6e:d6:a3: fc:9f:b8:8c:35:66:96:6b:46:9d:0d:9e:59:07:9d: 40:86:a9:8c:07:ef:97:2e:db:46:8b:b4:0e:52:b2: d9:37:fe:85:8b:a2:b5:9f:58:b9:c0:6d:f0:3d:e9: cb:a1:ce:e5:a3:42:2d:d1:80:c3:63:75:79:2c:8e: db:1b:21:b4:3d:6d:a2:91:6e:aa:c8:74:7c:b3:b8: 62:90:47:af:4d:92:a0:82:a0:96:ad:95:3d:ee:d1: 9f:35:77:fa:56:bc:86:50:36:c5:26:af:12:f4:7f: b5:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:4E:67:15:31:7D:51:9C:5A:67:62:DA:AE:8A:04:5D:85:1F:E8:8F X509v3 Authority Key Identifier: keyid:0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:b8:3f:47:51:e1:ef:b9:64:29:53:92:c2:70:4d:cf:ed:8b: 89:ea:73:44:46:7b:9c:de:fa:8a:f0:80:bf:29:54:ac:c8:c2: a2:d8:cc:76:38:ef:d3:5b:8e:ec:70:e0:b8:35:6f:48:14:e5: 70:bf:7d:3d:27:0f:d4:c2:bd:ce:81:c3:06:65:c0:55:52:3f: 91:3d:23:81:77:f4:2f:31:bb:68:1d:bf:69:e9:85:fe:70:67: 29:ba:c9:f1:5d:8e:83:d1:d4:cd:eb:9f:e5:3d:ab:3a:d1:eb: 23:ce:30:b2:1b:27:0b:bc:30:69:8e:40:61:2c:10:89:cc:28: c6:dc:a4:36:f1:ec:67:c7:28:01:c4:cf:50:60:21:b5:d9:50: c3:e0:5d:69:f4:fd:03:ab:78:68:15:53:b0:06:1d:f9:e2:5c: ae:41:1b:4d:33:30:64:b0:78:72:fd:6d:1a:49:6c:bc:bb:8d: 13:89:28:4b:ce:07:b9:2a:f0:5f:eb:ed:0d:99:b2:8f:d3:ea: 23:ac:fe:94:f7:c0:b9:35:4d:36:b7:c3:db:68:77:e8:70:9f: dd:ad:7e:98:a5:68:2b:82:ca:95:6f:7d:e9:f7:b4:bd:5d:5c: 39:15:28:58:6e:d7:8a:ad:49:cd:74:b4:af:8f:38:25:ed:88: 7b:ba:eb:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv14/CXby8r8BedeJrx1yoWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZWJmYmZkNmY5MzdjNWFlMzllM2UzOGU4YWI4Mzg0MTA3 NDIxYTYwHhcNMjYwMTI1MTYwMTU0WhcNMjYwMTI2MTYwMTU0WjAzMTEwLwYDVQQD Eyg5ZTRlNjcxNTMxN2Q1MTljNWE2NzYyZGFhZThhMDQ1ZDg1MWZlODhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZOUsfDoeTtUJW6BYZhea6jOJ/rc sitkJFXnP9ZIwvCCIJh0gKjg4+JgOX5u7qmF+Ix5PXi3xgTHceeUYkS+xiamG/Vt 5x1eqhdBUTPohdQqXNkwZhOCCxU9HxPuOQpqeiIPmy3vQXV0lvobDUG8q+FGknNL hs/p2ERe8Iqx/SBnxLX+nqYRTGpWSULCN+Bxr2pu1qP8n7iMNWaWa0adDZ5ZB51A hqmMB++XLttGi7QOUrLZN/6Fi6K1n1i5wG3wPenLoc7lo0It0YDDY3V5LI7bGyG0 PW2ikW6qyHR8s7hikEevTZKggqCWrZU97tGfNXf6VryGUDbFJq8S9H+13QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ5OZxUxfVGcWmdi2q6KBF2FH+iPMB8GA1UdIwQY MBaAFA/r+/1vk3xa454+OOirg4QQdCGmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRC12N19XLVRmRnJqbmo0NDZLdURoQkIwSWFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82N2Q4MzQtMjYxMi00NzM5LTlmNGIt N2Q3MDM3NGQ3NmQyLzEvRC12N19XLVRmRnJqbmo0NDZLdURoQkIwSWFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82N2Q4MzQtMjYxMi00NzM5LTlmNGItN2Q3MDM3NGQ3NmQy LzEvRC12N19XLVRmRnJqbmo0NDZLdURoQkIwSWFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAILg/R1Hh 77lkKVOSwnBNz+2LiepzREZ7nN76ivCAvylUrMjCotjMdjjv01uO7HDguDVvSBTl cL99PScP1MK9zoHDBmXAVVI/kT0jgXf0LzG7aB2/aemF/nBnKbrJ8V2Og9HUzeuf 5T2rOtHrI84wshsnC7wwaY5AYSwQicwoxtykNvHsZ8coAcTPUGAhtdlQw+BdafT9 A6t4aBVTsAYd+eJcrkEbTTMwZLB4cv1tGklsvLuNE4koS84HuSrwX+vtDZmyj9Pq I6z+lPfAuTVNNrfD22h36HCf3a1+mKVoK4LKlW996fe0vV1cORUoWG7Xiq1JzXS0 r484Je2Ie7rrxw== -----END CERTIFICATE-----Generated at Mon Jan 26 00:19:45 2026 by rpki-client