This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft File: 7cJgAozSqx0OQ3dPRATezSeu88w.mft (raw, json) Hash identifier: FBe1EvQHDw/p6vcqON0pY+/rTLWeo9G5IAcZGlwtJ5k= Subject key identifier: AA:79:DF:64:D0:11:01:DF:22:C5:1E:10:82:70:C4:43:F2:1D:2A:F4 Authority key identifier: ED:C2:60:02:8C:D2:AB:1D:0E:43:77:4F:44:04:DE:CD:27:AE:F3:CC Certificate issuer: /CN=edc260028cd2ab1d0e43774f4404decd27aef3cc Certificate serial: 019BF8ADB92A2F0A793299D6D4FB8DC16D7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cJgAozSqx0OQ3dPRATezSeu88w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft Manifest number: 13BA Signing time: Mon 26 Jan 2026 05:01:33 +0000 Manifest this update: Mon 26 Jan 2026 05:01:33 +0000 Manifest next update: Tue 27 Jan 2026 05:01:33 +0000 Files and hashes: 1: 7cJgAozSqx0OQ3dPRATezSeu88w.crl (hash: z625zlcM0+sviMqvo2uNX6Ff4wk7GafayamLeillWMQ=) 2: bPSO6MwxWbbuX5pl75RHEJata0Y.roa (hash: AjyNVlFJkmNLyTmsoSE4kMhHz/W3/3nMb2xQxom7aZg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft rsync://rpki.ripe.net/repository/DEFAULT/7cJgAozSqx0OQ3dPRATezSeu88w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:b9:2a:2f:0a:79:32:99:d6:d4:fb:8d:c1:6d:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edc260028cd2ab1d0e43774f4404decd27aef3cc Validity Not Before: Jan 26 05:01:33 2026 GMT Not After : Jan 27 05:01:33 2026 GMT Subject: CN=aa79df64d01101df22c51e108270c443f21d2af4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5d:67:80:78:78:1b:6d:b6:f3:3f:67:e3:9a: b3:a7:b2:d9:8b:c4:cc:08:45:43:37:e6:6b:90:63: 71:d5:70:75:db:1d:22:c8:71:73:38:6b:68:06:8e: f2:2e:34:59:ca:3e:27:cf:79:8f:b4:6b:05:dd:27: a8:19:0d:2b:ab:46:1a:a9:2a:4b:1d:b8:64:13:b0: 3a:39:33:52:c8:3d:e2:1a:7f:e4:8a:5e:88:37:04: 0d:74:31:5f:4b:ac:c4:b1:a9:e2:3a:3c:b0:10:d9: 4c:f8:a3:a8:9d:d5:0a:a7:d0:d0:3d:77:78:db:6d: a5:aa:34:9b:b3:be:4f:13:cf:8f:fd:ea:ce:ce:8e: 4d:e4:07:b1:87:76:cf:24:8e:0d:27:88:33:a4:11: ef:26:32:30:8f:92:5a:00:4a:56:e2:11:9f:1c:df: 80:8c:f5:84:d0:cc:3a:87:ea:89:3b:c5:d7:1a:c6: 46:12:18:c2:c4:f1:f9:67:17:4b:5b:83:8d:dc:6b: 00:eb:5e:3a:1a:db:23:53:a0:45:e1:0d:44:75:f3: 77:0a:eb:2c:c1:47:63:a9:e2:ba:ca:0e:a1:e2:93: cb:72:57:ca:6f:38:87:e6:fe:30:dd:35:ff:4e:52: b7:60:54:e2:ef:91:d1:c0:54:b8:ce:b9:7b:d4:f1: 3c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:79:DF:64:D0:11:01:DF:22:C5:1E:10:82:70:C4:43:F2:1D:2A:F4 X509v3 Authority Key Identifier: keyid:ED:C2:60:02:8C:D2:AB:1D:0E:43:77:4F:44:04:DE:CD:27:AE:F3:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cJgAozSqx0OQ3dPRATezSeu88w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:4b:67:51:0f:53:aa:bb:99:aa:79:8e:c6:93:97:4f:1f:8c: 50:32:3f:95:2b:da:14:0c:37:ae:de:c1:7f:33:63:20:d2:4f: 6e:94:ba:ce:84:e5:6c:b6:02:d0:25:04:49:9c:e5:7d:a3:f2: 54:0c:8a:89:71:d0:51:29:fc:be:e0:44:c5:41:bb:aa:96:94: aa:6a:7e:21:dd:eb:f9:98:73:80:b5:aa:21:68:6e:3f:6e:6d: 62:ef:4e:08:57:11:98:55:89:94:1e:e5:2d:a7:e5:80:8a:b8: e8:c4:35:d8:a2:c3:c8:54:c4:86:37:d9:6a:4c:5a:63:d6:6a: b7:ce:e2:68:d6:44:96:4f:6f:d5:73:cd:21:66:a4:75:4b:21: 7f:c9:f9:2f:bf:d9:d2:fe:7b:0b:63:84:a8:58:40:6b:47:b3: ec:6f:9c:de:1b:38:2b:74:5e:90:97:8c:3f:61:70:9f:29:c6: 4f:0d:92:23:5b:93:bf:6c:7e:df:00:ae:c0:18:fa:db:72:74: 6c:b6:27:86:7b:91:97:d4:80:f9:b8:aa:f7:9d:d0:30:d9:80: e6:6c:4d:cb:17:2b:c7:b8:2f:ca:57:cd:6f:96:d3:5b:12:05: de:2c:83:98:2b:58:23:4d:7d:25:56:15:a8:91:83:fa:9d:d9: c2:2c:49:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rbkqLwp5MpnW1PuNwW1+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkYzI2MDAyOGNkMmFiMWQwZTQzNzc0ZjQ0MDRkZWNkMjdh ZWYzY2MwHhcNMjYwMTI2MDUwMTMzWhcNMjYwMTI3MDUwMTMzWjAzMTEwLwYDVQQD EyhhYTc5ZGY2NGQwMTEwMWRmMjJjNTFlMTA4MjcwYzQ0M2YyMWQyYWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtV1ngHh4G2228z9n45qzp7LZi8TM CEVDN+ZrkGNx1XB12x0iyHFzOGtoBo7yLjRZyj4nz3mPtGsF3SeoGQ0rq0YaqSpL HbhkE7A6OTNSyD3iGn/kil6INwQNdDFfS6zEsaniOjywENlM+KOondUKp9DQPXd4 222lqjSbs75PE8+P/erOzo5N5Aexh3bPJI4NJ4gzpBHvJjIwj5JaAEpW4hGfHN+A jPWE0Mw6h+qJO8XXGsZGEhjCxPH5ZxdLW4ON3GsA6146GtsjU6BF4Q1EdfN3Cuss wUdjqeK6yg6h4pPLclfKbziH5v4w3TX/TlK3YFTi75HRwFS4zrl71PE84wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKp532TQEQHfIsUeEIJwxEPyHSr0MB8GA1UdIwQY MBaAFO3CYAKM0qsdDkN3T0QE3s0nrvPMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2NKZ0FvelNxeDBPUTNkUFJBVGV6U2V1ODh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85OTUyYjYtMzM2Zi00NjY4LWJhZmIt ZmRjMjU4Mzc3MzAxLzEvN2NKZ0FvelNxeDBPUTNkUFJBVGV6U2V1ODh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi85OTUyYjYtMzM2Zi00NjY4LWJhZmItZmRjMjU4Mzc3MzAx LzEvN2NKZ0FvelNxeDBPUTNkUFJBVGV6U2V1ODh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXktnUQ9T qruZqnmOxpOXTx+MUDI/lSvaFAw3rt7BfzNjINJPbpS6zoTlbLYC0CUESZzlfaPy VAyKiXHQUSn8vuBExUG7qpaUqmp+Id3r+ZhzgLWqIWhuP25tYu9OCFcRmFWJlB7l LaflgIq46MQ12KLDyFTEhjfZakxaY9Zqt87iaNZElk9v1XPNIWakdUshf8n5L7/Z 0v57C2OEqFhAa0ez7G+c3hs4K3RekJeMP2FwnynGTw2SI1uTv2x+3wCuwBj623J0 bLYnhnuRl9SA+biq953QMNmA5mxNyxcrx7gvylfNb5bTWxIF3iyDmCtYI019JVYV qJGD+p3ZwixJqw== -----END CERTIFICATE-----Generated at Mon Jan 26 07:48:08 2026 by rpki-client