This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft File: 7UzThqszeH_NQAJiK4OHZAb_8ZA.mft (raw, json) Hash identifier: b8NAmJ0tgjIgcVzOvD8RncJSGvD/tN0ICLNcYmmdonc= Subject key identifier: 49:9A:B8:94:24:68:5C:1F:0B:B0:B9:00:68:F1:29:39:F7:5D:4C:86 Authority key identifier: ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90 Certificate issuer: /CN=ed4cd386ab33787fcd4002622b83876406fff190 Certificate serial: 019BF3BDAA02E8A1292BA8E73A67B43596F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft Manifest number: 17E5 Signing time: Sun 25 Jan 2026 06:00:51 +0000 Manifest this update: Sun 25 Jan 2026 06:00:51 +0000 Manifest next update: Mon 26 Jan 2026 06:00:51 +0000 Files and hashes: 1: 7UzThqszeH_NQAJiK4OHZAb_8ZA.crl (hash: Kt/4ucTk0tk+hT3PP40/6pZrr+AZdiH1aosRVca1pOo=) 2: DLJ6Lc26hou-gghVAiRPeC5X_w0.roa (hash: 0ehkmbQVXLiYPEC/LI/+SW3yDQBg8UXsIn3OJpfQk0Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:bd:aa:02:e8:a1:29:2b:a8:e7:3a:67:b4:35:96:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed4cd386ab33787fcd4002622b83876406fff190 Validity Not Before: Jan 25 06:00:51 2026 GMT Not After : Jan 26 06:00:51 2026 GMT Subject: CN=499ab89424685c1f0bb0b90068f12939f75d4c86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b5:d7:eb:c4:d2:dd:79:fa:b1:24:85:f1:04: 0c:b4:61:c6:77:47:b9:80:2a:b3:da:82:52:96:76: 84:22:8e:bf:31:84:f1:25:25:cf:cd:4e:83:da:0b: b5:75:57:69:a0:0b:7d:d2:3d:fb:d0:b8:b6:7a:ab: 1e:e3:53:04:cf:3f:b8:09:df:0f:e0:98:7d:1b:64: fa:7a:1d:f1:3a:b9:bf:f3:18:c5:89:2a:10:f8:f5: 87:ce:b0:2b:82:38:e8:7b:03:bf:aa:83:82:bc:06: b0:60:52:08:f7:df:ae:34:d3:5a:4a:11:7e:98:56: 4d:00:2b:50:00:a7:fc:2e:36:fb:2a:1f:10:f0:7b: 1c:39:04:92:f4:a1:ea:78:97:9e:4c:24:e5:a1:b1: 10:ca:dd:93:3c:44:1c:67:f4:99:c3:6e:5c:02:3c: 15:b1:6d:38:a8:98:f8:fe:ba:dd:cb:49:c4:34:eb: 37:1e:df:14:63:72:b5:df:01:b3:16:9c:b3:a8:d8: 88:ce:04:33:c9:3b:cd:21:0e:03:3e:7e:ac:7d:e6: 4a:e4:4c:0d:b2:26:99:80:6a:a9:de:44:86:c2:1c: 57:0b:1a:9c:7f:ea:f0:63:54:f4:09:94:fd:d8:2b: c3:5d:6d:a5:0a:0b:f3:04:49:29:ea:25:c1:5a:97: ea:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:9A:B8:94:24:68:5C:1F:0B:B0:B9:00:68:F1:29:39:F7:5D:4C:86 X509v3 Authority Key Identifier: keyid:ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:5d:f5:86:d6:ae:88:1a:33:fd:b8:48:74:7b:e0:77:a6:6f: a8:dc:5b:8f:75:35:9f:b3:6d:cf:c7:83:d5:f1:33:aa:b5:07: 49:98:82:6a:4f:12:00:11:f5:a6:44:b0:41:01:31:47:af:b1: 60:9b:11:1f:81:d3:39:9e:51:0d:88:af:4d:ea:3a:34:ab:90: df:1b:9e:90:10:e6:68:62:0f:aa:2d:b6:4d:cd:e8:f5:13:f5: 8b:be:12:e0:c6:fc:38:c0:71:d4:19:94:30:6b:85:ce:c6:a5: bf:6b:85:a6:3f:f9:53:23:ed:ad:dc:01:57:4a:95:8b:e9:cd: 1e:f6:11:bf:51:e5:d3:ff:b2:c8:63:7b:a2:d4:c1:b9:12:f4: be:a9:12:64:9a:4d:a6:c8:c5:63:bc:7c:83:6b:c0:9d:4c:37: ef:66:b0:09:64:bf:e6:cd:72:68:e6:8b:06:45:89:06:ac:87: b8:93:17:57:01:f4:b5:9a:3a:4f:ba:0c:0c:b0:58:c7:bb:a1: 02:47:e4:9a:0e:69:df:44:02:14:86:05:87:e3:cb:63:08:23: d6:d5:15:92:e4:92:02:f9:8b:b3:cd:af:d4:5f:02:93:38:0c: fb:b9:d7:2f:af:19:c6:d1:f5:51:a4:3a:be:11:3c:f9:66:21: ab:88:5e:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzvaoC6KEpK6jnOme0NZbxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNGNkMzg2YWIzMzc4N2ZjZDQwMDI2MjJiODM4NzY0MDZm ZmYxOTAwHhcNMjYwMTI1MDYwMDUxWhcNMjYwMTI2MDYwMDUxWjAzMTEwLwYDVQQD Eyg0OTlhYjg5NDI0Njg1YzFmMGJiMGI5MDA2OGYxMjkzOWY3NWQ0Yzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bXX68TS3Xn6sSSF8QQMtGHGd0e5 gCqz2oJSlnaEIo6/MYTxJSXPzU6D2gu1dVdpoAt90j370Li2eqse41MEzz+4Cd8P 4Jh9G2T6eh3xOrm/8xjFiSoQ+PWHzrArgjjoewO/qoOCvAawYFII99+uNNNaShF+ mFZNACtQAKf8Ljb7Kh8Q8HscOQSS9KHqeJeeTCTlobEQyt2TPEQcZ/SZw25cAjwV sW04qJj4/rrdy0nENOs3Ht8UY3K13wGzFpyzqNiIzgQzyTvNIQ4DPn6sfeZK5EwN siaZgGqp3kSGwhxXCxqcf+rwY1T0CZT92CvDXW2lCgvzBEkp6iXBWpfqGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEmauJQkaFwfC7C5AGjxKTn3XUyGMB8GA1UdIwQY MBaAFO1M04arM3h/zUACYiuDh2QG//GQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1V6VGhxc3plSF9OUUFKaUs0T0haQWJfOFpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84OTFmYjYtN2QyNi00NzQ0LWI1Zjkt NTFmZjdkYWJhNGQ1LzEvN1V6VGhxc3plSF9OUUFKaUs0T0haQWJfOFpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS84OTFmYjYtN2QyNi00NzQ0LWI1ZjktNTFmZjdkYWJhNGQ1 LzEvN1V6VGhxc3plSF9OUUFKaUs0T0haQWJfOFpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArV31htau iBoz/bhIdHvgd6ZvqNxbj3U1n7Ntz8eD1fEzqrUHSZiCak8SABH1pkSwQQExR6+x YJsRH4HTOZ5RDYivTeo6NKuQ3xuekBDmaGIPqi22Tc3o9RP1i74S4Mb8OMBx1BmU MGuFzsalv2uFpj/5UyPtrdwBV0qVi+nNHvYRv1Hl0/+yyGN7otTBuRL0vqkSZJpN psjFY7x8g2vAnUw372awCWS/5s1yaOaLBkWJBqyHuJMXVwH0tZo6T7oMDLBYx7uh Akfkmg5p30QCFIYFh+PLYwgj1tUVkuSSAvmLs82v1F8CkzgM+7nXL68ZxtH1UaQ6 vhE8+WYhq4he4g== -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:10 2026 by rpki-client