This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft File: d7__1npLmUVKyaQA50ecdg1VRsw.mft (raw, json) Hash identifier: LdGLRTnqXSR3OpAfjXqxaeefG1umw7XAoTUYDRphLNo= Subject key identifier: 3E:EA:A0:02:75:16:DB:E3:C9:08:F2:95:41:6D:F4:AE:05:C3:45:72 Authority key identifier: 77:BF:FF:D6:7A:4B:99:45:4A:C9:A4:00:E7:47:9C:76:0D:55:46:CC Certificate issuer: /CN=77bfffd67a4b99454ac9a400e7479c760d5546cc Certificate serial: 019BF72D29C736669BE20D927F20F33D33EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft Manifest number: 055F Signing time: Sun 25 Jan 2026 22:01:30 +0000 Manifest this update: Sun 25 Jan 2026 22:01:30 +0000 Manifest next update: Mon 26 Jan 2026 22:01:30 +0000 Files and hashes: 1: 1uDiO66z4_GJhppKD5iOYZne4xo.roa (hash: njjChOiFqIrX1FbvslTiBWjd0QGU3XMKBcIu3VrqVf0=) 2: d7__1npLmUVKyaQA50ecdg1VRsw.crl (hash: hKTM0jUDc89EY21yr7HcSdWGpX0rrhylj7UU2a4+FVo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:29:c7:36:66:9b:e2:0d:92:7f:20:f3:3d:33:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77bfffd67a4b99454ac9a400e7479c760d5546cc Validity Not Before: Jan 25 22:01:30 2026 GMT Not After : Jan 26 22:01:30 2026 GMT Subject: CN=3eeaa0027516dbe3c908f295416df4ae05c34572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d0:5c:67:97:8d:f0:67:22:96:75:31:af:02: 23:a5:b8:6b:f6:fd:ce:48:26:da:d3:e3:e7:d4:7b: 62:80:f0:da:48:48:3e:4e:d1:3f:d3:64:4a:ba:d4: a2:25:bf:d6:5a:1b:a1:c2:4d:0c:94:7b:e3:d5:f7: 17:a2:25:8b:01:8d:32:e9:cf:d6:85:88:99:bd:5f: 19:5a:ba:2c:6b:fe:17:4d:5a:c2:14:e0:74:e3:2a: b1:0f:19:1a:5a:ff:de:f1:7f:4c:8b:0f:97:3d:c4: bb:86:a5:4a:b8:2a:7a:b8:1e:7e:fd:6a:35:4c:15: 8c:c6:3d:54:b9:e7:e6:62:56:9a:ba:48:77:ca:55: 4b:ae:e3:09:a7:f1:e2:6c:03:67:15:cd:c6:f4:65: 23:c2:9f:04:c7:8e:ed:64:a9:39:80:9f:bc:ce:8b: ab:30:de:85:af:84:6a:04:02:8c:6c:d1:75:cd:9e: 62:b4:fe:f0:40:25:6b:be:eb:80:58:9d:d6:53:c3: 93:6e:01:ab:d9:eb:bc:b9:92:4e:97:8b:99:7c:cb: 77:30:4d:e3:10:ea:97:d6:8d:20:0c:dd:92:4f:b4: 96:90:67:3d:f9:9a:1c:79:84:7c:1f:c7:37:37:a3: cb:6e:eb:99:96:c3:98:2c:50:72:e9:a3:be:7c:c9: 8b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:EA:A0:02:75:16:DB:E3:C9:08:F2:95:41:6D:F4:AE:05:C3:45:72 X509v3 Authority Key Identifier: keyid:77:BF:FF:D6:7A:4B:99:45:4A:C9:A4:00:E7:47:9C:76:0D:55:46:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:4f:9c:64:8a:df:f3:c5:0f:4f:e0:fa:ae:4e:66:71:90:39: ee:20:49:6c:4b:c6:74:2a:64:7c:80:e9:4f:d0:32:35:c7:f5: 60:d2:b1:cd:5c:b5:f4:34:c0:b5:26:7e:62:47:9c:51:72:ea: 87:7b:ee:1f:ce:17:d3:d8:65:e6:c1:0f:4a:40:77:9c:0e:ff: ca:07:1d:f4:1c:f3:d9:47:84:5a:d8:6a:80:ec:4d:f0:a7:c4: f3:83:ca:41:c0:50:d3:e1:25:98:5b:7b:48:31:45:5e:7a:79: 00:bf:fb:05:f9:cc:78:45:14:40:ad:17:b1:d6:4e:29:65:75: a7:86:29:19:a8:36:e7:4b:aa:28:72:43:3a:2f:c4:20:14:db: f0:4f:d6:8c:31:91:c1:bc:16:d5:eb:b4:cc:d5:6d:a7:35:ce: a4:4c:a4:13:92:37:01:4a:61:da:1b:6e:95:3f:9a:17:69:73: 3a:ba:1a:90:0f:b1:cb:99:06:1d:30:35:af:40:81:bd:e1:b7: 22:a8:77:6a:94:25:7a:a3:55:31:58:ba:3b:e4:fc:c3:ad:b1: 67:9e:83:99:b8:bd:43:42:08:82:c1:90:6b:28:fb:49:7d:52: 48:f2:ff:10:0b:9f:5e:a8:37:b8:13:16:5c:6b:74:a7:62:ca: e3:46:38:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LSnHNmab4g2SfyDzPTPuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YmZmZmQ2N2E0Yjk5NDU0YWM5YTQwMGU3NDc5Yzc2MGQ1 NTQ2Y2MwHhcNMjYwMTI1MjIwMTMwWhcNMjYwMTI2MjIwMTMwWjAzMTEwLwYDVQQD EygzZWVhYTAwMjc1MTZkYmUzYzkwOGYyOTU0MTZkZjRhZTA1YzM0NTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodBcZ5eN8GcilnUxrwIjpbhr9v3O SCba0+Pn1HtigPDaSEg+TtE/02RKutSiJb/WWhuhwk0MlHvj1fcXoiWLAY0y6c/W hYiZvV8ZWrosa/4XTVrCFOB04yqxDxkaWv/e8X9Miw+XPcS7hqVKuCp6uB5+/Wo1 TBWMxj1UuefmYlaaukh3ylVLruMJp/HibANnFc3G9GUjwp8Ex47tZKk5gJ+8zour MN6Fr4RqBAKMbNF1zZ5itP7wQCVrvuuAWJ3WU8OTbgGr2eu8uZJOl4uZfMt3ME3j EOqX1o0gDN2ST7SWkGc9+ZoceYR8H8c3N6PLbuuZlsOYLFBy6aO+fMmLEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD7qoAJ1FtvjyQjylUFt9K4Fw0VyMB8GA1UdIwQY MBaAFHe//9Z6S5lFSsmkAOdHnHYNVUbMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDdfXzFucExtVVZLeWFRQTUwZWNkZzFWUnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9lNzRlNjUtNWM5ZC00NmM3LTk2N2Mt NDRkMWUyNGI3YjI1LzEvZDdfXzFucExtVVZLeWFRQTUwZWNkZzFWUnN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9lNzRlNjUtNWM5ZC00NmM3LTk2N2MtNDRkMWUyNGI3YjI1 LzEvZDdfXzFucExtVVZLeWFRQTUwZWNkZzFWUnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY0+cZIrf 88UPT+D6rk5mcZA57iBJbEvGdCpkfIDpT9AyNcf1YNKxzVy19DTAtSZ+YkecUXLq h3vuH84X09hl5sEPSkB3nA7/ygcd9Bzz2UeEWthqgOxN8KfE84PKQcBQ0+ElmFt7 SDFFXnp5AL/7BfnMeEUUQK0XsdZOKWV1p4YpGag250uqKHJDOi/EIBTb8E/WjDGR wbwW1eu0zNVtpzXOpEykE5I3AUph2htulT+aF2lzOroakA+xy5kGHTA1r0CBveG3 Iqh3apQleqNVMVi6O+T8w62xZ56Dmbi9Q0IIgsGQayj7SX1SSPL/EAufXqg3uBMW XGt0p2LK40Y4fw== -----END CERTIFICATE-----Generated at Mon Jan 26 07:12:23 2026 by rpki-client