This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft File: 7gZE9wYh3Uokp4tntGApSFc3WMA.mft (raw, json) Hash identifier: 4uDfKZblZATWrPuTUwUiBqzC3owPN8Wow4he7Riur/k= Subject key identifier: 2E:FA:CC:59:BF:E7:BB:93:FE:EC:62:AE:CC:2A:90:D1:F4:A6:49:CD Authority key identifier: EE:06:44:F7:06:21:DD:4A:24:A7:8B:67:B4:60:29:48:57:37:58:C0 Certificate issuer: /CN=ee0644f70621dd4a24a78b67b4602948573758c0 Certificate serial: 019BF8767259FC076B85BCE8DDE4B3B0BD0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 04:01:10 +0000 Manifest this update: Mon 26 Jan 2026 04:01:10 +0000 Manifest next update: Tue 27 Jan 2026 04:01:10 +0000 Files and hashes: 1: 7gZE9wYh3Uokp4tntGApSFc3WMA.crl (hash: F6w4M7gXf4qU5X1HjQvQ8VQmbHkEjYYl3cKSihAJ9Vo=) 2: Rrw9o3WCpwNOEYYVtK8wHu_QJkY.roa (hash: 6I0ghzBeN79J1UAgpVFm5cx7tXZBN44byXnGOpV99sA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 04:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:76:72:59:fc:07:6b:85:bc:e8:dd:e4:b3:b0:bd:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee0644f70621dd4a24a78b67b4602948573758c0 Validity Not Before: Jan 26 04:01:10 2026 GMT Not After : Jan 27 04:01:10 2026 GMT Subject: CN=2efacc59bfe7bb93feec62aecc2a90d1f4a649cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e7:fd:92:9c:38:1b:96:6b:ac:a4:ba:19:4e: 97:d6:cc:48:45:ad:41:95:dc:cd:60:20:69:4f:bf: d1:b0:2e:35:e7:2e:58:61:e8:25:87:52:da:d9:f7: 97:58:77:1a:60:8d:65:cc:16:34:0b:6c:6c:c1:3b: ba:18:71:bf:b3:17:ba:9e:1d:92:13:7f:2b:85:8d: f1:28:77:6b:b4:d2:e8:bd:8a:6a:8d:01:1c:cb:7f: 8f:0c:42:62:97:a2:c9:1f:a7:c2:6f:82:be:2b:c3: e2:ea:e7:7e:a1:f2:df:12:d7:a0:f3:01:e0:4e:89: e5:e7:86:6a:be:c6:9e:3a:0d:94:58:14:d2:59:d2: 37:f4:af:cf:6e:74:28:8b:83:0b:49:35:3b:65:4b: dc:31:63:08:58:1a:80:f5:a5:d8:9f:94:29:c3:c9: 7a:cc:d7:d7:1f:bc:ce:bb:dc:ae:7f:a6:71:c9:8c: ec:23:38:04:25:b7:d1:eb:8e:a1:0a:18:22:52:a3: 94:e8:a5:ad:89:3d:82:5c:a0:6c:76:01:2c:db:a1: a3:dd:90:5f:ff:c2:23:a0:2b:ce:83:37:5b:5e:54: 50:6e:0c:f5:21:72:56:08:a4:c9:9c:1a:fa:3c:d9: b0:d8:a8:07:8e:9f:d8:68:9b:77:03:40:c8:be:38: 45:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:FA:CC:59:BF:E7:BB:93:FE:EC:62:AE:CC:2A:90:D1:F4:A6:49:CD X509v3 Authority Key Identifier: keyid:EE:06:44:F7:06:21:DD:4A:24:A7:8B:67:B4:60:29:48:57:37:58:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:4d:f9:51:4d:6c:bd:33:b5:d0:bc:2d:0c:f7:6e:89:0d:a3: e8:67:ad:cd:b2:be:f4:42:53:b3:0b:7b:32:e3:4d:9d:31:9a: 30:81:f7:8b:2d:b4:5e:65:42:fd:a3:21:7f:7c:b2:4b:d8:c7: ca:32:85:19:9c:1d:39:ae:2c:77:27:7b:95:e0:65:d5:bf:2a: e8:14:02:10:35:ab:6f:88:fe:75:a2:b9:c9:0a:2f:71:63:59: 12:7c:2d:cf:96:0d:6f:23:6d:4f:51:7a:6e:4e:4c:b3:05:d0: d4:05:8e:0a:7f:63:8d:61:9f:58:76:7b:3d:cf:4e:44:85:1d: e8:bc:da:fa:c8:c5:cd:41:95:6d:be:dc:95:2b:04:cf:14:16: df:ec:f9:70:b8:e8:a9:df:b4:ac:87:8a:90:b8:6d:ca:8b:dd: a7:03:9d:22:e2:d4:f2:c0:07:42:f9:c0:db:1a:e4:b9:b5:21: 07:f3:bd:ec:e0:78:b1:08:e5:2a:a0:8f:a5:b7:eb:81:82:cc: 7e:98:e1:be:8a:56:05:7e:db:d7:cb:e4:dd:62:c0:81:69:c1: 34:e6:08:c0:60:54:97:2b:65:59:84:2c:07:e9:4e:b7:83:34: 56:bb:4a:57:1e:17:82:0a:94:18:19:1f:f2:11:86:0d:2c:4c: 18:68:20:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4dnJZ/Adrhbzo3eSzsL0NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMDY0NGY3MDYyMWRkNGEyNGE3OGI2N2I0NjAyOTQ4NTcz NzU4YzAwHhcNMjYwMTI2MDQwMTEwWhcNMjYwMTI3MDQwMTEwWjAzMTEwLwYDVQQD EygyZWZhY2M1OWJmZTdiYjkzZmVlYzYyYWVjYzJhOTBkMWY0YTY0OWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+f9kpw4G5ZrrKS6GU6X1sxIRa1B ldzNYCBpT7/RsC415y5YYeglh1La2feXWHcaYI1lzBY0C2xswTu6GHG/sxe6nh2S E38rhY3xKHdrtNLovYpqjQEcy3+PDEJil6LJH6fCb4K+K8Pi6ud+ofLfEteg8wHg Tonl54ZqvsaeOg2UWBTSWdI39K/PbnQoi4MLSTU7ZUvcMWMIWBqA9aXYn5Qpw8l6 zNfXH7zOu9yuf6ZxyYzsIzgEJbfR646hChgiUqOU6KWtiT2CXKBsdgEs26Gj3ZBf /8IjoCvOgzdbXlRQbgz1IXJWCKTJnBr6PNmw2KgHjp/YaJt3A0DIvjhF1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC76zFm/57uT/uxirswqkNH0pknNMB8GA1UdIwQY MBaAFO4GRPcGId1KJKeLZ7RgKUhXN1jAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2daRTl3WWgzVW9rcDR0bnRHQXBTRmMzV01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8wMmRhYzMtMzllYi00NjljLWFjYzkt MDBjZDVlYzAwZDExLzEvN2daRTl3WWgzVW9rcDR0bnRHQXBTRmMzV01BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC8wMmRhYzMtMzllYi00NjljLWFjYzktMDBjZDVlYzAwZDEx LzEvN2daRTl3WWgzVW9rcDR0bnRHQXBTRmMzV01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc035UU1s vTO10LwtDPduiQ2j6GetzbK+9EJTswt7MuNNnTGaMIH3iy20XmVC/aMhf3yyS9jH yjKFGZwdOa4sdyd7leBl1b8q6BQCEDWrb4j+daK5yQovcWNZEnwtz5YNbyNtT1F6 bk5MswXQ1AWOCn9jjWGfWHZ7Pc9ORIUd6Lza+sjFzUGVbb7clSsEzxQW3+z5cLjo qd+0rIeKkLhtyovdpwOdIuLU8sAHQvnA2xrkubUhB/O97OB4sQjlKqCPpbfrgYLM fpjhvopWBX7b18vk3WLAgWnBNOYIwGBUlytlWYQsB+lOt4M0VrtKVx4XggqUGBkf 8hGGDSxMGGggTQ== -----END CERTIFICATE-----Generated at Mon Jan 26 14:04:21 2026 by rpki-client