This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.mft File: c7gWQOG2T1HSun149nd8BW0RVL8.mft (raw, json) Hash identifier: 4jZmAvi8agvj1UjO5er2QLtDFwQo1PJ8men4QA4YBCY= Subject key identifier: 69:E4:51:08:7D:68:B0:95:65:99:E0:6D:FA:4B:28:BF:73:74:30:31 Authority key identifier: 73:B8:16:40:E1:B6:4F:51:D2:BA:7D:78:F6:77:7C:05:6D:11:54:BF Certificate issuer: /CN=73b81640e1b64f51d2ba7d78f6777c056d1154bf Certificate serial: 019BF650B9A2AE46E50AEEE5B54A846878ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c7gWQOG2T1HSun149nd8BW0RVL8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 18:00:44 +0000 Manifest this update: Sun 25 Jan 2026 18:00:44 +0000 Manifest next update: Mon 26 Jan 2026 18:00:44 +0000 Files and hashes: 1: c7gWQOG2T1HSun149nd8BW0RVL8.crl (hash: 08aDuWh8uyAQemEqQKM7x0Gy+Zbiwid8xxt7xg1pON4=) 2: vc7ewQR162pr-7rdGykOov0txVE.roa (hash: 6BVZB2JOatn5xn04X9qghhGRmm3MYSHBqBvWVGQDwyU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.mft rsync://rpki.ripe.net/repository/DEFAULT/c7gWQOG2T1HSun149nd8BW0RVL8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:50:b9:a2:ae:46:e5:0a:ee:e5:b5:4a:84:68:78:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73b81640e1b64f51d2ba7d78f6777c056d1154bf Validity Not Before: Jan 25 18:00:44 2026 GMT Not After : Jan 26 18:00:44 2026 GMT Subject: CN=69e451087d68b0956599e06dfa4b28bf73743031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:32:f8:4a:1f:ba:e5:fd:e5:71:b6:bf:8d:29: e1:ed:6b:4b:95:f7:27:c1:9d:7c:ca:21:3c:25:ea: 57:a3:30:90:a6:5a:ef:de:2b:ba:ed:18:53:2c:39: 84:32:b6:98:2a:3f:18:ae:5f:c2:e0:aa:6c:99:86: 58:a4:bf:9e:79:e5:22:53:51:3d:fa:0e:ac:c2:5a: 8d:6e:23:6b:67:64:5b:9c:cf:b0:a7:b7:8d:aa:b3: 2c:18:41:32:d2:a0:69:2b:72:78:2c:9a:0b:27:b2: bd:f1:93:19:fe:11:77:b8:b4:80:f9:6e:72:b4:71: ba:4c:f5:84:d4:9d:24:95:ab:6f:76:b3:3c:80:a8: e5:9a:92:c6:8a:32:df:59:ab:38:5d:53:d6:28:71: 9b:d3:ec:fc:52:e9:21:61:ed:8c:c4:08:fe:85:5a: d0:28:85:d2:29:f0:98:91:01:79:2d:4a:5d:c4:20: 3f:3d:62:91:75:f3:d6:78:8f:14:51:67:af:b0:61: 7e:f6:f5:23:c8:4b:3d:c3:be:90:78:27:0c:1e:c1: 80:a4:18:0e:78:3d:36:92:41:9a:20:4e:f4:19:bf: f7:55:76:33:e7:e2:2b:ae:66:5c:13:f3:77:e9:43: df:b2:de:cf:79:5b:26:06:28:6d:72:9d:c9:68:20: 0f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E4:51:08:7D:68:B0:95:65:99:E0:6D:FA:4B:28:BF:73:74:30:31 X509v3 Authority Key Identifier: keyid:73:B8:16:40:E1:B6:4F:51:D2:BA:7D:78:F6:77:7C:05:6D:11:54:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7gWQOG2T1HSun149nd8BW0RVL8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:3c:a7:e2:53:7d:4a:21:58:48:9d:9f:8f:f2:68:61:e0:fc: 7b:fc:51:80:11:1b:1b:66:81:e6:1a:93:5c:82:8c:a9:2a:e7: d3:fe:90:83:70:94:be:00:5d:dd:d2:ff:e0:18:42:59:73:f6: 5f:d5:52:7d:af:19:d6:8d:12:19:95:5b:34:2c:be:9e:dc:d7: b8:ed:76:9f:65:2a:ed:6d:67:96:18:41:25:d5:23:7a:4a:00: af:c0:ee:ed:ea:0a:8e:e1:61:d5:f6:23:30:b2:17:7f:fc:7b: 19:61:49:14:16:e1:84:4d:c1:34:61:0e:50:58:56:ad:67:4e: 1c:ef:54:53:6f:47:eb:c3:86:ee:c1:ff:a9:eb:39:81:30:3c: 65:7b:01:fb:b3:c5:b1:84:e4:95:fa:79:8c:f9:a6:05:77:89: 38:3d:97:f8:f6:d4:1e:be:02:8d:c3:c8:40:85:01:ef:d4:5a: bb:9e:3e:57:68:b9:89:20:2f:f1:e3:e7:3d:79:dc:b4:d0:e4: 38:4d:4b:9a:18:ca:7b:fe:69:45:56:38:39:40:7b:25:35:41: 75:26:1a:82:09:25:92:85:50:9c:43:26:05:07:67:cb:2a:f5: 45:72:43:e7:0c:28:8e:a6:06:90:f6:e0:24:fd:16:df:4d:6d: 46:d8:23:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2ULmirkblCu7ltUqEaHjtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczYjgxNjQwZTFiNjRmNTFkMmJhN2Q3OGY2Nzc3YzA1NmQx MTU0YmYwHhcNMjYwMTI1MTgwMDQ0WhcNMjYwMTI2MTgwMDQ0WjAzMTEwLwYDVQQD Eyg2OWU0NTEwODdkNjhiMDk1NjU5OWUwNmRmYTRiMjhiZjczNzQzMDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzL4Sh+65f3lcba/jSnh7WtLlfcn wZ18yiE8JepXozCQplrv3iu67RhTLDmEMraYKj8Yrl/C4KpsmYZYpL+eeeUiU1E9 +g6swlqNbiNrZ2RbnM+wp7eNqrMsGEEy0qBpK3J4LJoLJ7K98ZMZ/hF3uLSA+W5y tHG6TPWE1J0klatvdrM8gKjlmpLGijLfWas4XVPWKHGb0+z8UukhYe2MxAj+hVrQ KIXSKfCYkQF5LUpdxCA/PWKRdfPWeI8UUWevsGF+9vUjyEs9w76QeCcMHsGApBgO eD02kkGaIE70Gb/3VXYz5+IrrmZcE/N36UPfst7PeVsmBihtcp3JaCAPTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGnkUQh9aLCVZZngbfpLKL9zdDAxMB8GA1UdIwQY MBaAFHO4FkDhtk9R0rp9ePZ3fAVtEVS/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzdnV1FPRzJUMUhTdW4xNDluZDhCVzBSVkw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9hYmIxNTMtNTFiMy00ODQ5LTg5ODUt ZDMwZjkxNjhmODAxLzEvYzdnV1FPRzJUMUhTdW4xNDluZDhCVzBSVkw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9hYmIxNTMtNTFiMy00ODQ5LTg5ODUtZDMwZjkxNjhmODAx LzEvYzdnV1FPRzJUMUhTdW4xNDluZDhCVzBSVkw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANDyn4lN9 SiFYSJ2fj/JoYeD8e/xRgBEbG2aB5hqTXIKMqSrn0/6Qg3CUvgBd3dL/4BhCWXP2 X9VSfa8Z1o0SGZVbNCy+ntzXuO12n2Uq7W1nlhhBJdUjekoAr8Du7eoKjuFh1fYj MLIXf/x7GWFJFBbhhE3BNGEOUFhWrWdOHO9UU29H68OG7sH/qes5gTA8ZXsB+7PF sYTklfp5jPmmBXeJOD2X+PbUHr4CjcPIQIUB79Rau54+V2i5iSAv8ePnPXnctNDk OE1LmhjKe/5pRVY4OUB7JTVBdSYaggklkoVQnEMmBQdnyyr1RXJD5wwojqYGkPbg JP0W301tRtgjdA== -----END CERTIFICATE-----Generated at Mon Jan 26 04:24:39 2026 by rpki-client