This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft File: n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft (raw, json) Hash identifier: Ba0xutoZ9BgfAVWpAzXbtrTP4nIKzpok3dxLzqTUvzQ= Subject key identifier: 7B:33:7E:71:55:BA:DC:5B:69:6E:D7:29:98:4E:00:E4:81:E6:66:8F Authority key identifier: 9F:B4:1D:25:2F:12:0A:CB:14:0D:0F:C8:43:34:15:21:14:B6:C8:26 Certificate issuer: /CN=9fb41d252f120acb140d0fc84334152114b6c826 Certificate serial: 019BF3F542307C753B3178484ACC5E18FF6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft Manifest number: 0310 Signing time: Sun 25 Jan 2026 07:01:35 +0000 Manifest this update: Sun 25 Jan 2026 07:01:35 +0000 Manifest next update: Mon 26 Jan 2026 07:01:35 +0000 Files and hashes: 1: n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl (hash: S4XFtRNlvP7ioUYt9jpZKOOb804l0Enh1kBeZ7fckUY=) 2: qDTCMJHmL38g7Q3yN-YIXsmnvn4.roa (hash: S3eC/w96DFQPDgFJUFEhb7780RHsrN7s0rIndTg2a1E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:f5:42:30:7c:75:3b:31:78:48:4a:cc:5e:18:ff:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fb41d252f120acb140d0fc84334152114b6c826 Validity Not Before: Jan 25 07:01:35 2026 GMT Not After : Jan 26 07:01:35 2026 GMT Subject: CN=7b337e7155badc5b696ed729984e00e481e6668f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:89:62:a5:9c:2f:8a:ff:dd:72:4b:f9:ee:53: 3b:87:3e:d4:99:9e:b8:b0:03:7a:ed:80:6d:c1:e9: 36:54:80:40:c5:3c:2f:4a:0d:3f:ef:e6:ac:1b:13: 47:da:26:c6:4c:b4:f4:a3:e5:67:78:ee:d3:d2:aa: aa:71:66:52:92:3f:e9:21:04:67:2a:12:71:a0:ea: 0b:5e:74:d9:85:2c:f5:fb:3e:99:9a:c4:0b:0d:64: 7f:df:25:55:c8:a0:26:d3:cb:cf:a9:7f:2a:da:fd: b5:5f:c3:89:82:1b:f7:ac:d6:1f:af:46:9f:c3:a4: 29:56:4e:39:79:e8:e4:5a:51:f3:be:c3:f2:f5:08: 45:0a:ac:15:31:50:33:d8:77:22:68:70:99:90:36: e1:2f:32:c5:23:6c:08:4d:93:90:2e:a6:f7:24:46: 5a:bb:8e:9f:dd:91:72:9f:ca:4e:b2:93:d9:da:fa: ca:ff:27:96:17:9c:43:a8:61:95:81:ea:70:db:bb: 73:62:9b:bc:5c:e7:1c:b0:bf:60:22:13:28:bd:d0: 91:27:be:a2:57:e4:3f:f3:7e:7e:84:4d:cb:76:46: 21:05:8c:14:44:73:f4:7b:04:cd:1a:d1:93:08:8c: 18:8c:0d:84:2c:0c:26:b6:d0:56:4e:7c:68:c1:f1: ad:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:33:7E:71:55:BA:DC:5B:69:6E:D7:29:98:4E:00:E4:81:E6:66:8F X509v3 Authority Key Identifier: keyid:9F:B4:1D:25:2F:12:0A:CB:14:0D:0F:C8:43:34:15:21:14:B6:C8:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:3b:c6:fa:a4:a0:34:d7:56:ff:e9:90:85:24:45:d3:58:1c: c3:83:16:a7:70:7b:d2:c3:8d:b2:75:33:96:b9:43:ec:90:95: 1e:4a:db:70:1c:68:4c:65:86:b2:c7:d3:d2:40:6b:2b:5b:ce: d5:4b:e9:95:8d:3d:2a:a4:14:45:72:da:a6:35:ea:60:a5:17: 37:e9:c1:81:20:08:f9:a5:6f:2d:9b:2f:da:1d:e5:0c:1d:fd: bc:76:26:ec:fb:4e:a6:d3:a1:6c:2b:b7:10:7a:52:53:f9:06: df:4c:46:bc:b1:ea:40:ec:b6:e4:c1:2c:26:64:12:e4:be:7c: 80:39:f2:32:0a:45:2e:04:c8:6d:0e:72:5d:f0:59:22:31:d2: 18:06:fb:17:ee:61:63:22:21:9a:c2:07:29:04:39:0c:65:f1: 64:1a:71:4b:6c:75:f7:87:14:72:ac:f0:70:9f:c3:2d:85:46: c7:d0:64:08:a4:3d:c3:16:5b:9f:0b:84:dd:49:18:b6:30:dd: 84:2e:28:89:16:1d:f7:39:57:52:82:66:e6:7b:43:d7:cd:38: b4:4d:53:06:78:aa:14:0f:83:41:a0:f9:ee:b5:7d:6c:ef:0c: 5e:04:0f:77:94:fd:34:d5:a7:a1:70:0a:b8:5d:23:93:a8:c2: 3f:63:e7:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvz9UIwfHU7MXhISsxeGP9sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmYjQxZDI1MmYxMjBhY2IxNDBkMGZjODQzMzQxNTIxMTRi NmM4MjYwHhcNMjYwMTI1MDcwMTM1WhcNMjYwMTI2MDcwMTM1WjAzMTEwLwYDVQQD Eyg3YjMzN2U3MTU1YmFkYzViNjk2ZWQ3Mjk5ODRlMDBlNDgxZTY2NjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApolipZwviv/dckv57lM7hz7UmZ64 sAN67YBtwek2VIBAxTwvSg0/7+asGxNH2ibGTLT0o+VneO7T0qqqcWZSkj/pIQRn KhJxoOoLXnTZhSz1+z6ZmsQLDWR/3yVVyKAm08vPqX8q2v21X8OJghv3rNYfr0af w6QpVk45eejkWlHzvsPy9QhFCqwVMVAz2HciaHCZkDbhLzLFI2wITZOQLqb3JEZa u46f3ZFyn8pOspPZ2vrK/yeWF5xDqGGVgepw27tzYpu8XOccsL9gIhMovdCRJ76i V+Q/835+hE3LdkYhBYwURHP0ewTNGtGTCIwYjA2ELAwmttBWTnxowfGtAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHszfnFVutxbaW7XKZhOAOSB5maPMB8GA1UdIwQY MBaAFJ+0HSUvEgrLFA0PyEM0FSEUtsgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjdRZEpTOFNDc3NVRFFfSVF6UVZJUlMyeUNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9hMTgxMWItNjE3Zi00NjlmLWFjZGUt NjNlMWMxMDRhOGRiLzEvbjdRZEpTOFNDc3NVRFFfSVF6UVZJUlMyeUNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9hMTgxMWItNjE3Zi00NjlmLWFjZGUtNjNlMWMxMDRhOGRi LzEvbjdRZEpTOFNDc3NVRFFfSVF6UVZJUlMyeUNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJTvG+qSg NNdW/+mQhSRF01gcw4MWp3B70sONsnUzlrlD7JCVHkrbcBxoTGWGssfT0kBrK1vO 1UvplY09KqQURXLapjXqYKUXN+nBgSAI+aVvLZsv2h3lDB39vHYm7PtOptOhbCu3 EHpSU/kG30xGvLHqQOy25MEsJmQS5L58gDnyMgpFLgTIbQ5yXfBZIjHSGAb7F+5h YyIhmsIHKQQ5DGXxZBpxS2x194cUcqzwcJ/DLYVGx9BkCKQ9wxZbnwuE3UkYtjDd hC4oiRYd9zlXUoJm5ntD1804tE1TBniqFA+DQaD57rV9bO8MXgQPd5T9NNWnoXAK uF0jk6jCP2PnEQ== -----END CERTIFICATE-----Generated at Sun Jan 25 10:41:38 2026 by rpki-client