This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft File: IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft (raw, json) Hash identifier: NoWMZdkoYFMEngUC8YW6M3K0mlcfZAbj28OX+rWy1BQ= Subject key identifier: 03:8E:71:82:C5:C5:EA:D2:60:D9:37:9C:94:EC:A6:0C:B1:82:A2:DA Authority key identifier: 20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45 Certificate issuer: /CN=20feef391f16300157bb78b2eaea06d61c20c945 Certificate serial: 019BF4626FF49A9A679CFF19ECC606AAF0BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft Manifest number: 06FB Signing time: Sun 25 Jan 2026 09:00:50 +0000 Manifest this update: Sun 25 Jan 2026 09:00:50 +0000 Manifest next update: Mon 26 Jan 2026 09:00:50 +0000 Files and hashes: 1: 5xxcAEo_4vIQvQTZ11nCDFMgZo4.roa (hash: N8rxJgsy2l36Fd1o/jwhRwE3qaDQpQB4/meaBlVTHWs=) 2: IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl (hash: r1o8CdMxYZETm03kkurRk1OvYM7coSJ4wfPBolFTzWs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:6f:f4:9a:9a:67:9c:ff:19:ec:c6:06:aa:f0:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20feef391f16300157bb78b2eaea06d61c20c945 Validity Not Before: Jan 25 09:00:50 2026 GMT Not After : Jan 26 09:00:50 2026 GMT Subject: CN=038e7182c5c5ead260d9379c94eca60cb182a2da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b8:c6:8a:04:ad:0c:92:73:35:7d:b1:65:35: d5:18:44:08:4e:76:a9:49:1a:92:db:a6:84:0e:2c: 53:d5:39:24:20:c3:5a:42:a3:d6:d5:05:c8:aa:09: be:71:b6:59:cd:4e:66:00:63:4f:c8:21:57:ea:83: 83:77:7c:8b:3e:b9:e4:ee:ae:58:42:28:44:df:b9: 30:33:d7:38:8e:11:1e:8b:55:42:b7:32:fb:46:f0: eb:ab:36:1c:75:8c:3d:2e:0a:62:5b:2f:af:42:db: a0:cb:69:14:3f:e2:bf:5d:a8:47:4d:76:0d:1a:d1: f3:b3:90:d2:d0:1a:45:c8:2f:56:98:a1:5f:7d:73: cd:fb:ed:e1:09:e4:81:1e:5a:8b:a1:ec:47:0e:a9: 73:14:15:b2:5e:ca:81:88:c2:f2:40:dd:6e:fd:8e: 24:9a:c6:e6:a1:06:4d:15:0c:66:ef:88:de:46:e0: 50:a8:c5:e8:8b:db:3b:dd:6a:9b:9b:7f:8f:06:66: 5f:51:ea:19:59:73:1f:a9:3a:ac:27:7a:38:0f:48: 07:b5:b8:d3:e7:b0:32:41:2d:ee:a0:09:3e:d2:4c: 79:72:7f:75:db:75:47:3a:69:f1:6f:50:97:a0:f2: aa:1b:7b:52:88:f6:12:85:63:26:bd:ac:c3:c2:23: 51:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:8E:71:82:C5:C5:EA:D2:60:D9:37:9C:94:EC:A6:0C:B1:82:A2:DA X509v3 Authority Key Identifier: keyid:20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:9a:77:f4:8c:2b:53:d9:6e:a2:fb:09:11:eb:ee:99:30:6b: c9:a4:04:ca:f3:d3:6e:44:a3:56:12:eb:88:31:5a:94:04:d5: e2:26:88:fd:dd:ce:b2:ea:5a:ed:9d:99:95:ae:27:6d:b9:b0: 30:55:f1:ae:ef:41:f7:d8:0f:c3:7e:56:79:a1:fd:fc:7a:bb: e4:06:23:21:bc:66:5a:20:f0:04:8d:b9:5b:cc:26:eb:a2:46: aa:d5:50:5b:41:6f:6a:90:e9:a7:fe:3e:c8:14:a6:9e:b9:80: ec:a7:e6:38:5a:9a:7c:6c:a1:7a:59:f0:26:7e:1b:c7:40:cc: bf:93:0e:1b:38:f5:27:50:0e:57:9c:cd:64:c9:35:4e:b8:fb: 70:48:7c:93:00:8e:7b:d3:68:ea:8c:34:76:88:df:b6:e9:09: 66:63:fa:8e:dc:c1:6c:a1:cf:39:22:d1:9c:2b:1e:c8:08:f3: 47:94:46:90:88:ae:ff:7f:ff:79:99:43:c9:53:44:3f:29:92: e6:4e:38:f1:e7:39:c0:b3:10:b9:26:b0:17:9f:6d:d0:9a:5b: e5:48:87:e1:c7:61:12:41:8a:75:3c:22:7d:64:87:2d:6c:36: 15:b8:00:75:75:a2:f1:d4:6e:48:f1:9c:b3:cb:8c:62:97:ac: c5:9f:28:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0Ym/0mppnnP8Z7MYGqvC7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZmVlZjM5MWYxNjMwMDE1N2JiNzhiMmVhZWEwNmQ2MWMy MGM5NDUwHhcNMjYwMTI1MDkwMDUwWhcNMjYwMTI2MDkwMDUwWjAzMTEwLwYDVQQD EygwMzhlNzE4MmM1YzVlYWQyNjBkOTM3OWM5NGVjYTYwY2IxODJhMmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbjGigStDJJzNX2xZTXVGEQITnap SRqS26aEDixT1TkkIMNaQqPW1QXIqgm+cbZZzU5mAGNPyCFX6oODd3yLPrnk7q5Y QihE37kwM9c4jhEei1VCtzL7RvDrqzYcdYw9LgpiWy+vQtugy2kUP+K/XahHTXYN GtHzs5DS0BpFyC9WmKFffXPN++3hCeSBHlqLoexHDqlzFBWyXsqBiMLyQN1u/Y4k msbmoQZNFQxm74jeRuBQqMXoi9s73Wqbm3+PBmZfUeoZWXMfqTqsJ3o4D0gHtbjT 57AyQS3uoAk+0kx5cn9123VHOmnxb1CXoPKqG3tSiPYShWMmvazDwiNRrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAOOcYLFxerSYNk3nJTspgyxgqLaMB8GA1UdIwQY MBaAFCD+7zkfFjABV7t4surqBtYcIMlFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVA3dk9SOFdNQUZYdTNpeTZ1b0cxaHdneVVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC82NDcyMmItMjk5NS00MGRlLThiODct MjI2YjhkNGE1ZjYwLzEvSVA3dk9SOFdNQUZYdTNpeTZ1b0cxaHdneVVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC82NDcyMmItMjk5NS00MGRlLThiODctMjI2YjhkNGE1ZjYw LzEvSVA3dk9SOFdNQUZYdTNpeTZ1b0cxaHdneVVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGJp39Iwr U9luovsJEevumTBryaQEyvPTbkSjVhLriDFalATV4iaI/d3Osupa7Z2Zla4nbbmw MFXxru9B99gPw35WeaH9/Hq75AYjIbxmWiDwBI25W8wm66JGqtVQW0FvapDpp/4+ yBSmnrmA7KfmOFqafGyhelnwJn4bx0DMv5MOGzj1J1AOV5zNZMk1Trj7cEh8kwCO e9No6ow0dojftukJZmP6jtzBbKHPOSLRnCseyAjzR5RGkIiu/3//eZlDyVNEPymS 5k448ec5wLMQuSawF59t0Jpb5UiH4cdhEkGKdTwifWSHLWw2FbgAdXWi8dRuSPGc s8uMYpesxZ8o+Q== -----END CERTIFICATE-----Generated at Sun Jan 25 16:19:23 2026 by rpki-client