This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft File: etB83meC_U_FaIV-hIRlW1AkhxA.mft (raw, json) Hash identifier: T3Mu9aLH6nLDHsVmuKVx9g/KqttNEcmjL9TXAjDF5XI= Subject key identifier: 23:F0:40:3F:EE:0F:1D:88:9F:C6:04:36:AC:2A:61:9E:48:DC:BE:57 Authority key identifier: 7A:D0:7C:DE:67:82:FD:4F:C5:68:85:7E:84:84:65:5B:50:24:87:10 Certificate issuer: /CN=7ad07cde6782fd4fc568857e8484655b50248710 Certificate serial: 019BF499A7BBB297D823B75DF56891EB1F20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft Manifest number: 05FC Signing time: Sun 25 Jan 2026 10:01:09 +0000 Manifest this update: Sun 25 Jan 2026 10:01:09 +0000 Manifest next update: Mon 26 Jan 2026 10:01:09 +0000 Files and hashes: 1: eCo9qXRcDZLgJlgoHLS9NExTbx4.roa (hash: BYg8Ba7NDfA7mgNndMx+S8c/mZhCBPail+1jI3QYxnk=) 2: etB83meC_U_FaIV-hIRlW1AkhxA.crl (hash: wlTtvgcidZfHoIfWoJlwT2zAysVfi143Wg+PfgB8dbU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:a7:bb:b2:97:d8:23:b7:5d:f5:68:91:eb:1f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ad07cde6782fd4fc568857e8484655b50248710 Validity Not Before: Jan 25 10:01:09 2026 GMT Not After : Jan 26 10:01:09 2026 GMT Subject: CN=23f0403fee0f1d889fc60436ac2a619e48dcbe57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fa:c5:f4:5a:12:96:54:7e:fd:61:aa:ae:e8: ac:bb:67:2b:7e:a3:71:87:80:dc:17:58:82:60:29: fb:67:b0:9c:73:d1:0c:a7:cf:b7:49:d3:86:7d:09: a4:85:76:79:34:70:64:c3:33:0b:c9:3c:63:54:2a: e9:b5:54:39:aa:c9:05:30:47:c4:ad:0e:df:29:cd: 61:f3:b0:21:ed:7c:84:a3:28:34:41:a9:7f:84:1d: 49:0f:0e:65:aa:e5:23:86:27:ca:3b:cb:42:e3:69: 9f:86:c4:10:d3:c1:4f:dc:0b:64:d8:0e:16:2b:33: b6:33:a8:c2:9a:33:c1:4f:4e:1f:86:5b:cb:6c:41: e6:4a:1e:6b:8c:7f:9f:5a:40:ef:70:47:ee:8c:ee: c7:9b:58:d6:88:c7:f7:34:2e:6e:fc:23:bf:5b:0e: d4:11:ed:95:64:f5:62:4b:52:66:69:e9:a8:02:3a: 9b:a6:0a:f1:82:5d:0b:a9:64:6c:43:79:8f:54:98: b3:a3:c6:cb:58:6b:cf:4b:6b:4b:0d:f8:35:62:82: 85:9b:0a:af:1a:e0:59:fb:8d:3b:58:b9:e0:ae:a7: 26:66:66:39:d2:8f:65:1e:9f:e1:e5:01:6f:dc:97: 04:f9:33:7c:f1:0d:91:e9:1c:c5:51:36:da:d4:d5: 6a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:F0:40:3F:EE:0F:1D:88:9F:C6:04:36:AC:2A:61:9E:48:DC:BE:57 X509v3 Authority Key Identifier: keyid:7A:D0:7C:DE:67:82:FD:4F:C5:68:85:7E:84:84:65:5B:50:24:87:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:14:66:ea:fc:a0:68:4b:c1:97:0e:72:c2:07:8b:55:af:24: 12:0c:8d:5d:0b:0a:47:2a:45:34:33:a1:ab:fe:92:c9:7b:ba: f8:3e:a2:9d:ab:a2:52:3e:5b:94:02:59:dd:76:6b:a1:fa:a9: c3:0f:c0:f9:04:f7:d7:02:fc:39:7f:35:93:b2:db:df:cb:a9: 26:05:f7:1a:79:c0:66:23:b1:db:1b:2e:da:1b:6c:01:62:1a: f9:a0:28:b6:ce:3d:b4:72:0d:15:2c:bc:74:ff:82:f1:05:a6: 72:9e:e0:2c:a8:72:4a:a8:10:3c:7e:c7:fe:04:34:7f:3d:8f: 11:0c:a0:aa:64:60:80:9a:00:01:8c:90:34:79:43:98:27:e3: 28:41:d1:c9:ab:04:ae:b8:c9:bd:5d:eb:d5:b7:9f:6d:04:5e: 27:c6:f7:8a:2b:89:f1:82:9a:c3:75:a3:15:fd:1a:2c:c3:14: b2:70:83:f5:94:42:0b:81:f6:53:c2:f2:bd:b3:57:c5:6b:66: 1f:7e:7f:0d:be:5f:3d:12:d9:11:a1:b5:e3:a5:70:3f:a6:ff: 30:04:7f:98:40:ac:3e:e9:8a:10:64:0e:d6:92:e5:b6:53:db: b6:2c:27:b5:96:ff:7a:8a:d5:22:22:cc:c3:ba:c8:ea:26:07: 9f:8b:05:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0mae7spfYI7dd9WiR6x8gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhZDA3Y2RlNjc4MmZkNGZjNTY4ODU3ZTg0ODQ2NTViNTAy NDg3MTAwHhcNMjYwMTI1MTAwMTA5WhcNMjYwMTI2MTAwMTA5WjAzMTEwLwYDVQQD EygyM2YwNDAzZmVlMGYxZDg4OWZjNjA0MzZhYzJhNjE5ZTQ4ZGNiZTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/rF9FoSllR+/WGqruisu2crfqNx h4DcF1iCYCn7Z7Ccc9EMp8+3SdOGfQmkhXZ5NHBkwzMLyTxjVCrptVQ5qskFMEfE rQ7fKc1h87Ah7XyEoyg0Qal/hB1JDw5lquUjhifKO8tC42mfhsQQ08FP3Atk2A4W KzO2M6jCmjPBT04fhlvLbEHmSh5rjH+fWkDvcEfujO7Hm1jWiMf3NC5u/CO/Ww7U Ee2VZPViS1JmaemoAjqbpgrxgl0LqWRsQ3mPVJizo8bLWGvPS2tLDfg1YoKFmwqv GuBZ+407WLngrqcmZmY50o9lHp/h5QFv3JcE+TN88Q2R6RzFUTba1NVqNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCPwQD/uDx2In8YENqwqYZ5I3L5XMB8GA1UdIwQY MBaAFHrQfN5ngv1PxWiFfoSEZVtQJIcQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXRCODNtZUNfVV9GYUlWLWhJUmxXMUFraHhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9jOTViYWYtMDFiOC00NzlmLTkwYmQt MDVhMWQ1Y2I4ZWViLzEvZXRCODNtZUNfVV9GYUlWLWhJUmxXMUFraHhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9jOTViYWYtMDFiOC00NzlmLTkwYmQtMDVhMWQ1Y2I4ZWVi LzEvZXRCODNtZUNfVV9GYUlWLWhJUmxXMUFraHhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARBRm6vyg aEvBlw5ywgeLVa8kEgyNXQsKRypFNDOhq/6SyXu6+D6inauiUj5blAJZ3XZrofqp ww/A+QT31wL8OX81k7Lb38upJgX3GnnAZiOx2xsu2htsAWIa+aAots49tHINFSy8 dP+C8QWmcp7gLKhySqgQPH7H/gQ0fz2PEQygqmRggJoAAYyQNHlDmCfjKEHRyasE rrjJvV3r1befbQReJ8b3iiuJ8YKaw3WjFf0aLMMUsnCD9ZRCC4H2U8LyvbNXxWtm H35/Db5fPRLZEaG146VwP6b/MAR/mECsPumKEGQO1pLltlPbtiwntZb/eorVIiLM w7rI6iYHn4sFEA== -----END CERTIFICATE-----Generated at Sun Jan 25 17:37:44 2026 by rpki-client