This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft File: rx7uIsUBU2MRinHSapRj3JN0uig.mft (raw, json) Hash identifier: dOn0wQCl1RScsld4lYggaDm7gNjJpzI+3xQvxE/ZzHY= Subject key identifier: BA:6B:EF:C0:56:53:74:F1:BA:16:82:D0:CA:D6:77:76:17:A3:EE:D8 Authority key identifier: AF:1E:EE:22:C5:01:53:63:11:8A:71:D2:6A:94:63:DC:93:74:BA:28 Certificate issuer: /CN=af1eee22c5015363118a71d26a9463dc9374ba28 Certificate serial: 019BF5AC2474654B5600B5F27E5466CCAD89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft Manifest number: 0BA9 Signing time: Sun 25 Jan 2026 15:00:58 +0000 Manifest this update: Sun 25 Jan 2026 15:00:58 +0000 Manifest next update: Mon 26 Jan 2026 15:00:58 +0000 Files and hashes: 1: 9KS099u2a2952M6t5pgM7PYVfgs.roa (hash: ofnJ8G07wxOHQAeRV05XqBNPxKtozWzSPL6rTrl/A14=) 2: rx7uIsUBU2MRinHSapRj3JN0uig.crl (hash: YYBvjyD2ukNGfziu3gbm9rigqSu8wwKJg9czkqnQsu0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:24:74:65:4b:56:00:b5:f2:7e:54:66:cc:ad:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af1eee22c5015363118a71d26a9463dc9374ba28 Validity Not Before: Jan 25 15:00:58 2026 GMT Not After : Jan 26 15:00:58 2026 GMT Subject: CN=ba6befc0565374f1ba1682d0cad6777617a3eed8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:60:66:3a:b6:74:b7:2c:de:93:5b:f7:eb:5b: ae:0b:5d:a3:3a:d4:98:02:5a:c5:30:e4:5c:cf:ec: b7:5d:92:27:e4:2c:8a:5b:67:68:ab:af:f9:05:a5: fa:65:23:85:f3:cf:28:37:65:a9:b4:2f:22:38:18: 01:e9:e0:0b:c9:43:e8:f8:f2:6d:3c:4e:e0:3f:9d: c2:33:a4:a7:b8:fc:03:5a:ca:37:02:e2:5d:1e:f6: 57:f7:33:5c:96:6b:20:ae:69:2d:8f:e9:73:6f:2e: 6a:38:8f:e0:ac:23:4a:9c:51:bd:05:22:96:dd:45: 33:77:fb:31:4e:17:00:a0:63:81:39:d6:0a:63:d5: 4b:58:00:43:e1:84:cf:c5:e5:4b:65:76:d1:3a:ac: 80:ae:69:94:14:10:6f:23:71:57:22:91:4a:d6:5b: 69:24:b3:51:bb:62:d5:ce:fb:46:ff:45:8b:01:a9: 21:0a:8f:be:3c:79:4a:a1:d2:06:f1:89:f1:c2:e0: 9b:c9:be:c9:34:63:90:38:e6:97:08:71:8f:e6:f1: 83:57:7a:44:8e:37:b2:5a:67:ad:ac:cc:dd:b5:af: 69:68:a0:29:06:1a:2f:a5:33:bf:00:85:16:a6:64: 4b:26:fd:b6:19:73:23:ce:9f:e5:6a:62:54:7d:4a: ce:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:6B:EF:C0:56:53:74:F1:BA:16:82:D0:CA:D6:77:76:17:A3:EE:D8 X509v3 Authority Key Identifier: keyid:AF:1E:EE:22:C5:01:53:63:11:8A:71:D2:6A:94:63:DC:93:74:BA:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:88:a1:89:5d:79:64:35:f0:c7:a5:c2:0a:01:0e:a1:0f:3a: 85:31:54:57:a1:9e:a6:fc:5f:40:19:30:ea:9f:34:aa:cd:01: 69:48:ba:70:3e:e9:2e:ac:8b:49:d4:51:ed:38:f4:71:2f:de: 84:6e:c4:a5:c9:91:45:9e:6d:34:b3:61:d7:01:27:94:49:fd: 47:a6:6f:dd:6d:7c:08:87:78:af:5e:08:7d:8f:55:57:e7:ed: fe:30:b8:2d:f5:6d:a7:94:84:3a:d3:98:2e:54:5e:ef:ad:01: 82:ab:52:82:62:a1:86:68:b9:d7:73:f5:ac:26:1d:30:10:a5: e7:0f:91:8c:5a:e2:37:f7:8c:d3:6a:a2:65:f2:d5:a8:3d:ae: a6:33:f4:49:09:00:f0:f3:ac:1a:80:27:1c:b5:3b:1e:2d:bc: fd:a2:90:b6:a6:6e:8c:f8:42:7d:22:9e:fc:7c:c3:3e:1e:0e: 8f:ab:2e:02:d6:05:eb:e8:72:59:3b:fb:f7:66:28:0f:13:8a: ea:ae:d6:2b:4d:97:fb:4a:7f:03:55:10:05:f3:cd:b9:40:ed: ba:56:e5:4c:41:db:82:4a:cd:53:f5:4b:77:7a:40:12:7e:e4: d2:18:a8:aa:68:50:98:b8:c3:69:52:81:16:7e:1d:0a:9b:e5: 8f:9d:6c:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rCR0ZUtWALXyflRmzK2JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmMWVlZTIyYzUwMTUzNjMxMThhNzFkMjZhOTQ2M2RjOTM3 NGJhMjgwHhcNMjYwMTI1MTUwMDU4WhcNMjYwMTI2MTUwMDU4WjAzMTEwLwYDVQQD EyhiYTZiZWZjMDU2NTM3NGYxYmExNjgyZDBjYWQ2Nzc3NjE3YTNlZWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2BmOrZ0tyzek1v361uuC12jOtSY AlrFMORcz+y3XZIn5CyKW2doq6/5BaX6ZSOF888oN2WptC8iOBgB6eALyUPo+PJt PE7gP53CM6SnuPwDWso3AuJdHvZX9zNclmsgrmktj+lzby5qOI/grCNKnFG9BSKW 3UUzd/sxThcAoGOBOdYKY9VLWABD4YTPxeVLZXbROqyArmmUFBBvI3FXIpFK1ltp JLNRu2LVzvtG/0WLAakhCo++PHlKodIG8YnxwuCbyb7JNGOQOOaXCHGP5vGDV3pE jjeyWmetrMzdta9paKApBhovpTO/AIUWpmRLJv22GXMjzp/lamJUfUrOCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLpr78BWU3TxuhaC0MrWd3YXo+7YMB8GA1UdIwQY MBaAFK8e7iLFAVNjEYpx0mqUY9yTdLooMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcng3dUlzVUJVMk1SaW5IU2FwUmozSk4wdWlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9mZGMyZjQtMjIyMi00ZjFiLWE1ZTUt YjIxNzhlZjJmODJmLzEvcng3dUlzVUJVMk1SaW5IU2FwUmozSk4wdWlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9mZGMyZjQtMjIyMi00ZjFiLWE1ZTUtYjIxNzhlZjJmODJm LzEvcng3dUlzVUJVMk1SaW5IU2FwUmozSk4wdWlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYIihiV15 ZDXwx6XCCgEOoQ86hTFUV6GepvxfQBkw6p80qs0BaUi6cD7pLqyLSdRR7Tj0cS/e hG7EpcmRRZ5tNLNh1wEnlEn9R6Zv3W18CId4r14IfY9VV+ft/jC4LfVtp5SEOtOY LlRe760BgqtSgmKhhmi513P1rCYdMBCl5w+RjFriN/eM02qiZfLVqD2upjP0SQkA 8POsGoAnHLU7Hi28/aKQtqZujPhCfSKe/HzDPh4Oj6suAtYF6+hyWTv792YoDxOK 6q7WK02X+0p/A1UQBfPNuUDtulblTEHbgkrNU/VLd3pAEn7k0hioqmhQmLjDaVKB Fn4dCpvlj51sFQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:35:32 2026 by rpki-client