This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft File: 7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft (raw, json) Hash identifier: o1a4DFPlcCtIsOmvKTVL7sZD1ZyO6kwjv+FZITwI8bQ= Subject key identifier: B2:E6:50:F9:71:32:98:C9:79:F3:60:08:22:F4:E0:7D:36:0A:47:3C Authority key identifier: ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8 Certificate issuer: /CN=ed476a7486b785451293571126c5f9da3ec485d8 Certificate serial: 019BF650BD839814942D3CA83E3C6205F03D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft Manifest number: 177B Signing time: Sun 25 Jan 2026 18:00:45 +0000 Manifest this update: Sun 25 Jan 2026 18:00:45 +0000 Manifest next update: Mon 26 Jan 2026 18:00:45 +0000 Files and hashes: 1: 7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl (hash: rtJKIEJGBpXYApeuYk9OkV6jUDeUOtUirGak94Usy2w=) 2: NJ53-rR_xX4WzjhOA9BrYV2nSLM.roa (hash: QoLJTTNt4EV3su31vq7GYg/U/5yk5wlrs70Rl9FmejU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:50:bd:83:98:14:94:2d:3c:a8:3e:3c:62:05:f0:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed476a7486b785451293571126c5f9da3ec485d8 Validity Not Before: Jan 25 18:00:45 2026 GMT Not After : Jan 26 18:00:45 2026 GMT Subject: CN=b2e650f9713298c979f3600822f4e07d360a473c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a9:0f:0c:62:df:86:1b:6b:b1:b4:24:e3:14: fb:bb:7a:fc:89:f0:bc:88:68:3d:c8:74:a7:e0:db: ff:e7:1c:46:38:72:32:30:31:a5:72:db:56:ae:16: 97:65:e7:3b:e7:7f:74:98:31:ad:7a:48:57:07:6b: e7:3a:b2:9b:42:57:75:3d:57:ca:86:96:17:d6:08: f8:82:86:c9:1f:a0:6a:b2:5d:d4:0b:ad:84:be:06: 41:7b:63:7c:fc:91:ae:70:d5:5c:6d:ab:6c:4f:6f: 5d:f3:98:22:c3:64:b9:a8:f8:8a:12:23:28:34:24: 1e:7b:f0:28:9e:ae:84:d4:90:05:0c:47:e5:35:b1: 94:f5:55:1f:be:5a:8c:33:2a:3a:98:e3:b8:38:7c: ce:4b:da:8c:ee:b9:44:da:49:17:b3:25:b1:90:a3: 5a:89:46:a8:52:1d:00:05:60:82:75:cf:e3:0e:18: 9c:f0:d4:1b:d4:d9:ed:b0:61:60:65:e2:0c:05:fa: a2:a0:1b:30:d4:55:3b:3e:46:09:60:70:bb:42:81: 74:42:b2:4e:d1:72:52:b2:f7:c6:f5:26:5a:7b:2d: 78:ec:eb:f7:bf:ef:00:73:f8:2b:cd:0f:86:26:fd: 25:e6:27:25:e9:cc:98:97:d7:72:fc:f7:e7:a7:f1: 54:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E6:50:F9:71:32:98:C9:79:F3:60:08:22:F4:E0:7D:36:0A:47:3C X509v3 Authority Key Identifier: keyid:ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:b9:8e:16:17:96:ae:ca:7f:d1:85:1a:2e:eb:a3:22:0f:e2: 2b:43:8a:9d:02:0f:1c:af:a1:aa:15:6c:f2:ae:02:0d:99:60: 3a:0e:07:0c:a4:1a:71:48:6a:16:a2:85:12:c6:ec:55:59:f9: 63:73:79:70:4c:29:1d:a3:7b:b8:a4:71:47:b8:88:c1:1d:2f: d6:8c:6e:a9:eb:4c:18:68:c3:ef:97:ba:c3:57:51:22:50:43: 9f:23:f3:6e:8c:2b:69:21:1c:c1:49:60:3f:dd:e5:60:76:14: 1e:85:45:fb:8b:c1:9b:6f:96:3c:14:eb:65:ee:23:1c:99:a6: 9d:53:f8:5b:4a:47:95:ef:23:d9:83:c0:da:d2:cd:0e:48:a4: 34:2a:32:82:65:38:9c:45:8c:b8:9e:a1:a7:ab:ed:5f:24:d9: c7:3f:cc:23:ef:7f:b6:1b:1d:d7:74:8a:9a:cf:d5:fe:46:e7: 05:24:db:6f:49:c4:ef:6f:5c:5d:52:fd:95:47:ea:5a:a1:d6: 8d:bd:c4:79:cc:94:c7:65:bf:2a:68:dd:33:a0:2e:73:6b:8d: 20:7c:71:2d:37:0e:1a:5b:93:60:f1:09:5e:72:6c:ab:90:63: 44:55:05:55:fc:1d:71:2d:b1:1c:ef:7f:52:ce:f2:b0:e8:07: 5d:f0:f5:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UL2DmBSULTyoPjxiBfA9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNDc2YTc0ODZiNzg1NDUxMjkzNTcxMTI2YzVmOWRhM2Vj NDg1ZDgwHhcNMjYwMTI1MTgwMDQ1WhcNMjYwMTI2MTgwMDQ1WjAzMTEwLwYDVQQD EyhiMmU2NTBmOTcxMzI5OGM5NzlmMzYwMDgyMmY0ZTA3ZDM2MGE0NzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKkPDGLfhhtrsbQk4xT7u3r8ifC8 iGg9yHSn4Nv/5xxGOHIyMDGlcttWrhaXZec75390mDGtekhXB2vnOrKbQld1PVfK hpYX1gj4gobJH6Bqsl3UC62EvgZBe2N8/JGucNVcbatsT29d85giw2S5qPiKEiMo NCQee/Aonq6E1JAFDEflNbGU9VUfvlqMMyo6mOO4OHzOS9qM7rlE2kkXsyWxkKNa iUaoUh0ABWCCdc/jDhic8NQb1NntsGFgZeIMBfqioBsw1FU7PkYJYHC7QoF0QrJO 0XJSsvfG9SZaey147Ov3v+8Ac/grzQ+GJv0l5icl6cyYl9dy/Pfnp/FUXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLLmUPlxMpjJefNgCCL04H02Ckc8MB8GA1UdIwQY MBaAFO1HanSGt4VFEpNXESbF+do+xIXYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1VkcWRJYTNoVVVTazFjUkpzWDUyajdFaGRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hMDE0N2ItMDU4ZC00ZjJkLWI2MDMt NjFmOWU1NGVkMjM5LzEvN1VkcWRJYTNoVVVTazFjUkpzWDUyajdFaGRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9hMDE0N2ItMDU4ZC00ZjJkLWI2MDMtNjFmOWU1NGVkMjM5 LzEvN1VkcWRJYTNoVVVTazFjUkpzWDUyajdFaGRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXLmOFheW rsp/0YUaLuujIg/iK0OKnQIPHK+hqhVs8q4CDZlgOg4HDKQacUhqFqKFEsbsVVn5 Y3N5cEwpHaN7uKRxR7iIwR0v1oxuqetMGGjD75e6w1dRIlBDnyPzbowraSEcwUlg P93lYHYUHoVF+4vBm2+WPBTrZe4jHJmmnVP4W0pHle8j2YPA2tLNDkikNCoygmU4 nEWMuJ6hp6vtXyTZxz/MI+9/thsd13SKms/V/kbnBSTbb0nE729cXVL9lUfqWqHW jb3EecyUx2W/KmjdM6Auc2uNIHxxLTcOGluTYPEJXnJsq5BjRFUFVfwdcS2xHO9/ Us7ysOgHXfD1pw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:48:43 2026 by rpki-client