This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft File: 7UZMdsAZSPh-BOL8X1FnArOQdFY.mft (raw, json) Hash identifier: PbswYtfKUBdGJXxyjcYPbJoX6Uk7tOUz5X9RcAAaPVI= Subject key identifier: 8C:08:CA:63:16:30:45:93:2D:4A:7B:20:EB:E0:0D:9F:41:55:F3:08 Authority key identifier: ED:46:4C:76:C0:19:48:F8:7E:04:E2:FC:5F:51:67:02:B3:90:74:56 Certificate issuer: /CN=ed464c76c01948f87e04e2fc5f516702b3907456 Certificate serial: 019BF83F6359F67671170088ECAF97F61BE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft Manifest number: 02EF Signing time: Mon 26 Jan 2026 03:01:02 +0000 Manifest this update: Mon 26 Jan 2026 03:01:02 +0000 Manifest next update: Tue 27 Jan 2026 03:01:02 +0000 Files and hashes: 1: 7UZMdsAZSPh-BOL8X1FnArOQdFY.crl (hash: zlC1rf4rKqyLCJlkJ4NzRAFLUBi2yBFDX1MyJatVZtc=) 2: P92JZHPtYY3-_599bc_yBXOAyLA.roa (hash: zEkTEvnJRapseTP0KdSkFQigSFFq86JRm4Kqw9lBy+c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:63:59:f6:76:71:17:00:88:ec:af:97:f6:1b:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed464c76c01948f87e04e2fc5f516702b3907456 Validity Not Before: Jan 26 03:01:02 2026 GMT Not After : Jan 27 03:01:02 2026 GMT Subject: CN=8c08ca63163045932d4a7b20ebe00d9f4155f308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7f:c0:b2:f8:7d:43:6f:91:a5:c2:24:b7:bb: 43:e9:64:15:7e:95:89:97:38:c3:87:07:8d:0c:e5: 61:74:2f:f0:ae:eb:53:b1:09:e5:54:10:db:85:bc: ed:d2:7e:bc:40:3c:4f:12:c1:24:f7:4f:c4:78:67: 94:1f:78:e7:f3:11:10:b3:c0:fe:6b:50:72:84:12: 31:3a:72:86:65:6d:9d:ca:34:78:75:1c:89:db:c8: 82:54:a1:52:ec:ee:85:49:21:f9:79:51:4e:12:0b: ac:f9:e2:48:77:dc:fd:52:fc:f1:32:b0:ae:3c:6a: 1f:76:6b:30:1e:b8:9f:d7:1a:54:92:d9:2e:d8:90: 9c:e4:01:13:e3:1a:dd:14:2a:16:b4:a6:95:f3:2a: d5:76:74:fe:da:69:1f:ff:20:29:5b:f1:bb:80:5d: 00:56:e9:78:13:6d:63:1d:3d:4a:6a:eb:8a:a4:16: 07:6f:95:30:fa:1d:d3:0e:66:73:6e:d8:d9:56:9a: 8d:de:88:cf:d5:f1:da:7a:5e:2b:81:b5:45:04:e2: ef:9c:b1:b5:d9:91:c0:75:d2:5d:10:e2:71:ca:58: 7a:e5:df:48:c7:a5:98:cf:01:9f:16:70:ef:b6:c3: 33:d9:ac:99:fd:bb:03:44:97:b1:f9:25:3d:f9:71: 7a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:08:CA:63:16:30:45:93:2D:4A:7B:20:EB:E0:0D:9F:41:55:F3:08 X509v3 Authority Key Identifier: keyid:ED:46:4C:76:C0:19:48:F8:7E:04:E2:FC:5F:51:67:02:B3:90:74:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:3c:1d:f4:35:b5:7b:50:74:e6:3d:25:6f:7c:25:30:4b:9b: 9b:b4:e6:89:b4:a8:cb:2c:4d:f9:3f:56:6c:0b:06:ad:12:df: 85:dc:15:ae:42:ac:14:06:a9:7d:59:a7:e3:40:16:58:79:52: 13:75:d0:4b:a2:c5:4f:f7:12:08:ce:b8:eb:3f:9b:a5:34:b1: d8:88:99:da:f2:9d:26:65:b4:2a:8a:a7:0e:97:e0:8e:60:f9: ed:2d:f7:9d:cb:56:92:e7:7b:5b:b7:68:dd:2a:c5:dd:2e:18: 87:f2:7b:f7:70:9b:dc:b9:4c:ff:65:d2:57:46:cf:10:ea:86: a3:a8:95:eb:e4:0a:cf:ae:1e:9a:0e:dd:f3:39:85:a3:1d:6e: 08:c3:34:e0:5b:d7:bd:15:08:ce:99:ec:f2:80:82:be:45:55: 39:02:fb:db:1f:b6:01:95:64:f8:d2:24:d0:64:c2:9c:3f:56: ed:6f:e7:6c:d1:7f:31:04:f2:97:a1:07:31:2d:33:24:49:2e: bb:53:3a:9f:49:b9:6a:33:34:c6:2a:5e:f6:ab:11:c6:92:df: 6a:81:ab:5c:4d:d9:b2:a4:67:90:86:aa:70:6f:c3:bd:92:0c: da:0d:22:57:c4:35:6a:85:e6:5b:87:97:fd:c9:46:a5:cf:93: f1:6a:8d:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P2NZ9nZxFwCI7K+X9hvpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNDY0Yzc2YzAxOTQ4Zjg3ZTA0ZTJmYzVmNTE2NzAyYjM5 MDc0NTYwHhcNMjYwMTI2MDMwMTAyWhcNMjYwMTI3MDMwMTAyWjAzMTEwLwYDVQQD Eyg4YzA4Y2E2MzE2MzA0NTkzMmQ0YTdiMjBlYmUwMGQ5ZjQxNTVmMzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuH/Asvh9Q2+RpcIkt7tD6WQVfpWJ lzjDhweNDOVhdC/wrutTsQnlVBDbhbzt0n68QDxPEsEk90/EeGeUH3jn8xEQs8D+ a1ByhBIxOnKGZW2dyjR4dRyJ28iCVKFS7O6FSSH5eVFOEgus+eJId9z9UvzxMrCu PGofdmswHrif1xpUktku2JCc5AET4xrdFCoWtKaV8yrVdnT+2mkf/yApW/G7gF0A Vul4E21jHT1KauuKpBYHb5Uw+h3TDmZzbtjZVpqN3ojP1fHael4rgbVFBOLvnLG1 2ZHAddJdEOJxylh65d9Ix6WYzwGfFnDvtsMz2ayZ/bsDRJex+SU9+XF6lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIwIymMWMEWTLUp7IOvgDZ9BVfMIMB8GA1UdIwQY MBaAFO1GTHbAGUj4fgTi/F9RZwKzkHRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1VaTWRzQVpTUGgtQk9MOFgxRm5Bck9RZEZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9lNGRiNTAtNzQ2ZS00NWY0LTk2NGQt Mzg1N2VjNWNiMWRiLzEvN1VaTWRzQVpTUGgtQk9MOFgxRm5Bck9RZEZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9lNGRiNTAtNzQ2ZS00NWY0LTk2NGQtMzg1N2VjNWNiMWRi LzEvN1VaTWRzQVpTUGgtQk9MOFgxRm5Bck9RZEZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgzwd9DW1 e1B05j0lb3wlMEubm7TmibSoyyxN+T9WbAsGrRLfhdwVrkKsFAapfVmn40AWWHlS E3XQS6LFT/cSCM646z+bpTSx2IiZ2vKdJmW0KoqnDpfgjmD57S33nctWkud7W7do 3SrF3S4Yh/J793Cb3LlM/2XSV0bPEOqGo6iV6+QKz64emg7d8zmFox1uCMM04FvX vRUIzpns8oCCvkVVOQL72x+2AZVk+NIk0GTCnD9W7W/nbNF/MQTyl6EHMS0zJEku u1M6n0m5ajM0xipe9qsRxpLfaoGrXE3ZsqRnkIaqcG/DvZIM2g0iV8Q1aoXmW4eX /clGpc+T8WqNEw== -----END CERTIFICATE-----Generated at Mon Jan 26 07:12:59 2026 by rpki-client