This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft File: 41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft (raw, json) Hash identifier: 7lTQZdcw8uLFozGEPuOVC+70U2p13HhOKdFeWapkK8g= Subject key identifier: BB:97:F6:46:63:97:28:AC:DA:6C:4C:75:52:55:5D:34:6E:6B:2C:1F Authority key identifier: E3:56:07:A4:94:20:0F:F1:F3:D5:99:E2:5F:C0:13:F3:86:40:CD:46 Certificate issuer: /CN=e35607a494200ff1f3d599e25fc013f38640cd46 Certificate serial: 019BF6878E34CDEBD5236AB82A6EAECBA435 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/41YHpJQgD_Hz1ZniX8AT84ZAzUY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft Manifest number: 0117 Signing time: Sun 25 Jan 2026 19:00:37 +0000 Manifest this update: Sun 25 Jan 2026 19:00:37 +0000 Manifest next update: Mon 26 Jan 2026 19:00:37 +0000 Files and hashes: 1: 41YHpJQgD_Hz1ZniX8AT84ZAzUY.crl (hash: 1QV6nIaWmru/SoEhPMRrFJxhzp9IkcPyRTWWvUDGUVI=) 2: fJC9vmdZueXz61wAYAD-WUsaH2A.roa (hash: k5sJI4drxp1+QGPOMqgRV5VUY5GowjbKkDKbGnRh3VE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft rsync://rpki.ripe.net/repository/DEFAULT/41YHpJQgD_Hz1ZniX8AT84ZAzUY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:8e:34:cd:eb:d5:23:6a:b8:2a:6e:ae:cb:a4:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e35607a494200ff1f3d599e25fc013f38640cd46 Validity Not Before: Jan 25 19:00:37 2026 GMT Not After : Jan 26 19:00:37 2026 GMT Subject: CN=bb97f646639728acda6c4c7552555d346e6b2c1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:35:90:b3:8c:66:ec:23:51:3e:62:f2:3e:03: 72:c5:ca:3a:d6:47:68:6e:3d:8d:72:d2:23:ba:33: 1d:b3:ef:4a:31:69:53:80:62:bd:70:39:21:52:e1: a2:1f:db:67:93:22:3e:47:31:03:0f:c7:4e:ef:71: 78:80:5f:3d:31:16:d8:66:c8:68:31:e4:20:6f:02: 90:49:f1:54:18:da:3b:8c:1d:7c:17:db:e8:61:30: b5:ce:d7:5c:cf:25:88:a0:8f:0d:34:4f:27:1d:6e: b3:b6:bb:97:f4:2a:b2:81:6a:bc:d0:0c:2d:65:03: 91:c3:99:1e:4b:5c:bf:b0:ce:06:56:19:28:da:16: 34:b1:a5:4d:2a:23:12:f7:d4:18:03:67:53:9f:f3: 13:e9:70:a7:e0:b9:f0:bc:93:c5:a7:57:1b:a2:49: 32:a9:31:87:50:9a:de:60:c2:49:4f:c0:42:a1:76: f8:b2:0c:f7:3a:7f:68:43:3f:18:be:1c:93:b6:fb: 12:25:e6:6c:19:9b:a2:f0:50:77:1d:ef:b0:fb:95: ce:cc:9d:67:b8:1c:f3:98:84:69:fc:98:47:93:83: f3:fe:f0:51:77:50:87:c8:f3:48:b2:05:c5:25:4f: f7:9d:82:d0:a3:c0:4d:f6:8e:f2:1a:35:05:c1:44: 39:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:97:F6:46:63:97:28:AC:DA:6C:4C:75:52:55:5D:34:6E:6B:2C:1F X509v3 Authority Key Identifier: keyid:E3:56:07:A4:94:20:0F:F1:F3:D5:99:E2:5F:C0:13:F3:86:40:CD:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41YHpJQgD_Hz1ZniX8AT84ZAzUY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:91:7b:c6:85:50:54:86:c4:17:3c:60:03:9a:4d:73:d6:f3: 48:24:28:cf:0b:06:41:07:45:a8:35:bd:46:8c:6a:d6:b0:47: 77:85:4f:0f:6b:4a:13:ff:fc:44:75:97:2f:55:6f:62:6f:dc: 50:6a:bf:c0:f5:25:91:24:4f:c7:58:23:7d:6f:04:e3:4e:90: c3:0a:9f:79:54:55:6e:56:93:ed:05:cf:e1:9f:8a:6f:77:f9: 1f:b4:ec:65:07:b3:c9:d6:c4:59:55:c7:53:da:e6:92:a0:16: e8:f6:fd:89:2e:6b:e5:1c:3b:5c:ed:b4:18:5b:ce:17:6d:ec: 59:19:73:57:40:c1:cc:75:82:8d:d2:21:be:e1:c7:d1:a8:12: 2a:04:e2:b5:f9:f2:4c:60:c8:12:ac:a6:2b:b6:d6:f7:89:8e: be:99:29:96:9e:ee:cf:a4:e4:3b:ac:7e:8e:14:9b:75:5b:8e: ff:fe:95:32:91:87:36:3e:a1:f6:6e:e6:23:78:69:0e:da:3b: 43:3e:00:37:90:9e:fd:d6:21:31:e7:17:a1:4a:bb:e8:d3:5c: c3:df:31:af:46:ee:9e:33:64:8a:8f:4c:de:10:09:a7:ef:e9: ad:9b:74:f1:85:53:ef:f6:5e:3d:ee:a9:62:8c:c1:37:fc:0c: 88:93:92:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h440zevVI2q4Km6uy6Q1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzNTYwN2E0OTQyMDBmZjFmM2Q1OTllMjVmYzAxM2YzODY0 MGNkNDYwHhcNMjYwMTI1MTkwMDM3WhcNMjYwMTI2MTkwMDM3WjAzMTEwLwYDVQQD EyhiYjk3ZjY0NjYzOTcyOGFjZGE2YzRjNzU1MjU1NWQzNDZlNmIyYzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzWQs4xm7CNRPmLyPgNyxco61kdo bj2NctIjujMds+9KMWlTgGK9cDkhUuGiH9tnkyI+RzEDD8dO73F4gF89MRbYZsho MeQgbwKQSfFUGNo7jB18F9voYTC1ztdczyWIoI8NNE8nHW6ztruX9CqygWq80Awt ZQORw5keS1y/sM4GVhko2hY0saVNKiMS99QYA2dTn/MT6XCn4LnwvJPFp1cbokky qTGHUJreYMJJT8BCoXb4sgz3On9oQz8YvhyTtvsSJeZsGZui8FB3He+w+5XOzJ1n uBzzmIRp/JhHk4Pz/vBRd1CHyPNIsgXFJU/3nYLQo8BN9o7yGjUFwUQ50QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLuX9kZjlyis2mxMdVJVXTRuaywfMB8GA1UdIwQY MBaAFONWB6SUIA/x89WZ4l/AE/OGQM1GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDFZSHBKUWdEX0h6MVpuaVg4QVQ4NFpBelVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy84ZDY3NTktNTA2Zi00ZjBhLWJjMzYt NTA0N2NiMzI3ZDllLzEvNDFZSHBKUWdEX0h6MVpuaVg4QVQ4NFpBelVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy84ZDY3NTktNTA2Zi00ZjBhLWJjMzYtNTA0N2NiMzI3ZDll LzEvNDFZSHBKUWdEX0h6MVpuaVg4QVQ4NFpBelVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfpF7xoVQ VIbEFzxgA5pNc9bzSCQozwsGQQdFqDW9Roxq1rBHd4VPD2tKE//8RHWXL1VvYm/c UGq/wPUlkSRPx1gjfW8E406QwwqfeVRVblaT7QXP4Z+Kb3f5H7TsZQezydbEWVXH U9rmkqAW6Pb9iS5r5Rw7XO20GFvOF23sWRlzV0DBzHWCjdIhvuHH0agSKgTitfny TGDIEqymK7bW94mOvpkplp7uz6TkO6x+jhSbdVuO//6VMpGHNj6h9m7mI3hpDto7 Qz4AN5Ce/dYhMecXoUq76NNcw98xr0bunjNkio9M3hAJp+/prZt08YVT7/ZePe6p YozBN/wMiJOSgA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:00:28 2026 by rpki-client