This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft File: 97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft (raw, json) Hash identifier: PkqVhp2PqFykuUnCD6m7M/5SypRu48JQZnRiwprs7xc= Subject key identifier: 58:FB:99:13:34:9D:6E:58:2C:04:69:0C:92:30:EB:CE:E9:9C:6C:89 Authority key identifier: F7:B0:69:D3:3D:F1:22:5A:8B:36:43:A0:13:64:F2:79:DF:40:D8:77 Certificate issuer: /CN=f7b069d33df1225a8b3643a01364f279df40d877 Certificate serial: 019BF687D0C6F16FA5DA5FC9B2F06BB2770F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft Manifest number: 04DE Signing time: Sun 25 Jan 2026 19:00:54 +0000 Manifest this update: Sun 25 Jan 2026 19:00:54 +0000 Manifest next update: Mon 26 Jan 2026 19:00:54 +0000 Files and hashes: 1: 97Bp0z3xIlqLNkOgE2Tyed9A2Hc.crl (hash: 86lyJLAq//8s02ZnIoWy2b5Ke8gY4YWnNnVeY41UKM0=) 2: xhl0o4V6-hvD85CUbuSTASM7Pe8.roa (hash: UOzsj8ZtwxxJK1k4oeGehyFJR/EivykYvRbt7Q6K/PA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft rsync://rpki.ripe.net/repository/DEFAULT/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:d0:c6:f1:6f:a5:da:5f:c9:b2:f0:6b:b2:77:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7b069d33df1225a8b3643a01364f279df40d877 Validity Not Before: Jan 25 19:00:54 2026 GMT Not After : Jan 26 19:00:54 2026 GMT Subject: CN=58fb9913349d6e582c04690c9230ebcee99c6c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:22:d7:84:d4:71:ad:e9:46:e8:5d:73:1c:a6: 65:d4:87:54:58:22:08:ef:36:c9:c8:26:9c:d8:97: 2e:7f:ed:71:13:8e:aa:4f:7b:03:d8:11:42:8b:96: 88:d0:db:a2:af:0b:a2:91:34:c3:70:b1:3e:d1:ba: c9:ee:ca:67:84:dc:60:c1:ab:6a:85:93:1c:cb:0a: d6:5e:fe:9f:b0:d5:6f:20:43:16:7d:53:bb:65:bf: 01:1a:8e:71:d3:fc:be:ae:d6:05:05:59:31:43:9f: e3:06:f3:3d:58:ac:fa:94:3d:44:01:62:9b:0e:9d: f7:45:2f:52:69:02:8e:c0:75:60:2a:6c:bd:2e:eb: bd:2f:d9:9e:30:c8:80:a6:5e:a8:67:dd:0c:a2:f9: b8:cf:b1:cc:32:2c:ed:e0:07:0f:b9:9d:c8:16:03: 36:70:45:26:8f:0a:b0:8e:c7:c2:fe:81:59:ce:71: 9c:53:0c:6a:76:40:84:1b:9b:83:62:90:a3:68:c5: 8c:65:1b:86:8f:62:cf:a5:bc:99:05:ef:64:a7:82: 18:6a:c1:a3:25:05:f0:dc:80:6f:f0:df:8d:e8:6a: 49:f3:2d:a8:23:68:c2:87:1b:36:12:11:90:52:19: be:8e:23:48:fc:87:74:a8:09:f8:c3:c3:32:01:7c: 50:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:FB:99:13:34:9D:6E:58:2C:04:69:0C:92:30:EB:CE:E9:9C:6C:89 X509v3 Authority Key Identifier: keyid:F7:B0:69:D3:3D:F1:22:5A:8B:36:43:A0:13:64:F2:79:DF:40:D8:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:c8:24:4e:1a:ec:11:ec:dd:29:b8:78:be:e4:b9:fe:7a:ba: 15:80:87:35:18:4b:a4:11:d0:07:a3:e0:da:f6:12:26:3b:5b: 2f:64:9e:43:38:b9:f8:c2:30:d4:a2:eb:d0:50:12:2d:8a:25: 1b:fb:eb:c2:9c:d5:17:70:6a:ae:c7:5c:2c:ae:7a:f1:45:35: dc:6c:2f:27:34:b0:77:1c:40:07:e2:e0:f2:8a:64:fc:fa:6c: 63:02:b4:52:4c:69:39:4c:6e:b2:f9:16:6d:ef:36:70:a4:f4: e2:2f:73:32:8f:6b:7f:e5:59:d5:24:3b:5f:fb:8e:3a:bb:e6: ed:67:ec:b9:dd:3f:8b:b4:a2:c7:88:77:ed:48:24:78:f4:de: 54:59:ea:ad:df:74:4a:4a:12:dc:9f:e6:3b:60:84:46:2f:4b: 81:f4:05:40:be:4a:b5:0b:b9:3d:0a:75:08:6d:3f:86:49:ce: e5:34:84:de:9d:7e:e5:ee:c6:e0:cd:dd:83:8c:95:8c:52:03: f1:92:16:43:c8:41:a3:ca:9c:b5:34:f0:a7:a5:90:01:64:1b: fa:cf:85:e3:36:1b:25:50:29:98:b8:0b:78:75:2a:16:1f:85: 02:d9:38:b1:61:04:80:b6:ea:65:0b:39:8e:20:28:95:71:11: d7:62:b4:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h9DG8W+l2l/JsvBrsncPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3YjA2OWQzM2RmMTIyNWE4YjM2NDNhMDEzNjRmMjc5ZGY0 MGQ4NzcwHhcNMjYwMTI1MTkwMDU0WhcNMjYwMTI2MTkwMDU0WjAzMTEwLwYDVQQD Eyg1OGZiOTkxMzM0OWQ2ZTU4MmMwNDY5MGM5MjMwZWJjZWU5OWM2Yzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5yLXhNRxrelG6F1zHKZl1IdUWCII 7zbJyCac2Jcuf+1xE46qT3sD2BFCi5aI0NuirwuikTTDcLE+0brJ7spnhNxgwatq hZMcywrWXv6fsNVvIEMWfVO7Zb8BGo5x0/y+rtYFBVkxQ5/jBvM9WKz6lD1EAWKb Dp33RS9SaQKOwHVgKmy9Luu9L9meMMiApl6oZ90Movm4z7HMMizt4AcPuZ3IFgM2 cEUmjwqwjsfC/oFZznGcUwxqdkCEG5uDYpCjaMWMZRuGj2LPpbyZBe9kp4IYasGj JQXw3IBv8N+N6GpJ8y2oI2jChxs2EhGQUhm+jiNI/Id0qAn4w8MyAXxQCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFj7mRM0nW5YLARpDJIw687pnGyJMB8GA1UdIwQY MBaAFPewadM98SJaizZDoBNk8nnfQNh3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTdCcDB6M3hJbHFMTmtPZ0UyVHllZDlBMkhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82ZjQ5ZTEtZTcwNC00YWI0LWI5NGMt NWZkY2I3ODNhNmVjLzEvOTdCcDB6M3hJbHFMTmtPZ0UyVHllZDlBMkhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi82ZjQ5ZTEtZTcwNC00YWI0LWI5NGMtNWZkY2I3ODNhNmVj LzEvOTdCcDB6M3hJbHFMTmtPZ0UyVHllZDlBMkhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAccgkThrs EezdKbh4vuS5/nq6FYCHNRhLpBHQB6Pg2vYSJjtbL2SeQzi5+MIw1KLr0FASLYol G/vrwpzVF3BqrsdcLK568UU13GwvJzSwdxxAB+Lg8opk/PpsYwK0UkxpOUxusvkW be82cKT04i9zMo9rf+VZ1SQ7X/uOOrvm7Wfsud0/i7Six4h37UgkePTeVFnqrd90 SkoS3J/mO2CERi9LgfQFQL5KtQu5PQp1CG0/hknO5TSE3p1+5e7G4M3dg4yVjFID 8ZIWQ8hBo8qctTTwp6WQAWQb+s+F4zYbJVApmLgLeHUqFh+FAtk4sWEEgLbqZQs5 jiAolXER12K0Bw== -----END CERTIFICATE-----Generated at Sun Jan 25 21:10:34 2026 by rpki-client