This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/kI7SZXsDRI2ii8JIwvfsSXPabjs.mft File: kI7SZXsDRI2ii8JIwvfsSXPabjs.mft (raw, json) Hash identifier: bIpVRQIOIPhFfK6XqlFZtLwsat2yUoMJsFbg+taITyY= Subject key identifier: B6:E4:53:9E:8A:EF:24:FD:1F:3F:A8:71:F4:D9:7F:BD:45:4C:C8:27 Authority key identifier: 90:8E:D2:65:7B:03:44:8D:A2:8B:C2:48:C2:F7:EC:49:73:DA:6E:3B Certificate issuer: /CN=908ed2657b03448da28bc248c2f7ec4973da6e3b Certificate serial: 019BF506FAC3448A947C014CA6966325FAE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kI7SZXsDRI2ii8JIwvfsSXPabjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/kI7SZXsDRI2ii8JIwvfsSXPabjs.mft Manifest number: EE Signing time: Sun 25 Jan 2026 12:00:33 +0000 Manifest this update: Sun 25 Jan 2026 12:00:33 +0000 Manifest next update: Mon 26 Jan 2026 12:00:33 +0000 Files and hashes: 1: EQxEyPQDuCTR078fV9h6v3Km5Cw.roa (hash: Lt5RUH9y8xxH2z3qvvXHmC8kiqcqvY/49BCxeZKNAOc=) 2: kI7SZXsDRI2ii8JIwvfsSXPabjs.crl (hash: CZlSuOxt2Aw4YEtjBd1ssnPMWwLkMUOzFG8zr1GlIE8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/kI7SZXsDRI2ii8JIwvfsSXPabjs.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/kI7SZXsDRI2ii8JIwvfsSXPabjs.mft rsync://rpki.ripe.net/repository/DEFAULT/kI7SZXsDRI2ii8JIwvfsSXPabjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:06:fa:c3:44:8a:94:7c:01:4c:a6:96:63:25:fa:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908ed2657b03448da28bc248c2f7ec4973da6e3b Validity Not Before: Jan 25 12:00:33 2026 GMT Not After : Jan 26 12:00:33 2026 GMT Subject: CN=b6e4539e8aef24fd1f3fa871f4d97fbd454cc827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4d:41:c9:00:4d:ea:13:57:8c:46:8a:c1:94: 54:49:8b:6f:36:1f:e6:1e:f2:bd:35:78:3a:0b:ef: 02:6e:64:c3:e5:02:cc:ac:e5:4c:21:b5:9c:7d:74: 5e:24:6a:1a:93:42:d9:98:70:00:83:92:07:75:0a: a9:f4:c8:ec:2d:52:46:e2:7c:8f:87:2c:7e:80:de: 11:51:f5:1c:45:39:e2:36:6b:3a:c0:59:0d:69:e7: c4:1c:fa:b2:f8:c5:20:8f:82:9c:00:02:ca:45:ce: ad:cd:62:19:26:9d:3f:87:90:b7:90:5b:ff:aa:dd: 97:5e:a9:3c:c3:41:1a:fc:5f:60:a8:e6:9b:0d:7d: ec:f6:5c:cd:92:a0:9a:19:f4:91:90:2f:8f:d5:b4: f1:c5:3b:53:6a:47:00:28:fd:00:36:e8:ad:ee:13: c6:07:29:bc:9d:80:ba:7d:53:ad:5c:01:5c:b9:54: e0:c2:c6:0a:2d:1a:f6:b4:14:72:70:87:6d:52:0b: a2:0d:0f:81:12:84:de:90:60:9f:c5:f6:22:26:5f: 78:83:34:46:ce:ec:5c:30:94:ef:f9:72:3f:03:f6: 30:12:dc:40:b2:fc:a2:99:e2:e9:29:8e:2e:46:62: 91:76:57:07:07:b2:58:3b:42:3e:14:23:d3:bb:da: eb:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:E4:53:9E:8A:EF:24:FD:1F:3F:A8:71:F4:D9:7F:BD:45:4C:C8:27 X509v3 Authority Key Identifier: keyid:90:8E:D2:65:7B:03:44:8D:A2:8B:C2:48:C2:F7:EC:49:73:DA:6E:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kI7SZXsDRI2ii8JIwvfsSXPabjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/kI7SZXsDRI2ii8JIwvfsSXPabjs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/kI7SZXsDRI2ii8JIwvfsSXPabjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:d6:da:30:32:36:f4:d3:86:3d:77:2f:4a:9e:4c:6b:52:d1: 7d:59:fb:79:64:44:79:f0:68:ba:18:a3:91:8a:82:9c:72:5f: 8f:fe:ed:a5:a2:dc:65:7f:ba:a1:7f:06:64:01:74:0d:33:98: 35:49:91:ae:4d:31:36:fc:2c:cc:70:80:2a:33:45:99:72:1a: 48:85:c6:3a:88:26:89:84:4c:46:9d:21:cf:a6:4c:6b:42:ce: 70:da:0b:82:9c:a8:b8:9d:66:60:ac:c4:a9:97:4d:02:e5:c2: 64:cd:8d:3f:ea:fb:40:97:99:69:c9:c2:9a:70:83:91:31:ea: fc:98:71:e7:b9:28:d5:8e:03:8b:86:19:11:d9:e1:49:22:4a: 2c:76:b6:98:bc:07:91:24:d3:13:4e:39:43:a8:2c:bf:bb:d3: 4d:54:47:b8:6e:ad:3c:78:ba:cc:b0:95:5f:cd:76:f7:88:6b: 0d:c6:53:92:c2:30:bb:3b:17:71:62:3e:8a:52:68:a8:d7:4f: e1:c3:04:48:cc:3b:ad:73:54:4a:c5:6f:74:cb:8f:aa:78:ee: 93:72:74:7c:33:bc:e2:ef:76:47:23:5b:0c:bf:e5:2e:9a:df: 4a:f4:6a:28:66:30:ce:d6:25:94:26:e2:64:c2:f4:c1:f9:10: 3d:1c:17:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1BvrDRIqUfAFMppZjJfrmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwOGVkMjY1N2IwMzQ0OGRhMjhiYzI0OGMyZjdlYzQ5NzNk YTZlM2IwHhcNMjYwMTI1MTIwMDMzWhcNMjYwMTI2MTIwMDMzWjAzMTEwLwYDVQQD EyhiNmU0NTM5ZThhZWYyNGZkMWYzZmE4NzFmNGQ5N2ZiZDQ1NGNjODI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv01ByQBN6hNXjEaKwZRUSYtvNh/m HvK9NXg6C+8CbmTD5QLMrOVMIbWcfXReJGoak0LZmHAAg5IHdQqp9MjsLVJG4nyP hyx+gN4RUfUcRTniNms6wFkNaefEHPqy+MUgj4KcAALKRc6tzWIZJp0/h5C3kFv/ qt2XXqk8w0Ea/F9gqOabDX3s9lzNkqCaGfSRkC+P1bTxxTtTakcAKP0ANuit7hPG Bym8nYC6fVOtXAFcuVTgwsYKLRr2tBRycIdtUguiDQ+BEoTekGCfxfYiJl94gzRG zuxcMJTv+XI/A/YwEtxAsvyimeLpKY4uRmKRdlcHB7JYO0I+FCPTu9rrKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLbkU56K7yT9Hz+ocfTZf71FTMgnMB8GA1UdIwQY MBaAFJCO0mV7A0SNoovCSML37Elz2m47MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0k3U1pYc0RSSTJpaThKSXd2ZnNTWFBhYmpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9kMTk1NDktMzFiOC00YTFlLWI2ZDUt NmExN2UyMWNhNmM3LzEva0k3U1pYc0RSSTJpaThKSXd2ZnNTWFBhYmpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9kMTk1NDktMzFiOC00YTFlLWI2ZDUtNmExN2UyMWNhNmM3 LzEva0k3U1pYc0RSSTJpaThKSXd2ZnNTWFBhYmpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK9baMDI2 9NOGPXcvSp5Ma1LRfVn7eWREefBouhijkYqCnHJfj/7tpaLcZX+6oX8GZAF0DTOY NUmRrk0xNvwszHCAKjNFmXIaSIXGOogmiYRMRp0hz6ZMa0LOcNoLgpyouJ1mYKzE qZdNAuXCZM2NP+r7QJeZacnCmnCDkTHq/Jhx57ko1Y4Di4YZEdnhSSJKLHa2mLwH kSTTE045Q6gsv7vTTVRHuG6tPHi6zLCVX81294hrDcZTksIwuzsXcWI+ilJoqNdP 4cMESMw7rXNUSsVvdMuPqnjuk3J0fDO84u92RyNbDL/lLprfSvRqKGYwztYllCbi ZML0wfkQPRwX3g== -----END CERTIFICATE-----Generated at Sun Jan 25 22:01:31 2026 by rpki-client