This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft File: iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft (raw, json) Hash identifier: J2Yvi+JRdJOZF+cPIQKcYZcLAOZaJHZ8/DffG5QBjCw= Subject key identifier: 23:C9:FD:D8:A4:08:A7:CE:3F:13:2E:B6:34:A1:4F:4C:66:0B:6C:13 Authority key identifier: 88:4B:5E:16:49:0B:9A:68:D0:9F:BC:B4:55:74:35:00:00:14:9A:FA Certificate issuer: /CN=884b5e16490b9a68d09fbcb45574350000149afa Certificate serial: 019BF79A305AFE2E3678A5A5EA96BCEAC3F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft Manifest number: 17E7 Signing time: Mon 26 Jan 2026 00:00:35 +0000 Manifest this update: Mon 26 Jan 2026 00:00:35 +0000 Manifest next update: Tue 27 Jan 2026 00:00:35 +0000 Files and hashes: 1: CUg3R4VfAPebaROqI8F24g_2iSE.roa (hash: ZOTEoUWK8IMgR81ppaJG0uL6idgY1UslcGXEjT/F7a4=) 2: iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl (hash: Rq9PMlhZQdNKlLR6pdnZD8dNGVqtfuxB/nnx2mBXQz4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:30:5a:fe:2e:36:78:a5:a5:ea:96:bc:ea:c3:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884b5e16490b9a68d09fbcb45574350000149afa Validity Not Before: Jan 26 00:00:35 2026 GMT Not After : Jan 27 00:00:35 2026 GMT Subject: CN=23c9fdd8a408a7ce3f132eb634a14f4c660b6c13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:54:e1:21:61:10:71:7f:40:dc:10:5b:c8:e1: b1:70:56:21:a7:54:f3:0b:1a:05:f9:d1:2c:b8:a8: d1:a0:16:6d:bb:13:67:c0:03:42:56:18:71:a4:59: 5e:fc:d5:fe:dd:d0:18:ff:a0:33:a1:7b:34:1d:75: 33:e7:4a:77:6f:3b:d1:67:39:dd:6f:63:fc:ab:2e: a9:99:4b:d2:49:86:86:08:fc:a3:80:71:70:6e:95: 02:f5:21:d8:b5:21:55:e2:fd:aa:96:15:ff:90:69: 0e:3c:8a:aa:07:a8:51:6a:f0:76:67:bd:ec:03:02: 15:b4:b6:be:98:91:54:86:ba:c1:f7:c8:1d:a6:e1: 8d:6f:9a:c6:44:76:be:56:81:ac:78:25:19:b4:dc: b6:7c:2a:a2:79:4b:de:dc:b5:29:1c:0b:bf:b6:79: 54:ea:4e:df:01:8f:45:14:6c:88:49:c8:49:0c:45: 0a:78:05:c3:a1:fe:24:d1:ca:67:51:a4:d6:74:57: 8f:f4:06:a8:7b:02:95:3e:ab:26:b1:55:38:ee:95: a9:50:32:4c:7b:b1:31:fb:73:74:88:60:86:94:4b: bb:dc:48:35:fb:69:1c:04:33:69:b8:f4:c9:ed:3d: 50:f9:ac:89:8b:0f:3d:a2:48:f8:dc:ce:95:a7:4c: c3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C9:FD:D8:A4:08:A7:CE:3F:13:2E:B6:34:A1:4F:4C:66:0B:6C:13 X509v3 Authority Key Identifier: keyid:88:4B:5E:16:49:0B:9A:68:D0:9F:BC:B4:55:74:35:00:00:14:9A:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:a3:e8:31:cb:92:bb:e6:d0:8e:dd:74:9b:c8:5a:55:35:86: d0:97:06:99:de:fe:fa:e1:fa:31:19:25:1e:15:8b:5a:b3:9d: 44:27:a4:d8:27:f9:96:a6:6c:3b:b4:ab:3f:80:13:fd:05:e8: b2:95:b7:25:31:27:59:d3:2f:77:72:15:e1:e6:f5:97:42:ad: 88:7a:0d:be:4d:2e:8a:3c:20:55:a8:d9:78:90:14:30:4b:7c: 85:62:0b:43:80:21:f9:7a:28:94:8f:eb:5e:1d:ee:31:a7:3a: 71:b4:4e:cb:6f:aa:7b:f1:4a:66:dc:0b:6f:9f:b7:8f:62:eb: 74:1d:62:93:f6:5a:84:bf:81:2e:8a:37:e9:f1:e4:07:00:d5: fb:cb:99:8d:28:65:5f:a7:78:03:f2:ac:18:65:19:8c:25:af: 7a:7d:6a:3a:5f:ae:e0:3a:a1:d9:56:a8:9e:47:f0:04:8b:27: 5a:78:d6:74:08:7e:cd:87:2d:3e:d9:fd:10:57:64:6c:19:37: 50:6b:79:d6:3f:41:80:25:ee:7d:a2:85:39:04:c4:4a:0d:dc: 59:ac:78:f5:02:a3:f3:93:1b:20:95:71:3e:2c:0b:bb:1e:5b: 01:a0:45:5b:60:d5:45:d9:b0:07:34:44:3c:21:65:a7:3a:e0: aa:b3:87:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mjBa/i42eKWl6pa86sPxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NGI1ZTE2NDkwYjlhNjhkMDlmYmNiNDU1NzQzNTAwMDAx NDlhZmEwHhcNMjYwMTI2MDAwMDM1WhcNMjYwMTI3MDAwMDM1WjAzMTEwLwYDVQQD EygyM2M5ZmRkOGE0MDhhN2NlM2YxMzJlYjYzNGExNGY0YzY2MGI2YzEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1ThIWEQcX9A3BBbyOGxcFYhp1Tz CxoF+dEsuKjRoBZtuxNnwANCVhhxpFle/NX+3dAY/6AzoXs0HXUz50p3bzvRZznd b2P8qy6pmUvSSYaGCPyjgHFwbpUC9SHYtSFV4v2qlhX/kGkOPIqqB6hRavB2Z73s AwIVtLa+mJFUhrrB98gdpuGNb5rGRHa+VoGseCUZtNy2fCqieUve3LUpHAu/tnlU 6k7fAY9FFGyISchJDEUKeAXDof4k0cpnUaTWdFeP9AaoewKVPqsmsVU47pWpUDJM e7Ex+3N0iGCGlEu73Eg1+2kcBDNpuPTJ7T1Q+ayJiw89okj43M6Vp0zDdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCPJ/dikCKfOPxMutjShT0xmC2wTMB8GA1UdIwQY MBaAFIhLXhZJC5po0J+8tFV0NQAAFJr6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUV0ZUZra0xtbWpRbjd5MFZYUTFBQUFVbXZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8wN2I3ZjctYzQxZC00OTE3LWI5Nzgt ZWYyZDUzYjVhMzRkLzEvaUV0ZUZra0xtbWpRbjd5MFZYUTFBQUFVbXZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8wN2I3ZjctYzQxZC00OTE3LWI5NzgtZWYyZDUzYjVhMzRk LzEvaUV0ZUZra0xtbWpRbjd5MFZYUTFBQUFVbXZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXaPoMcuS u+bQjt10m8haVTWG0JcGmd7++uH6MRklHhWLWrOdRCek2Cf5lqZsO7SrP4AT/QXo spW3JTEnWdMvd3IV4eb1l0KtiHoNvk0uijwgVajZeJAUMEt8hWILQ4Ah+XoolI/r Xh3uMac6cbROy2+qe/FKZtwLb5+3j2LrdB1ik/ZahL+BLoo36fHkBwDV+8uZjShl X6d4A/KsGGUZjCWven1qOl+u4Dqh2VaonkfwBIsnWnjWdAh+zYctPtn9EFdkbBk3 UGt51j9BgCXufaKFOQTESg3cWax49QKj85MbIJVxPiwLux5bAaBFW2DVRdmwBzRE PCFlpzrgqrOH5A== -----END CERTIFICATE-----Generated at Mon Jan 26 07:49:43 2026 by rpki-client