This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft File: 7E0DlAhPfkBiYJco9NTVewZFWlY.mft (raw, json) Hash identifier: 3KWHHcbgCt4Y4MsKZTrTd3e9StNJbLFYtTK2JH+VYuo= Subject key identifier: 59:1C:86:C5:4D:8B:09:9B:C2:20:33:F2:12:AB:AB:22:C3:88:D5:08 Authority key identifier: EC:4D:03:94:08:4F:7E:40:62:60:97:28:F4:D4:D5:7B:06:45:5A:56 Certificate issuer: /CN=ec4d0394084f7e4062609728f4d4d57b06455a56 Certificate serial: 019BF462CC1E882340A0AFA3375B2085B492 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft Manifest number: 17E7 Signing time: Sun 25 Jan 2026 09:01:13 +0000 Manifest this update: Sun 25 Jan 2026 09:01:13 +0000 Manifest next update: Mon 26 Jan 2026 09:01:13 +0000 Files and hashes: 1: 7E0DlAhPfkBiYJco9NTVewZFWlY.crl (hash: /qxwWCy8fQOQ9lUXNxnSjv+xQcOYap1XgsXVNVX6bgM=) 2: NE1cSr4PhSWQqxI3RwadUkiTzr4.roa (hash: gTOFfm6+4dqvFvqDPuHaiv7nUh/TeTbmvELpqBUfVtQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:cc:1e:88:23:40:a0:af:a3:37:5b:20:85:b4:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec4d0394084f7e4062609728f4d4d57b06455a56 Validity Not Before: Jan 25 09:01:13 2026 GMT Not After : Jan 26 09:01:13 2026 GMT Subject: CN=591c86c54d8b099bc22033f212abab22c388d508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:5c:87:20:d9:7b:ff:e0:99:a3:e9:94:ac:f5: a0:86:c3:19:15:92:1f:0a:05:ed:27:69:0f:26:d7: 5b:cd:75:dd:1e:00:17:dd:a9:b7:e1:73:fe:b4:37: 66:92:bd:9f:55:7b:37:f5:fd:aa:d7:fc:c5:4c:62: f2:1b:d9:09:0d:c5:40:f5:b8:68:49:42:c6:48:f3: e0:58:ba:84:2a:fc:a2:46:06:8f:ff:14:df:96:72: ed:ef:28:d0:91:83:60:fa:ae:57:f2:ed:7c:67:45: 59:77:5a:af:8c:30:38:13:00:59:9b:43:4f:21:21: 51:89:e1:02:2c:d5:0c:7f:5d:cb:21:ae:07:77:54: 31:d0:16:a3:72:74:75:40:e2:d0:1c:ce:3b:bc:6e: 85:b2:d6:ff:75:32:38:79:4b:e2:6e:70:b7:13:c4: ed:a3:94:4f:a5:0b:8d:d3:a0:e7:79:c2:19:2c:07: 10:46:07:3f:c7:4a:63:7b:97:5b:78:07:45:33:a0: f8:96:47:73:7e:82:a7:8e:4e:2d:62:ba:cc:cc:3c: 66:7d:2c:46:19:4b:a3:f4:24:fc:04:ee:98:23:23: 15:0c:78:d5:45:27:5d:8c:c7:d2:1c:08:d2:01:bd: c2:8c:88:ca:26:8b:8b:2f:0a:9b:19:4e:af:5b:75: 92:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:1C:86:C5:4D:8B:09:9B:C2:20:33:F2:12:AB:AB:22:C3:88:D5:08 X509v3 Authority Key Identifier: keyid:EC:4D:03:94:08:4F:7E:40:62:60:97:28:F4:D4:D5:7B:06:45:5A:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:9f:2e:f6:86:c9:05:56:db:b7:18:55:95:32:e0:2c:61:ea: 04:a3:56:e9:f7:39:d9:fa:fe:93:a6:d8:ac:b7:6a:dd:6c:aa: f4:28:38:ee:c3:67:cd:bc:9c:a3:61:53:6c:37:38:23:64:cb: fa:d2:de:73:26:5a:76:26:60:34:92:ae:72:45:57:2c:36:f8: 07:d0:e2:2a:1c:02:18:70:92:bf:4e:cc:6d:88:55:19:f4:ac: bf:dd:9a:b7:86:56:7c:42:9a:e1:07:6c:67:ba:2b:13:f7:84: 42:ee:d7:8a:50:ee:d7:9f:74:35:e3:a2:b7:32:02:20:3d:7a: 2f:7d:ed:05:d5:81:63:e6:e9:dc:7e:85:ed:09:48:34:3f:93: d9:a6:ad:8e:6c:57:29:de:85:7c:45:6b:6e:c5:7a:9f:d5:14: 4f:64:f9:7c:c0:f4:47:d6:4c:64:dd:08:19:c5:86:d9:44:29: f6:b5:fb:80:1e:b1:9f:8f:1f:93:67:99:42:4c:a3:2c:9a:2f: eb:8f:da:dc:a1:38:d2:af:8a:6b:0d:5e:a1:74:3a:1b:c5:2b: fe:70:34:df:b3:96:bb:af:c1:26:aa:ae:2d:be:e0:c1:f0:64: cb:43:08:04:67:e0:58:c9:42:4d:1a:e8:2e:e8:3f:3b:56:cc: 26:ba:6a:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YsweiCNAoK+jN1sghbSSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNGQwMzk0MDg0ZjdlNDA2MjYwOTcyOGY0ZDRkNTdiMDY0 NTVhNTYwHhcNMjYwMTI1MDkwMTEzWhcNMjYwMTI2MDkwMTEzWjAzMTEwLwYDVQQD Eyg1OTFjODZjNTRkOGIwOTliYzIyMDMzZjIxMmFiYWIyMmMzODhkNTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6lyHINl7/+CZo+mUrPWghsMZFZIf CgXtJ2kPJtdbzXXdHgAX3am34XP+tDdmkr2fVXs39f2q1/zFTGLyG9kJDcVA9bho SULGSPPgWLqEKvyiRgaP/xTflnLt7yjQkYNg+q5X8u18Z0VZd1qvjDA4EwBZm0NP ISFRieECLNUMf13LIa4Hd1Qx0BajcnR1QOLQHM47vG6Fstb/dTI4eUvibnC3E8Tt o5RPpQuN06DnecIZLAcQRgc/x0pje5dbeAdFM6D4lkdzfoKnjk4tYrrMzDxmfSxG GUuj9CT8BO6YIyMVDHjVRSddjMfSHAjSAb3CjIjKJouLLwqbGU6vW3WS2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFkchsVNiwmbwiAz8hKrqyLDiNUIMB8GA1UdIwQY MBaAFOxNA5QIT35AYmCXKPTU1XsGRVpWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0UwRGxBaFBma0JpWUpjbzlOVFZld1pGV2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8yMzY2MTAtMjQ0OC00MjNiLTliY2Et MjY4Y2VkODQzNWI1LzEvN0UwRGxBaFBma0JpWUpjbzlOVFZld1pGV2xZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8yMzY2MTAtMjQ0OC00MjNiLTliY2EtMjY4Y2VkODQzNWI1 LzEvN0UwRGxBaFBma0JpWUpjbzlOVFZld1pGV2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS58u9obJ BVbbtxhVlTLgLGHqBKNW6fc52fr+k6bYrLdq3Wyq9Cg47sNnzbyco2FTbDc4I2TL +tLecyZadiZgNJKuckVXLDb4B9DiKhwCGHCSv07MbYhVGfSsv92at4ZWfEKa4Qds Z7orE/eEQu7XilDu1590NeOitzICID16L33tBdWBY+bp3H6F7QlIND+T2aatjmxX Kd6FfEVrbsV6n9UUT2T5fMD0R9ZMZN0IGcWG2UQp9rX7gB6xn48fk2eZQkyjLJov 64/a3KE40q+Kaw1eoXQ6G8Ur/nA037OWu6/BJqquLb7gwfBky0MIBGfgWMlCTRro Lug/O1bMJrpqBw== -----END CERTIFICATE-----Generated at Sun Jan 25 20:13:21 2026 by rpki-client