This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft File: r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft (raw, json) Hash identifier: ZFzjUfISPVtitzINnyv+LT2lB3Mu8E4o+gHGknrYiSM= Subject key identifier: DA:48:30:68:45:14:49:C8:3E:B3:E1:2C:30:B0:83:6C:BD:D9:8C:E2 Authority key identifier: AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1 Certificate issuer: /CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1 Certificate serial: 019BEB28431480BDA1516A17549EEF7F42D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft Manifest number: 17E3 Signing time: Fri 23 Jan 2026 14:00:42 +0000 Manifest this update: Fri 23 Jan 2026 14:00:42 +0000 Manifest next update: Sat 24 Jan 2026 14:00:42 +0000 Files and hashes: 1: ZnpQKujkco2TpKWWsMQlGKeCUk4.roa (hash: nReeCNRcHVWJZjQmjL+vKj9L8WAcWx5VrQARrGlJtBU=) 2: r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl (hash: TkkyYTffQO7loxmNGyHybiqeEFNo6cKhmSqFaer2Jts=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 14:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:eb:28:43:14:80:bd:a1:51:6a:17:54:9e:ef:7f:42:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1 Validity Not Before: Jan 23 14:00:42 2026 GMT Not After : Jan 24 14:00:42 2026 GMT Subject: CN=da483068451449c83eb3e12c30b0836cbdd98ce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:93:11:78:c6:72:79:1b:d6:43:0e:6a:77:69: b6:2a:b6:76:18:b9:7c:91:e2:46:22:10:43:27:f8: 3a:fb:3e:14:04:cf:91:96:a3:fa:b0:05:12:b5:14: e3:ba:80:14:7f:3b:bd:c6:f1:d4:bf:ff:5b:68:e8: 13:ed:71:f6:e8:12:e0:ee:10:e6:6c:b9:b6:e2:47: 04:87:b6:f4:3c:67:9f:ab:3a:08:33:97:e3:f5:52: 4a:ab:18:68:54:7e:d2:03:2f:2e:5b:c6:e2:7e:cc: 35:98:60:d5:01:a9:65:2d:b7:f7:3c:19:cb:20:e9: 2a:7a:2f:ad:cf:ab:98:1c:2f:7b:8c:66:4d:61:dc: 8a:48:82:b0:f6:50:ca:fa:39:07:11:2a:1a:09:8f: bb:7e:43:27:70:9d:a4:d7:7b:b9:d8:5c:6a:e5:11: 18:d3:be:01:cd:92:26:17:75:b5:cc:97:f7:0f:c5: 14:1d:9e:e0:86:9d:7c:0f:05:fd:e8:4f:da:50:61: 3c:5e:99:f8:a8:90:c3:43:d6:77:93:a0:46:3f:77: 1e:ce:24:55:47:f2:81:30:d9:4f:7d:b7:49:70:8f: a8:69:62:49:5e:90:7b:14:e6:fd:f7:92:94:9a:e7: 78:7a:3b:0a:0f:51:2f:de:81:92:9e:09:84:75:ba: e1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:48:30:68:45:14:49:C8:3E:B3:E1:2C:30:B0:83:6C:BD:D9:8C:E2 X509v3 Authority Key Identifier: keyid:AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:8a:b4:67:45:4a:02:93:dc:4f:0a:8f:70:db:f6:21:9a:3e: 15:bf:b1:e9:d5:97:4c:c3:e2:54:fb:32:0b:92:37:24:29:15: a8:af:98:77:ed:fa:10:ee:4f:9e:16:74:b1:5c:6a:a0:5d:ae: 87:3c:f7:9d:c1:0d:c1:1a:07:ca:d2:42:f9:56:4b:3c:2a:0f: 16:b9:8a:e1:49:ba:71:ad:29:19:e5:40:b7:7d:62:29:34:39: 06:28:b5:9f:f0:2f:96:fe:e4:2d:28:28:1e:c3:0e:6e:da:d5: 38:5e:de:6e:82:a9:63:07:24:d2:85:15:c2:40:ab:75:d1:cf: af:0d:d7:9e:57:e7:30:6c:69:20:d3:29:77:fa:14:07:85:36: 04:0c:c5:38:f5:52:51:79:c3:1d:39:e1:eb:d0:63:6c:ce:3b: d9:53:89:65:15:97:4c:43:d2:e9:74:12:4d:df:40:b4:b3:12: c9:16:82:92:51:1e:f7:a7:b1:3f:cd:90:84:39:6a:2c:1b:4e: c0:45:89:29:73:be:b0:7b:c8:61:6b:89:75:6f:b1:a5:e1:46: e2:66:28:f2:ce:fd:d3:81:ca:ed:fb:50:04:1e:d8:ef:f8:8e: fd:24:b8:46:9b:97:2b:d5:1e:3c:fb:75:db:87:96:e3:88:f8: f2:56:b6:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvrKEMUgL2hUWoXVJ7vf0LYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmYjA0YjEzNTVlNWQ2ZWQyMjIzMjQ5NjMwYWM4YjlmNzQz OWFlZTEwHhcNMjYwMTIzMTQwMDQyWhcNMjYwMTI0MTQwMDQyWjAzMTEwLwYDVQQD EyhkYTQ4MzA2ODQ1MTQ0OWM4M2ViM2UxMmMzMGIwODM2Y2JkZDk4Y2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpMReMZyeRvWQw5qd2m2KrZ2GLl8 keJGIhBDJ/g6+z4UBM+RlqP6sAUStRTjuoAUfzu9xvHUv/9baOgT7XH26BLg7hDm bLm24kcEh7b0PGefqzoIM5fj9VJKqxhoVH7SAy8uW8bifsw1mGDVAallLbf3PBnL IOkqei+tz6uYHC97jGZNYdyKSIKw9lDK+jkHESoaCY+7fkMncJ2k13u52Fxq5REY 074BzZImF3W1zJf3D8UUHZ7ghp18DwX96E/aUGE8Xpn4qJDDQ9Z3k6BGP3ceziRV R/KBMNlPfbdJcI+oaWJJXpB7FOb995KUmud4ejsKD1Ev3oGSngmEdbrhIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNpIMGhFFEnIPrPhLDCwg2y92YziMB8GA1UdIwQY MBaAFK+wSxNV5dbtIiMkljCsi590Oa7hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjdCTEUxWGwxdTBpSXlTV01LeUxuM1E1cnVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9lMmI0OTQtYzBiMi00M2Y0LWJjNGQt YTZmNGYwZjRmNzJkLzEvcjdCTEUxWGwxdTBpSXlTV01LeUxuM1E1cnVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9lMmI0OTQtYzBiMi00M2Y0LWJjNGQtYTZmNGYwZjRmNzJk LzEvcjdCTEUxWGwxdTBpSXlTV01LeUxuM1E1cnVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAooq0Z0VK ApPcTwqPcNv2IZo+Fb+x6dWXTMPiVPsyC5I3JCkVqK+Yd+36EO5PnhZ0sVxqoF2u hzz3ncENwRoHytJC+VZLPCoPFrmK4Um6ca0pGeVAt31iKTQ5Bii1n/Avlv7kLSgo HsMObtrVOF7eboKpYwck0oUVwkCrddHPrw3XnlfnMGxpINMpd/oUB4U2BAzFOPVS UXnDHTnh69BjbM472VOJZRWXTEPS6XQSTd9AtLMSyRaCklEe96exP82QhDlqLBtO wEWJKXO+sHvIYWuJdW+xpeFG4mYo8s7904HK7ftQBB7Y7/iO/SS4RpuXK9UePPt1 24eW44j48la2gA== -----END CERTIFICATE-----Generated at Fri Jan 23 23:04:41 2026 by rpki-client