This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft File: fi7aaVKwPoukWZe-YV16vuF4T4M.mft (raw, json) Hash identifier: ES7+3Evx+peBpcgjCEyGZhP4E5Bl4Zo4qpSopBXAqzg= Subject key identifier: 99:F2:7D:79:4E:9B:11:EA:BB:DB:02:A2:FF:1F:BD:6D:25:69:7E:72 Authority key identifier: 7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83 Certificate issuer: /CN=7e2eda6952b03e8ba45997be615d7abee1784f83 Certificate serial: 019BFBAE24F3B9B9678BFA288963CC00A32C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft Manifest number: 0C12 Signing time: Mon 26 Jan 2026 19:00:52 +0000 Manifest this update: Mon 26 Jan 2026 19:00:52 +0000 Manifest next update: Tue 27 Jan 2026 19:00:52 +0000 Files and hashes: 1: 08gQk2AeldcK_y6tYivNi31VDhw.roa (hash: iDSr2+dL188PsGjLi4V4pKrhdyzfHy95/dG6MIkWF8U=) 2: fi7aaVKwPoukWZe-YV16vuF4T4M.crl (hash: JbCPrRvpT0ToxitYIqDErcDS4kijKZSNuwdCJg025Zg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.crl rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 19:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:ae:24:f3:b9:b9:67:8b:fa:28:89:63:cc:00:a3:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e2eda6952b03e8ba45997be615d7abee1784f83 Validity Not Before: Jan 26 19:00:52 2026 GMT Not After : Jan 27 19:00:52 2026 GMT Subject: CN=99f27d794e9b11eabbdb02a2ff1fbd6d25697e72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:47:ad:80:ad:2f:9e:ff:44:a1:c0:11:78:72: 6e:50:59:6d:18:70:27:95:1b:7d:01:27:4b:0e:ca: 6c:2a:ec:a3:83:95:83:b5:d3:9a:e5:75:30:e0:45: 6c:0d:42:62:13:43:be:00:46:de:91:c4:ed:03:9a: 40:97:d2:01:8d:e7:00:43:e4:e7:d6:d8:c1:77:39: 8a:19:53:df:3d:34:65:16:a9:88:46:a0:a7:a5:e1: e5:7b:ea:4b:e6:8b:8c:1b:eb:90:64:e0:b3:5a:99: 9f:2c:31:26:3b:23:52:ec:33:88:e6:06:d1:db:1c: 48:e8:b2:df:b7:27:7e:2d:c1:2b:6f:31:d6:5a:77: e0:d7:84:95:38:8c:29:39:b5:eb:19:04:30:9b:89: 8a:4f:26:6e:a3:c3:c1:43:5c:79:c8:92:b0:39:3b: 56:44:7e:38:48:65:a2:2a:56:cd:25:87:6c:58:da: a4:5d:ca:0d:53:04:10:e1:95:f0:09:da:84:62:c4: d1:8a:63:39:b2:5d:1c:5d:32:0e:73:87:38:04:5c: 32:4a:1b:fa:67:6d:35:ef:c6:26:a6:83:8e:58:67: 5c:78:24:83:52:87:56:09:63:de:b7:63:a5:fd:6c: c9:75:5e:1a:fe:6f:35:91:85:ff:47:86:53:58:07: 74:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:F2:7D:79:4E:9B:11:EA:BB:DB:02:A2:FF:1F:BD:6D:25:69:7E:72 X509v3 Authority Key Identifier: keyid:7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:a1:f6:a1:34:bf:3a:03:b0:e1:f6:1e:10:84:22:84:50:7e: bb:d5:21:d4:67:8b:7d:12:a1:6e:30:54:28:08:91:10:da:56: 8a:dc:74:7f:47:f7:d6:14:1d:f7:57:55:e4:b1:5b:66:d6:2f: e2:ec:80:de:11:00:10:81:02:7f:48:8f:00:ef:0c:07:db:12: 82:6d:b8:ba:6a:9e:99:34:05:c9:f3:b8:a1:ff:48:71:e1:7a: 58:70:7c:53:9d:cb:9e:8e:4a:55:c8:5c:3b:82:4d:9e:59:93: 8f:bd:15:87:dc:bd:7a:35:1c:55:cd:df:a4:a6:b7:aa:7c:b9: 54:0c:a7:3e:d6:1c:f0:bb:ca:a2:f2:61:d7:84:08:bd:b4:c7: e2:f1:6d:7a:bf:37:3c:1f:27:d1:ff:24:de:da:8e:1b:7d:f7: 02:99:a8:be:88:94:2f:7c:0c:dc:3a:5d:8c:7a:5e:8c:81:e4: 05:46:ad:10:bc:19:49:52:05:52:ae:ab:42:f8:52:bc:c6:b7: df:88:ba:3d:46:7a:29:5d:b3:8c:d2:29:cc:fa:72:44:96:33: f8:98:98:80:e0:9f:25:59:e3:3e:d5:5e:5c:5b:fd:30:cc:57: 98:73:74:e4:0a:4b:b2:47:bd:4d:ef:89:7a:73:f6:cc:96:cb: 93:3a:03:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7riTzublni/ooiWPMAKMsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMmVkYTY5NTJiMDNlOGJhNDU5OTdiZTYxNWQ3YWJlZTE3 ODRmODMwHhcNMjYwMTI2MTkwMDUyWhcNMjYwMTI3MTkwMDUyWjAzMTEwLwYDVQQD Eyg5OWYyN2Q3OTRlOWIxMWVhYmJkYjAyYTJmZjFmYmQ2ZDI1Njk3ZTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyketgK0vnv9EocAReHJuUFltGHAn lRt9ASdLDspsKuyjg5WDtdOa5XUw4EVsDUJiE0O+AEbekcTtA5pAl9IBjecAQ+Tn 1tjBdzmKGVPfPTRlFqmIRqCnpeHle+pL5ouMG+uQZOCzWpmfLDEmOyNS7DOI5gbR 2xxI6LLftyd+LcErbzHWWnfg14SVOIwpObXrGQQwm4mKTyZuo8PBQ1x5yJKwOTtW RH44SGWiKlbNJYdsWNqkXcoNUwQQ4ZXwCdqEYsTRimM5sl0cXTIOc4c4BFwyShv6 Z20178YmpoOOWGdceCSDUodWCWPet2Ol/WzJdV4a/m81kYX/R4ZTWAd0+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJnyfXlOmxHqu9sCov8fvW0laX5yMB8GA1UdIwQY MBaAFH4u2mlSsD6LpFmXvmFder7heE+DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmk3YWFWS3dQb3VrV1plLVlWMTZ2dUY0VDRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8zODA0MDAtZGMyZS00OTRhLTg5MWEt MmYyMzAwYjZlM2Q5LzEvZmk3YWFWS3dQb3VrV1plLVlWMTZ2dUY0VDRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8zODA0MDAtZGMyZS00OTRhLTg5MWEtMmYyMzAwYjZlM2Q5 LzEvZmk3YWFWS3dQb3VrV1plLVlWMTZ2dUY0VDRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARKH2oTS/ OgOw4fYeEIQihFB+u9Uh1GeLfRKhbjBUKAiRENpWitx0f0f31hQd91dV5LFbZtYv 4uyA3hEAEIECf0iPAO8MB9sSgm24umqemTQFyfO4of9IceF6WHB8U53Lno5KVchc O4JNnlmTj70Vh9y9ejUcVc3fpKa3qny5VAynPtYc8LvKovJh14QIvbTH4vFter83 PB8n0f8k3tqOG333ApmovoiUL3wM3DpdjHpejIHkBUatELwZSVIFUq6rQvhSvMa3 34i6PUZ6KV2zjNIpzPpyRJYz+JiYgOCfJVnjPtVeXFv9MMxXmHN05ApLske9Te+J enP2zJbLkzoDkQ== -----END CERTIFICATE-----Generated at Tue Jan 27 03:10:54 2026 by rpki-client