This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft File: 17tVI2VJnAeu00tohPWy6TgOvuE.mft (raw, json) Hash identifier: R79Ix3k9UAXupHmwvEetoxnO4H87A94rD1dUBIScbUE= Subject key identifier: 3D:DD:FF:BF:10:F3:41:4B:6C:41:5E:74:50:7D:EE:3E:CF:38:D8:E4 Authority key identifier: D7:BB:55:23:65:49:9C:07:AE:D3:4B:68:84:F5:B2:E9:38:0E:BE:E1 Certificate issuer: /CN=d7bb552365499c07aed34b6884f5b2e9380ebee1 Certificate serial: 019C0555DBC2CC39CDF5EA314972C5B0F841 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft Manifest number: 0EDA Signing time: Wed 28 Jan 2026 16:00:38 +0000 Manifest this update: Wed 28 Jan 2026 16:00:38 +0000 Manifest next update: Thu 29 Jan 2026 16:00:38 +0000 Files and hashes: 1: 17tVI2VJnAeu00tohPWy6TgOvuE.crl (hash: btmig9gI955/qNrFUrO8luL7SCWi0+6h+/YQoSXb4kU=) 2: 7G0NCEWyAUUTld6dbhxspAdwKu8.roa (hash: x0W+qVErOolxMsYnIkgUBz4sjWMNnyVZEzok5cCvMGQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.crl rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:05:55:db:c2:cc:39:cd:f5:ea:31:49:72:c5:b0:f8:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7bb552365499c07aed34b6884f5b2e9380ebee1 Validity Not Before: Jan 28 16:00:38 2026 GMT Not After : Jan 29 16:00:38 2026 GMT Subject: CN=3dddffbf10f3414b6c415e74507dee3ecf38d8e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e1:2f:12:e9:40:2d:78:6e:5b:26:b8:8c:5c: a4:b3:48:63:f4:f7:48:b4:df:72:ea:7b:61:76:44: 34:c4:a9:c0:80:eb:e8:95:81:6c:b4:c4:26:82:4b: bc:05:b2:7e:cb:25:53:d2:3b:9a:21:16:a3:f2:d3: 80:14:22:c0:1b:8b:47:13:d9:0e:6d:b6:aa:63:07: 41:29:f5:60:44:0f:50:56:e6:14:f4:36:69:8d:aa: 51:6e:4f:58:53:0f:bd:c0:dd:e4:62:26:46:2a:6b: c7:f6:5c:2b:d5:32:27:46:9f:1b:a4:4c:73:f6:58: 8c:a1:32:b2:2a:e6:6f:3c:76:e9:82:7c:10:89:c5: aa:b7:5b:1b:3c:c8:0c:92:a9:46:f4:5a:e5:5c:08: 14:23:06:91:8b:f5:2d:bb:2e:8e:3c:db:42:3d:18: 3c:a0:90:9b:7f:6b:de:d2:1f:07:dd:53:83:c0:ae: d6:96:92:f7:de:67:9f:e0:04:52:17:d7:73:9d:dd: 21:cf:ef:2c:aa:f2:7c:79:b1:5f:aa:24:d2:09:84: c5:4d:e1:d7:dc:63:d4:94:ce:17:e6:55:1b:9e:7c: 38:36:14:11:93:eb:c9:56:30:9d:91:6d:14:b4:d7: 8e:4e:32:d9:62:f4:16:9a:e1:56:3a:c4:3e:70:82: 7c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:DD:FF:BF:10:F3:41:4B:6C:41:5E:74:50:7D:EE:3E:CF:38:D8:E4 X509v3 Authority Key Identifier: keyid:D7:BB:55:23:65:49:9C:07:AE:D3:4B:68:84:F5:B2:E9:38:0E:BE:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:6c:97:dd:39:ee:b2:59:ba:f0:7a:9f:f7:11:5c:c0:91:6a: 61:d7:b7:05:89:62:c1:80:f7:2d:a8:56:df:66:14:72:e9:a5: 49:fc:ad:94:20:08:dc:4d:1e:61:04:5d:ae:f2:27:e4:35:60: 9f:5c:7d:42:04:81:7f:1a:89:8b:10:07:ce:fe:60:61:42:30: 91:f8:70:fc:b0:15:c9:e2:46:c1:60:90:e8:39:70:c9:72:c3: 0e:1d:8a:a0:e9:92:10:1c:e6:be:2c:41:1a:44:28:f6:1a:d9: cc:81:1a:8e:5a:4e:09:6e:9f:2d:7a:c3:bc:b4:02:aa:41:a3: 69:0a:7c:78:0d:ee:83:7b:33:57:cc:c3:30:51:da:52:88:fb: 33:8c:d8:10:6f:da:d8:b4:31:dc:cd:51:cc:d4:bb:ba:6a:37: f7:e8:50:96:12:90:e6:22:22:ac:e6:c1:79:9d:1c:b9:97:5e: 42:ed:8d:e0:a0:81:53:a8:b9:24:15:b6:87:91:ed:08:ac:46: 91:c2:65:23:18:43:40:6f:f1:18:0b:0a:2b:8e:32:e9:ad:45: 31:59:41:29:ad:49:ea:2c:b5:d6:45:5c:81:56:d2:90:43:bb: 98:8c:01:de:1d:a9:3c:d0:e3:98:a2:0b:bb:36:3f:0e:dd:e1: 84:cb:01:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwFVdvCzDnN9eoxSXLFsPhBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3YmI1NTIzNjU0OTljMDdhZWQzNGI2ODg0ZjViMmU5Mzgw ZWJlZTEwHhcNMjYwMTI4MTYwMDM4WhcNMjYwMTI5MTYwMDM4WjAzMTEwLwYDVQQD EygzZGRkZmZiZjEwZjM0MTRiNmM0MTVlNzQ1MDdkZWUzZWNmMzhkOGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+EvEulALXhuWya4jFyks0hj9PdI tN9y6nthdkQ0xKnAgOvolYFstMQmgku8BbJ+yyVT0juaIRaj8tOAFCLAG4tHE9kO bbaqYwdBKfVgRA9QVuYU9DZpjapRbk9YUw+9wN3kYiZGKmvH9lwr1TInRp8bpExz 9liMoTKyKuZvPHbpgnwQicWqt1sbPMgMkqlG9FrlXAgUIwaRi/Utuy6OPNtCPRg8 oJCbf2ve0h8H3VODwK7WlpL33mef4ARSF9dznd0hz+8sqvJ8ebFfqiTSCYTFTeHX 3GPUlM4X5lUbnnw4NhQRk+vJVjCdkW0UtNeOTjLZYvQWmuFWOsQ+cIJ8vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD3d/78Q80FLbEFedFB97j7PONjkMB8GA1UdIwQY MBaAFNe7VSNlSZwHrtNLaIT1suk4Dr7hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTd0VkkyVkpuQWV1MDB0b2hQV3k2VGdPdnVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82ZTY3MjgtZmYwNS00OTQ2LWIwOGUt M2ViZDQ1NWFjMmFlLzEvMTd0VkkyVkpuQWV1MDB0b2hQV3k2VGdPdnVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC82ZTY3MjgtZmYwNS00OTQ2LWIwOGUtM2ViZDQ1NWFjMmFl LzEvMTd0VkkyVkpuQWV1MDB0b2hQV3k2VGdPdnVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN2yX3Tnu slm68Hqf9xFcwJFqYde3BYliwYD3LahW32YUcumlSfytlCAI3E0eYQRdrvIn5DVg n1x9QgSBfxqJixAHzv5gYUIwkfhw/LAVyeJGwWCQ6DlwyXLDDh2KoOmSEBzmvixB GkQo9hrZzIEajlpOCW6fLXrDvLQCqkGjaQp8eA3ug3szV8zDMFHaUoj7M4zYEG/a 2LQx3M1RzNS7umo39+hQlhKQ5iIirObBeZ0cuZdeQu2N4KCBU6i5JBW2h5HtCKxG kcJlIxhDQG/xGAsKK44y6a1FMVlBKa1J6iy11kVcgVbSkEO7mIwB3h2pPNDjmKIL uzY/Dt3hhMsBJg== -----END CERTIFICATE-----Generated at Wed Jan 28 17:54:43 2026 by rpki-client