This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: YqAPsaMFKKfcPmoUL1sEanXzJr62KUsgnYX0JXu+bnY= Subject key identifier: A5:83:E7:22:C8:57:E2:08:C7:AA:4D:BE:30:19:F2:97:0A:12:F6:6E Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019BF3BE217B0BA81F3FCAE9C9EEED3CBB35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 1109 Signing time: Sun 25 Jan 2026 06:01:22 +0000 Manifest this update: Sun 25 Jan 2026 06:01:22 +0000 Manifest next update: Mon 26 Jan 2026 06:01:22 +0000 Files and hashes: 1: 1-D8OmgY3nKSj2v3MJmWlPYnb9CQ.roa (hash: a385zNiEurpE9zRwf9X4UBpg40A2fY4ohIw0B9nkrro=) 2: 1fKDHDyi88uhIrdIl99Ji35F12s.roa (hash: ibeCFUGVM6Hr/NL42yqJmWoFRaGEzYgkrlHOoS3siho=) 3: 3t7MGPFMuBSxJLCxDF_3n50KStc.roa (hash: 6GS3fb7DEXDLSqf4y4y0SrlWtV5NF4pu8OcshRbE90U=) 4: 4epOeDhcnpBTi2g4YcisvFWMAa4.roa (hash: +2jkFhE3n0xcPuUcbVnaPwBBTRX7qOSg8rWKC4wCay8=) 5: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: sStqrTHvTmuSNwEy7m+uJyWl/WXg+l0UlGnydkztIP0=) 6: BYsn1N5gP2JO3UfQxO-E-V2e0co.roa (hash: 6igu0zYuxX+N38bsBkkYKxt8Fvp/P+aUhF4rJG443fk=) 7: F2c42ybkIwQUeCQqNVp_C3yFlro.roa (hash: KrIMAe6Zw/sJbSu3dokUorq0Itj56++s8jIbDFuR90Q=) 8: FHmKT3d93phBQ2sJCe6iypixWE4.roa (hash: gr7Vm5ezbEir/8TLVn3dVqAxR+5C8tMF+REqdfAIUrk=) 9: FzQlXJMrueOFWSAR8L8h6Ur-hZc.roa (hash: WfwyKtSywEHryZ+M6HznzFfEjcPQAgXonMv0QamAIn4=) 10: LVLHCbJcyDZSnlN60YzfQsK0HpA.roa (hash: vgdjHgNRPC/reweQCNlxL1k3EIbDFAOPreXZsrVrnu4=) 11: NSS0gU9xsQcOZEIfKkpLsjZuNB0.roa (hash: VyQiUIVUgwwIcEoE5kv5MX8wQDctr6SkpBRpe02j4L4=) 12: PwETNKs37jeOPIwRfzmAVRCx5RA.roa (hash: A7MiRy6tdF3DFHgGL2Bg1zW3IkK52EBZK26ibjcoM5o=) 13: S9FfJCycMQRA7bahC5rfE0YQTSg.roa (hash: 8MejBWKBQixvCnUzb1LPtqAMZdROfL9yfHkcMqfZHKY=) 14: SEmswT8qRK9Bjzxvl0uw6a5asBk.roa (hash: u11Eo4iK3j8KXMwIQS50D4H8cdM2mGVMvEkf3VKSGko=) 15: ZRxBI6--3WcDP6y0WoOf_vAd2NE.roa (hash: tzOhUp8auz5616T4WhpBy1GjZZJ7rOEJ1FCyRQX+r8M=) 16: ZweD9hSO-FjSNgRjYiWP5ozqgiM.roa (hash: tLzdWZNv79sT3YaekBIw1EK7WtYQTy+aDzxkObz61k4=) 17: fIGWD-4Fshb7d4r83OFbyVwjqBY.roa (hash: Ks+OV7JB0vGipKpWHkMisr6xMryLFUgnnDUUzg6XUBQ=) 18: iyx4iGSqz3YL_BqXzYoasBlGIOs.roa (hash: tcdJGjSX6zqPJW45F+GkjDvmD1FBoeYzAmLsGXVBq0c=) 19: xX_eayIur3ayUrNMcGn9ChpnHec.roa (hash: U/ut0MWz8oiiYflyyyeRjSx1ThmGKeCsH/L5YDP+UgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:be:21:7b:0b:a8:1f:3f:ca:e9:c9:ee:ed:3c:bb:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Jan 25 06:01:22 2026 GMT Not After : Jan 26 06:01:22 2026 GMT Subject: CN=a583e722c857e208c7aa4dbe3019f2970a12f66e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6b:1b:27:a6:29:6f:fc:ef:0b:5b:9f:cb:86: 49:23:c8:19:f3:f5:75:33:a3:9e:1c:bc:69:fc:a2: 7f:5b:c4:6a:db:2f:7d:c0:6f:6e:5d:6e:2a:b9:a6: 15:eb:4b:1f:37:73:e9:95:bf:51:ff:9f:a1:8a:cc: e3:5a:6f:a2:e1:dc:77:e0:8e:63:ad:44:dd:0c:c4: 2b:20:72:4d:44:f8:67:9a:b3:47:9c:4b:b4:24:6e: 34:a4:3d:37:25:dc:02:21:10:70:b6:41:31:6b:73: a7:92:78:07:da:9c:39:97:3c:8f:9d:92:69:81:60: 88:f6:11:d1:0f:dc:9f:a3:57:f9:5b:59:9b:90:0d: 77:64:c8:58:13:2c:24:4f:11:e3:2e:cc:a5:d4:92: fe:92:31:10:2e:65:f8:60:f3:ec:8e:d6:25:b6:bb: 9b:9e:d4:09:9a:35:b8:2f:77:36:6f:bc:36:39:52: 02:c2:5c:2f:f5:22:24:32:0a:5a:61:83:35:31:10: 9c:28:22:de:dd:3f:f8:31:f9:e3:27:a4:a6:ae:cd: 06:90:0f:2a:7f:8d:01:1d:61:18:2e:ce:66:b9:97: d1:c0:bf:e5:c5:94:d3:d1:a5:58:d5:b7:f3:4f:74: 1e:ef:87:de:2c:a5:da:73:7a:32:f6:b8:96:2c:85: 1d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:83:E7:22:C8:57:E2:08:C7:AA:4D:BE:30:19:F2:97:0A:12:F6:6E X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:ca:48:af:91:fc:bc:27:41:23:7f:18:00:62:3b:ad:26:cf: db:dc:d4:63:b7:ab:0e:87:42:45:20:72:bd:0f:5a:2a:d1:29: 1b:98:9a:a2:0a:b1:0d:00:6a:73:b2:55:3a:b1:e6:c3:dc:f9: b3:45:13:36:da:bd:4a:57:83:3a:1b:4e:e1:87:42:01:8a:49: 9e:ee:43:0f:c3:3a:7f:5b:07:05:4b:0d:49:6a:4c:5f:5b:7d: 5c:b2:81:b4:8f:5c:65:d0:d9:47:d4:43:19:08:34:c2:33:ba: 8c:37:fe:02:5d:59:45:69:34:3f:81:3e:f5:70:24:bb:53:43: bb:79:1c:4d:e3:e0:bb:b3:e0:ab:21:05:cb:3a:4c:e4:56:65: b3:68:99:3e:c3:a3:e1:2e:e2:70:61:b6:ab:50:8d:9c:96:1b: 28:61:55:62:8a:6d:d0:73:d2:6e:e2:25:12:1e:9d:ff:b2:08: 69:65:c6:47:ef:60:a5:c3:e5:92:43:e3:28:cd:ae:da:82:70: 77:f9:31:b0:08:e0:5c:c5:2f:88:da:b1:f7:d0:05:50:f2:07: 30:12:84:e9:9b:47:b3:8a:29:4d:88:3b:79:61:ed:4b:fc:25: fd:70:57:ba:0a:aa:fa:db:fd:25:9c:f2:4a:f6:e1:f2:7f:49: 21:69:68:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzviF7C6gfP8rpye7tPLs1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjYwMTI1MDYwMTIyWhcNMjYwMTI2MDYwMTIyWjAzMTEwLwYDVQQD EyhhNTgzZTcyMmM4NTdlMjA4YzdhYTRkYmUzMDE5ZjI5NzBhMTJmNjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2sbJ6Ypb/zvC1ufy4ZJI8gZ8/V1 M6OeHLxp/KJ/W8Rq2y99wG9uXW4quaYV60sfN3Pplb9R/5+hiszjWm+i4dx34I5j rUTdDMQrIHJNRPhnmrNHnEu0JG40pD03JdwCIRBwtkExa3OnkngH2pw5lzyPnZJp gWCI9hHRD9yfo1f5W1mbkA13ZMhYEywkTxHjLsyl1JL+kjEQLmX4YPPsjtYltrub ntQJmjW4L3c2b7w2OVICwlwv9SIkMgpaYYM1MRCcKCLe3T/4MfnjJ6Smrs0GkA8q f40BHWEYLs5muZfRwL/lxZTT0aVY1bfzT3Qe74feLKXac3oy9riWLIUduQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKWD5yLIV+IIx6pNvjAZ8pcKEvZuMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF8pIr5H8 vCdBI38YAGI7rSbP29zUY7erDodCRSByvQ9aKtEpG5iaogqxDQBqc7JVOrHmw9z5 s0UTNtq9SleDOhtO4YdCAYpJnu5DD8M6f1sHBUsNSWpMX1t9XLKBtI9cZdDZR9RD GQg0wjO6jDf+Al1ZRWk0P4E+9XAku1NDu3kcTePgu7PgqyEFyzpM5FZls2iZPsOj 4S7icGG2q1CNnJYbKGFVYopt0HPSbuIlEh6d/7IIaWXGR+9gpcPlkkPjKM2u2oJw d/kxsAjgXMUviNqx99AFUPIHMBKE6ZtHs4opTYg7eWHtS/wl/XBXugqq+tv9JZzy Svbh8n9JIWlowQ== -----END CERTIFICATE-----Generated at Sun Jan 25 12:20:06 2026 by rpki-client