This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft File: C7PnOqi38K872EAFctrnKw1G9Vw.mft (raw, json) Hash identifier: OB50dkgrelTm0oy1u6blCKHBNZUu+aQ4COYELOtUZlQ= Subject key identifier: E8:DF:BE:64:27:C4:2E:86:D0:3F:B1:E3:18:47:41:DC:32:93:04:19 Authority key identifier: 0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C Certificate issuer: /CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c Certificate serial: 019BD01F0CC71FA226D09619673DD04894F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft Manifest number: 0CAA Signing time: Sun 18 Jan 2026 08:00:54 +0000 Manifest this update: Sun 18 Jan 2026 08:00:54 +0000 Manifest next update: Mon 19 Jan 2026 08:00:54 +0000 Files and hashes: 1: 4oHL96070XVJFK5YR2z3SGTLdMY.roa (hash: FF1916bNfm13YDHdzfWvKY2B8uJg3LA5NBIqV3b8KEA=) 2: 7ZWwgnvwU4U_1-WB90W9zaIeApk.roa (hash: pXdrhZt6u9TZRpK/zMCuOmrnZo7nb4SnqRLes1rkitE=) 3: C7PnOqi38K872EAFctrnKw1G9Vw.crl (hash: tKY79s6puf1+OBBNPVzItRT+zW1N1Gp9+Hy+FRbu1hQ=) 4: dGGdzraFBMqQuQOaaYdWRwXkWRo.roa (hash: 2J+i3mFaVsHOA07pasr4FZkQypfzyjabfUuePsjfpFk=) 5: mCPvVZ52cqu_7fQiYfxNWTgmIyU.roa (hash: MKIXaK5pXObdOC8zIpNfkiNlH80bR9ObWjRqGl0bxns=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.crl rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d0:1f:0c:c7:1f:a2:26:d0:96:19:67:3d:d0:48:94:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c Validity Not Before: Jan 18 08:00:54 2026 GMT Not After : Jan 19 08:00:54 2026 GMT Subject: CN=e8dfbe6427c42e86d03fb1e3184741dc32930419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d2:ba:36:15:9d:10:dc:be:11:1a:6f:71:63: f3:60:e9:37:aa:b9:74:7c:a1:a8:96:1a:79:a6:72: 70:c0:d7:f0:7a:83:07:e1:89:10:b8:b4:ec:04:aa: 7e:65:e7:f0:58:5d:25:d7:b6:96:4c:5e:16:99:27: 9b:74:bc:a9:e8:67:cf:10:6b:cf:71:51:8e:f3:25: 9f:a1:a5:b1:6b:d7:39:b7:78:97:cf:6e:e5:ae:81: 21:fa:0f:a6:d0:77:79:5c:d5:38:0c:cd:fe:43:3b: 8d:63:4e:0e:3e:b4:10:27:a0:9d:e3:a8:17:4b:20: be:37:59:cd:a9:e8:4f:63:9d:a2:79:df:7e:6b:ba: 8c:43:67:f5:40:36:b2:e1:64:9b:a6:2f:88:3e:81: b4:e9:cb:f5:5e:b4:51:90:fc:67:8a:34:e0:92:27: 9e:7d:c5:e6:33:a3:21:b9:a5:b2:35:89:f3:bf:2b: ec:56:3c:f1:ac:80:0d:ef:c8:c9:c4:0d:d3:44:3f: a8:2a:6c:fa:7a:f2:57:2d:5b:7a:87:81:07:20:5c: 69:46:89:a2:ec:93:f4:d4:9b:72:cd:35:2b:95:4e: 3b:3e:8c:a4:eb:78:3f:6b:eb:70:21:49:09:91:33: 7c:be:88:5c:3b:a5:01:9b:93:e7:47:ba:0e:15:be: ac:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:DF:BE:64:27:C4:2E:86:D0:3F:B1:E3:18:47:41:DC:32:93:04:19 X509v3 Authority Key Identifier: keyid:0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:23:d8:5f:a4:cd:a5:79:83:eb:fe:95:e3:0a:b3:b5:a9:8e: 94:87:06:81:db:00:0b:14:7a:5f:e8:6b:3e:b7:89:d5:35:66: b5:ab:3d:44:f7:83:0b:73:8c:24:d8:8d:9c:60:e5:7b:b9:cd: 7c:dd:b5:51:4b:92:78:28:f7:4c:69:6a:a4:a9:9b:4e:7c:c3: 9b:3e:d2:07:aa:bc:80:24:7b:76:1c:50:a1:01:00:3c:b8:7f: d0:5d:97:4a:b6:54:27:9e:a6:d9:2c:22:34:0e:17:f6:a2:e5: a0:74:de:e9:7b:f0:91:25:b2:52:44:ae:b7:cb:0b:95:a9:5c: 05:d6:41:e6:cc:e5:7f:62:cc:0e:b5:a1:b8:a2:4d:f0:b9:eb: a2:11:87:f0:98:62:40:94:80:3d:34:47:9d:c1:cd:f5:72:bb: 21:2e:db:fd:d6:84:e3:a3:da:69:38:c4:08:eb:d4:9b:8f:81: ef:27:09:d4:d8:72:d5:02:4c:6c:00:fc:3b:93:7c:d1:f1:e9: 92:f3:e1:3a:88:ed:f8:cb:b4:ba:89:00:a8:25:8d:7b:72:d2: ed:91:d3:e4:c5:25:2a:5e:6c:c0:1f:5d:6a:8a:cb:01:a8:8e: e1:75:9a:a2:f9:cc:7c:82:79:96:72:d1:ed:7f:13:e4:e6:a0: 77:cb:9b:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvQHwzHH6Im0JYZZz3QSJT3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiYjNlNzNhYThiN2YwYWYzYmQ4NDAwNTcyZGFlNzJiMGQ0 NmY1NWMwHhcNMjYwMTE4MDgwMDU0WhcNMjYwMTE5MDgwMDU0WjAzMTEwLwYDVQQD EyhlOGRmYmU2NDI3YzQyZTg2ZDAzZmIxZTMxODQ3NDFkYzMyOTMwNDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNK6NhWdENy+ERpvcWPzYOk3qrl0 fKGolhp5pnJwwNfweoMH4YkQuLTsBKp+ZefwWF0l17aWTF4WmSebdLyp6GfPEGvP cVGO8yWfoaWxa9c5t3iXz27lroEh+g+m0Hd5XNU4DM3+QzuNY04OPrQQJ6Cd46gX SyC+N1nNqehPY52ied9+a7qMQ2f1QDay4WSbpi+IPoG06cv1XrRRkPxnijTgkiee fcXmM6MhuaWyNYnzvyvsVjzxrIAN78jJxA3TRD+oKmz6evJXLVt6h4EHIFxpRomi 7JP01JtyzTUrlU47Poyk63g/a+twIUkJkTN8vohcO6UBm5PnR7oOFb6s7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOjfvmQnxC6G0D+x4xhHQdwykwQZMB8GA1UdIwQY MBaAFAuz5zqot/CvO9hABXLa5ysNRvVcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzdQbk9xaTM4Szg3MkVBRmN0cm5LdzFHOVZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9lZmY2N2YtNDBhOS00Nzc1LWE5YzIt YWQyOGZhOTY2YjUxLzEvQzdQbk9xaTM4Szg3MkVBRmN0cm5LdzFHOVZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9lZmY2N2YtNDBhOS00Nzc1LWE5YzItYWQyOGZhOTY2YjUx LzEvQzdQbk9xaTM4Szg3MkVBRmN0cm5LdzFHOVZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsSPYX6TN pXmD6/6V4wqztamOlIcGgdsACxR6X+hrPreJ1TVmtas9RPeDC3OMJNiNnGDle7nN fN21UUuSeCj3TGlqpKmbTnzDmz7SB6q8gCR7dhxQoQEAPLh/0F2XSrZUJ56m2Swi NA4X9qLloHTe6XvwkSWyUkSut8sLlalcBdZB5szlf2LMDrWhuKJN8LnrohGH8Jhi QJSAPTRHncHN9XK7IS7b/daE46PaaTjECOvUm4+B7ycJ1Nhy1QJMbAD8O5N80fHp kvPhOojt+Mu0uokAqCWNe3LS7ZHT5MUlKl5swB9daorLAaiO4XWaovnMfIJ5lnLR 7X8T5Oagd8ubxA== -----END CERTIFICATE-----Generated at Sun Jan 18 12:07:58 2026 by rpki-client