This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft File: 7JxoXPZnHMZW-S52RVejg3jygnw.mft (raw, json) Hash identifier: RigonyBJ1X4ltjh5oCe29d62/WVypQOQhH5jN+prRxg= Subject key identifier: 55:6C:68:F2:AD:B6:D2:73:E8:20:1E:47:2B:2B:2A:DE:B4:AA:9B:C3 Authority key identifier: EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C Certificate issuer: /CN=ec9c685cf6671cc656f92e764557a38378f2827c Certificate serial: 019BD8467662964FD5B6CD1EF6F1F4388924 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft Manifest number: 0908 Signing time: Mon 19 Jan 2026 22:00:54 +0000 Manifest this update: Mon 19 Jan 2026 22:00:54 +0000 Manifest next update: Tue 20 Jan 2026 22:00:54 +0000 Files and hashes: 1: 1-OYnNzXr6Vo5v0tdTY5uXPebeXE.roa (hash: HvTSCO8dnKWpIGNv0ZhtPHvjO7rUBO8uy6VJMUgGVj0=) 2: 7JxoXPZnHMZW-S52RVejg3jygnw.crl (hash: utQW+TPTl8g82tdjg1/DBeDHC3NNk+MUgWts1V+5ebw=) 3: x8PuWJNPJBC35K_SG-mLe9gxJtA.roa (hash: i+jPp0P0KxStb0wvP/NjPbGbfQidMuZ2R8mV3ecH7IA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d8:46:76:62:96:4f:d5:b6:cd:1e:f6:f1:f4:38:89:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec9c685cf6671cc656f92e764557a38378f2827c Validity Not Before: Jan 19 22:00:54 2026 GMT Not After : Jan 20 22:00:54 2026 GMT Subject: CN=556c68f2adb6d273e8201e472b2b2adeb4aa9bc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:00:d6:30:9a:21:ff:78:ca:92:8a:fe:73:03: 57:e9:5d:b8:28:01:55:e7:00:41:3e:1f:73:dc:76: 99:e9:d0:b5:e5:bb:7c:26:bd:d6:26:f3:62:80:17: f1:23:0c:18:83:d0:73:58:2f:58:9a:56:1f:7a:1a: 64:05:bc:de:da:4a:e7:06:46:20:df:11:59:4f:06: a2:39:21:c4:29:2d:40:8a:5c:4b:4e:e8:f8:53:16: 86:65:61:aa:34:85:fc:cb:a0:b2:0d:3d:78:dd:18: 46:c9:41:7a:75:8e:5b:9e:17:50:8a:77:f4:1b:95: 39:94:6a:1a:ac:0a:72:29:86:60:e8:09:15:be:b8: 70:7e:e0:35:19:20:52:cf:d3:c0:40:85:da:20:62: ee:aa:07:e1:49:41:60:1c:c6:e6:27:91:3b:1c:b2: bf:ef:a5:2c:44:4d:26:88:bc:bb:cd:0e:ba:e9:f6: 7d:ae:e3:5b:8c:8e:99:b7:75:f5:c5:19:4f:21:67: ec:cf:73:67:4c:2b:08:49:67:c0:63:b4:c8:09:8b: f8:4d:e8:77:32:fd:7a:94:94:e8:d8:ec:b7:dd:2b: b3:42:e7:53:b2:cb:d3:78:1a:3c:cc:1c:d1:b2:80: f1:bb:56:cc:4c:56:d4:33:28:9a:a8:cd:c0:ed:45: 90:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:6C:68:F2:AD:B6:D2:73:E8:20:1E:47:2B:2B:2A:DE:B4:AA:9B:C3 X509v3 Authority Key Identifier: keyid:EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:55:0e:f3:6d:4c:8f:5b:8c:19:53:d9:66:8e:15:ec:e3:0a: 04:55:56:4f:72:92:be:8c:47:49:98:2a:e1:e0:8b:59:6c:5a: 7c:d5:1e:b4:2e:aa:68:53:04:71:fe:e8:f5:a0:b1:8f:18:ac: d4:12:91:9a:74:7d:70:82:f7:ac:b7:68:5c:39:47:15:cb:b5: 27:f3:33:84:18:c1:fe:30:96:7c:db:ab:3f:11:26:5a:04:54: 6c:b1:7d:59:30:1e:7a:49:df:b8:af:ce:a3:8c:29:e8:a3:a2: 37:80:94:8a:53:26:04:1f:44:79:a7:56:1e:23:18:bf:2c:31: 05:4b:37:df:12:e3:3b:4e:6c:bd:4a:b0:9a:8a:94:16:91:b6: 89:e6:2b:7b:c6:e3:43:72:df:4d:c6:61:ae:e2:a5:d3:b6:59: 7d:07:77:5d:35:bc:63:8f:b4:f0:5c:2f:d9:b1:95:92:4d:20: de:3d:f0:23:73:2d:82:95:25:f8:4d:75:6e:ef:7f:60:4b:f2: 10:32:b8:cb:69:56:e2:87:ad:48:d5:18:25:50:51:3d:7d:2e: 44:62:9f:f1:b0:58:86:a5:0b:ee:54:8a:07:81:1f:dc:97:15: 33:ea:0e:01:16:64:14:79:64:5b:c6:7b:9c:86:fd:45:de:31: e7:59:7c:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvYRnZilk/Vts0e9vH0OIkkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjOWM2ODVjZjY2NzFjYzY1NmY5MmU3NjQ1NTdhMzgzNzhm MjgyN2MwHhcNMjYwMTE5MjIwMDU0WhcNMjYwMTIwMjIwMDU0WjAzMTEwLwYDVQQD Eyg1NTZjNjhmMmFkYjZkMjczZTgyMDFlNDcyYjJiMmFkZWI0YWE5YmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogDWMJoh/3jKkor+cwNX6V24KAFV 5wBBPh9z3HaZ6dC15bt8Jr3WJvNigBfxIwwYg9BzWC9YmlYfehpkBbze2krnBkYg 3xFZTwaiOSHEKS1AilxLTuj4UxaGZWGqNIX8y6CyDT143RhGyUF6dY5bnhdQinf0 G5U5lGoarApyKYZg6AkVvrhwfuA1GSBSz9PAQIXaIGLuqgfhSUFgHMbmJ5E7HLK/ 76UsRE0miLy7zQ666fZ9ruNbjI6Zt3X1xRlPIWfsz3NnTCsISWfAY7TICYv4Teh3 Mv16lJTo2Oy33SuzQudTssvTeBo8zBzRsoDxu1bMTFbUMyiaqM3A7UWQpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFVsaPKtttJz6CAeRysrKt60qpvDMB8GA1UdIwQY MBaAFOycaFz2ZxzGVvkudkVXo4N48oJ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0p4b1hQWm5ITVpXLVM1MlJWZWpnM2p5Z253LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9lOWI1NmUtM2I1Yi00M2IxLThiYjUt YmFiNDhkYWI0Y2Q2LzEvN0p4b1hQWm5ITVpXLVM1MlJWZWpnM2p5Z253Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9lOWI1NmUtM2I1Yi00M2IxLThiYjUtYmFiNDhkYWI0Y2Q2 LzEvN0p4b1hQWm5ITVpXLVM1MlJWZWpnM2p5Z253LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASlUO821M j1uMGVPZZo4V7OMKBFVWT3KSvoxHSZgq4eCLWWxafNUetC6qaFMEcf7o9aCxjxis 1BKRmnR9cIL3rLdoXDlHFcu1J/MzhBjB/jCWfNurPxEmWgRUbLF9WTAeeknfuK/O o4wp6KOiN4CUilMmBB9EeadWHiMYvywxBUs33xLjO05svUqwmoqUFpG2ieYre8bj Q3LfTcZhruKl07ZZfQd3XTW8Y4+08Fwv2bGVkk0g3j3wI3MtgpUl+E11bu9/YEvy EDK4y2lW4oetSNUYJVBRPX0uRGKf8bBYhqUL7lSKB4Ef3JcVM+oOARZkFHlkW8Z7 nIb9Rd4x51l8+A== -----END CERTIFICATE-----Generated at Tue Jan 20 01:00:56 2026 by rpki-client