This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft File: u7w9vRpPIkq4StYJwmgHn7Yktb0.mft (raw, json) Hash identifier: PhYI/UABdZRvEmpsXrMqY5vkS6JOlCkUP7bsX26e+3k= Subject key identifier: DB:71:58:67:2B:DD:60:61:32:4A:E9:E5:09:75:3D:21:C9:1E:DB:8D Authority key identifier: BB:BC:3D:BD:1A:4F:22:4A:B8:4A:D6:09:C2:68:07:9F:B6:24:B5:BD Certificate issuer: /CN=bbbc3dbd1a4f224ab84ad609c268079fb624b5bd Certificate serial: 019BFB775A580622E2F908D3A95C1690827B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft Manifest number: 040E Signing time: Mon 26 Jan 2026 18:01:01 +0000 Manifest this update: Mon 26 Jan 2026 18:01:01 +0000 Manifest next update: Tue 27 Jan 2026 18:01:01 +0000 Files and hashes: 1: SvNmMoOS2D7ABYeycDZExPxmaNI.roa (hash: hAPQtadJ57I6XgA+8LOiB1aW1n0vaUnx78Tugxa2seU=) 2: u7w9vRpPIkq4StYJwmgHn7Yktb0.crl (hash: JAswfjBb34HtwV5xf728b2Q24jRVYnKmR1uwmzjvLU8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:77:5a:58:06:22:e2:f9:08:d3:a9:5c:16:90:82:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbbc3dbd1a4f224ab84ad609c268079fb624b5bd Validity Not Before: Jan 26 18:01:01 2026 GMT Not After : Jan 27 18:01:01 2026 GMT Subject: CN=db7158672bdd6061324ae9e509753d21c91edb8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:37:d4:dc:8b:a1:3f:94:46:45:b4:dc:76:8b: ca:1a:ca:b1:49:96:7e:29:aa:b2:cb:37:1b:60:06: 46:de:1d:62:0b:0f:e9:28:4e:7f:19:72:81:65:8e: 8f:aa:a9:ab:15:b8:91:53:aa:52:3a:e4:f6:2f:ce: 9a:b2:e0:fe:50:1c:07:23:46:af:d5:c3:46:4e:b6: 8b:8e:a1:e1:ba:54:a0:83:2d:32:42:40:5c:79:28: 29:32:24:b9:d1:c5:0c:41:03:81:a2:20:57:88:bc: 4e:4f:0a:66:86:84:f2:54:10:88:ac:ea:92:b2:46: 17:2b:c9:6d:73:58:8e:6f:e5:67:49:6b:26:79:25: 8a:28:09:12:e3:5a:f1:46:1a:da:32:42:bf:59:f9: 5a:70:9e:78:ef:7f:b8:9e:1c:6d:06:4b:3c:62:0b: 2a:45:d6:a7:39:5e:db:b2:db:c8:7d:3b:44:34:b7: 01:c6:d7:1c:f8:29:d6:72:bb:c4:39:59:6c:15:bd: 46:4b:28:53:cf:b4:59:13:6d:77:42:bc:2d:84:98: b1:11:87:30:28:4b:93:01:2d:c7:1b:18:c2:12:38: 60:6a:a6:70:43:ec:cb:bb:01:70:32:85:cf:38:f3: bc:89:85:0e:00:01:eb:6a:14:90:0e:1d:99:91:84: d1:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:71:58:67:2B:DD:60:61:32:4A:E9:E5:09:75:3D:21:C9:1E:DB:8D X509v3 Authority Key Identifier: keyid:BB:BC:3D:BD:1A:4F:22:4A:B8:4A:D6:09:C2:68:07:9F:B6:24:B5:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:18:f0:13:53:0c:5c:37:19:eb:bd:e9:75:ad:1e:8f:19:b0: ff:51:4b:9c:b3:7d:f2:08:cc:36:06:5e:8b:80:b1:07:45:18: ba:db:fa:de:0e:a1:94:30:b9:fd:72:67:45:3a:b5:f6:74:dd: e2:b4:d1:82:a7:14:5a:f7:ef:5d:28:a0:ca:66:20:9b:4b:26: 9a:77:c2:c5:00:0a:8b:21:63:41:05:96:b7:a4:25:de:88:a3: e3:3f:c1:3b:8d:84:bb:3e:e9:94:5a:87:1b:83:9f:28:a1:48: be:3f:08:fc:cd:6c:1f:63:f6:2e:b3:a0:97:52:01:e2:e5:d0: 09:38:f4:c0:d1:9b:49:6d:17:f1:a7:b1:9e:6a:2e:d3:c3:ae: ea:7c:33:df:9c:54:c3:1a:e0:ce:a1:0f:76:95:6b:99:7f:56: 4e:02:68:c0:bb:72:a0:ac:12:5c:b6:87:f6:25:17:9d:2a:f6: f6:00:b9:88:38:a0:35:9e:e9:16:57:8d:f5:6d:01:5b:81:5d: 5d:dd:e6:57:04:db:be:53:61:aa:50:b5:61:09:46:76:c9:90: 2b:81:07:cc:c7:d3:e8:7b:3f:97:ff:52:2a:61:28:96:c1:14: b8:33:f9:09:c6:2e:09:27:a5:cd:99:b2:92:a3:2f:ab:b5:ae: d4:9f:98:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7d1pYBiLi+QjTqVwWkIJ7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiYmMzZGJkMWE0ZjIyNGFiODRhZDYwOWMyNjgwNzlmYjYy NGI1YmQwHhcNMjYwMTI2MTgwMTAxWhcNMjYwMTI3MTgwMTAxWjAzMTEwLwYDVQQD EyhkYjcxNTg2NzJiZGQ2MDYxMzI0YWU5ZTUwOTc1M2QyMWM5MWVkYjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujfU3IuhP5RGRbTcdovKGsqxSZZ+ KaqyyzcbYAZG3h1iCw/pKE5/GXKBZY6PqqmrFbiRU6pSOuT2L86asuD+UBwHI0av 1cNGTraLjqHhulSggy0yQkBceSgpMiS50cUMQQOBoiBXiLxOTwpmhoTyVBCIrOqS skYXK8ltc1iOb+VnSWsmeSWKKAkS41rxRhraMkK/WflacJ5473+4nhxtBks8Ygsq RdanOV7bstvIfTtENLcBxtcc+CnWcrvEOVlsFb1GSyhTz7RZE213QrwthJixEYcw KEuTAS3HGxjCEjhgaqZwQ+zLuwFwMoXPOPO8iYUOAAHrahSQDh2ZkYTRawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNtxWGcr3WBhMkrp5Ql1PSHJHtuNMB8GA1UdIwQY MBaAFLu8Pb0aTyJKuErWCcJoB5+2JLW9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTd3OXZScFBJa3E0U3RZSndtZ0huN1lrdGIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi81NGIwMDYtNjgwOS00NDFiLTg0ZDct YTI0Y2I1NzIyOThlLzEvdTd3OXZScFBJa3E0U3RZSndtZ0huN1lrdGIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi81NGIwMDYtNjgwOS00NDFiLTg0ZDctYTI0Y2I1NzIyOThl LzEvdTd3OXZScFBJa3E0U3RZSndtZ0huN1lrdGIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACBjwE1MM XDcZ673pda0ejxmw/1FLnLN98gjMNgZei4CxB0UYutv63g6hlDC5/XJnRTq19nTd 4rTRgqcUWvfvXSigymYgm0smmnfCxQAKiyFjQQWWt6Ql3oij4z/BO42Euz7plFqH G4OfKKFIvj8I/M1sH2P2LrOgl1IB4uXQCTj0wNGbSW0X8aexnmou08Ou6nwz35xU wxrgzqEPdpVrmX9WTgJowLtyoKwSXLaH9iUXnSr29gC5iDigNZ7pFleN9W0BW4Fd Xd3mVwTbvlNhqlC1YQlGdsmQK4EHzMfT6Hs/l/9SKmEolsEUuDP5CcYuCSelzZmy kqMvq7Wu1J+Ykg== -----END CERTIFICATE-----Generated at Tue Jan 27 01:18:38 2026 by rpki-client