This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft File: 7kOBzgO6piUBmYDzeP5BuytmIbk.mft (raw, json) Hash identifier: 3i/PIK40u9I89FhWr5a/umzwPRhofgho4cUpvJaRnog= Subject key identifier: F2:A5:DB:B4:B5:00:DB:2D:46:80:89:02:D9:6B:25:31:ED:AF:B5:22 Authority key identifier: EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9 Certificate issuer: /CN=ee4381ce03baa625019980f378fe41bb2b6621b9 Certificate serial: 019BFA9BB0BEBAC6AF9290F716421599D375 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft Manifest number: 1808 Signing time: Mon 26 Jan 2026 14:01:05 +0000 Manifest this update: Mon 26 Jan 2026 14:01:05 +0000 Manifest next update: Tue 27 Jan 2026 14:01:05 +0000 Files and hashes: 1: 7kOBzgO6piUBmYDzeP5BuytmIbk.crl (hash: zPovL4b3IzHl5o78/gf47UBMrzsXoT4arKmR7If4ZQs=) 2: Gp76Gv-eHWRgRvhEjHqJ6icn00Q.roa (hash: BmL3M6inhKtEkTbjCk7s9if8HrybG3oAFNlmaOoxF0c=) 3: QjmmSQtuTEwVRLNgjWi1-_buOYk.roa (hash: iGWXEQ+bzEdCoqctThCJX9CzR90FyOfcbpLC/ESLWio=) 4: UV-Za1MLDNSaG4DuH_q131i6c6o.roa (hash: /nY7i2nihg09pwfCz4ZETusOQgWbnKeEZAo2lp/8PQQ=) 5: XwwEduTGUdEUmzQ6Vn1Qh0lULKE.roa (hash: yP/C4oSHOkCL3b3u7lTD0ceM0Z9V/7tsggm9f4RRupE=) 6: gDu74A_Z1ksatoKHQD455fxsAx0.roa (hash: 5WTnm+h2P7sppTWJRlxxAJMWxqtBVlvtcy2GltVnQig=) 7: zOmGYauNnRfV_5QaNrYyOSSrwQ0.roa (hash: QJz+FfKfespU5hmZuz01TmSY2wjv9AwO7tZKjrvrO1o=) 8: zx3WBwHkzNsgOV5-TkoYXRcSw5A.roa (hash: 4eHXkHe5YH2jE8fgsQc251JhI+IMaU/jZg/f89akxiE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:9b:b0:be:ba:c6:af:92:90:f7:16:42:15:99:d3:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee4381ce03baa625019980f378fe41bb2b6621b9 Validity Not Before: Jan 26 14:01:05 2026 GMT Not After : Jan 27 14:01:05 2026 GMT Subject: CN=f2a5dbb4b500db2d46808902d96b2531edafb522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:39:e8:89:43:7f:9a:0f:3e:db:dc:8d:d7:65: 81:4e:96:e6:e8:e5:a1:e4:b0:f8:e4:46:6c:ec:53: 72:17:55:41:db:d9:5b:c7:94:be:97:0e:d6:1c:4a: af:a7:3d:fe:db:11:29:fd:ab:58:c8:8c:26:75:67: 41:48:78:09:2c:48:76:41:13:3b:b5:61:0c:dc:a1: dd:e0:51:d6:6e:9f:14:76:cc:89:1e:72:7e:bf:62: 10:7f:a2:dd:59:04:1b:78:4d:d3:7d:dd:6f:6b:b7: 7f:30:4b:90:1f:49:e6:38:77:ad:18:b2:cd:13:67: 60:19:36:8a:88:bb:ac:ac:fb:52:4b:39:5b:c0:75: f0:ef:88:48:0a:07:33:73:4f:f4:04:33:c5:e3:44: a8:ba:ad:78:b7:f3:25:14:b1:78:2f:88:37:4b:ea: e3:9e:08:de:6c:3c:23:64:09:5e:36:9a:5a:84:5e: 2d:8b:f5:9c:53:ae:8b:84:b0:0e:cb:19:b6:2f:91: 96:56:dd:df:f4:1f:59:03:9c:76:ed:b0:c1:53:ad: 39:9b:61:12:17:b8:6f:02:71:3b:d8:cc:cc:26:18: c6:96:30:25:71:6d:08:6b:90:28:4e:94:50:2e:f6: b4:df:50:0f:d2:1d:f1:f3:90:82:ac:62:97:0f:e9: 38:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A5:DB:B4:B5:00:DB:2D:46:80:89:02:D9:6B:25:31:ED:AF:B5:22 X509v3 Authority Key Identifier: keyid:EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:9c:fd:1b:30:df:52:06:8e:ec:71:82:80:81:6c:f5:73:09: 2f:9a:1b:ab:4c:5b:5d:bb:68:dd:a1:97:6b:d9:b7:c2:e2:c1: c0:70:11:5a:5e:c0:32:13:0d:55:35:7b:69:ee:77:64:ef:fa: 94:75:25:a3:8a:69:34:ed:80:a7:31:5f:ed:71:5d:21:e8:f1: 85:08:3c:87:89:f7:da:d0:4b:e3:90:52:1e:b9:98:57:0f:a8: c0:f3:b5:d1:41:66:a6:06:45:ef:2e:f2:42:cc:f3:49:60:77: 7e:fa:ba:fd:96:2e:bf:d7:ab:43:32:45:d0:bb:26:a9:35:09: 9e:02:d9:9e:7d:f5:92:cc:90:4a:f2:71:cc:be:cf:ae:e0:16: be:f0:b7:ee:64:f2:83:e2:84:d7:3c:c9:e6:a3:bf:c7:ae:9a: a9:9c:c6:25:b2:05:07:c3:d3:d4:18:af:26:39:d3:d5:e1:cd: c8:8d:23:1a:c2:24:10:c9:0c:2d:2a:f4:4e:d7:fa:fd:c5:5d: 3a:e2:4e:9a:b9:08:20:c6:49:b3:1b:c9:42:b3:ed:0f:12:92: a2:61:ab:88:ef:dc:cd:22:6c:d6:8b:65:38:b5:3c:0b:07:e1: ce:1f:97:58:e9:f1:85:0e:7b:d9:06:2c:31:8c:67:d4:05:dc: cb:f7:e6:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6m7C+usavkpD3FkIVmdN1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlNDM4MWNlMDNiYWE2MjUwMTk5ODBmMzc4ZmU0MWJiMmI2 NjIxYjkwHhcNMjYwMTI2MTQwMTA1WhcNMjYwMTI3MTQwMTA1WjAzMTEwLwYDVQQD EyhmMmE1ZGJiNGI1MDBkYjJkNDY4MDg5MDJkOTZiMjUzMWVkYWZiNTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjnoiUN/mg8+29yN12WBTpbm6OWh 5LD45EZs7FNyF1VB29lbx5S+lw7WHEqvpz3+2xEp/atYyIwmdWdBSHgJLEh2QRM7 tWEM3KHd4FHWbp8UdsyJHnJ+v2IQf6LdWQQbeE3Tfd1va7d/MEuQH0nmOHetGLLN E2dgGTaKiLusrPtSSzlbwHXw74hICgczc0/0BDPF40Souq14t/MlFLF4L4g3S+rj ngjebDwjZAleNppahF4ti/WcU66LhLAOyxm2L5GWVt3f9B9ZA5x27bDBU605m2ES F7hvAnE72MzMJhjGljAlcW0Ia5AoTpRQLva031AP0h3x85CCrGKXD+k47wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPKl27S1ANstRoCJAtlrJTHtr7UiMB8GA1UdIwQY MBaAFO5Dgc4DuqYlAZmA83j+QbsrZiG5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2tPQnpnTzZwaVVCbVlEemVQNUJ1eXRtSWJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS81ZWExMmItNTFjNi00MTk1LWFlYjYt YzFhZGRkN2RlYmFhLzEvN2tPQnpnTzZwaVVCbVlEemVQNUJ1eXRtSWJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS81ZWExMmItNTFjNi00MTk1LWFlYjYtYzFhZGRkN2RlYmFh LzEvN2tPQnpnTzZwaVVCbVlEemVQNUJ1eXRtSWJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmZz9GzDf UgaO7HGCgIFs9XMJL5obq0xbXbto3aGXa9m3wuLBwHARWl7AMhMNVTV7ae53ZO/6 lHUlo4ppNO2ApzFf7XFdIejxhQg8h4n32tBL45BSHrmYVw+owPO10UFmpgZF7y7y QszzSWB3fvq6/ZYuv9erQzJF0LsmqTUJngLZnn31ksyQSvJxzL7PruAWvvC37mTy g+KE1zzJ5qO/x66aqZzGJbIFB8PT1BivJjnT1eHNyI0jGsIkEMkMLSr0Ttf6/cVd OuJOmrkIIMZJsxvJQrPtDxKSomGriO/czSJs1otlOLU8Cwfhzh+XWOnxhQ572QYs MYxn1AXcy/fm6Q== -----END CERTIFICATE-----Generated at Mon Jan 26 18:23:05 2026 by rpki-client