This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft File: a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft (raw, json) Hash identifier: OOu1sJC0tRPnDRmb8pMuPg67zH/8N3sLaC1YyFHg0qw= Subject key identifier: 6B:AA:CD:C5:6C:D2:F9:4B:55:55:C5:C6:89:66:FC:06:01:1B:4A:2D Authority key identifier: 6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35 Certificate issuer: /CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535 Certificate serial: 019BFA9BDAEDD7D4D7A75E34318F2B688650 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft Manifest number: 17E9 Signing time: Mon 26 Jan 2026 14:01:16 +0000 Manifest this update: Mon 26 Jan 2026 14:01:16 +0000 Manifest next update: Tue 27 Jan 2026 14:01:16 +0000 Files and hashes: 1: Yg6FVNZBl1w2Rze2Thsw4t3zCtA.roa (hash: r0yjU3GNEbU4eEC9QPmI7gQD6DPzo++uXSGijCopcR8=) 2: a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl (hash: bEK/jHL33YzvJ3+pcoKGnWxSxGrmcsImax8+Hl5HXiM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:9b:da:ed:d7:d4:d7:a7:5e:34:31:8f:2b:68:86:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535 Validity Not Before: Jan 26 14:01:16 2026 GMT Not After : Jan 27 14:01:16 2026 GMT Subject: CN=6baacdc56cd2f94b5555c5c68966fc06011b4a2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:7e:7a:8f:45:a5:ab:53:67:a4:5d:3e:41:1e: 79:42:80:fa:b9:d1:88:7d:d3:b6:8b:07:9a:61:e8: cb:06:31:a5:cc:39:0c:69:e5:40:38:d7:8c:ef:88: 6b:22:2b:c2:55:c5:14:c7:20:30:e9:84:fe:a3:57: d2:b2:e6:70:6e:c3:b0:74:cd:ad:32:ae:b5:4b:12: 01:be:e5:2d:72:b5:92:7f:84:28:8c:54:e4:32:59: 02:ee:32:0a:98:71:1a:f2:f9:55:ee:68:cb:11:19: 08:36:fc:43:1b:63:67:22:d5:00:18:73:4d:e0:1c: b2:ff:75:0b:c7:23:53:64:b0:55:0d:33:59:5e:18: 4d:55:38:d5:f7:cc:a3:8a:95:53:e4:70:01:a9:f9: c3:65:35:d4:7d:d0:14:7a:57:36:aa:2d:1d:5a:38: d7:30:54:fc:3d:a0:db:c7:5e:4c:13:a8:ce:21:ec: cf:ad:fa:42:a5:0c:02:0f:d0:1d:39:63:ca:a4:59: 26:f1:82:10:57:81:39:97:12:80:2b:93:9a:da:98: 43:10:5b:54:06:f2:5d:46:a5:19:6d:1e:f9:99:f2: ba:9e:0d:05:9a:de:3f:6d:3f:4a:bc:7c:74:ac:ed: 68:66:e1:53:4b:2b:5d:10:a7:b5:d2:89:2b:00:dc: 47:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:AA:CD:C5:6C:D2:F9:4B:55:55:C5:C6:89:66:FC:06:01:1B:4A:2D X509v3 Authority Key Identifier: keyid:6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:ac:25:50:97:40:d1:cb:f8:19:4e:2c:f2:f4:b1:d9:ed:75: bd:3b:e8:ba:14:da:2d:75:4b:84:da:43:f9:71:8f:66:da:ac: b5:61:3b:22:f7:fd:b2:34:f1:48:32:7e:f4:0f:b1:41:ee:9c: 40:9c:dc:f0:f7:0f:15:40:18:bd:88:96:aa:84:2c:47:33:18: 77:56:46:cd:ad:40:1e:8d:81:f9:3d:e0:b7:79:0f:b2:81:6c: 57:e2:47:a1:13:ae:91:04:84:0d:6f:6a:6f:55:60:2c:82:9f: 98:f6:76:94:0b:0e:6d:e4:b9:f8:0c:26:8b:45:40:b5:1f:c7: 56:07:42:a0:71:a0:b0:f8:8f:c4:c2:1c:6f:ec:20:86:45:dd: 31:d7:bc:ea:c6:32:cc:ad:88:b5:f3:03:fc:84:e6:e0:65:01: de:af:65:88:03:d6:df:55:3e:44:1c:e6:1a:d9:bb:be:f6:b4: 38:89:a1:2a:61:f0:ad:d3:5c:8e:e3:d9:e0:c5:b3:c9:61:c9: 11:0b:6a:6c:f8:a8:47:f8:c4:fe:89:92:7b:2c:70:a0:74:ab: ed:35:1c:f0:95:95:32:2d:08:22:31:24:fa:10:27:48:0c:66: 0c:c1:a9:b3:ca:9d:38:81:16:c1:d5:d3:c0:4a:c6:41:df:e2: 22:dc:49:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6m9rt19TXp140MY8raIZQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYjkxMjViOGExMGQzMjIzNDg2ODFhMmQyYWM3ZDY3ZDJh ZDI1MzUwHhcNMjYwMTI2MTQwMTE2WhcNMjYwMTI3MTQwMTE2WjAzMTEwLwYDVQQD Eyg2YmFhY2RjNTZjZDJmOTRiNTU1NWM1YzY4OTY2ZmMwNjAxMWI0YTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5H56j0Wlq1NnpF0+QR55QoD6udGI fdO2iweaYejLBjGlzDkMaeVAONeM74hrIivCVcUUxyAw6YT+o1fSsuZwbsOwdM2t Mq61SxIBvuUtcrWSf4QojFTkMlkC7jIKmHEa8vlV7mjLERkINvxDG2NnItUAGHNN 4Byy/3ULxyNTZLBVDTNZXhhNVTjV98yjipVT5HABqfnDZTXUfdAUelc2qi0dWjjX MFT8PaDbx15ME6jOIezPrfpCpQwCD9AdOWPKpFkm8YIQV4E5lxKAK5Oa2phDEFtU BvJdRqUZbR75mfK6ng0Fmt4/bT9KvHx0rO1oZuFTSytdEKe10okrANxHcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGuqzcVs0vlLVVXFxolm/AYBG0otMB8GA1UdIwQY MBaAFGu5EluKENMiNIaBotKsfWfSrSU1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTdrU1c0b1EweUkwaG9HaTBxeDlaOUt0SlRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS80YjI4YjgtNzdmNi00NmQzLWI4ZDUt ODNiYzQxM2EwNDhkLzEvYTdrU1c0b1EweUkwaG9HaTBxeDlaOUt0SlRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS80YjI4YjgtNzdmNi00NmQzLWI4ZDUtODNiYzQxM2EwNDhk LzEvYTdrU1c0b1EweUkwaG9HaTBxeDlaOUt0SlRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhawlUJdA 0cv4GU4s8vSx2e11vTvouhTaLXVLhNpD+XGPZtqstWE7Ivf9sjTxSDJ+9A+xQe6c QJzc8PcPFUAYvYiWqoQsRzMYd1ZGza1AHo2B+T3gt3kPsoFsV+JHoROukQSEDW9q b1VgLIKfmPZ2lAsObeS5+Awmi0VAtR/HVgdCoHGgsPiPxMIcb+wghkXdMde86sYy zK2ItfMD/ITm4GUB3q9liAPW31U+RBzmGtm7vva0OImhKmHwrdNcjuPZ4MWzyWHJ EQtqbPioR/jE/omSeyxwoHSr7TUc8JWVMi0IIjEk+hAnSAxmDMGps8qdOIEWwdXT wErGQd/iItxJsA== -----END CERTIFICATE-----Generated at Mon Jan 26 19:15:21 2026 by rpki-client