This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.mft File: 7OFQY8sLPniIjLTQ8ioEoZPdZwY.mft (raw, json) Hash identifier: Utao5aycIvcwBaQehTEWdcLZS+sAtEGHJuGr4XWuWkc= Subject key identifier: 7C:68:3D:33:5D:F7:5D:12:0A:09:A6:BC:78:71:DE:17:D5:46:90:1E Authority key identifier: EC:E1:50:63:CB:0B:3E:78:88:8C:B4:D0:F2:2A:04:A1:93:DD:67:06 Certificate issuer: /CN=ece15063cb0b3e78888cb4d0f22a04a193dd6706 Certificate serial: 019BFA42A6A73CD0A9B33EDE44418576B2AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7OFQY8sLPniIjLTQ8ioEoZPdZwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.mft Manifest number: 02 Signing time: Mon 26 Jan 2026 12:23:50 +0000 Manifest this update: Mon 26 Jan 2026 12:23:50 +0000 Manifest next update: Tue 27 Jan 2026 12:23:50 +0000 Files and hashes: 1: 2gPdkQWW9jUCbizX1SsNX62y_98.roa (hash: VSRNfwKyTAYD9LB8Wv+fsBtowZBw7KWBvIp7E5dQ+Cg=) 2: 7OFQY8sLPniIjLTQ8ioEoZPdZwY.crl (hash: 8actjFaflKS35ac5hKv3fkdyx7TTWoihBe6kwg4rEeE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.crl rsync://rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.mft rsync://rpki.ripe.net/repository/DEFAULT/7OFQY8sLPniIjLTQ8ioEoZPdZwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:23:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:42:a6:a7:3c:d0:a9:b3:3e:de:44:41:85:76:b2:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ece15063cb0b3e78888cb4d0f22a04a193dd6706 Validity Not Before: Jan 26 12:23:50 2026 GMT Not After : Jan 27 12:23:50 2026 GMT Subject: CN=7c683d335df75d120a09a6bc7871de17d546901e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e8:e2:86:30:0c:48:f4:78:79:88:43:ec:64: 84:bf:97:47:b3:a3:27:26:27:8f:00:39:01:2b:8f: 1e:24:1f:24:91:b9:52:1d:5c:56:e8:ec:bd:b2:ec: fa:f3:e0:31:a4:db:3d:a3:f9:cb:62:84:91:dc:b1: df:08:21:b6:d6:7d:5b:17:30:84:1f:2e:8c:4d:4e: 32:df:ac:0d:30:ae:fc:2e:55:a1:12:dd:cd:f4:2e: 55:6c:86:9c:72:e9:5a:69:3b:53:8e:00:e6:8c:7b: fa:6f:0a:48:fc:a3:25:37:f9:b2:36:e3:2c:76:d6: 26:e0:da:22:75:c1:0d:b9:b1:c6:1a:c0:52:26:f3: 0a:6f:50:e9:b2:05:bb:87:84:68:8e:9e:11:88:ca: af:ff:40:f9:51:f0:9f:c3:f4:44:59:1e:da:4a:5f: 9b:9a:14:37:ee:ea:03:b5:f5:88:99:29:74:c3:74: 0c:66:32:00:36:0b:d1:f6:4a:f0:13:f6:db:d7:53: cc:2a:cd:3e:1c:ef:3c:23:16:41:35:a9:38:e6:55: 44:ef:b4:98:f2:84:2e:3b:28:ae:30:e2:48:b0:2d: bb:1a:b4:b1:4f:c2:39:88:b4:f0:9f:34:b2:45:4c: 08:26:92:23:6d:e6:53:b6:c6:92:0e:5d:64:4c:8b: bc:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:68:3D:33:5D:F7:5D:12:0A:09:A6:BC:78:71:DE:17:D5:46:90:1E X509v3 Authority Key Identifier: keyid:EC:E1:50:63:CB:0B:3E:78:88:8C:B4:D0:F2:2A:04:A1:93:DD:67:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7OFQY8sLPniIjLTQ8ioEoZPdZwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:22:09:2b:62:b1:f0:b5:52:97:b2:cd:34:c5:18:75:81:ab: e0:98:c0:a9:b7:3c:d1:39:38:af:f9:23:8f:82:9d:38:00:cb: 4c:d9:bf:28:eb:c6:d7:1a:dd:b0:cb:19:00:df:6e:8a:c3:f8: 86:44:d5:5e:2c:bf:7c:4d:a2:73:a7:9f:5a:13:27:b1:fc:76: 4b:15:ce:5e:f4:01:a7:1d:5c:1d:dd:49:12:18:88:54:12:78: 18:90:22:40:b8:0c:37:24:89:a4:52:71:d3:cc:bb:7c:b4:de: f2:78:89:90:2e:cb:83:ef:d5:75:14:67:58:e5:ff:3b:1d:7c: 89:d7:e3:c5:9d:49:76:8a:c6:2e:19:bf:97:a4:a5:aa:10:58: 52:d8:72:ef:43:04:3e:28:8a:f0:98:a1:2a:b8:b3:86:6f:f1: d1:d7:97:79:92:2d:94:d6:7f:29:fb:73:33:19:6b:c5:3c:3e: 7a:28:4e:1f:88:4b:bb:7e:94:26:e2:2a:24:c5:57:36:1f:3d: bf:c9:40:d0:aa:b6:85:d2:f8:3f:20:6c:2f:8a:52:79:ca:53: 25:a1:25:44:06:a5:66:57:d3:5d:94:d4:62:a9:e6:d6:d9:8f: d7:57:aa:f1:98:b6:4d:f4:42:e9:64:8a:76:32:af:aa:a7:cc: 37:15:f5:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6QqanPNCpsz7eREGFdrKrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjZTE1MDYzY2IwYjNlNzg4ODhjYjRkMGYyMmEwNGExOTNk ZDY3MDYwHhcNMjYwMTI2MTIyMzUwWhcNMjYwMTI3MTIyMzUwWjAzMTEwLwYDVQQD Eyg3YzY4M2QzMzVkZjc1ZDEyMGEwOWE2YmM3ODcxZGUxN2Q1NDY5MDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyujihjAMSPR4eYhD7GSEv5dHs6Mn JiePADkBK48eJB8kkblSHVxW6Oy9suz68+AxpNs9o/nLYoSR3LHfCCG21n1bFzCE Hy6MTU4y36wNMK78LlWhEt3N9C5VbIacculaaTtTjgDmjHv6bwpI/KMlN/myNuMs dtYm4NoidcENubHGGsBSJvMKb1DpsgW7h4Rojp4RiMqv/0D5UfCfw/REWR7aSl+b mhQ37uoDtfWImSl0w3QMZjIANgvR9krwE/bb11PMKs0+HO88IxZBNak45lVE77SY 8oQuOyiuMOJIsC27GrSxT8I5iLTwnzSyRUwIJpIjbeZTtsaSDl1kTIu8HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHxoPTNd910SCgmmvHhx3hfVRpAeMB8GA1UdIwQY MBaAFOzhUGPLCz54iIy00PIqBKGT3WcGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN09GUVk4c0xQbmlJakxUUThpb0VvWlBkWndZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81NDRiYzctZjIwNC00YTQwLWEzMGQt ODA1ZWZjZDExNDljLzEvN09GUVk4c0xQbmlJakxUUThpb0VvWlBkWndZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC81NDRiYzctZjIwNC00YTQwLWEzMGQtODA1ZWZjZDExNDlj LzEvN09GUVk4c0xQbmlJakxUUThpb0VvWlBkWndZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoSIJK2Kx 8LVSl7LNNMUYdYGr4JjAqbc80Tk4r/kjj4KdOADLTNm/KOvG1xrdsMsZAN9uisP4 hkTVXiy/fE2ic6efWhMnsfx2SxXOXvQBpx1cHd1JEhiIVBJ4GJAiQLgMNySJpFJx 08y7fLTe8niJkC7Lg+/VdRRnWOX/Ox18idfjxZ1JdorGLhm/l6SlqhBYUthy70ME PiiK8JihKrizhm/x0deXeZItlNZ/KftzMxlrxTw+eihOH4hLu36UJuIqJMVXNh89 v8lA0Kq2hdL4PyBsL4pSecpTJaElRAalZlfTXZTUYqnm1tmP11eq8Zi2TfRC6WSK djKvqqfMNxX1dw== -----END CERTIFICATE-----Generated at Mon Jan 26 22:59:33 2026 by rpki-client