This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft File: I7oexPA1py36OekwrY7FQ2jrevQ.mft (raw, json) Hash identifier: 4Dq301JsOlyPDPNgR5qGUSb1RJjUtFqkZySKQLinXhQ= Subject key identifier: 27:47:FC:18:04:27:67:55:80:A9:6B:BA:AC:3E:96:42:33:84:B8:EC Authority key identifier: 23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4 Certificate issuer: /CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4 Certificate serial: 019B785C98C0615767981AC2E54263BD9850 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft Manifest number: 17AD Signing time: Thu 01 Jan 2026 07:01:32 +0000 Manifest this update: Thu 01 Jan 2026 07:01:32 +0000 Manifest next update: Fri 02 Jan 2026 07:01:32 +0000 Files and hashes: 1: I7oexPA1py36OekwrY7FQ2jrevQ.crl (hash: vSJlcXTMPGbptFZow9C2k0mdcbbhjoM6CPKfq40t5D4=) 2: LrVwKiIfML7mAYKSwQjrFc9mp0A.roa (hash: pqGsuXC48BK/nJrmWeripHJL6964Try+bgZKQC5cMuM=) 3: bKwA7ygctFGfYxj37Ulrjy4h7wc.roa (hash: wDr01UuqGpYUgCW7TRCxOE6weB2OEkQge2nt3Tah0ms=) 4: b_MmvUZfA5ZZF4bFCypyK1p5UMI.roa (hash: 9E4PGJ6w5hYLiKvYcuEqwE8eKmB9cOnevFWIyVMZhgE=) 5: wmfmaFsDhu27cNgPElAJRkA9d2A.roa (hash: jsS53vdJzXk5aLl615moQFBVWf7IQgXR2RroQvAW/zQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 07:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:5c:98:c0:61:57:67:98:1a:c2:e5:42:63:bd:98:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4 Validity Not Before: Jan 1 07:01:32 2026 GMT Not After : Jan 2 07:01:32 2026 GMT Subject: CN=2747fc180427675580a96bbaac3e96423384b8ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:15:08:d2:3d:87:69:43:99:0b:7a:27:13:36: c7:18:58:ce:b0:8f:69:3b:69:41:76:59:22:8b:8b: de:9a:28:9a:4c:63:ef:4d:35:19:b2:4b:ed:38:18: 43:17:47:1d:de:82:ce:a4:da:b6:8f:78:2c:f2:e3: f1:88:df:72:72:58:42:7b:0b:22:d9:00:eb:c1:b6: 82:ce:56:8e:09:17:78:55:c2:7b:f1:c4:82:f0:63: a1:ed:cb:35:77:7a:73:79:b4:7b:de:98:df:a4:2c: ca:e9:0a:31:97:5b:b5:f4:a0:ea:77:b4:79:cb:bf: a9:0f:20:e2:9b:f1:06:0c:24:dd:82:5b:e2:65:3f: 5c:fd:8a:5b:6d:e5:bd:77:b4:10:43:3e:c3:2b:79: 5a:09:8f:89:c3:c7:8b:6d:d7:99:8d:5e:1e:f8:40: 1a:91:30:83:0a:d5:19:8f:5f:50:80:f5:c6:4d:2c: 21:4c:a6:ed:66:4b:24:4d:b3:33:09:fd:f9:82:5c: a6:64:66:e5:a2:1c:5b:83:4f:23:21:cd:47:a1:7f: 75:7a:e0:ca:57:4d:70:4e:10:c6:a5:0e:54:52:e6: f5:ee:ef:39:ac:87:b8:cd:bf:31:59:0a:b4:a9:ff: c1:63:71:1c:c3:29:32:2e:0a:6d:18:1a:77:6b:30: 58:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:47:FC:18:04:27:67:55:80:A9:6B:BA:AC:3E:96:42:33:84:B8:EC X509v3 Authority Key Identifier: keyid:23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:32:4d:17:dc:06:2e:02:58:b8:76:63:97:e7:a6:f7:24:5c: 08:34:7f:c5:8e:75:d2:db:95:ef:c6:1d:2c:b3:53:ca:d6:3d: cc:cb:64:5a:54:72:36:a0:a8:a4:97:47:d0:ec:9f:5c:f1:0b: 8a:e4:57:bb:57:c5:fc:4a:6b:36:be:73:b6:27:22:6d:ec:8b: 4b:05:54:35:b3:08:f6:47:ac:00:4a:17:b1:e4:61:5b:69:42: 67:51:33:3a:60:74:83:8d:eb:31:9c:2d:cf:a4:7e:01:e0:f0: 5f:d5:8d:ec:cb:1b:e1:27:20:74:b9:32:36:69:49:2a:7d:e4: b6:06:6e:20:f1:01:39:70:dd:e9:2b:af:cb:af:42:d2:d6:f5: f4:75:fb:35:8d:e3:85:11:d1:af:9e:96:dd:0b:01:0c:91:55: 48:80:f4:55:b4:0f:a8:d5:32:dd:da:ba:11:7d:e6:71:02:53: 67:0d:47:2a:a2:00:01:fa:52:b9:8a:92:33:41:7f:83:9a:e1: 5a:cb:e2:d7:77:e9:32:58:57:58:50:13:26:41:31:ab:9b:6b: 03:f3:f9:23:fa:76:dd:6b:d6:81:66:e7:e5:9c:4c:e2:e7:7a: c4:e1:83:ec:ee:2e:24:c1:aa:ef:f1:49:a0:09:79:9a:e2:7f: 97:83:fd:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4XJjAYVdnmBrC5UJjvZhQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzYmExZWM0ZjAzNWE3MmRmYTM5ZTkzMGFkOGVjNTQzNjhl YjdhZjQwHhcNMjYwMTAxMDcwMTMyWhcNMjYwMTAyMDcwMTMyWjAzMTEwLwYDVQQD EygyNzQ3ZmMxODA0Mjc2NzU1ODBhOTZiYmFhYzNlOTY0MjMzODRiOGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RUI0j2HaUOZC3onEzbHGFjOsI9p O2lBdlkii4vemiiaTGPvTTUZskvtOBhDF0cd3oLOpNq2j3gs8uPxiN9yclhCewsi 2QDrwbaCzlaOCRd4VcJ78cSC8GOh7cs1d3pzebR73pjfpCzK6Qoxl1u19KDqd7R5 y7+pDyDim/EGDCTdglviZT9c/YpbbeW9d7QQQz7DK3laCY+Jw8eLbdeZjV4e+EAa kTCDCtUZj19QgPXGTSwhTKbtZkskTbMzCf35glymZGblohxbg08jIc1HoX91euDK V01wThDGpQ5UUub17u85rIe4zb8xWQq0qf/BY3EcwykyLgptGBp3azBYrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCdH/BgEJ2dVgKlruqw+lkIzhLjsMB8GA1UdIwQY MBaAFCO6HsTwNact+jnpMK2OxUNo63r0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTdvZXhQQTFweTM2T2Vrd3JZN0ZRMmpyZXZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82MGVkMmQtMTZkNS00ZDBjLWE5NDct YmRlNjQ0OGI3ODZjLzEvSTdvZXhQQTFweTM2T2Vrd3JZN0ZRMmpyZXZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC82MGVkMmQtMTZkNS00ZDBjLWE5NDctYmRlNjQ0OGI3ODZj LzEvSTdvZXhQQTFweTM2T2Vrd3JZN0ZRMmpyZXZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAizJNF9wG LgJYuHZjl+em9yRcCDR/xY510tuV78YdLLNTytY9zMtkWlRyNqCopJdH0OyfXPEL iuRXu1fF/EprNr5zticibeyLSwVUNbMI9kesAEoXseRhW2lCZ1EzOmB0g43rMZwt z6R+AeDwX9WN7Msb4ScgdLkyNmlJKn3ktgZuIPEBOXDd6Suvy69C0tb19HX7NY3j hRHRr56W3QsBDJFVSID0VbQPqNUy3dq6EX3mcQJTZw1HKqIAAfpSuYqSM0F/g5rh Wsvi13fpMlhXWFATJkExq5trA/P5I/p23WvWgWbn5ZxM4ud6xOGD7O4uJMGq7/FJ oAl5muJ/l4P9gw== -----END CERTIFICATE-----Generated at Thu Jan 1 12:31:12 2026 by rpki-client