This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft File: a7odJOcsQ57HpcvcORNX3YnLhqs.mft (raw, json) Hash identifier: z4PZKcnHy6mDPyxl5qMt9jMKS4FMzclGTQG/Pry40Y8= Subject key identifier: 3F:97:72:2C:DC:7E:64:36:57:A3:76:13:F0:90:49:54:21:B1:D7:7F Authority key identifier: 6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB Certificate issuer: /CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab Certificate serial: 019BFFC1BE23EBE37D5D069DE03E3282F74E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft Manifest number: 0BF4 Signing time: Tue 27 Jan 2026 14:00:45 +0000 Manifest this update: Tue 27 Jan 2026 14:00:45 +0000 Manifest next update: Wed 28 Jan 2026 14:00:45 +0000 Files and hashes: 1: BTNbf-Zetnrn5fG4oMBQEb3Lp6E.roa (hash: A1g/+HrCWiAYQ0oLvI3fSXeEtYJcIWvKDusWeJft4J0=) 2: a7odJOcsQ57HpcvcORNX3YnLhqs.crl (hash: CddXARYefgLXXmO/K4sFKW8vgeSHFVlXK/Rssu3uWWc=) 3: wWQwJt5nLKI1O5iEWrX6yUX3ERA.roa (hash: /R1mextPgTI5TYtyAkChJlhhx20Cv1HoCUbU0zyH5Ho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 14:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ff:c1:be:23:eb:e3:7d:5d:06:9d:e0:3e:32:82:f7:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab Validity Not Before: Jan 27 14:00:45 2026 GMT Not After : Jan 28 14:00:45 2026 GMT Subject: CN=3f97722cdc7e643657a37613f090495421b1d77f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:20:08:3e:b8:85:7f:a9:a3:50:6c:db:38:ad: fd:52:61:d0:7f:91:d6:71:40:a3:ff:7b:fd:bf:9d: a7:2b:23:32:a8:96:ee:3b:b3:70:ab:df:30:4c:0f: 22:88:2a:e5:d7:b3:1e:85:08:8d:93:67:ef:44:a4: 53:93:74:eb:ff:88:78:66:29:ba:fc:35:f6:72:55: 6c:17:da:ce:1e:21:55:41:b3:9c:c6:fb:71:73:ad: ad:66:24:da:84:84:b6:d3:14:a5:90:9e:88:de:67: 11:cf:f2:dd:6e:a4:f1:96:d9:17:0a:03:77:6e:a8: 7a:43:55:78:fd:ae:53:4d:d5:e6:ba:ca:a0:27:7d: c7:f2:4c:a1:a3:b2:38:fa:27:0a:19:21:bd:b0:10: bf:7a:bf:bc:3e:56:fa:f6:cc:70:41:b5:7b:d3:90: 08:74:b4:a1:ee:34:35:c0:f7:1d:ab:13:09:36:f6: 65:65:0c:dc:04:bf:a6:d4:06:33:bc:07:84:75:5e: e2:80:a8:45:98:a7:40:67:9c:b2:ba:b2:6f:76:66: 64:e3:49:3c:af:12:e5:af:80:d9:48:ea:a1:05:93: 23:c5:d1:13:8e:21:26:e5:7d:c3:fd:da:49:07:6e: d8:86:3b:aa:f5:bf:b4:85:0e:0b:69:a9:84:bd:4f: a8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:97:72:2C:DC:7E:64:36:57:A3:76:13:F0:90:49:54:21:B1:D7:7F X509v3 Authority Key Identifier: keyid:6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:f6:21:bd:86:f5:08:ad:24:98:60:df:d3:51:af:3d:e3:b8: 08:a8:06:bc:35:ef:ed:4f:1f:90:06:2c:92:17:d9:41:a8:89: 2f:c0:a7:a3:87:75:58:24:27:ab:97:bf:c7:5c:8d:a0:2c:aa: 09:5c:38:58:7b:9c:69:a0:07:0a:c1:cb:32:5e:f3:b7:06:7a: 0c:50:b9:f0:ac:67:de:1a:03:96:b6:24:bd:35:2b:ce:d1:0b: b2:e4:f8:0b:e9:fc:5d:2f:19:b2:63:68:20:bb:6b:bb:1a:d1: 55:51:8b:c3:f1:81:6f:37:e7:b0:9a:30:06:51:6a:85:9e:40: cf:fd:6a:00:ef:bb:f2:0f:ed:73:8a:37:27:5f:36:60:9e:e6: 5f:78:83:96:fd:67:93:86:56:56:78:07:c1:7c:d8:84:e6:70: f0:27:f7:b3:8e:4b:c0:e5:5b:7c:b3:7a:b1:0c:ae:0b:fd:b4: c4:bd:df:c1:09:eb:13:56:25:17:d1:8a:85:24:56:bf:c8:e0: b4:f9:fa:b6:f6:c9:bb:33:fe:23:de:6d:85:04:05:b3:c4:ba: 7d:67:f1:2b:5f:b3:07:49:9a:d3:9f:ee:05:cb:ab:e6:56:a9: 30:4d:46:15:ae:c5:40:88:e1:85:0d:03:60:69:92:fd:d4:36: 34:31:5b:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv/wb4j6+N9XQad4D4ygvdOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYmExZDI0ZTcyYzQzOWVjN2E1Y2JkYzM5MTM1N2RkODlj Yjg2YWIwHhcNMjYwMTI3MTQwMDQ1WhcNMjYwMTI4MTQwMDQ1WjAzMTEwLwYDVQQD EygzZjk3NzIyY2RjN2U2NDM2NTdhMzc2MTNmMDkwNDk1NDIxYjFkNzdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSAIPriFf6mjUGzbOK39UmHQf5HW cUCj/3v9v52nKyMyqJbuO7Nwq98wTA8iiCrl17MehQiNk2fvRKRTk3Tr/4h4Zim6 /DX2clVsF9rOHiFVQbOcxvtxc62tZiTahIS20xSlkJ6I3mcRz/LdbqTxltkXCgN3 bqh6Q1V4/a5TTdXmusqgJ33H8kyho7I4+icKGSG9sBC/er+8Plb69sxwQbV705AI dLSh7jQ1wPcdqxMJNvZlZQzcBL+m1AYzvAeEdV7igKhFmKdAZ5yyurJvdmZk40k8 rxLlr4DZSOqhBZMjxdETjiEm5X3D/dpJB27Yhjuq9b+0hQ4LaamEvU+o6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD+XcizcfmQ2V6N2E/CQSVQhsdd/MB8GA1UdIwQY MBaAFGu6HSTnLEOex6XL3DkTV92Jy4arMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTdvZEpPY3NRNTdIcGN2Y09STlgzWW5MaHFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9hOTRhNGMtYTU1Mi00NmY2LThhODEt Y2VmOTQ0ODEyNGIwLzEvYTdvZEpPY3NRNTdIcGN2Y09STlgzWW5MaHFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9hOTRhNGMtYTU1Mi00NmY2LThhODEtY2VmOTQ0ODEyNGIw LzEvYTdvZEpPY3NRNTdIcGN2Y09STlgzWW5MaHFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbPYhvYb1 CK0kmGDf01GvPeO4CKgGvDXv7U8fkAYskhfZQaiJL8Cno4d1WCQnq5e/x1yNoCyq CVw4WHucaaAHCsHLMl7ztwZ6DFC58Kxn3hoDlrYkvTUrztELsuT4C+n8XS8ZsmNo ILtruxrRVVGLw/GBbzfnsJowBlFqhZ5Az/1qAO+78g/tc4o3J182YJ7mX3iDlv1n k4ZWVngHwXzYhOZw8Cf3s45LwOVbfLN6sQyuC/20xL3fwQnrE1YlF9GKhSRWv8jg tPn6tvbJuzP+I95thQQFs8S6fWfxK1+zB0ma05/uBcur5lapME1GFa7FQIjhhQ0D YGmS/dQ2NDFbzw== -----END CERTIFICATE-----Generated at Tue Jan 27 17:14:25 2026 by rpki-client