This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.mft File: _7JidnKHfQ9t6bxOfhhu7dE1YRA.mft (raw, json) Hash identifier: v/UBNnyvTCddVoFwQ8PqwTiSD3e5gyNG0cnJ35DqGSo= Subject key identifier: 86:CC:04:23:F3:49:C3:09:70:15:87:41:75:F4:8A:99:00:FC:DD:31 Authority key identifier: FF:B2:62:76:72:87:7D:0F:6D:E9:BC:4E:7E:18:6E:ED:D1:35:61:10 Certificate issuer: /CN=ffb2627672877d0f6de9bc4e7e186eedd1356110 Certificate serial: 019BF8E442BE18EC8B4FBC40AE8362F37147 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.mft Manifest number: 05CE Signing time: Mon 26 Jan 2026 06:01:07 +0000 Manifest this update: Mon 26 Jan 2026 06:01:07 +0000 Manifest next update: Tue 27 Jan 2026 06:01:07 +0000 Files and hashes: 1: 3jq3JT05Xk8RZ2a5qjD2FUJa1Vg.roa (hash: BN7qrk5PhVCDMZZc/gkWTb+z7DTTxiTcCVTVZQiCQ5A=) 2: R4HUGaPeCwpmGyYfmB_w_FLU9aU.roa (hash: 9kclGgorPQiy/7RiiESZuIbnKKNKbn26RfPmhg3Nf9M=) 3: XKlT2jqfx7mUYQGQILaSz-pvr70.roa (hash: djPN7IeVrJFgIcui84THNQwdVbzribIolkuZJaf/8h0=) 4: _7JidnKHfQ9t6bxOfhhu7dE1YRA.crl (hash: rfAGVuDUie6Xdz5oLDpIrxGmUUReHtTA5CtH5C5hTjE=) 5: ff-7UUK3Nr75A4sqHWJNBL8K3Qc.roa (hash: XWnpB5O/LzDqWZHyZuA/VcqD8rKxfQyaQ/Qn1INNnM4=) 6: r6x-mCfX6y2HE8Fca-6L19rnZBI.roa (hash: uQHVblgOp1wekrgJVHdlCHMrkJ9aLpwbv/ZWjTHqqwM=) 7: rrn-hLlASc3QfQ_2G9XagIYTuhQ.roa (hash: 6mhOZyZWiBej5y33Jy7KbJNVz0VK2ieBWiaEGjbBwok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.crl rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.mft rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:e4:42:be:18:ec:8b:4f:bc:40:ae:83:62:f3:71:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffb2627672877d0f6de9bc4e7e186eedd1356110 Validity Not Before: Jan 26 06:01:07 2026 GMT Not After : Jan 27 06:01:07 2026 GMT Subject: CN=86cc0423f349c3097015874175f48a9900fcdd31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:33:18:fc:a6:ff:ef:38:9e:05:02:f2:02:8b: d5:67:56:79:14:3f:94:c6:bd:22:0e:9a:81:04:42: 80:64:01:9b:80:32:42:9d:a0:68:52:b4:79:75:4d: 6a:2f:83:7a:14:70:f2:b1:60:6b:d7:bc:5f:d5:f5: ee:5f:09:49:e6:6b:a3:a4:45:66:c1:9d:f6:0a:5e: f7:ba:61:5d:3f:d9:94:37:53:49:ab:82:38:98:5c: 35:30:8c:d0:e9:ae:81:db:47:94:5f:ae:08:da:04: 31:5d:76:95:1e:46:47:eb:d2:c6:a3:54:a2:50:7c: 72:69:61:38:16:ee:d1:38:ff:89:00:f9:0f:f6:34: 85:96:93:7a:92:ca:e6:cf:7c:80:e1:50:10:1e:8b: 1b:97:ba:1b:4b:23:59:c0:33:37:8e:43:93:97:29: 0e:f9:5b:0f:f9:c7:ad:31:6f:ed:88:18:6d:9d:f3: 33:99:0a:bb:ef:b9:bb:de:69:54:30:da:b8:71:2a: 8f:3e:6e:ab:ca:84:43:a5:0e:76:c0:3a:d9:8a:8b: bd:11:36:e9:8f:09:10:dc:ca:81:4b:7a:08:d3:23: 47:54:95:a0:c8:e9:c6:58:10:19:e0:91:02:72:95: f5:f1:53:b3:5f:0e:cf:77:c6:81:8b:d7:73:4a:33: 3f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:CC:04:23:F3:49:C3:09:70:15:87:41:75:F4:8A:99:00:FC:DD:31 X509v3 Authority Key Identifier: keyid:FF:B2:62:76:72:87:7D:0F:6D:E9:BC:4E:7E:18:6E:ED:D1:35:61:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:c8:27:ca:37:2e:5e:c1:ff:1d:3e:ed:30:a4:e8:d4:0f:1e: 57:15:b4:e7:15:88:99:53:b4:35:74:d2:d3:58:d1:fe:84:96: 9d:71:54:f3:d1:ff:7f:3b:56:4c:97:87:d5:62:dd:70:67:57: 90:1b:27:89:8d:78:db:5e:f9:4d:fc:01:73:82:5c:aa:c6:9e: 19:67:41:51:e9:46:fa:7f:5b:39:e3:f3:2a:63:18:c6:1f:b1: 7c:9d:77:a2:b7:c4:7c:76:ac:4c:58:6f:1f:e1:1f:44:02:1b: 4a:84:95:3a:f3:ca:1e:f2:63:75:9d:dd:bf:85:6f:a2:be:4d: 92:ab:e5:9f:07:e3:87:03:6f:39:13:cf:ae:0f:4d:f1:79:06: a1:70:90:46:f2:d6:5d:f7:e1:88:e5:1b:36:fa:ca:f8:32:81: df:39:b6:0b:96:54:86:76:5b:2f:cf:f3:5a:71:85:0f:53:63: 4a:e5:2d:62:f0:29:81:5d:85:61:b4:b9:25:6b:de:3b:7b:b5: 46:19:41:6d:cc:ab:16:48:b7:ab:d5:3f:95:c5:1b:16:f0:4a: 0a:94:e5:f2:3e:97:fa:e6:0d:75:13:4f:2e:ee:e7:c7:9a:f8: de:08:d5:46:69:46:fe:a1:f5:e0:55:71:bf:1c:42:92:6c:b3: 84:1b:d9:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv45EK+GOyLT7xAroNi83FHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYjI2Mjc2NzI4NzdkMGY2ZGU5YmM0ZTdlMTg2ZWVkZDEz NTYxMTAwHhcNMjYwMTI2MDYwMTA3WhcNMjYwMTI3MDYwMTA3WjAzMTEwLwYDVQQD Eyg4NmNjMDQyM2YzNDljMzA5NzAxNTg3NDE3NWY0OGE5OTAwZmNkZDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzMY/Kb/7zieBQLyAovVZ1Z5FD+U xr0iDpqBBEKAZAGbgDJCnaBoUrR5dU1qL4N6FHDysWBr17xf1fXuXwlJ5mujpEVm wZ32Cl73umFdP9mUN1NJq4I4mFw1MIzQ6a6B20eUX64I2gQxXXaVHkZH69LGo1Si UHxyaWE4Fu7ROP+JAPkP9jSFlpN6ksrmz3yA4VAQHosbl7obSyNZwDM3jkOTlykO +VsP+cetMW/tiBhtnfMzmQq777m73mlUMNq4cSqPPm6ryoRDpQ52wDrZiou9ETbp jwkQ3MqBS3oI0yNHVJWgyOnGWBAZ4JECcpX18VOzXw7Pd8aBi9dzSjM/FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIbMBCPzScMJcBWHQXX0ipkA/N0xMB8GA1UdIwQY MBaAFP+yYnZyh30Pbem8Tn4Ybu3RNWEQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzdKaWRuS0hmUTl0NmJ4T2ZoaHU3ZEUxWVJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8yMmM1MTAtMzQ4MC00Y2UxLThkZDgt MTk3NDY5NDc1NThkLzEvXzdKaWRuS0hmUTl0NmJ4T2ZoaHU3ZEUxWVJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS8yMmM1MTAtMzQ4MC00Y2UxLThkZDgtMTk3NDY5NDc1NThk LzEvXzdKaWRuS0hmUTl0NmJ4T2ZoaHU3ZEUxWVJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANcgnyjcu XsH/HT7tMKTo1A8eVxW05xWImVO0NXTS01jR/oSWnXFU89H/fztWTJeH1WLdcGdX kBsniY142175TfwBc4JcqsaeGWdBUelG+n9bOePzKmMYxh+xfJ13orfEfHasTFhv H+EfRAIbSoSVOvPKHvJjdZ3dv4Vvor5NkqvlnwfjhwNvORPPrg9N8XkGoXCQRvLW XffhiOUbNvrK+DKB3zm2C5ZUhnZbL8/zWnGFD1NjSuUtYvApgV2FYbS5JWveO3u1 RhlBbcyrFki3q9U/lcUbFvBKCpTl8j6X+uYNdRNPLu7nx5r43gjVRmlG/qH14FVx vxxCkmyzhBvZ7g== -----END CERTIFICATE-----Generated at Mon Jan 26 09:29:05 2026 by rpki-client