This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft File: X7piVd7aoaG2sXy46pHgLUErhxg.mft (raw, json) Hash identifier: eaIAF6esd97fqvh+NfJSLJNOmIKSxvsSOx4Q7gNenvI= Subject key identifier: 21:9A:D3:55:FB:0C:59:C9:DD:37:7F:1A:96:99:31:3B:52:4E:6D:84 Authority key identifier: 5F:BA:62:55:DE:DA:A1:A1:B6:B1:7C:B8:EA:91:E0:2D:41:2B:87:18 Certificate issuer: /CN=5fba6255dedaa1a1b6b17cb8ea91e02d412b8718 Certificate serial: 019BDF92465F442B13D8679F3D304144F221 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft Manifest number: 0CD2 Signing time: Wed 21 Jan 2026 08:01:03 +0000 Manifest this update: Wed 21 Jan 2026 08:01:03 +0000 Manifest next update: Thu 22 Jan 2026 08:01:03 +0000 Files and hashes: 1: X7piVd7aoaG2sXy46pHgLUErhxg.crl (hash: cou3EgMqRi9/KP2eOUNF971Z5jgkIv1a3nMyCt3C7XM=) 2: at5a5rELRNEAw0rbmlFozDBKmf0.roa (hash: fph6BRKPR1DclmnZB61WzWIE1l0c6loKAE1iu+Pb6gg=) 3: fN1BCGt6X78bmo40K4mqUHAHyNE.roa (hash: 4u131ZUFsLjOVWZz34pEcO0mSEYVLQJpztQcoDh3/Iw=) 4: o__yenjb_byTDMgOBxUzVji8MJk.roa (hash: i3sG4QUVi7SpGaea2GgrwUuE6uMpXt1hzOEHLJcR4vo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:df:92:46:5f:44:2b:13:d8:67:9f:3d:30:41:44:f2:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fba6255dedaa1a1b6b17cb8ea91e02d412b8718 Validity Not Before: Jan 21 08:01:03 2026 GMT Not After : Jan 22 08:01:03 2026 GMT Subject: CN=219ad355fb0c59c9dd377f1a9699313b524e6d84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:49:fa:37:f2:48:78:d2:0a:76:6b:35:48:14: f7:69:bc:26:31:2f:e0:72:11:4f:e7:8c:04:a9:d0: 77:bd:39:68:6b:bd:31:86:ec:75:9e:b0:66:a9:8b: 43:2f:ff:88:bb:94:8b:41:ff:28:e6:30:d5:9e:52: de:9f:68:8e:11:6d:da:79:6e:c0:48:f3:7a:01:1f: fd:94:01:73:3d:47:13:1d:36:22:7d:03:56:48:58: 2e:95:f1:25:b4:d1:d4:36:a5:a3:29:0f:5c:24:0e: 90:3d:33:b6:5b:ce:58:81:11:ea:4e:cc:12:bc:02: 12:4c:01:e5:ff:2d:96:24:81:03:69:ef:df:8a:18: 5b:fc:b1:fc:cd:77:19:bb:f2:9a:26:14:0e:a7:43: e7:3c:77:9e:98:76:47:da:eb:5d:d5:3c:34:b7:b0: 88:0b:15:87:cc:ec:57:40:d1:86:4d:68:48:e5:e2: dc:94:d2:16:06:c3:fa:cf:0e:cd:d9:b5:1b:cc:fb: f6:e3:31:e2:2b:ea:24:9e:d4:f4:35:05:a5:a1:0d: 05:08:63:80:74:02:1d:d3:e5:d6:81:b6:86:60:7a: 7e:9b:4d:50:fc:15:86:e1:4e:33:41:47:76:8c:df: b3:47:1e:62:53:be:c1:ff:3d:de:33:81:7e:36:55: 04:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:9A:D3:55:FB:0C:59:C9:DD:37:7F:1A:96:99:31:3B:52:4E:6D:84 X509v3 Authority Key Identifier: keyid:5F:BA:62:55:DE:DA:A1:A1:B6:B1:7C:B8:EA:91:E0:2D:41:2B:87:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:dd:fa:03:80:01:1f:f5:e4:2f:f5:ad:93:f3:31:35:06:e5: 64:d0:87:09:4e:0f:e1:c5:19:46:21:97:bf:28:6e:01:5c:72: 49:69:8a:1c:5f:07:e3:50:cf:52:38:dd:18:a9:dc:e1:e5:8e: 11:5d:e1:aa:29:c1:ea:04:04:ae:e6:21:4c:25:96:fc:f9:e0: 0a:23:70:c3:93:ec:56:bc:5a:26:02:e1:fc:a1:e9:4f:c7:a4: 03:68:bc:40:99:fd:79:56:19:51:6c:97:fc:c7:72:2f:89:d9: 77:a1:a0:9a:e8:20:22:3d:00:dd:f6:17:63:71:38:6c:c9:2b: c1:ee:b1:f8:78:38:0a:26:63:dc:9d:b7:04:73:76:70:e7:29: bc:17:08:51:8d:ad:7d:c2:34:d2:6d:cd:1b:b2:c7:84:62:3a: 06:4f:ad:f1:73:cd:ca:3c:ae:4e:39:f3:5a:b8:17:13:6e:21: 01:67:c7:f1:f2:22:ba:c2:47:4a:03:bd:95:91:88:68:d4:5c: c5:0e:3e:db:b9:98:a0:6a:ca:ed:bf:49:86:32:fc:73:53:a1: d6:cf:66:ce:57:8b:43:e1:4c:c2:a8:2b:ad:65:ba:43:a7:b3: e7:17:48:5b:a3:fb:5c:ab:d8:90:71:03:72:99:64:e8:28:a6: bb:2a:8c:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvfkkZfRCsT2GefPTBBRPIhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYmE2MjU1ZGVkYWExYTFiNmIxN2NiOGVhOTFlMDJkNDEy Yjg3MTgwHhcNMjYwMTIxMDgwMTAzWhcNMjYwMTIyMDgwMTAzWjAzMTEwLwYDVQQD EygyMTlhZDM1NWZiMGM1OWM5ZGQzNzdmMWE5Njk5MzEzYjUyNGU2ZDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7kn6N/JIeNIKdms1SBT3abwmMS/g chFP54wEqdB3vTloa70xhux1nrBmqYtDL/+Iu5SLQf8o5jDVnlLen2iOEW3aeW7A SPN6AR/9lAFzPUcTHTYifQNWSFgulfEltNHUNqWjKQ9cJA6QPTO2W85YgRHqTswS vAISTAHl/y2WJIEDae/fihhb/LH8zXcZu/KaJhQOp0PnPHeemHZH2utd1Tw0t7CI CxWHzOxXQNGGTWhI5eLclNIWBsP6zw7N2bUbzPv24zHiK+okntT0NQWloQ0FCGOA dAId0+XWgbaGYHp+m01Q/BWG4U4zQUd2jN+zRx5iU77B/z3eM4F+NlUErQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCGa01X7DFnJ3Td/GpaZMTtSTm2EMB8GA1UdIwQY MBaAFF+6YlXe2qGhtrF8uOqR4C1BK4cYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDdwaVZkN2FvYUcyc1h5NDZwSGdMVUVyaHhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS85MWE3NzAtODI4ZC00ZTJiLWJkODEt NjFlNTEyYmEyNWI3LzEvWDdwaVZkN2FvYUcyc1h5NDZwSGdMVUVyaHhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS85MWE3NzAtODI4ZC00ZTJiLWJkODEtNjFlNTEyYmEyNWI3 LzEvWDdwaVZkN2FvYUcyc1h5NDZwSGdMVUVyaHhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqd36A4AB H/XkL/Wtk/MxNQblZNCHCU4P4cUZRiGXvyhuAVxySWmKHF8H41DPUjjdGKnc4eWO EV3hqinB6gQEruYhTCWW/PngCiNww5PsVrxaJgLh/KHpT8ekA2i8QJn9eVYZUWyX /MdyL4nZd6GgmuggIj0A3fYXY3E4bMkrwe6x+Hg4CiZj3J23BHN2cOcpvBcIUY2t fcI00m3NG7LHhGI6Bk+t8XPNyjyuTjnzWrgXE24hAWfH8fIiusJHSgO9lZGIaNRc xQ4+27mYoGrK7b9JhjL8c1Oh1s9mzleLQ+FMwqgrrWW6Q6ez5xdIW6P7XKvYkHED cplk6CimuyqMKQ== -----END CERTIFICATE-----Generated at Wed Jan 21 17:01:18 2026 by rpki-client