This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft File: KX75vv0afiTAzJcpmH_AZda3Ey8.mft (raw, json) Hash identifier: wJ0Vr9e4Bq0T2ZFtRldfMfwbGdoehwAnqrwtO8wyu7s= Subject key identifier: CF:BD:65:59:AD:A3:64:82:F6:0B:42:4E:11:DA:5F:44:C1:08:0E:62 Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Certificate serial: 019BE037275C72848172D291766DBFE62778 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft Manifest number: 0791 Signing time: Wed 21 Jan 2026 11:01:09 +0000 Manifest this update: Wed 21 Jan 2026 11:01:09 +0000 Manifest next update: Thu 22 Jan 2026 11:01:09 +0000 Files and hashes: 1: 07sEtYgDD4P8DDdRCKN5iG4AMmY.roa (hash: 1D7e4u6dPSbKGI3tO20WfhKAQ8qfjqNxZrP0FvNTv4I=) 2: 1qXgqeRwym7VByCjt4dnmoVzCYA.roa (hash: 2+inDA791AGBpU1a4CaMfg8jPit5Dw+MtJ4r3DaAdkE=) 3: 34HMPXP3gEFiutCTD0yGcBkIiXc.roa (hash: bxhgk0bC5DY2ITvwM+gQQ6zIFbXvjkWnDfe1DuZaAkQ=) 4: BkKBEoBuPl12ptQekVldu_PtnTA.roa (hash: DoBPvLm1XOv7qBE48sBP+sgHTxMy7m9SUCSPAi7sn8c=) 5: F03cOeX0lKxmDBnvII8QRD-Hu7s.roa (hash: vIDLN9sfXqleYhJzQ9IgaC3HLXJdLv9t/s+hdk041RA=) 6: HxaAYOadFUt_TLVqbPD2f0mU6HE.roa (hash: XUpOxSS1DmAvympYf4/luiffAEU6fK5cecSF5YVTzUA=) 7: J3qhVDm59tgGij8FSKNvb_obrQQ.roa (hash: Xmn0IdQ3k4dgxv6WEWS+sFmXZWMyOMaCwrNw7xwruBM=) 8: KX75vv0afiTAzJcpmH_AZda3Ey8.crl (hash: wXvmWM94ibMJGt6w+zv+TKHKOlbpgszNI2ivTacgP8Q=) 9: _bFFpYb8xNQtTH_3yPe_MDsPOZk.roa (hash: kDuaFVmunVmsMM4Jp1RzmY+vtuYMYvEW+p089DaIgrM=) 10: bzSWstjFIYA6blRoFbFSF1OGU6I.roa (hash: 7+JXpzWh9jeKZFp1Mfmg0BBiAYIO4Ce8OyrMvTMG8jY=) 11: e5H8rjjlVKlxfiAJ6IlS4G9OI08.roa (hash: NsnVR6BfsnGaMNfRKxx2wayfw4t4s2vRuzJq672PfAo=) 12: gATtXJLtqL0pyDE7aBGAHapu64E.roa (hash: ybBtdONa/UXYBRo/ca8SLa1FBdD6Jo+wJU9zhUxtzIQ=) 13: io5yyLDlHPGCEzGEMhnAmmdPx5s.roa (hash: jf2AJXsyEXE21uFIryQ83Vk8vd7pT2QW+lohF7eLHiQ=) 14: pBdOHT5tecjZpCjNpcydOSIR1PM.roa (hash: FLs6R8klsIETpJmcq3AWUpjGlsfTVyV7nd1ia0rcgok=) 15: sipyhYZTDUoVqJQxzsKOL-8LAkw.roa (hash: VV0MN0WQekFnJFeON5niYNrkxCw6xaFz74ZyByZEACQ=) 16: t-_MzdSyzfn3dt4ieMfm3gQyOb8.roa (hash: hc8v6I3bcH7DbpxSPGSHrr3KaGypH/0OP4q4IQAtF2g=) 17: t1miWIZwqhFnHm1V8OaiWDQkZvQ.roa (hash: 6fT15sb19FmXqLe9+b0pS8/2omYg2Drcv+bmA7jcy/I=) 18: vTkuXP1Lj0hgsJ2kb0Mr4vhSHB4.roa (hash: 936PpJYOLKkKzEDTt3gNFk26BfcHqznMHt6CO1ILfRY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 11:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:37:27:5c:72:84:81:72:d2:91:76:6d:bf:e6:27:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Validity Not Before: Jan 21 11:01:09 2026 GMT Not After : Jan 22 11:01:09 2026 GMT Subject: CN=cfbd6559ada36482f60b424e11da5f44c1080e62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f4:9d:c0:0f:54:37:35:f0:7e:46:1e:a6:ba: 37:3a:c8:48:67:43:fe:e3:c9:fc:64:6f:ad:51:cc: 60:23:31:86:10:fe:79:5e:29:12:62:ef:72:17:b8: fa:0f:04:e9:6f:93:04:8d:1b:c8:5d:77:19:c3:a5: 4c:3b:9a:e3:17:80:c8:28:78:eb:4b:64:86:f3:52: ff:67:bf:14:6c:de:49:0a:68:be:3f:16:c3:3e:cb: 2b:9a:8c:40:2c:19:60:55:ea:39:3b:b6:be:50:5e: b6:31:2c:15:a2:96:a8:b7:e5:e9:b9:19:1e:93:0b: 08:d2:88:d2:49:c5:ab:50:67:51:5c:f0:bf:e5:dc: f8:5e:80:48:94:ef:b6:2a:29:86:67:7a:4a:dc:75: a5:6d:98:23:39:f5:a7:2b:f2:be:fd:0c:89:aa:1d: 5b:a7:60:a1:80:6a:7c:bb:37:20:a9:31:62:e8:2b: 2a:db:e7:61:ab:44:df:83:57:3d:bf:7a:db:af:c7: 23:8b:89:f6:98:17:ad:7c:09:c8:aa:8a:3d:d7:4d: 40:f4:3e:f9:a7:f4:c8:63:e0:24:fa:09:d6:c8:16: e2:ed:5c:68:8a:b2:28:3f:ae:12:6c:d8:92:db:14: 09:b6:25:05:4e:25:8a:f9:b0:06:3e:9a:8d:c0:a5: cd:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:BD:65:59:AD:A3:64:82:F6:0B:42:4E:11:DA:5F:44:C1:08:0E:62 X509v3 Authority Key Identifier: keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:81:4c:0e:1c:73:3b:52:70:37:1c:15:c1:d7:87:88:d4:e5: b7:7c:f2:d5:93:67:75:bb:35:ea:8f:3e:33:34:83:df:98:a2: 68:5c:29:da:fa:e0:66:7b:6b:49:23:0f:80:79:3e:09:c5:e3: 18:57:e6:56:39:5c:43:33:c2:53:eb:38:11:cc:a8:e2:d5:63: 0e:ac:1f:60:d8:56:55:32:68:7e:0c:37:59:c0:cc:89:30:d5: 41:ca:69:1c:f7:2d:f2:86:e2:0d:7f:80:be:7a:19:d5:9d:1c: 70:d9:79:a4:30:56:37:b7:a1:a8:42:d4:36:9a:fd:98:ef:00: 84:a3:38:7f:67:38:3f:11:ea:01:8a:1b:2e:8f:81:dd:05:1d: 1b:b3:5d:69:26:7c:c3:ad:a4:70:98:79:3e:55:5c:9e:7d:27: 72:3e:33:9e:86:d3:0e:ae:b0:e7:59:d7:82:13:2b:76:2c:e0: 40:72:c6:da:d5:32:89:cf:ff:0d:74:a6:31:f4:6a:2e:ad:3e: 65:6e:d5:7b:97:b0:e9:fc:87:26:97:3c:b3:62:bf:2e:34:d8: 7d:fe:69:d1:60:2a:9e:01:e8:82:1c:a4:a9:72:19:0a:e2:36: 25:0c:51:4d:77:92:4f:07:5e:2b:dd:56:32:f6:84:41:c7:b3: f7:f2:c0:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvgNydccoSBctKRdm2/5id4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2VmOWJlZmQxYTdlMjRjMGNjOTcyOTk4N2ZjMDY1ZDZi NzEzMmYwHhcNMjYwMTIxMTEwMTA5WhcNMjYwMTIyMTEwMTA5WjAzMTEwLwYDVQQD EyhjZmJkNjU1OWFkYTM2NDgyZjYwYjQyNGUxMWRhNWY0NGMxMDgwZTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPSdwA9UNzXwfkYepro3OshIZ0P+ 48n8ZG+tUcxgIzGGEP55XikSYu9yF7j6DwTpb5MEjRvIXXcZw6VMO5rjF4DIKHjr S2SG81L/Z78UbN5JCmi+PxbDPssrmoxALBlgVeo5O7a+UF62MSwVopaot+XpuRke kwsI0ojSScWrUGdRXPC/5dz4XoBIlO+2KimGZ3pK3HWlbZgjOfWnK/K+/QyJqh1b p2ChgGp8uzcgqTFi6Csq2+dhq0Tfg1c9v3rbr8cji4n2mBetfAnIqoo9101A9D75 p/TIY+Ak+gnWyBbi7VxoirIoP64SbNiS2xQJtiUFTiWK+bAGPpqNwKXNNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+9ZVmto2SC9gtCThHaX0TBCA5iMB8GA1UdIwQY MBaAFCl++b79Gn4kwMyXKZh/wGXWtxMvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWIt ZGVlNzY4NjAwMTNkLzEvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWItZGVlNzY4NjAwMTNk LzEvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE4FMDhxz O1JwNxwVwdeHiNTlt3zy1ZNndbs16o8+MzSD35iiaFwp2vrgZntrSSMPgHk+CcXj GFfmVjlcQzPCU+s4Ecyo4tVjDqwfYNhWVTJofgw3WcDMiTDVQcppHPct8obiDX+A vnoZ1Z0ccNl5pDBWN7ehqELUNpr9mO8AhKM4f2c4PxHqAYobLo+B3QUdG7NdaSZ8 w62kcJh5PlVcnn0ncj4znobTDq6w51nXghMrdizgQHLG2tUyic//DXSmMfRqLq0+ ZW7Ve5ew6fyHJpc8s2K/LjTYff5p0WAqngHoghykqXIZCuI2JQxRTXeSTwdeK91W MvaEQcez9/LA5A== -----END CERTIFICATE-----Generated at Wed Jan 21 17:01:18 2026 by rpki-client