This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.mft File: 7t4TuXp8d4rYAT-v-isbtkh2LPw.mft (raw, json) Hash identifier: h44o+BERCYqbBgowiA9Gj7yxCZUxlYimmKyoM+xLL/8= Subject key identifier: 7B:0A:FD:7E:29:D4:64:FD:1D:3D:61:22:24:F7:2E:1E:E1:06:C5:BD Authority key identifier: EE:DE:13:B9:7A:7C:77:8A:D8:01:3F:AF:FA:2B:1B:B6:48:76:2C:FC Certificate issuer: /CN=eede13b97a7c778ad8013faffa2b1bb648762cfc Certificate serial: 019BD7D8C6649E6FDB8F97B7E0E8260DC446 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7t4TuXp8d4rYAT-v-isbtkh2LPw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.mft Manifest number: 28 Signing time: Mon 19 Jan 2026 20:01:06 +0000 Manifest this update: Mon 19 Jan 2026 20:01:06 +0000 Manifest next update: Tue 20 Jan 2026 20:01:06 +0000 Files and hashes: 1: 7t4TuXp8d4rYAT-v-isbtkh2LPw.crl (hash: CvBxdAU6Y9wQCstWmNBogB6gZ25DcZB4rn1quMHb+lQ=) 2: rJsk5UMhrb6yg-v-N5l8AaeXSUI.asa (hash: r6SGrYKI+ASOCBn2fHuASlLRkC7+wUAXBFPIKFArmfM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.crl rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.mft rsync://rpki.ripe.net/repository/DEFAULT/7t4TuXp8d4rYAT-v-isbtkh2LPw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d7:d8:c6:64:9e:6f:db:8f:97:b7:e0:e8:26:0d:c4:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eede13b97a7c778ad8013faffa2b1bb648762cfc Validity Not Before: Jan 19 20:01:06 2026 GMT Not After : Jan 20 20:01:06 2026 GMT Subject: CN=7b0afd7e29d464fd1d3d612224f72e1ee106c5bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b8:79:43:d4:17:a2:3b:d0:2a:de:43:42:4c: 28:46:6b:8f:37:dc:68:5a:19:34:6e:97:2c:bb:b2: 83:52:db:8a:57:7e:9d:9b:6b:f1:69:74:22:5d:c4: 22:97:f5:ab:a2:85:a3:63:45:c0:bb:4b:cc:a3:29: ae:90:c6:c7:0c:2d:6f:e5:97:13:fe:af:94:23:a8: ec:12:cb:17:ff:84:1b:9e:9b:0e:31:da:4e:86:9f: e6:ee:7d:22:12:26:23:c6:bf:08:06:d2:f7:7f:8d: 84:42:05:55:67:6b:ee:b1:ad:84:5c:65:63:7b:40: ce:24:91:84:85:5f:ba:c2:2f:bb:56:47:4f:44:f9: 5e:9a:4b:d4:42:78:24:59:77:2f:fe:c2:dd:74:b9: c6:ad:ee:e7:67:f7:53:18:3e:80:d5:fb:31:7b:30: 38:f2:50:c1:36:65:ef:e8:a1:fc:1a:24:df:8d:fa: 8d:32:1f:e3:b5:8b:d4:ea:82:52:79:c7:3b:02:01: 47:b1:d4:4a:d6:57:28:46:ba:7d:c7:03:de:10:cd: 86:a4:7c:ee:23:d7:65:dc:e0:97:64:74:28:70:11: 90:11:0e:13:9f:95:c2:df:e8:32:66:99:b0:41:e2: 5f:d0:05:33:7d:79:44:21:a6:d5:e2:8e:97:05:81: cd:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:0A:FD:7E:29:D4:64:FD:1D:3D:61:22:24:F7:2E:1E:E1:06:C5:BD X509v3 Authority Key Identifier: keyid:EE:DE:13:B9:7A:7C:77:8A:D8:01:3F:AF:FA:2B:1B:B6:48:76:2C:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7t4TuXp8d4rYAT-v-isbtkh2LPw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:17:f8:0d:ca:95:36:a4:a6:00:9b:aa:33:f4:70:2a:af:9f: 8e:fa:13:61:57:3d:95:09:83:02:b3:c8:02:8e:46:00:63:ea: 8b:33:6e:5d:cb:11:e5:9e:0a:a4:50:11:09:bf:ca:62:dc:6d: ab:a7:22:9c:09:9f:99:e4:28:45:52:45:0c:f9:94:3a:d6:ed: d1:72:57:a4:5e:28:80:7b:f8:b5:0c:16:af:f8:d3:6e:1f:9f: 87:79:d6:b0:72:e2:45:55:eb:58:70:01:ff:31:86:69:ea:6f: ab:1c:13:36:1d:fb:1d:02:9e:17:8f:39:9c:8f:04:8d:7e:76: 86:e2:51:b3:dd:92:2b:17:77:43:2e:81:71:f3:d6:e4:fa:5b: 81:05:4a:dd:5d:f3:77:7b:2e:0f:00:f5:92:60:ab:16:a7:de: 0f:5c:ce:8e:f4:7d:7d:41:6d:27:17:68:6f:7a:c5:01:db:8c: 9c:1f:55:43:00:56:94:13:0a:0c:67:9a:10:f5:e4:8f:9d:57: ec:6f:d4:39:ea:be:9f:7f:e4:59:9e:b7:03:fb:29:4d:76:b2: 63:f4:8c:95:fb:ad:f6:de:45:8f:9e:be:11:e9:23:46:08:cd: 10:c6:79:b6:3c:8d:03:3d:9a:bf:91:85:aa:d5:9c:bb:e5:b6: 34:fe:60:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvX2MZknm/bj5e34OgmDcRGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlZGUxM2I5N2E3Yzc3OGFkODAxM2ZhZmZhMmIxYmI2NDg3 NjJjZmMwHhcNMjYwMTE5MjAwMTA2WhcNMjYwMTIwMjAwMTA2WjAzMTEwLwYDVQQD Eyg3YjBhZmQ3ZTI5ZDQ2NGZkMWQzZDYxMjIyNGY3MmUxZWUxMDZjNWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrh5Q9QXojvQKt5DQkwoRmuPN9xo Whk0bpcsu7KDUtuKV36dm2vxaXQiXcQil/WrooWjY0XAu0vMoymukMbHDC1v5ZcT /q+UI6jsEssX/4QbnpsOMdpOhp/m7n0iEiYjxr8IBtL3f42EQgVVZ2vusa2EXGVj e0DOJJGEhV+6wi+7VkdPRPlemkvUQngkWXcv/sLddLnGre7nZ/dTGD6A1fsxezA4 8lDBNmXv6KH8GiTfjfqNMh/jtYvU6oJSecc7AgFHsdRK1lcoRrp9xwPeEM2GpHzu I9dl3OCXZHQocBGQEQ4Tn5XC3+gyZpmwQeJf0AUzfXlEIabV4o6XBYHN6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHsK/X4p1GT9HT1hIiT3Lh7hBsW9MB8GA1UdIwQY MBaAFO7eE7l6fHeK2AE/r/orG7ZIdiz8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3Q0VHVYcDhkNHJZQVQtdi1pc2J0a2gyTFB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8wOTJjMWMtMjJmYi00OGFiLWJlOWMt YTUyMGRlNzU5YTUwLzEvN3Q0VHVYcDhkNHJZQVQtdi1pc2J0a2gyTFB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC8wOTJjMWMtMjJmYi00OGFiLWJlOWMtYTUyMGRlNzU5YTUw LzEvN3Q0VHVYcDhkNHJZQVQtdi1pc2J0a2gyTFB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsxf4DcqV NqSmAJuqM/RwKq+fjvoTYVc9lQmDArPIAo5GAGPqizNuXcsR5Z4KpFARCb/KYtxt q6cinAmfmeQoRVJFDPmUOtbt0XJXpF4ogHv4tQwWr/jTbh+fh3nWsHLiRVXrWHAB /zGGaepvqxwTNh37HQKeF485nI8EjX52huJRs92SKxd3Qy6BcfPW5PpbgQVK3V3z d3suDwD1kmCrFqfeD1zOjvR9fUFtJxdob3rFAduMnB9VQwBWlBMKDGeaEPXkj51X 7G/UOeq+n3/kWZ63A/spTXayY/SMlfut9t5Fj56+EekjRgjNEMZ5tjyNAz2av5GF qtWcu+W2NP5gnQ== -----END CERTIFICATE-----Generated at Tue Jan 20 02:13:50 2026 by rpki-client