This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft File: 7FNfTIaAzg26SgPZXmZck8yZzrk.mft (raw, json) Hash identifier: 9TBAvvCNGNRFl2pKrVFrlCE+cOxDU+cNqebq3T62vdU= Subject key identifier: C0:9D:A2:68:D3:80:85:76:FE:3D:30:CC:4A:DD:CE:0E:3E:20:D7:87 Authority key identifier: EC:53:5F:4C:86:80:CE:0D:BA:4A:03:D9:5E:66:5C:93:CC:99:CE:B9 Certificate issuer: /CN=ec535f4c8680ce0dba4a03d95e665c93cc99ceb9 Certificate serial: 019BF8AD39A2202DAD8F09A1AD139C580AA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft Manifest number: 035D Signing time: Mon 26 Jan 2026 05:01:00 +0000 Manifest this update: Mon 26 Jan 2026 05:01:00 +0000 Manifest next update: Tue 27 Jan 2026 05:01:00 +0000 Files and hashes: 1: 6_ZblNm9ZRmYGkapxWHWsVXv62A.roa (hash: l1m5QGoRdp/fQXdkGDAgYT7UXYr7yNDfK4bT6u+JkJo=) 2: 7FNfTIaAzg26SgPZXmZck8yZzrk.crl (hash: JBnQ+rPasChYpOwr7wAWxVVJXhYDFgVEFFdvkIZkOsQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.crl rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:39:a2:20:2d:ad:8f:09:a1:ad:13:9c:58:0a:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec535f4c8680ce0dba4a03d95e665c93cc99ceb9 Validity Not Before: Jan 26 05:01:00 2026 GMT Not After : Jan 27 05:01:00 2026 GMT Subject: CN=c09da268d3808576fe3d30cc4addce0e3e20d787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:b7:04:ee:50:42:c3:7b:07:3e:a1:e6:1a:de: 09:4a:82:6a:ca:14:95:49:fa:c5:8c:71:46:ce:88: 13:48:c9:05:ef:97:9e:06:0e:28:01:a2:9b:07:46: 2d:df:26:4c:3f:51:2a:15:c6:ee:cf:0c:e9:1f:eb: 61:e6:63:de:3b:c0:00:02:b6:3d:15:8b:47:7e:3a: ad:17:0d:28:62:00:2b:13:c5:7a:85:3b:e2:1c:2e: 36:75:f0:84:ce:d8:69:28:31:87:62:1e:22:5b:97: 4b:cc:ef:11:25:4c:1b:d4:c2:bf:c4:d1:76:60:75: a1:94:78:11:5e:6d:b3:7a:f6:7b:08:46:09:a4:e8: c5:65:ab:83:3c:47:08:53:b7:44:85:ea:bc:6a:ae: 31:1e:b8:65:9d:cc:86:63:fc:e8:93:01:96:5c:06: c4:37:6e:3c:f9:66:bd:e3:a4:43:6e:4e:6a:5f:b6: 65:b3:ea:5a:7c:76:d5:ef:40:15:fc:1a:c9:58:18: 0a:22:ef:f5:4b:b5:35:d7:ab:78:51:7f:ab:a7:ad: cc:75:98:f4:a2:8b:98:6f:f1:c8:7b:29:e3:6f:d8: 21:2a:fa:da:bb:6b:06:68:94:74:5a:29:0e:12:2a: ac:cf:2d:35:5e:12:18:09:cf:70:a1:8a:6c:e8:22: 5d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:9D:A2:68:D3:80:85:76:FE:3D:30:CC:4A:DD:CE:0E:3E:20:D7:87 X509v3 Authority Key Identifier: keyid:EC:53:5F:4C:86:80:CE:0D:BA:4A:03:D9:5E:66:5C:93:CC:99:CE:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:66:ce:f5:03:61:ae:70:ff:4d:fa:15:d8:97:a0:8b:38:cf: 08:50:23:78:82:cd:ce:dc:50:91:7f:29:8a:90:d2:82:71:00: 96:d9:f5:31:a7:5f:18:77:99:d7:ce:7a:c5:a2:9f:a0:33:94: b6:5c:5e:fb:0e:9f:dd:1c:b0:b6:cd:dd:f5:3b:fb:85:4d:e5: 05:77:18:05:b5:f4:c9:c3:6b:89:fa:74:98:8b:0f:41:85:27: 11:2e:89:33:b7:a2:ed:5e:17:7a:4f:c6:b8:30:69:19:36:d6: f6:7b:fe:68:aa:73:12:e7:47:e1:9f:21:58:f2:73:21:92:f7: 93:fe:99:3d:1e:56:3d:0f:f9:1d:49:e6:ef:59:d0:8a:03:64: 56:80:7c:c6:23:f3:32:b4:9b:65:0a:cc:ef:13:d4:c8:6d:02: cf:68:73:b4:2a:34:01:af:01:b4:29:e7:5f:8d:eb:49:e7:6d: c3:94:c1:0e:fa:13:57:31:76:88:ba:9d:57:eb:c8:f8:4a:2e: d8:46:0b:c5:d6:46:45:8b:c6:52:8c:b8:7d:0a:ff:c8:38:0a: 99:a3:13:a8:a7:83:4b:90:c4:cd:07:f2:65:1e:22:30:2e:60: 0f:41:ee:b5:1c:fd:1b:96:86:73:d8:e1:dd:3b:85:bd:20:d0: 19:94:fb:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rTmiIC2tjwmhrROcWAqjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNTM1ZjRjODY4MGNlMGRiYTRhMDNkOTVlNjY1YzkzY2M5 OWNlYjkwHhcNMjYwMTI2MDUwMTAwWhcNMjYwMTI3MDUwMTAwWjAzMTEwLwYDVQQD EyhjMDlkYTI2OGQzODA4NTc2ZmUzZDMwY2M0YWRkY2UwZTNlMjBkNzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7LcE7lBCw3sHPqHmGt4JSoJqyhSV SfrFjHFGzogTSMkF75eeBg4oAaKbB0Yt3yZMP1EqFcbuzwzpH+th5mPeO8AAArY9 FYtHfjqtFw0oYgArE8V6hTviHC42dfCEzthpKDGHYh4iW5dLzO8RJUwb1MK/xNF2 YHWhlHgRXm2zevZ7CEYJpOjFZauDPEcIU7dEheq8aq4xHrhlncyGY/zokwGWXAbE N248+Wa946RDbk5qX7Zls+pafHbV70AV/BrJWBgKIu/1S7U116t4UX+rp63MdZj0 oouYb/HIeynjb9ghKvrau2sGaJR0WikOEiqszy01XhIYCc9woYps6CJdMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMCdomjTgIV2/j0wzErdzg4+INeHMB8GA1UdIwQY MBaAFOxTX0yGgM4NukoD2V5mXJPMmc65MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0ZOZlRJYUF6ZzI2U2dQWlhtWmNrOHlaenJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS83ZDAwMjktZjMzMC00YTY2LWJlZGMt NDJmMmZmODU5MzczLzEvN0ZOZlRJYUF6ZzI2U2dQWlhtWmNrOHlaenJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS83ZDAwMjktZjMzMC00YTY2LWJlZGMtNDJmMmZmODU5Mzcz LzEvN0ZOZlRJYUF6ZzI2U2dQWlhtWmNrOHlaenJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS2bO9QNh rnD/TfoV2JegizjPCFAjeILNztxQkX8pipDSgnEAltn1MadfGHeZ1856xaKfoDOU tlxe+w6f3Rywts3d9Tv7hU3lBXcYBbX0ycNrifp0mIsPQYUnES6JM7ei7V4Xek/G uDBpGTbW9nv+aKpzEudH4Z8hWPJzIZL3k/6ZPR5WPQ/5HUnm71nQigNkVoB8xiPz MrSbZQrM7xPUyG0Cz2hztCo0Aa8BtCnnX43rSedtw5TBDvoTVzF2iLqdV+vI+Eou 2EYLxdZGRYvGUoy4fQr/yDgKmaMTqKeDS5DEzQfyZR4iMC5gD0HutRz9G5aGc9jh 3TuFvSDQGZT7cA== -----END CERTIFICATE-----Generated at Mon Jan 26 15:05:01 2026 by rpki-client