This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft File: A7DUU6H8523DQvF17tz3ogrV2Ro.mft (raw, json) Hash identifier: o4SVVO0cnStnJWOmgCJxxVpka/tp/FKs1ErSRkiWwl0= Subject key identifier: 48:6E:5E:BE:94:3E:4B:B2:F5:20:D6:14:B6:21:BE:F9:DD:38:7C:D2 Authority key identifier: 03:B0:D4:53:A1:FC:E7:6D:C3:42:F1:75:EE:DC:F7:A2:0A:D5:D9:1A Certificate issuer: /CN=03b0d453a1fce76dc342f175eedcf7a20ad5d91a Certificate serial: 019BFD9CEF83DEB0B9333B40F63A44FEBA30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7DUU6H8523DQvF17tz3ogrV2Ro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft Manifest number: 17E9 Signing time: Tue 27 Jan 2026 04:01:19 +0000 Manifest this update: Tue 27 Jan 2026 04:01:19 +0000 Manifest next update: Wed 28 Jan 2026 04:01:19 +0000 Files and hashes: 1: A7DUU6H8523DQvF17tz3ogrV2Ro.crl (hash: 6aZeNHtrhfS+EbWS9jxKkdLDqp3uRt9NvYo+yHQafao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft rsync://rpki.ripe.net/repository/DEFAULT/A7DUU6H8523DQvF17tz3ogrV2Ro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:9c:ef:83:de:b0:b9:33:3b:40:f6:3a:44:fe:ba:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03b0d453a1fce76dc342f175eedcf7a20ad5d91a Validity Not Before: Jan 27 04:01:19 2026 GMT Not After : Jan 28 04:01:19 2026 GMT Subject: CN=486e5ebe943e4bb2f520d614b621bef9dd387cd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a4:07:60:1d:fe:e2:cb:67:cb:85:2c:24:0e: f5:68:78:f2:15:da:32:84:d5:91:f7:d2:06:08:7b: 2e:e5:83:79:e1:5e:d4:35:2f:20:79:0a:8f:4a:ea: fb:67:a7:5e:b7:4e:26:05:ca:9a:09:83:5b:e9:a9: 00:6f:f5:f6:22:2d:09:4f:bc:45:73:2e:a1:46:a3: 0c:12:71:d0:b7:72:5a:47:dc:3c:01:f2:53:6f:67: b0:0b:4a:a3:7d:21:d5:1b:54:3b:c3:92:cf:83:b9: b2:7c:4e:35:85:e7:a0:ab:54:84:22:3f:0b:39:e8: b8:02:d2:88:13:e2:a7:49:62:28:87:23:d1:ca:d2: 4e:d9:ed:65:e7:ea:91:0d:aa:73:30:15:59:c1:28: 01:87:4c:3b:a5:84:ba:5f:ab:78:28:af:cb:5d:e6: c1:f8:4b:5d:21:22:73:a1:01:47:6e:7f:e9:ad:70: d4:fb:2a:4b:19:49:60:59:80:b1:41:5f:7b:32:ec: d7:12:54:7e:cd:27:84:da:3e:ff:ea:5c:af:76:a9: 77:82:27:32:54:93:61:f6:d1:7c:8d:31:15:12:c0: 5d:59:a3:72:a6:f8:f4:d5:33:50:4a:13:4a:79:73: c9:7c:b3:69:d9:76:aa:f2:f9:6a:43:28:ff:a7:de: 5b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:6E:5E:BE:94:3E:4B:B2:F5:20:D6:14:B6:21:BE:F9:DD:38:7C:D2 X509v3 Authority Key Identifier: keyid:03:B0:D4:53:A1:FC:E7:6D:C3:42:F1:75:EE:DC:F7:A2:0A:D5:D9:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7DUU6H8523DQvF17tz3ogrV2Ro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:1b:63:67:ae:bc:89:9e:5a:b3:5d:d8:8d:d3:8d:0d:30:7f: f4:7c:5b:4c:84:45:de:0b:15:1d:b1:cc:39:a8:68:de:3b:0e: 1a:2d:4b:b5:df:ae:76:0f:ec:4d:e6:81:ed:71:95:34:79:e8: 36:7e:dc:b7:c8:72:eb:86:89:d9:f7:db:e5:97:14:f7:74:51: f3:92:fc:0c:fc:ae:1c:fe:42:d7:e7:4f:f1:a4:ed:db:b0:fb: 5a:70:6a:8b:27:77:43:50:f6:20:79:36:45:29:11:c0:0d:7f: 19:d9:e2:87:f1:b2:45:96:bb:6b:1c:b3:fa:19:c9:ee:2a:63: 1b:33:18:e9:16:f6:fd:50:c5:f1:8e:16:49:9d:d6:8d:c1:77: 5f:a5:dd:9e:55:2e:e1:ee:82:a3:7f:cd:2a:ca:83:b5:d1:a1: b7:5f:8b:fa:2c:35:24:64:84:14:10:f5:8c:2a:65:2a:e3:4c: f9:73:19:73:5a:19:60:46:82:e1:38:7f:74:68:a4:84:91:09: 43:3a:6b:e0:35:91:63:a1:0c:76:2e:ce:b0:91:c6:06:85:1a: be:2d:b3:8b:f5:da:c7:51:83:05:74:60:3d:34:00:32:fa:fa: 6f:47:52:8b:85:02:f8:1b:b4:88:3b:84:4c:61:c1:b9:63:6d: 56:8d:2e:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9nO+D3rC5MztA9jpE/rowMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzYjBkNDUzYTFmY2U3NmRjMzQyZjE3NWVlZGNmN2EyMGFk NWQ5MWEwHhcNMjYwMTI3MDQwMTE5WhcNMjYwMTI4MDQwMTE5WjAzMTEwLwYDVQQD Eyg0ODZlNWViZTk0M2U0YmIyZjUyMGQ2MTRiNjIxYmVmOWRkMzg3Y2QyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaQHYB3+4stny4UsJA71aHjyFdoy hNWR99IGCHsu5YN54V7UNS8geQqPSur7Z6det04mBcqaCYNb6akAb/X2Ii0JT7xF cy6hRqMMEnHQt3JaR9w8AfJTb2ewC0qjfSHVG1Q7w5LPg7myfE41heegq1SEIj8L Oei4AtKIE+KnSWIohyPRytJO2e1l5+qRDapzMBVZwSgBh0w7pYS6X6t4KK/LXebB +EtdISJzoQFHbn/prXDU+ypLGUlgWYCxQV97MuzXElR+zSeE2j7/6lyvdql3gicy VJNh9tF8jTEVEsBdWaNypvj01TNQShNKeXPJfLNp2Xaq8vlqQyj/p95bDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEhuXr6UPkuy9SDWFLYhvvndOHzSMB8GA1UdIwQY MBaAFAOw1FOh/Odtw0Lxde7c96IK1dkaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTdEVVU2SDg1MjNEUXZGMTd0ejNvZ3JWMlJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9kNTk0YTQtNTcxNC00YzAwLWE4ZTYt YjQzMTJhNTg0NDBjLzEvQTdEVVU2SDg1MjNEUXZGMTd0ejNvZ3JWMlJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9kNTk0YTQtNTcxNC00YzAwLWE4ZTYtYjQzMTJhNTg0NDBj LzEvQTdEVVU2SDg1MjNEUXZGMTd0ejNvZ3JWMlJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABhtjZ668 iZ5as13YjdONDTB/9HxbTIRF3gsVHbHMOaho3jsOGi1Ltd+udg/sTeaB7XGVNHno Nn7ct8hy64aJ2ffb5ZcU93RR85L8DPyuHP5C1+dP8aTt27D7WnBqiyd3Q1D2IHk2 RSkRwA1/Gdnih/GyRZa7axyz+hnJ7ipjGzMY6Rb2/VDF8Y4WSZ3WjcF3X6XdnlUu 4e6Co3/NKsqDtdGht1+L+iw1JGSEFBD1jCplKuNM+XMZc1oZYEaC4Th/dGikhJEJ Qzpr4DWRY6EMdi7OsJHGBoUavi2zi/Xax1GDBXRgPTQAMvr6b0dSi4UC+Bu0iDuE TGHBuWNtVo0u8w== -----END CERTIFICATE-----Generated at Tue Jan 27 07:28:19 2026 by rpki-client