This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft File: tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft (raw, json) Hash identifier: XTWwTh+DZq7jsrzY4Pawqzd+c4F8nnQu42CocCdcg4s= Subject key identifier: 47:BA:9F:43:E9:F5:E4:36:38:80:60:AE:62:0F:21:92:A1:2E:74:61 Authority key identifier: B5:1E:C4:E5:8B:D4:4E:BA:C7:89:54:8F:31:9E:69:CC:9A:53:21:1F Certificate issuer: /CN=b51ec4e58bd44ebac789548f319e69cc9a53211f Certificate serial: 019BFF1D07BE2B461025381C7F9A8AB10778 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft Manifest number: 17EF Signing time: Tue 27 Jan 2026 11:00:51 +0000 Manifest this update: Tue 27 Jan 2026 11:00:51 +0000 Manifest next update: Wed 28 Jan 2026 11:00:51 +0000 Files and hashes: 1: 4uSa1k9qPhTt7gCV8bgatCnF4QE.roa (hash: AebIBoqTns7X5qm7Et95omb7FUrUebB3Fnzu8mpT4eM=) 2: tR7E5YvUTrrHiVSPMZ5pzJpTIR8.crl (hash: W9DaD6mcES7Kdx06YgdcnKv2s6doiwSDv0K9zdkPw6w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.crl rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft rsync://rpki.ripe.net/repository/DEFAULT/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ff:1d:07:be:2b:46:10:25:38:1c:7f:9a:8a:b1:07:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b51ec4e58bd44ebac789548f319e69cc9a53211f Validity Not Before: Jan 27 11:00:51 2026 GMT Not After : Jan 28 11:00:51 2026 GMT Subject: CN=47ba9f43e9f5e436388060ae620f2192a12e7461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:52:4b:5b:dc:cd:be:35:da:f8:f1:ba:6f:82: 13:2c:1d:c5:c1:f1:6c:33:06:6c:9a:96:b5:db:0f: c3:2d:32:5e:3d:a5:7a:ae:a0:71:25:11:81:30:2b: 80:14:11:5e:8e:9f:31:aa:5b:6f:e6:98:07:39:d1: f0:00:60:44:f2:f1:bc:a0:23:78:d6:d9:77:12:4a: ee:36:5e:3b:b8:89:a0:bd:7d:ec:15:5d:ee:08:46: 62:30:d8:7a:8e:b9:75:ae:7a:c3:bc:76:fe:c7:3c: d2:33:77:11:d3:b9:ec:d0:f2:4b:45:b2:18:26:9b: af:7c:c4:f7:13:b4:80:7f:e9:63:f4:8e:1a:ea:1b: 19:d6:55:12:6f:88:84:27:16:cf:74:73:95:04:9f: f1:f9:4b:9e:8d:57:04:18:f2:1e:e5:56:20:ce:7b: 2c:56:23:07:c9:54:d1:09:f0:74:39:5b:97:ff:38: 8e:04:7e:a4:41:f1:66:00:eb:b5:53:6a:89:d6:e0: a9:6b:06:e7:d2:c7:ab:3a:0d:05:46:0b:bf:36:fa: 37:0f:8b:d9:a2:dd:4a:04:8c:25:aa:28:0d:7e:a2: 85:de:a1:98:2d:c8:a8:63:26:21:f6:5b:96:ae:2f: 32:b3:f7:34:b1:50:b2:8d:fd:d8:84:8b:e4:c8:c9: a4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:BA:9F:43:E9:F5:E4:36:38:80:60:AE:62:0F:21:92:A1:2E:74:61 X509v3 Authority Key Identifier: keyid:B5:1E:C4:E5:8B:D4:4E:BA:C7:89:54:8F:31:9E:69:CC:9A:53:21:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:44:9d:8b:59:13:12:79:6e:c3:29:12:e3:15:e0:20:54:f9: 24:8a:49:fc:ec:77:f3:51:16:13:45:02:02:f5:aa:b3:3e:8f: 5d:5f:c1:65:67:fd:fa:d7:d2:82:e6:f0:04:34:92:3a:05:2e: 85:37:0b:00:14:2f:9c:2d:24:f4:48:52:3d:06:f4:83:c4:26: de:1c:81:77:f1:95:1d:05:68:ed:96:b2:26:b0:fb:1f:50:0a: f0:35:d2:90:33:d1:fe:f9:b9:ce:f7:94:65:70:a0:ad:a7:d0: 3d:28:b0:19:dd:0c:00:ff:0e:39:68:17:65:56:01:ca:fd:25: 05:d0:97:8b:cd:22:d6:93:22:58:52:f9:01:0d:cb:ad:3e:72: de:f0:b3:8c:61:07:d2:a5:58:19:e2:cc:bc:61:65:68:db:18: 5d:43:a5:66:8b:0c:ca:ff:dd:a4:99:4c:ce:00:ec:54:2f:44: be:bf:f2:b2:6c:96:9f:e4:ea:bb:f2:c7:5b:cd:da:88:ad:ef: 90:88:75:91:64:69:ae:0b:47:89:4a:80:dd:8e:a9:35:28:e9: 9b:ea:90:39:2f:aa:56:b0:62:87:ee:51:11:9d:b1:fb:45:e3: 39:99:1c:ad:39:3e:d8:b6:79:1e:af:7c:79:b0:da:46:43:ec: 95:cb:97:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv/HQe+K0YQJTgcf5qKsQd4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MWVjNGU1OGJkNDRlYmFjNzg5NTQ4ZjMxOWU2OWNjOWE1 MzIxMWYwHhcNMjYwMTI3MTEwMDUxWhcNMjYwMTI4MTEwMDUxWjAzMTEwLwYDVQQD Eyg0N2JhOWY0M2U5ZjVlNDM2Mzg4MDYwYWU2MjBmMjE5MmExMmU3NDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FJLW9zNvjXa+PG6b4ITLB3FwfFs MwZsmpa12w/DLTJePaV6rqBxJRGBMCuAFBFejp8xqltv5pgHOdHwAGBE8vG8oCN4 1tl3EkruNl47uImgvX3sFV3uCEZiMNh6jrl1rnrDvHb+xzzSM3cR07ns0PJLRbIY JpuvfMT3E7SAf+lj9I4a6hsZ1lUSb4iEJxbPdHOVBJ/x+UuejVcEGPIe5VYgznss ViMHyVTRCfB0OVuX/ziOBH6kQfFmAOu1U2qJ1uCpawbn0serOg0FRgu/Nvo3D4vZ ot1KBIwlqigNfqKF3qGYLcioYyYh9luWri8ys/c0sVCyjf3YhIvkyMmkLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEe6n0Pp9eQ2OIBgrmIPIZKhLnRhMB8GA1UdIwQY MBaAFLUexOWL1E66x4lUjzGeacyaUyEfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFI3RTVZdlVUcnJIaVZTUE1aNXB6SnBUSVI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9jYjg5MzAtYzA2My00MWUyLTgwNWQt YTdlNGJiNDE1Y2ZlLzEvdFI3RTVZdlVUcnJIaVZTUE1aNXB6SnBUSVI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9jYjg5MzAtYzA2My00MWUyLTgwNWQtYTdlNGJiNDE1Y2Zl LzEvdFI3RTVZdlVUcnJIaVZTUE1aNXB6SnBUSVI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgUSdi1kT EnluwykS4xXgIFT5JIpJ/Ox381EWE0UCAvWqsz6PXV/BZWf9+tfSgubwBDSSOgUu hTcLABQvnC0k9EhSPQb0g8Qm3hyBd/GVHQVo7ZayJrD7H1AK8DXSkDPR/vm5zveU ZXCgrafQPSiwGd0MAP8OOWgXZVYByv0lBdCXi80i1pMiWFL5AQ3LrT5y3vCzjGEH 0qVYGeLMvGFlaNsYXUOlZosMyv/dpJlMzgDsVC9Evr/ysmyWn+Tqu/LHW83aiK3v kIh1kWRprgtHiUqA3Y6pNSjpm+qQOS+qVrBih+5REZ2x+0XjOZkcrTk+2LZ5Hq98 ebDaRkPslcuXKg== -----END CERTIFICATE-----Generated at Tue Jan 27 12:49:23 2026 by rpki-client