This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.mft File: c7mBy27nnS34yJ1qNMVUveP8x18.mft (raw, json) Hash identifier: WIoITwPsLiWdnYJHoTQDB0QMuFYBp0GOTkuO9DEwFD8= Subject key identifier: B8:6C:7C:E4:B4:CE:1B:38:B4:3A:34:A9:7B:3E:38:14:6C:A5:87:94 Authority key identifier: 73:B9:81:CB:6E:E7:9D:2D:F8:C8:9D:6A:34:C5:54:BD:E3:FC:C7:5F Certificate issuer: /CN=73b981cb6ee79d2df8c89d6a34c554bde3fcc75f Certificate serial: 019C04B2656142E7F0DEDFFA8DC96923BACF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c7mBy27nnS34yJ1qNMVUveP8x18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.mft Manifest number: 0BD7 Signing time: Wed 28 Jan 2026 13:02:05 +0000 Manifest this update: Wed 28 Jan 2026 13:02:05 +0000 Manifest next update: Thu 29 Jan 2026 13:02:05 +0000 Files and hashes: 1: FApYjE878gTQjnR6VxM2QnFzIxE.roa (hash: VNJOfYtDuAPjExn4P6G0DeQAutPtIF8Xz9lKtPfTGNc=) 2: c7mBy27nnS34yJ1qNMVUveP8x18.crl (hash: vlCGkzlk8HVWAQ//+Zw98eoW+jHUDNdCiw5Bc4gypQY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.mft rsync://rpki.ripe.net/repository/DEFAULT/c7mBy27nnS34yJ1qNMVUveP8x18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:04:b2:65:61:42:e7:f0:de:df:fa:8d:c9:69:23:ba:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73b981cb6ee79d2df8c89d6a34c554bde3fcc75f Validity Not Before: Jan 28 13:02:05 2026 GMT Not After : Jan 29 13:02:05 2026 GMT Subject: CN=b86c7ce4b4ce1b38b43a34a97b3e38146ca58794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ed:87:30:07:57:b9:d5:db:70:88:29:b9:2b: f2:00:02:84:be:71:07:c3:e7:ff:17:2a:76:aa:09: 35:ee:da:07:42:70:b1:38:ed:0c:12:d1:15:4b:14: b6:e3:32:cc:c3:33:7f:b9:6c:02:dc:74:18:f0:4b: 67:43:c2:d7:24:41:f0:ee:cd:09:c4:dd:cf:2d:1d: 54:c2:5c:78:f7:97:f6:6b:e4:90:4c:09:7d:13:cc: 6d:c6:87:24:e8:30:d4:ea:86:3d:20:01:17:a9:04: 72:ff:6b:10:79:4b:fa:57:aa:b0:dd:79:fe:45:44: 27:ca:aa:7c:4f:57:cf:95:0d:fb:45:38:c0:5e:cd: 51:07:b1:f1:ae:64:49:13:11:5d:f3:28:63:30:5d: d0:b2:c7:a3:0c:4e:7a:cc:cc:e1:a7:77:85:cd:4e: 26:4b:c5:84:ef:d6:56:0d:84:b1:26:b2:a4:63:c2: 15:a6:ea:b5:b5:0d:d9:52:ff:97:f1:24:04:46:b6: 29:38:93:e0:7a:63:32:f8:2d:0d:55:6f:1e:c8:ea: b0:f7:49:c8:b0:71:1e:d3:cd:e8:ab:bf:f9:a8:d6: 19:b3:7e:3e:fb:21:b4:97:bf:07:16:ba:92:8f:22: 35:da:1a:65:7e:bc:8b:93:4f:d9:fa:a2:3b:91:d3: 89:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:6C:7C:E4:B4:CE:1B:38:B4:3A:34:A9:7B:3E:38:14:6C:A5:87:94 X509v3 Authority Key Identifier: keyid:73:B9:81:CB:6E:E7:9D:2D:F8:C8:9D:6A:34:C5:54:BD:E3:FC:C7:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7mBy27nnS34yJ1qNMVUveP8x18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:d8:9a:77:ba:8a:0c:f7:7d:b5:86:39:ac:74:2d:67:c1:83: 38:12:da:ee:1c:09:36:45:87:f7:ea:f9:1a:1b:a3:bc:5b:32: 3a:57:5e:bd:bf:a4:24:8f:0b:d5:2e:0e:c0:9b:4a:64:2b:59: dd:de:76:05:d6:63:94:62:f5:dc:03:45:b5:f0:c0:96:96:84: f6:21:71:81:7b:78:58:e8:b5:71:0d:89:b5:41:11:7a:5c:92: 9b:72:e5:a7:e1:81:38:ae:4d:1d:bf:58:6a:6c:2e:c4:9c:ed: 9f:ab:de:cf:0c:91:35:b3:fe:da:ec:3e:8e:c5:e5:fc:04:65: 58:09:83:85:33:df:ac:9b:2b:5b:5c:8f:39:b1:f5:f8:73:49: 87:4d:47:c4:4f:a5:2c:68:27:0f:ba:68:cb:76:e0:4b:ce:21: 2f:77:57:14:2a:1f:c5:1c:0d:0a:0b:a9:75:7f:0b:9d:fc:1b: 7d:25:60:cb:2d:e4:60:44:f5:5b:db:8d:04:4b:0a:9a:8a:61: 44:44:55:ed:27:ad:eb:1d:98:b0:18:ee:c1:08:c4:7e:ac:86: 68:18:20:8c:1e:93:ca:43:95:98:73:25:4f:c4:0f:a0:3b:18: 06:07:41:a4:3c:73:81:44:37:06:fa:55:6a:67:bb:69:6b:d7: e1:b4:dc:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwEsmVhQufw3t/6jclpI7rPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczYjk4MWNiNmVlNzlkMmRmOGM4OWQ2YTM0YzU1NGJkZTNm Y2M3NWYwHhcNMjYwMTI4MTMwMjA1WhcNMjYwMTI5MTMwMjA1WjAzMTEwLwYDVQQD EyhiODZjN2NlNGI0Y2UxYjM4YjQzYTM0YTk3YjNlMzgxNDZjYTU4Nzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+2HMAdXudXbcIgpuSvyAAKEvnEH w+f/Fyp2qgk17toHQnCxOO0MEtEVSxS24zLMwzN/uWwC3HQY8EtnQ8LXJEHw7s0J xN3PLR1Uwlx495f2a+SQTAl9E8xtxock6DDU6oY9IAEXqQRy/2sQeUv6V6qw3Xn+ RUQnyqp8T1fPlQ37RTjAXs1RB7HxrmRJExFd8yhjMF3QssejDE56zMzhp3eFzU4m S8WE79ZWDYSxJrKkY8IVpuq1tQ3ZUv+X8SQERrYpOJPgemMy+C0NVW8eyOqw90nI sHEe083oq7/5qNYZs34++yG0l78HFrqSjyI12hplfryLk0/Z+qI7kdOJUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLhsfOS0zhs4tDo0qXs+OBRspYeUMB8GA1UdIwQY MBaAFHO5gctu550t+MidajTFVL3j/MdfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzdtQnkyN25uUzM0eUoxcU5NVlV2ZVA4eDE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9kMThiNWEtNDBlZi00Nzc5LWEwZTUt YWE1ODFkMzc4YTdjLzEvYzdtQnkyN25uUzM0eUoxcU5NVlV2ZVA4eDE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9kMThiNWEtNDBlZi00Nzc5LWEwZTUtYWE1ODFkMzc4YTdj LzEvYzdtQnkyN25uUzM0eUoxcU5NVlV2ZVA4eDE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEtiad7qK DPd9tYY5rHQtZ8GDOBLa7hwJNkWH9+r5GhujvFsyOldevb+kJI8L1S4OwJtKZCtZ 3d52BdZjlGL13ANFtfDAlpaE9iFxgXt4WOi1cQ2JtUERelySm3Llp+GBOK5NHb9Y amwuxJztn6vezwyRNbP+2uw+jsXl/ARlWAmDhTPfrJsrW1yPObH1+HNJh01HxE+l LGgnD7poy3bgS84hL3dXFCofxRwNCgupdX8LnfwbfSVgyy3kYET1W9uNBEsKmoph RERV7Set6x2YsBjuwQjEfqyGaBggjB6TykOVmHMlT8QPoDsYBgdBpDxzgUQ3BvpV ame7aWvX4bTcWQ== -----END CERTIFICATE-----Generated at Wed Jan 28 17:55:28 2026 by rpki-client