This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft File: h7E5b9Eccw7yBEgSmygoVqxQTLc.mft (raw, json) Hash identifier: YM1nOQH7s4xTo4TPIBYLsySmJmBneUis5FuEt6mx5WI= Subject key identifier: 30:47:5C:37:9A:F8:4A:72:36:1E:07:20:89:AE:A7:FE:6F:BB:21:4D Authority key identifier: 87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7 Certificate issuer: /CN=87b1396fd11c730ef20448129b282856ac504cb7 Certificate serial: 019C0CD8C4C573642C5BCECE0FB4F77E6FBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft Manifest number: 070C Signing time: Fri 30 Jan 2026 03:00:58 +0000 Manifest this update: Fri 30 Jan 2026 03:00:58 +0000 Manifest next update: Sat 31 Jan 2026 03:00:58 +0000 Files and hashes: 1: c1HdnsaldKTIKaEky6ateQiz5kY.roa (hash: C5p2Kdt/yLKTGq1QeYyJYKudSwTzAauf7jP1eJuSAr8=) 2: h7E5b9Eccw7yBEgSmygoVqxQTLc.crl (hash: uR8l/ImX5+iXiFV6w34HkmcD31sFen7fjCdZLOAlb/g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 03:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0c:d8:c4:c5:73:64:2c:5b:ce:ce:0f:b4:f7:7e:6f:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87b1396fd11c730ef20448129b282856ac504cb7 Validity Not Before: Jan 30 03:00:58 2026 GMT Not After : Jan 31 03:00:58 2026 GMT Subject: CN=30475c379af84a72361e072089aea7fe6fbb214d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:eb:0e:cd:d6:83:5c:70:04:a7:25:74:23:53: a9:b6:89:6a:17:66:a2:05:4d:64:4d:29:ac:40:b4: 0c:a2:b2:dd:8c:f5:24:ed:58:b0:d2:e6:6e:95:f4: c8:a8:c0:5f:26:31:1a:3d:d2:29:1a:99:7a:63:13: 99:45:93:1d:52:62:bb:26:e5:cd:c9:e3:22:be:21: 0d:9f:05:55:44:9e:42:3e:50:1c:bd:26:be:d9:ca: 3a:6a:1d:e5:ac:5b:9c:cb:50:0e:36:0c:da:36:f3: 31:20:9c:26:ee:a8:c5:52:21:d0:cf:dd:1e:b5:f0: df:53:8e:a0:08:f5:fa:2b:1b:4d:ce:6c:42:67:cf: 69:11:43:d2:77:fe:59:1d:a3:52:3c:1b:69:e3:75: fb:9f:f2:85:81:b3:8f:26:be:53:4a:3e:c4:7e:08: a8:9e:9f:c0:80:ce:54:ec:8c:27:82:ad:6c:9f:ba: 25:e3:1c:9a:e2:d0:c8:c5:e3:68:98:da:27:9b:26: 89:82:23:a4:66:0a:9d:28:a0:86:a1:d8:ec:be:37: c0:e2:09:2d:e6:d6:af:6d:a4:2a:83:8b:c0:63:41: 22:34:cb:26:07:c1:27:b6:c2:f3:1c:0b:e7:9a:7c: df:22:ce:43:8c:8d:8a:77:d1:cf:c5:a3:79:7d:65: 51:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:47:5C:37:9A:F8:4A:72:36:1E:07:20:89:AE:A7:FE:6F:BB:21:4D X509v3 Authority Key Identifier: keyid:87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:fb:d3:43:e5:2b:c6:a3:a5:86:1e:73:66:b5:be:16:42:bb: a2:36:9c:7e:0c:1d:44:45:e4:d9:36:c0:a2:2a:ec:96:c6:97: 86:5c:74:c2:14:63:ea:bd:c3:c5:02:fc:3c:d7:94:5e:4a:2f: c4:fa:23:b0:75:90:58:45:a4:ad:b2:18:75:62:66:ad:8e:76: 9f:30:03:3e:c7:6c:18:96:07:b3:3a:db:c2:4a:7f:99:f9:05: 7b:32:0c:4c:00:aa:de:e6:7a:b2:eb:a8:40:71:97:3c:4b:3e: 26:0e:8e:b2:90:5d:30:9b:58:47:aa:40:6d:b2:40:ce:c0:0a: 7d:89:59:77:c5:11:11:f5:dc:2b:2a:c1:8b:5b:0d:93:b6:be: 44:9d:30:a4:b0:06:5f:3d:a5:ef:8d:1c:41:92:2d:6f:fd:b8: 00:ad:00:62:39:9d:93:c8:26:25:fc:7a:23:32:8e:08:c5:78: fe:e2:5a:c0:ef:f1:1f:fa:05:09:20:01:3c:fc:9a:c1:48:fa: 2b:57:43:5f:f7:19:13:26:9f:c7:ab:e6:53:2f:fa:7c:2e:c5: 30:19:25:d9:b1:28:98:19:23:96:fb:6a:b6:9f:73:f3:54:6c: 09:49:19:c1:84:7c:53:22:db:f9:3a:a6:ee:88:02:b1:32:93: df:1b:a0:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwM2MTFc2QsW87OD7T3fm+9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3YjEzOTZmZDExYzczMGVmMjA0NDgxMjliMjgyODU2YWM1 MDRjYjcwHhcNMjYwMTMwMDMwMDU4WhcNMjYwMTMxMDMwMDU4WjAzMTEwLwYDVQQD EygzMDQ3NWMzNzlhZjg0YTcyMzYxZTA3MjA4OWFlYTdmZTZmYmIyMTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApusOzdaDXHAEpyV0I1OptolqF2ai BU1kTSmsQLQMorLdjPUk7Viw0uZulfTIqMBfJjEaPdIpGpl6YxOZRZMdUmK7JuXN yeMiviENnwVVRJ5CPlAcvSa+2co6ah3lrFucy1AONgzaNvMxIJwm7qjFUiHQz90e tfDfU46gCPX6KxtNzmxCZ89pEUPSd/5ZHaNSPBtp43X7n/KFgbOPJr5TSj7Efgio np/AgM5U7Iwngq1sn7ol4xya4tDIxeNomNonmyaJgiOkZgqdKKCGodjsvjfA4gkt 5tavbaQqg4vAY0EiNMsmB8EntsLzHAvnmnzfIs5DjI2Kd9HPxaN5fWVRXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDBHXDea+EpyNh4HIImup/5vuyFNMB8GA1UdIwQY MBaAFIexOW/RHHMO8gRIEpsoKFasUEy3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDdFNWI5RWNjdzd5QkVnU215Z29WcXhRVExjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8zOGJjOTAtMWQ1My00ZDQ3LWJiZGIt ZjRlN2M5Y2M0M2ZmLzEvaDdFNWI5RWNjdzd5QkVnU215Z29WcXhRVExjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8zOGJjOTAtMWQ1My00ZDQ3LWJiZGItZjRlN2M5Y2M0M2Zm LzEvaDdFNWI5RWNjdzd5QkVnU215Z29WcXhRVExjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApvvTQ+Ur xqOlhh5zZrW+FkK7ojacfgwdREXk2TbAoirslsaXhlx0whRj6r3DxQL8PNeUXkov xPojsHWQWEWkrbIYdWJmrY52nzADPsdsGJYHszrbwkp/mfkFezIMTACq3uZ6suuo QHGXPEs+Jg6OspBdMJtYR6pAbbJAzsAKfYlZd8UREfXcKyrBi1sNk7a+RJ0wpLAG Xz2l740cQZItb/24AK0AYjmdk8gmJfx6IzKOCMV4/uJawO/xH/oFCSABPPyawUj6 K1dDX/cZEyafx6vmUy/6fC7FMBkl2bEomBkjlvtqtp9z81RsCUkZwYR8UyLb+Tqm 7ogCsTKT3xugxw== -----END CERTIFICATE-----Generated at Fri Jan 30 10:25:36 2026 by rpki-client