This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.mft File: 7iNCg3Pc6KX5f0XvxsKLn7581U0.mft (raw, json) Hash identifier: ki2cPobQuo9rmGiXrptUwHGZA68Ng2JEHFswu0b3aeE= Subject key identifier: C3:39:64:25:E9:08:EF:18:03:D1:9D:E2:46:E6:F3:E9:9B:B1:9E:8A Authority key identifier: EE:23:42:83:73:DC:E8:A5:F9:7F:45:EF:C6:C2:8B:9F:BE:7C:D5:4D Certificate issuer: /CN=ee23428373dce8a5f97f45efc6c28b9fbe7cd54d Certificate serial: 019C0B8F0D4A643230B95D05C16E469E6E7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iNCg3Pc6KX5f0XvxsKLn7581U0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.mft Manifest number: 015B Signing time: Thu 29 Jan 2026 21:00:50 +0000 Manifest this update: Thu 29 Jan 2026 21:00:50 +0000 Manifest next update: Fri 30 Jan 2026 21:00:50 +0000 Files and hashes: 1: 7iNCg3Pc6KX5f0XvxsKLn7581U0.crl (hash: QpzEP6k2Pbu/vJsKvGPjdi6Y9V03UlC/uVu5XXVAa00=) 2: qwQxCub0ZLxdSIPTyyt0hid0rjE.roa (hash: 45em9x7vt23Yzt9V9VCNiHhaJfkIP4nZW7OBnn0WqDM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.mft rsync://rpki.ripe.net/repository/DEFAULT/7iNCg3Pc6KX5f0XvxsKLn7581U0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 20:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0b:8f:0d:4a:64:32:30:b9:5d:05:c1:6e:46:9e:6e:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee23428373dce8a5f97f45efc6c28b9fbe7cd54d Validity Not Before: Jan 29 21:00:50 2026 GMT Not After : Jan 30 21:00:50 2026 GMT Subject: CN=c3396425e908ef1803d19de246e6f3e99bb19e8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4f:22:48:31:9e:d2:2e:a9:b5:f9:ed:cd:3a: f0:16:1b:d1:a4:f6:d0:82:82:79:f3:ec:1d:74:9f: 93:9c:81:a0:c0:a7:b4:5b:51:5c:00:16:5c:19:db: c3:e5:1e:f8:89:54:73:85:19:65:0e:bc:2b:bd:a9: d1:64:34:db:34:d2:15:de:52:05:0b:9d:f3:9f:28: ca:1f:65:42:73:7c:b7:24:15:7d:84:18:00:e6:18: 69:45:85:ca:55:4f:29:a6:fa:3c:36:c7:8c:81:39: 28:ef:e4:19:37:8d:19:e3:46:f2:ba:da:88:ac:a8: f1:34:09:8b:a2:fc:41:dc:fe:b3:0f:f2:c1:35:2d: ab:b2:8b:58:e2:ef:ba:25:be:55:b6:cb:59:a9:91: 9b:49:f8:a6:6c:1e:9b:17:b0:ce:93:e0:3f:23:08: e0:58:1d:ad:7c:d7:9d:83:e4:3b:20:49:6d:17:a0: 40:85:da:2d:34:ed:cd:0b:de:e3:df:f3:71:80:dc: 8c:1c:77:ad:a7:6f:48:ae:b3:fc:2c:2e:cb:08:d3: 17:89:d2:9a:a5:5f:70:a2:3c:e6:bc:84:ae:dc:74: 06:05:94:8d:77:dc:cb:2d:1a:c7:57:cf:ea:24:9b: 6c:03:4d:39:26:c9:9d:45:14:c2:6b:91:71:03:16: 58:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:39:64:25:E9:08:EF:18:03:D1:9D:E2:46:E6:F3:E9:9B:B1:9E:8A X509v3 Authority Key Identifier: keyid:EE:23:42:83:73:DC:E8:A5:F9:7F:45:EF:C6:C2:8B:9F:BE:7C:D5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iNCg3Pc6KX5f0XvxsKLn7581U0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:fe:db:ae:67:0e:c3:30:f9:f6:66:d1:3e:12:9a:1b:39:1e: 99:64:0d:73:66:0b:f3:33:47:40:6b:fb:2b:cb:ca:b7:93:4f: 11:06:24:59:03:d3:57:e4:2f:bc:f3:57:73:38:1c:ed:94:cc: d8:49:bc:cb:00:93:0d:08:61:02:39:6a:10:8a:f1:7c:28:13: 07:26:20:6c:23:a5:71:15:62:6e:b9:2b:b2:ad:24:a0:5a:77: 33:30:27:f4:b4:50:6b:39:13:b2:f0:00:21:2f:02:6a:d4:e6: 14:82:13:3a:23:aa:50:11:c2:ea:7b:70:a3:ce:87:e6:85:99: a4:32:fd:f0:c6:b0:1b:b9:7b:79:1d:28:ce:f5:f5:d8:f2:65: d0:76:03:e0:46:a3:b0:14:50:5f:d9:6b:d1:1d:01:26:71:dc: 5a:db:75:ec:cf:b8:64:c3:4d:6e:da:60:1d:3c:e5:a8:1e:66: 00:12:9e:ae:a7:1a:e5:f5:d8:7e:f3:8b:83:7f:ca:29:d5:ca: 2a:7f:eb:c6:3c:f0:cf:73:05:ec:92:b3:56:9d:94:cf:6a:99: 8f:bf:de:33:e3:ff:b1:a9:8d:ce:e9:68:cd:8d:c8:1d:65:15: 5a:07:90:b0:49:60:34:8d:6f:7e:53:2f:83:63:49:a0:01:34: 2a:2e:6a:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwLjw1KZDIwuV0FwW5Gnm57MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMjM0MjgzNzNkY2U4YTVmOTdmNDVlZmM2YzI4YjlmYmU3 Y2Q1NGQwHhcNMjYwMTI5MjEwMDUwWhcNMjYwMTMwMjEwMDUwWjAzMTEwLwYDVQQD EyhjMzM5NjQyNWU5MDhlZjE4MDNkMTlkZTI0NmU2ZjNlOTliYjE5ZThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv08iSDGe0i6ptfntzTrwFhvRpPbQ goJ58+wddJ+TnIGgwKe0W1FcABZcGdvD5R74iVRzhRllDrwrvanRZDTbNNIV3lIF C53znyjKH2VCc3y3JBV9hBgA5hhpRYXKVU8ppvo8NseMgTko7+QZN40Z40byutqI rKjxNAmLovxB3P6zD/LBNS2rsotY4u+6Jb5VtstZqZGbSfimbB6bF7DOk+A/Iwjg WB2tfNedg+Q7IEltF6BAhdotNO3NC97j3/NxgNyMHHetp29IrrP8LC7LCNMXidKa pV9wojzmvISu3HQGBZSNd9zLLRrHV8/qJJtsA005JsmdRRTCa5FxAxZYYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMM5ZCXpCO8YA9Gd4kbm8+mbsZ6KMB8GA1UdIwQY MBaAFO4jQoNz3Oil+X9F78bCi5++fNVNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2lOQ2czUGM2S1g1ZjBYdnhzS0xuNzU4MVUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZmE4NTQtMDU5Ny00YzBkLWIwYjUt M2Y3N2ZkNDI3OTlhLzEvN2lOQ2czUGM2S1g1ZjBYdnhzS0xuNzU4MVUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZmE4NTQtMDU5Ny00YzBkLWIwYjUtM2Y3N2ZkNDI3OTlh LzEvN2lOQ2czUGM2S1g1ZjBYdnhzS0xuNzU4MVUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWf7brmcO wzD59mbRPhKaGzkemWQNc2YL8zNHQGv7K8vKt5NPEQYkWQPTV+QvvPNXczgc7ZTM 2Em8ywCTDQhhAjlqEIrxfCgTByYgbCOlcRVibrkrsq0koFp3MzAn9LRQazkTsvAA IS8CatTmFIITOiOqUBHC6ntwo86H5oWZpDL98MawG7l7eR0ozvX12PJl0HYD4Eaj sBRQX9lr0R0BJnHcWtt17M+4ZMNNbtpgHTzlqB5mABKerqca5fXYfvOLg3/KKdXK Kn/rxjzwz3MF7JKzVp2Uz2qZj7/eM+P/samNzulozY3IHWUVWgeQsElgNI1vflMv g2NJoAE0Ki5qwg== -----END CERTIFICATE-----Generated at Fri Jan 30 00:56:33 2026 by rpki-client