This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft File: 97NANTBJjYJfLniKB2UDvJ3OFXQ.mft (raw, json) Hash identifier: 1ANxyCr4RFkvT5h65gzbvqzgQD3eUPdUpdwsGrZhKKw= Subject key identifier: 73:4F:66:FA:A0:89:89:3C:BA:3E:48:F7:2A:2E:E2:13:20:90:FE:15 Authority key identifier: F7:B3:40:35:30:49:8D:82:5F:2E:78:8A:07:65:03:BC:9D:CE:15:74 Certificate issuer: /CN=f7b3403530498d825f2e788a076503bc9dce1574 Certificate serial: 019BF9F6E9B90D2DEC6619152585DF29488D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft Manifest number: 08BE Signing time: Mon 26 Jan 2026 11:01:06 +0000 Manifest this update: Mon 26 Jan 2026 11:01:06 +0000 Manifest next update: Tue 27 Jan 2026 11:01:06 +0000 Files and hashes: 1: 97NANTBJjYJfLniKB2UDvJ3OFXQ.crl (hash: leZ0EnGsy3eRP3LV9oj0L+O2qZ+aXmVr3KeV8AwhsYc=) 2: EED8jCb4VbJslWOq8UPr8tNr3aA.roa (hash: yjwTF+aBKLvAeYWU6/tZkP3sQTuj3m2XXZAbp7NHWxI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 11:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:f6:e9:b9:0d:2d:ec:66:19:15:25:85:df:29:48:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7b3403530498d825f2e788a076503bc9dce1574 Validity Not Before: Jan 26 11:01:06 2026 GMT Not After : Jan 27 11:01:06 2026 GMT Subject: CN=734f66faa089893cba3e48f72a2ee2132090fe15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1b:d7:df:f0:93:4a:a8:ec:58:52:d0:7f:65: 67:2c:8a:6c:0e:f7:38:19:3e:a8:69:84:e6:2b:0f: 94:a9:3c:6d:17:ea:8f:06:14:a3:3d:4b:70:60:c5: 6b:63:23:ef:fb:d2:6f:ef:e4:0e:f0:66:2b:81:e7: fb:bd:b6:52:f6:d1:c1:0f:2c:fa:e9:ee:8e:ee:0c: 63:d9:ea:8c:6e:d7:d2:ef:9f:b6:be:0c:07:2b:ae: 19:62:43:d2:3b:d4:3d:1a:f9:cf:8a:0e:af:fc:18: 31:4e:b0:fa:fe:93:bf:c0:88:f4:f3:3d:0a:34:a0: fe:a0:71:9d:57:a7:6f:26:b9:3b:15:0a:21:50:c1: 67:14:bd:56:56:9d:86:ae:4f:95:5b:bc:c0:c8:bc: 62:69:b0:db:74:83:da:e0:55:3d:4b:19:94:02:c7: 04:1f:db:1b:2a:73:63:72:bd:ae:37:dc:a6:f1:46: 94:e9:1c:b4:98:f2:e1:79:67:b6:3f:b5:be:90:5a: 66:bb:5b:95:fa:a5:62:b8:f2:82:10:29:6f:ac:9a: f5:b3:e9:2b:d7:65:d5:7c:4f:0f:21:70:c5:ba:e4: 5f:ec:0f:78:a1:26:09:2b:c1:be:25:b4:e0:2a:ea: 4d:51:06:0f:a0:a1:5f:9b:de:34:11:38:12:0c:0d: f5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:4F:66:FA:A0:89:89:3C:BA:3E:48:F7:2A:2E:E2:13:20:90:FE:15 X509v3 Authority Key Identifier: keyid:F7:B3:40:35:30:49:8D:82:5F:2E:78:8A:07:65:03:BC:9D:CE:15:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:c5:ca:2b:ac:02:d1:5b:bd:c3:cc:36:01:2a:9a:22:0b:71: 85:55:c0:6d:37:62:cd:1f:90:58:ae:a2:46:45:f2:1d:3a:1e: 4f:c1:ec:d0:15:7e:e9:3e:6c:74:73:1f:22:d0:d8:85:17:a5: 51:64:64:05:94:fe:13:cc:7b:3d:fc:e2:d9:bb:e0:75:83:2c: 15:9b:2f:7b:9c:35:2f:32:4d:dd:b0:a2:e1:00:00:8c:71:2c: 71:c3:4c:32:cd:dc:00:4a:21:44:d1:c9:44:fa:a5:9b:c9:8f: 7e:90:6f:4d:ba:cb:22:5b:86:4b:57:1e:40:42:83:cf:64:c9: c9:ab:02:e8:3c:76:8c:ca:0c:57:e6:f4:c1:14:91:f4:27:df: d3:d5:ee:9e:84:c2:74:2e:ac:20:f3:3c:f8:c9:e0:f3:c6:63: 37:c8:c8:9c:eb:b1:df:0a:f6:85:53:3a:8d:d3:ee:1a:99:8e: c2:49:1d:9c:57:77:8f:c8:c5:d6:85:1d:59:e8:b9:23:ab:a2: 8e:c1:9d:be:48:88:15:2f:92:f8:38:15:9f:e2:cc:16:87:dc: f6:9b:e1:46:b1:c3:29:83:f9:e0:d6:5b:e6:68:25:18:4b:dc: 3c:43:51:c6:d7:fa:ae:1d:df:cd:07:71:82:20:5b:82:c4:83: 2c:3b:43:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv59um5DS3sZhkVJYXfKUiNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3YjM0MDM1MzA0OThkODI1ZjJlNzg4YTA3NjUwM2JjOWRj ZTE1NzQwHhcNMjYwMTI2MTEwMTA2WhcNMjYwMTI3MTEwMTA2WjAzMTEwLwYDVQQD Eyg3MzRmNjZmYWEwODk4OTNjYmEzZTQ4ZjcyYTJlZTIxMzIwOTBmZTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBvX3/CTSqjsWFLQf2VnLIpsDvc4 GT6oaYTmKw+UqTxtF+qPBhSjPUtwYMVrYyPv+9Jv7+QO8GYrgef7vbZS9tHBDyz6 6e6O7gxj2eqMbtfS75+2vgwHK64ZYkPSO9Q9GvnPig6v/BgxTrD6/pO/wIj08z0K NKD+oHGdV6dvJrk7FQohUMFnFL1WVp2Grk+VW7zAyLxiabDbdIPa4FU9SxmUAscE H9sbKnNjcr2uN9ym8UaU6Ry0mPLheWe2P7W+kFpmu1uV+qViuPKCEClvrJr1s+kr 12XVfE8PIXDFuuRf7A94oSYJK8G+JbTgKupNUQYPoKFfm940ETgSDA31ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHNPZvqgiYk8uj5I9you4hMgkP4VMB8GA1UdIwQY MBaAFPezQDUwSY2CXy54igdlA7ydzhV0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTdOQU5UQkpqWUpmTG5pS0IyVUR2SjNPRlhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82NmU3MGMtNjQ3MS00NTkyLWExMzQt NDBkZDJjNzVmMWI3LzEvOTdOQU5UQkpqWUpmTG5pS0IyVUR2SjNPRlhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi82NmU3MGMtNjQ3MS00NTkyLWExMzQtNDBkZDJjNzVmMWI3 LzEvOTdOQU5UQkpqWUpmTG5pS0IyVUR2SjNPRlhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATsXKK6wC 0Vu9w8w2ASqaIgtxhVXAbTdizR+QWK6iRkXyHToeT8Hs0BV+6T5sdHMfItDYhRel UWRkBZT+E8x7Pfzi2bvgdYMsFZsve5w1LzJN3bCi4QAAjHEsccNMMs3cAEohRNHJ RPqlm8mPfpBvTbrLIluGS1ceQEKDz2TJyasC6Dx2jMoMV+b0wRSR9Cff09XunoTC dC6sIPM8+Mng88ZjN8jInOux3wr2hVM6jdPuGpmOwkkdnFd3j8jF1oUdWei5I6ui jsGdvkiIFS+S+DgVn+LMFofc9pvhRrHDKYP54NZb5mglGEvcPENRxtf6rh3fzQdx giBbgsSDLDtDUA== -----END CERTIFICATE-----Generated at Mon Jan 26 20:45:42 2026 by rpki-client