This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.mft File: c7gWQOG2T1HSun149nd8BW0RVL8.mft (raw, json) Hash identifier: KbhIP4YgOoip/L357ejEIIfgp1Y9kuqARsYYPaM8UaI= Subject key identifier: 0B:3B:FF:CA:67:52:A9:71:C0:3B:DE:33:C1:0B:7E:C7:DB:0F:65:0A Authority key identifier: 73:B8:16:40:E1:B6:4F:51:D2:BA:7D:78:F6:77:7C:05:6D:11:54:BF Certificate issuer: /CN=73b81640e1b64f51d2ba7d78f6777c056d1154bf Certificate serial: 019BFC1BB5D64ED32322531ABBDD7D23284D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c7gWQOG2T1HSun149nd8BW0RVL8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 21:00:32 +0000 Manifest this update: Mon 26 Jan 2026 21:00:32 +0000 Manifest next update: Tue 27 Jan 2026 21:00:32 +0000 Files and hashes: 1: c7gWQOG2T1HSun149nd8BW0RVL8.crl (hash: 4bffRwT6rRBTRw75a4/h9O/rUqkFrdVwVCmbsYEaJD4=) 2: vc7ewQR162pr-7rdGykOov0txVE.roa (hash: 6BVZB2JOatn5xn04X9qghhGRmm3MYSHBqBvWVGQDwyU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.mft rsync://rpki.ripe.net/repository/DEFAULT/c7gWQOG2T1HSun149nd8BW0RVL8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:1b:b5:d6:4e:d3:23:22:53:1a:bb:dd:7d:23:28:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73b81640e1b64f51d2ba7d78f6777c056d1154bf Validity Not Before: Jan 26 21:00:32 2026 GMT Not After : Jan 27 21:00:32 2026 GMT Subject: CN=0b3bffca6752a971c03bde33c10b7ec7db0f650a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:0c:c6:fe:a3:71:0c:ae:05:85:06:04:cd:eb: 39:23:38:78:78:4f:8b:36:8c:f6:ac:b0:27:6b:18: 05:06:da:82:d6:19:63:57:5a:80:e6:d6:61:ee:7f: dc:4a:45:c1:22:60:76:71:ab:ef:ac:76:a8:54:07: c3:0a:f6:74:8e:d0:14:ff:ce:fe:bf:b2:bd:02:4a: 4a:a4:06:86:1e:5e:a8:79:9f:19:2b:2a:54:ac:83: b2:56:1b:5d:88:9e:dd:da:a7:2f:86:f1:e8:00:f5: 41:57:0a:e3:75:34:7a:33:80:6b:c3:91:84:97:e5: 79:c8:4a:5c:7a:0a:e1:60:87:4e:39:01:7e:8e:ad: dd:2f:02:1d:0a:6f:7b:2d:a4:09:34:c9:b7:d2:73: c7:a8:53:4f:25:5c:94:74:b3:58:87:42:1e:c8:27: f5:4b:93:bb:32:2e:1f:da:af:00:41:c6:35:f5:34: ed:e1:a3:7c:20:0b:9b:c2:47:53:f9:1c:2f:6a:0a: c2:59:08:31:04:0b:f1:07:1c:83:6d:be:54:6c:0e: a8:1a:8e:c3:17:f6:a5:4e:95:e5:08:82:86:1f:73: fc:2f:89:8f:f6:88:a1:9c:08:a9:45:27:d0:cb:cd: a9:32:a2:43:d8:35:5f:63:36:77:a2:8d:ce:08:6e: 2f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:3B:FF:CA:67:52:A9:71:C0:3B:DE:33:C1:0B:7E:C7:DB:0F:65:0A X509v3 Authority Key Identifier: keyid:73:B8:16:40:E1:B6:4F:51:D2:BA:7D:78:F6:77:7C:05:6D:11:54:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7gWQOG2T1HSun149nd8BW0RVL8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:ab:71:7e:54:08:c2:8a:62:82:55:9d:78:be:e6:fb:c5:fc: 1e:94:5b:93:76:50:05:00:a5:b4:0f:e7:80:b5:85:bf:40:1c: bf:79:4e:66:4b:07:58:dc:a8:e4:e8:a7:e6:e4:dc:fc:c6:67: 6e:7a:f7:e0:21:2a:e0:a9:f2:1c:dd:a8:8f:9c:dd:a4:71:4d: ce:3a:1c:c1:de:16:fd:1e:6d:85:64:dd:01:17:33:b3:f5:2a: 4d:3d:f0:32:0d:9b:d1:06:e2:c0:d3:b0:84:82:53:1f:84:0d: 29:d6:e7:4d:db:61:93:2c:59:26:5a:36:85:1d:f6:27:7d:82: bb:75:67:4c:af:72:77:ae:ae:b4:07:ce:80:db:a5:11:19:56: 0d:29:07:7c:4a:5f:4c:c9:7d:68:f4:4e:84:83:c9:0a:93:01: 39:58:10:1e:8a:5c:05:fd:54:24:5f:26:dc:f2:40:3f:c6:ab: ac:a3:3c:a8:4b:f8:09:a4:32:4e:8c:14:e3:aa:45:b8:f7:7b: cf:88:69:b0:e3:ad:a5:ef:32:86:a7:ba:ce:da:47:f7:b4:ed: f2:f5:7e:46:62:73:d4:b5:37:d9:54:50:40:69:0c:8a:87:b7: 77:8e:e7:f3:9a:d3:28:e4:b2:4c:cb:55:98:c0:e9:ba:f7:f6: 9b:91:06:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8G7XWTtMjIlMau919IyhNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczYjgxNjQwZTFiNjRmNTFkMmJhN2Q3OGY2Nzc3YzA1NmQx MTU0YmYwHhcNMjYwMTI2MjEwMDMyWhcNMjYwMTI3MjEwMDMyWjAzMTEwLwYDVQQD EygwYjNiZmZjYTY3NTJhOTcxYzAzYmRlMzNjMTBiN2VjN2RiMGY2NTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9AzG/qNxDK4FhQYEzes5Izh4eE+L Noz2rLAnaxgFBtqC1hljV1qA5tZh7n/cSkXBImB2cavvrHaoVAfDCvZ0jtAU/87+ v7K9AkpKpAaGHl6oeZ8ZKypUrIOyVhtdiJ7d2qcvhvHoAPVBVwrjdTR6M4Brw5GE l+V5yEpcegrhYIdOOQF+jq3dLwIdCm97LaQJNMm30nPHqFNPJVyUdLNYh0IeyCf1 S5O7Mi4f2q8AQcY19TTt4aN8IAubwkdT+RwvagrCWQgxBAvxBxyDbb5UbA6oGo7D F/alTpXlCIKGH3P8L4mP9oihnAipRSfQy82pMqJD2DVfYzZ3oo3OCG4vZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAs7/8pnUqlxwDveM8ELfsfbD2UKMB8GA1UdIwQY MBaAFHO4FkDhtk9R0rp9ePZ3fAVtEVS/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzdnV1FPRzJUMUhTdW4xNDluZDhCVzBSVkw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9hYmIxNTMtNTFiMy00ODQ5LTg5ODUt ZDMwZjkxNjhmODAxLzEvYzdnV1FPRzJUMUhTdW4xNDluZDhCVzBSVkw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9hYmIxNTMtNTFiMy00ODQ5LTg5ODUtZDMwZjkxNjhmODAx LzEvYzdnV1FPRzJUMUhTdW4xNDluZDhCVzBSVkw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHKtxflQI wopiglWdeL7m+8X8HpRbk3ZQBQCltA/ngLWFv0Acv3lOZksHWNyo5Oin5uTc/MZn bnr34CEq4KnyHN2oj5zdpHFNzjocwd4W/R5thWTdARczs/UqTT3wMg2b0QbiwNOw hIJTH4QNKdbnTdthkyxZJlo2hR32J32Cu3VnTK9yd66utAfOgNulERlWDSkHfEpf TMl9aPROhIPJCpMBOVgQHopcBf1UJF8m3PJAP8arrKM8qEv4CaQyTowU46pFuPd7 z4hpsOOtpe8yhqe6ztpH97Tt8vV+RmJz1LU32VRQQGkMioe3d47n85rTKOSyTMtV mMDpuvf2m5EGdg== -----END CERTIFICATE-----Generated at Tue Jan 27 00:09:50 2026 by rpki-client