This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft File: rx7uIsUBU2MRinHSapRj3JN0uig.mft (raw, json) Hash identifier: 3FYZJRrh6Y5msO6ZL5y+2ElGixfv85qoRvPtC4jYdEE= Subject key identifier: 29:38:5A:F0:AC:04:31:B9:63:20:3B:9C:2A:7D:7C:07:79:62:E7:04 Authority key identifier: AF:1E:EE:22:C5:01:53:63:11:8A:71:D2:6A:94:63:DC:93:74:BA:28 Certificate issuer: /CN=af1eee22c5015363118a71d26a9463dc9374ba28 Certificate serial: 019B7DEFEC88B0650B3CB6CDD46F28FA0878 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft Manifest number: 0B6B Signing time: Fri 02 Jan 2026 09:00:34 +0000 Manifest this update: Fri 02 Jan 2026 09:00:34 +0000 Manifest next update: Sat 03 Jan 2026 09:00:34 +0000 Files and hashes: 1: 9KS099u2a2952M6t5pgM7PYVfgs.roa (hash: ofnJ8G07wxOHQAeRV05XqBNPxKtozWzSPL6rTrl/A14=) 2: rx7uIsUBU2MRinHSapRj3JN0uig.crl (hash: h7VJrEvNAh4rh23ZbbN0yEWnEhXjPDhU1My5PhbfJ7k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 09:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ef:ec:88:b0:65:0b:3c:b6:cd:d4:6f:28:fa:08:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af1eee22c5015363118a71d26a9463dc9374ba28 Validity Not Before: Jan 2 09:00:34 2026 GMT Not After : Jan 3 09:00:34 2026 GMT Subject: CN=29385af0ac0431b963203b9c2a7d7c077962e704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7f:6b:f4:3b:ff:33:4d:2a:40:2d:9b:9a:c5: 8f:a1:ff:9a:e3:96:cd:bd:01:26:55:4d:ff:0d:6b: c7:74:2e:a2:2e:30:e1:02:7b:a3:f1:8c:97:f9:fd: 81:06:75:8b:f4:a8:c6:56:da:a7:33:5c:ce:f2:6a: 23:f2:40:f7:3b:9b:50:80:19:4d:fa:0c:2f:b2:68: 29:cc:6f:f4:6c:5e:ff:dd:06:04:1b:6c:2e:42:03: 5d:26:96:24:c3:6f:d0:92:b1:d7:3f:ed:18:16:b0: 15:a0:ba:d8:3b:17:3c:1c:cd:02:a2:f7:de:d7:fd: d2:5e:0d:19:e2:5a:9d:fd:55:30:af:d3:02:2c:7f: e7:e5:43:c2:5d:a4:c5:b1:29:d6:64:15:2e:4d:75: 7f:11:c9:1a:da:86:ea:90:32:1c:eb:11:87:d9:78: 0b:11:0f:60:83:fa:9b:0a:4a:88:51:ad:e6:10:6d: e2:0b:2a:24:9e:2f:c4:88:55:c7:67:a6:79:e9:59: 9e:ee:cb:04:20:52:ca:6f:66:f0:c8:a4:c0:c2:be: 1c:a6:bf:5f:76:96:3c:34:88:48:8a:22:ad:0c:03: 5b:b3:43:16:e9:1c:28:ee:1e:0d:07:b1:7f:4e:13: f5:87:11:32:a5:f1:11:01:4a:80:63:ac:23:f0:21: 72:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:38:5A:F0:AC:04:31:B9:63:20:3B:9C:2A:7D:7C:07:79:62:E7:04 X509v3 Authority Key Identifier: keyid:AF:1E:EE:22:C5:01:53:63:11:8A:71:D2:6A:94:63:DC:93:74:BA:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:70:f0:f6:49:2a:50:c4:d9:56:0a:ff:bb:4b:ea:e8:9a:08: ce:4c:24:f1:6d:b2:30:c2:fb:9d:8f:3a:d8:f8:3e:3e:bf:17: 24:d6:a9:f9:67:bb:41:58:18:b4:f2:f5:55:9d:25:f9:6e:05: b4:2c:d1:ff:b3:b2:bc:42:75:a6:31:34:bb:b3:98:8b:f9:c9: e7:6b:a9:51:b2:95:34:ca:69:16:93:1c:82:81:5c:9b:73:f4: 76:d3:e5:76:fb:24:dd:a7:0a:19:f0:98:a9:ef:be:b7:2c:67: 9d:35:68:9e:80:97:e7:6b:ba:75:c3:c5:d7:bd:03:77:30:e7: 77:e2:db:bb:31:89:e2:30:85:0f:1a:63:ab:11:bb:a1:f5:b4: 8c:3c:1e:98:9d:59:20:04:3e:22:cb:f9:36:7c:33:1c:35:c8: a7:60:13:6e:d0:31:09:19:55:c1:60:c3:4d:54:e6:c0:c7:62: 1a:f5:f2:2b:a1:bb:a7:36:31:98:0f:b2:e8:00:27:f0:5b:7b: 3b:56:7e:ba:43:d8:bd:09:ae:45:e0:35:fb:73:ad:c0:61:5f: 1e:3f:06:15:d2:e1:1e:97:a7:e3:79:22:14:40:9f:07:21:9b: fb:a7:73:16:47:6a:7c:d5:ee:ee:ea:52:50:78:1a:11:eb:7c: 92:9a:d1:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt97+yIsGULPLbN1G8o+gh4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmMWVlZTIyYzUwMTUzNjMxMThhNzFkMjZhOTQ2M2RjOTM3 NGJhMjgwHhcNMjYwMTAyMDkwMDM0WhcNMjYwMTAzMDkwMDM0WjAzMTEwLwYDVQQD EygyOTM4NWFmMGFjMDQzMWI5NjMyMDNiOWMyYTdkN2MwNzc5NjJlNzA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtX9r9Dv/M00qQC2bmsWPof+a45bN vQEmVU3/DWvHdC6iLjDhAnuj8YyX+f2BBnWL9KjGVtqnM1zO8moj8kD3O5tQgBlN +gwvsmgpzG/0bF7/3QYEG2wuQgNdJpYkw2/QkrHXP+0YFrAVoLrYOxc8HM0Covfe 1/3SXg0Z4lqd/VUwr9MCLH/n5UPCXaTFsSnWZBUuTXV/Ecka2obqkDIc6xGH2XgL EQ9gg/qbCkqIUa3mEG3iCyokni/EiFXHZ6Z56Vme7ssEIFLKb2bwyKTAwr4cpr9f dpY8NIhIiiKtDANbs0MW6Rwo7h4NB7F/ThP1hxEypfERAUqAY6wj8CFyowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCk4WvCsBDG5YyA7nCp9fAd5YucEMB8GA1UdIwQY MBaAFK8e7iLFAVNjEYpx0mqUY9yTdLooMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcng3dUlzVUJVMk1SaW5IU2FwUmozSk4wdWlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9mZGMyZjQtMjIyMi00ZjFiLWE1ZTUt YjIxNzhlZjJmODJmLzEvcng3dUlzVUJVMk1SaW5IU2FwUmozSk4wdWlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9mZGMyZjQtMjIyMi00ZjFiLWE1ZTUtYjIxNzhlZjJmODJm LzEvcng3dUlzVUJVMk1SaW5IU2FwUmozSk4wdWlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxXDw9kkq UMTZVgr/u0vq6JoIzkwk8W2yMML7nY862Pg+Pr8XJNap+We7QVgYtPL1VZ0l+W4F tCzR/7OyvEJ1pjE0u7OYi/nJ52upUbKVNMppFpMcgoFcm3P0dtPldvsk3acKGfCY qe++tyxnnTVonoCX52u6dcPF170DdzDnd+LbuzGJ4jCFDxpjqxG7ofW0jDwemJ1Z IAQ+Isv5NnwzHDXIp2ATbtAxCRlVwWDDTVTmwMdiGvXyK6G7pzYxmA+y6AAn8Ft7 O1Z+ukPYvQmuReA1+3OtwGFfHj8GFdLhHpen43kiFECfByGb+6dzFkdqfNXu7upS UHgaEet8kprRXg== -----END CERTIFICATE-----Generated at Fri Jan 2 16:56:53 2026 by rpki-client