This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft File: 7UZMdsAZSPh-BOL8X1FnArOQdFY.mft (raw, json) Hash identifier: FJS+q26sjifWChIpKJUjUhCdoh5OdxwHD/qSjwFgLkc= Subject key identifier: 27:D6:00:7B:4F:07:1E:35:7C:F0:B9:3E:F5:37:74:87:F2:4F:AC:61 Authority key identifier: ED:46:4C:76:C0:19:48:F8:7E:04:E2:FC:5F:51:67:02:B3:90:74:56 Certificate issuer: /CN=ed464c76c01948f87e04e2fc5f516702b3907456 Certificate serial: 019BFC1CDB6BE59B1173234669C5FAA2E003 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft Manifest number: 02F1 Signing time: Mon 26 Jan 2026 21:01:48 +0000 Manifest this update: Mon 26 Jan 2026 21:01:48 +0000 Manifest next update: Tue 27 Jan 2026 21:01:48 +0000 Files and hashes: 1: 7UZMdsAZSPh-BOL8X1FnArOQdFY.crl (hash: bcnq8nU3Kd0ZHBjPpP1c67Bor6yygNpluBWMWyxExCQ=) 2: P92JZHPtYY3-_599bc_yBXOAyLA.roa (hash: zEkTEvnJRapseTP0KdSkFQigSFFq86JRm4Kqw9lBy+c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:1c:db:6b:e5:9b:11:73:23:46:69:c5:fa:a2:e0:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed464c76c01948f87e04e2fc5f516702b3907456 Validity Not Before: Jan 26 21:01:48 2026 GMT Not After : Jan 27 21:01:48 2026 GMT Subject: CN=27d6007b4f071e357cf0b93ef5377487f24fac61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b1:07:b8:97:01:3a:53:56:c7:25:68:e8:0f: 7f:19:70:7f:8f:a9:49:a3:f1:ce:c5:84:5c:f9:45: 67:77:3a:35:b2:7e:e0:99:41:dc:c5:5d:37:90:1d: e3:08:66:dc:5b:fb:c9:74:96:a5:48:53:ef:75:54: fb:e1:98:ba:d9:8a:50:a7:36:98:37:92:26:ff:03: 86:5c:23:18:db:49:9c:51:37:10:03:be:52:8e:0f: 84:86:34:b4:7a:e2:e8:a0:19:2c:aa:da:d8:0a:83: 39:92:2f:22:a6:a1:8d:fd:e1:aa:91:ba:7c:19:9c: 15:7b:06:78:1b:89:11:89:04:dc:d8:01:d5:ce:50: 97:4d:42:92:05:c5:4a:85:76:fd:32:6f:0b:2f:c6: 60:00:4b:43:63:69:9e:91:2e:42:26:f6:9f:2f:23: a6:10:f5:b0:bf:3f:2a:6b:7a:80:a0:1c:ea:9b:2d: 02:e7:75:5f:ba:2b:75:23:d8:17:e5:3a:55:1c:8a: 61:59:65:e3:79:f0:87:43:22:64:55:fb:d9:da:1b: dc:f5:bf:38:37:2d:a9:7c:68:07:3f:45:56:03:c0: 8a:02:2f:db:94:05:b3:3d:e9:5d:20:f8:d4:67:e3: ac:3a:f7:ef:82:c3:53:aa:e7:62:7b:4d:1c:ad:3f: aa:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D6:00:7B:4F:07:1E:35:7C:F0:B9:3E:F5:37:74:87:F2:4F:AC:61 X509v3 Authority Key Identifier: keyid:ED:46:4C:76:C0:19:48:F8:7E:04:E2:FC:5F:51:67:02:B3:90:74:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:48:28:4e:6c:17:45:71:dc:97:68:46:5b:00:9b:1f:a8:22: ae:f9:62:52:11:31:83:a6:ad:9b:b6:dc:e9:6f:cc:01:83:1a: c5:df:4d:c0:20:d5:d8:58:77:e8:bd:a7:ac:10:47:7f:db:7b: 62:c0:1f:c6:cc:81:61:b1:34:7d:0c:a0:4e:70:3b:53:23:a8: b2:dd:b5:7e:2e:7b:1d:c4:98:fe:e8:ac:0f:31:dd:f9:7d:dc: 4c:ee:01:bb:50:09:58:72:00:79:35:0c:01:bd:60:92:b7:9c: 6e:ec:63:15:62:05:eb:56:eb:be:f4:77:03:c0:c3:e2:fb:1a: 53:33:2f:10:dd:04:2c:29:46:b0:a4:e7:27:4c:05:4c:ee:0d: 06:c4:db:c4:bf:70:25:10:23:75:39:95:d1:f4:88:e4:6a:6a: 26:6f:65:47:3e:43:be:b3:5e:79:7b:3a:42:eb:d1:7c:c4:eb: f2:ac:1b:e3:3a:47:3f:45:a7:ca:d2:90:36:cc:48:ce:ff:58: 5d:a6:8c:2b:59:21:a5:bf:ca:bc:f7:85:01:71:70:c6:65:e1: 3c:51:f4:1c:89:1f:86:e6:38:98:93:18:27:1d:70:46:ff:3e: 3e:2d:f0:4c:fe:7f:ea:65:a0:0c:cf:a5:bf:4b:1e:c5:6b:82: 54:ec:2f:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8HNtr5ZsRcyNGacX6ouADMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNDY0Yzc2YzAxOTQ4Zjg3ZTA0ZTJmYzVmNTE2NzAyYjM5 MDc0NTYwHhcNMjYwMTI2MjEwMTQ4WhcNMjYwMTI3MjEwMTQ4WjAzMTEwLwYDVQQD EygyN2Q2MDA3YjRmMDcxZTM1N2NmMGI5M2VmNTM3NzQ4N2YyNGZhYzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7EHuJcBOlNWxyVo6A9/GXB/j6lJ o/HOxYRc+UVndzo1sn7gmUHcxV03kB3jCGbcW/vJdJalSFPvdVT74Zi62YpQpzaY N5Im/wOGXCMY20mcUTcQA75Sjg+EhjS0euLooBksqtrYCoM5ki8ipqGN/eGqkbp8 GZwVewZ4G4kRiQTc2AHVzlCXTUKSBcVKhXb9Mm8LL8ZgAEtDY2mekS5CJvafLyOm EPWwvz8qa3qAoBzqmy0C53Vfuit1I9gX5TpVHIphWWXjefCHQyJkVfvZ2hvc9b84 Ny2pfGgHP0VWA8CKAi/blAWzPeldIPjUZ+OsOvfvgsNTqudie00crT+qHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCfWAHtPBx41fPC5PvU3dIfyT6xhMB8GA1UdIwQY MBaAFO1GTHbAGUj4fgTi/F9RZwKzkHRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1VaTWRzQVpTUGgtQk9MOFgxRm5Bck9RZEZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9lNGRiNTAtNzQ2ZS00NWY0LTk2NGQt Mzg1N2VjNWNiMWRiLzEvN1VaTWRzQVpTUGgtQk9MOFgxRm5Bck9RZEZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9lNGRiNTAtNzQ2ZS00NWY0LTk2NGQtMzg1N2VjNWNiMWRi LzEvN1VaTWRzQVpTUGgtQk9MOFgxRm5Bck9RZEZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiUgoTmwX RXHcl2hGWwCbH6girvliUhExg6atm7bc6W/MAYMaxd9NwCDV2Fh36L2nrBBHf9t7 YsAfxsyBYbE0fQygTnA7UyOost21fi57HcSY/uisDzHd+X3cTO4Bu1AJWHIAeTUM Ab1gkrecbuxjFWIF61brvvR3A8DD4vsaUzMvEN0ELClGsKTnJ0wFTO4NBsTbxL9w JRAjdTmV0fSI5GpqJm9lRz5DvrNeeXs6QuvRfMTr8qwb4zpHP0WnytKQNsxIzv9Y XaaMK1khpb/KvPeFAXFwxmXhPFH0HIkfhuY4mJMYJx1wRv8+Pi3wTP5/6mWgDM+l v0sexWuCVOwv9w== -----END CERTIFICATE-----Generated at Tue Jan 27 01:18:33 2026 by rpki-client