This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/kI7SZXsDRI2ii8JIwvfsSXPabjs.mft File: kI7SZXsDRI2ii8JIwvfsSXPabjs.mft (raw, json) Hash identifier: VE0dBYXZQahSbwzLzg6X0dDfQVNQD/Rl34LIhBF/t9g= Subject key identifier: 50:B3:8F:76:E2:DA:C8:EF:45:01:C4:C2:DB:7F:88:85:76:98:1C:7E Authority key identifier: 90:8E:D2:65:7B:03:44:8D:A2:8B:C2:48:C2:F7:EC:49:73:DA:6E:3B Certificate issuer: /CN=908ed2657b03448da28bc248c2f7ec4973da6e3b Certificate serial: 019BFAD2B0550A4247C52D4330F00C228B33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kI7SZXsDRI2ii8JIwvfsSXPabjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/kI7SZXsDRI2ii8JIwvfsSXPabjs.mft Manifest number: F1 Signing time: Mon 26 Jan 2026 15:01:10 +0000 Manifest this update: Mon 26 Jan 2026 15:01:10 +0000 Manifest next update: Tue 27 Jan 2026 15:01:10 +0000 Files and hashes: 1: EQxEyPQDuCTR078fV9h6v3Km5Cw.roa (hash: Lt5RUH9y8xxH2z3qvvXHmC8kiqcqvY/49BCxeZKNAOc=) 2: kI7SZXsDRI2ii8JIwvfsSXPabjs.crl (hash: zICHsq+J9c2IoJqq7XZq1RDz7S3Pxoo4WL7ZpcbA0K4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/kI7SZXsDRI2ii8JIwvfsSXPabjs.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/kI7SZXsDRI2ii8JIwvfsSXPabjs.mft rsync://rpki.ripe.net/repository/DEFAULT/kI7SZXsDRI2ii8JIwvfsSXPabjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:d2:b0:55:0a:42:47:c5:2d:43:30:f0:0c:22:8b:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908ed2657b03448da28bc248c2f7ec4973da6e3b Validity Not Before: Jan 26 15:01:10 2026 GMT Not After : Jan 27 15:01:10 2026 GMT Subject: CN=50b38f76e2dac8ef4501c4c2db7f888576981c7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1c:d4:7c:d3:53:63:3e:67:c3:e6:df:eb:37: 39:26:92:ab:cc:f1:0b:35:ed:2c:1b:ef:7f:0d:27: e1:81:c4:c3:4e:9b:5b:d3:e9:42:1a:0f:0d:00:04: 4e:6a:ce:2f:e6:63:29:93:64:79:24:ca:c6:64:e2: e4:e7:fe:bb:cb:6e:3e:f0:af:85:8e:c6:67:67:83: 18:e9:8b:38:c1:6d:cf:0f:e5:ba:dd:eb:24:2e:2a: 16:ef:9d:62:26:0c:74:b9:b9:a8:83:c7:6f:fe:01: ae:e6:83:f5:72:5c:fa:dd:12:73:de:63:af:19:8a: b0:f1:9e:e1:19:c7:9c:31:8d:0a:ed:91:fb:ac:92: 8f:f3:e1:c8:3d:48:79:81:cc:3a:d5:1a:13:61:62: 6d:5a:8f:f8:ca:4c:c9:49:d1:72:7e:ee:05:37:e9: 1d:f2:75:a1:dc:d1:ef:9b:c3:37:d6:39:77:79:e2: a7:6b:49:22:0d:12:4a:1a:83:1b:3e:17:d9:2b:1e: 85:0f:37:ee:a6:0c:e0:d1:98:4b:65:a3:70:66:50: 83:81:d0:05:76:17:a9:12:52:c7:a9:7d:74:26:a0: ff:89:79:02:ce:cc:8e:1d:31:f6:0e:82:68:f1:c1: 91:15:a6:84:21:ca:bc:f6:77:36:b4:ca:da:fd:67: be:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:B3:8F:76:E2:DA:C8:EF:45:01:C4:C2:DB:7F:88:85:76:98:1C:7E X509v3 Authority Key Identifier: keyid:90:8E:D2:65:7B:03:44:8D:A2:8B:C2:48:C2:F7:EC:49:73:DA:6E:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kI7SZXsDRI2ii8JIwvfsSXPabjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/kI7SZXsDRI2ii8JIwvfsSXPabjs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/kI7SZXsDRI2ii8JIwvfsSXPabjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:c9:74:f1:1e:55:f4:e3:16:e0:35:39:df:c0:f4:4a:b7:00: a9:4c:04:95:97:10:c8:38:b0:65:58:3b:3a:b7:6a:80:f3:2a: e2:36:fe:b7:18:05:8d:04:f7:55:e3:c3:5f:d4:84:e0:69:a7: 80:31:22:d2:64:67:9d:a0:37:df:1a:08:6b:fd:f3:72:7d:30: cf:1a:86:da:de:f6:08:73:b4:f0:11:de:0e:e7:93:6c:0a:8f: c3:a2:e9:cd:d1:77:a2:bc:33:66:eb:8c:34:88:78:64:bc:2a: 45:63:2f:41:73:8e:db:62:c2:06:82:aa:49:2a:2f:37:83:b8: 31:9c:27:32:26:45:16:6c:1b:dd:9e:76:24:a9:af:96:22:0d: 32:52:6c:06:0b:0a:0b:c5:45:9e:6d:a8:3d:cd:27:2e:24:c5: ca:e1:74:da:ec:ad:21:bc:65:91:6b:23:34:d7:79:01:f8:58: d4:3d:b6:7b:92:2b:71:c3:34:97:23:25:bf:38:09:e0:ab:db: 73:83:3c:bf:09:87:7c:1a:e6:de:c4:64:4a:7f:10:ef:52:c3: 7b:8c:ee:fe:62:ef:69:a3:9d:5c:26:48:07:d8:70:8e:4a:df: 96:7c:c2:b2:ed:6b:c3:1c:ad:50:70:2f:78:5c:f4:78:29:3b: 4b:73:56:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv60rBVCkJHxS1DMPAMIoszMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwOGVkMjY1N2IwMzQ0OGRhMjhiYzI0OGMyZjdlYzQ5NzNk YTZlM2IwHhcNMjYwMTI2MTUwMTEwWhcNMjYwMTI3MTUwMTEwWjAzMTEwLwYDVQQD Eyg1MGIzOGY3NmUyZGFjOGVmNDUwMWM0YzJkYjdmODg4NTc2OTgxYzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBzUfNNTYz5nw+bf6zc5JpKrzPEL Ne0sG+9/DSfhgcTDTptb0+lCGg8NAAROas4v5mMpk2R5JMrGZOLk5/67y24+8K+F jsZnZ4MY6Ys4wW3PD+W63eskLioW751iJgx0ubmog8dv/gGu5oP1clz63RJz3mOv GYqw8Z7hGcecMY0K7ZH7rJKP8+HIPUh5gcw61RoTYWJtWo/4ykzJSdFyfu4FN+kd 8nWh3NHvm8M31jl3eeKna0kiDRJKGoMbPhfZKx6FDzfupgzg0ZhLZaNwZlCDgdAF dhepElLHqX10JqD/iXkCzsyOHTH2DoJo8cGRFaaEIcq89nc2tMra/We+7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFCzj3bi2sjvRQHEwtt/iIV2mBx+MB8GA1UdIwQY MBaAFJCO0mV7A0SNoovCSML37Elz2m47MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0k3U1pYc0RSSTJpaThKSXd2ZnNTWFBhYmpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9kMTk1NDktMzFiOC00YTFlLWI2ZDUt NmExN2UyMWNhNmM3LzEva0k3U1pYc0RSSTJpaThKSXd2ZnNTWFBhYmpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9kMTk1NDktMzFiOC00YTFlLWI2ZDUtNmExN2UyMWNhNmM3 LzEva0k3U1pYc0RSSTJpaThKSXd2ZnNTWFBhYmpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmMl08R5V 9OMW4DU538D0SrcAqUwElZcQyDiwZVg7OrdqgPMq4jb+txgFjQT3VePDX9SE4Gmn gDEi0mRnnaA33xoIa/3zcn0wzxqG2t72CHO08BHeDueTbAqPw6LpzdF3orwzZuuM NIh4ZLwqRWMvQXOO22LCBoKqSSovN4O4MZwnMiZFFmwb3Z52JKmvliINMlJsBgsK C8VFnm2oPc0nLiTFyuF02uytIbxlkWsjNNd5AfhY1D22e5IrccM0lyMlvzgJ4Kvb c4M8vwmHfBrm3sRkSn8Q71LDe4zu/mLvaaOdXCZIB9hwjkrflnzCsu1rwxytUHAv eFz0eCk7S3NWJw== -----END CERTIFICATE-----Generated at Mon Jan 26 22:11:36 2026 by rpki-client