This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft File: 7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft (raw, json) Hash identifier: pH8LNV5tB4f2O+6bulb4wWAIOnwhEaiaS8bqvSoRElI= Subject key identifier: 6A:85:EE:52:EA:10:C0:68:4E:84:D6:B5:F3:F0:C1:51:33:54:1A:91 Authority key identifier: EF:2A:98:B2:21:AB:E4:DD:95:99:9E:EF:29:2F:F0:BE:A4:12:18:AC Certificate issuer: /CN=ef2a98b221abe4dd95999eef292ff0bea41218ac Certificate serial: 019BFD65C534D1AF11D704B8D4FC0F7AD985 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft Manifest number: 1656 Signing time: Tue 27 Jan 2026 03:01:03 +0000 Manifest this update: Tue 27 Jan 2026 03:01:03 +0000 Manifest next update: Wed 28 Jan 2026 03:01:03 +0000 Files and hashes: 1: 7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl (hash: 2YxvKSRkcy7eV81aLqtO+zd5cK0ZsxlKQPcJkojgCDM=) 2: JKtuYAZj6V_iBv09WZvX1K5boYU.roa (hash: cKfPg8sNS79bgJa5PrvUDPTVTEFYtl+oJ3wNQ/Dq8wg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:65:c5:34:d1:af:11:d7:04:b8:d4:fc:0f:7a:d9:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef2a98b221abe4dd95999eef292ff0bea41218ac Validity Not Before: Jan 27 03:01:03 2026 GMT Not After : Jan 28 03:01:03 2026 GMT Subject: CN=6a85ee52ea10c0684e84d6b5f3f0c15133541a91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ce:fb:61:41:3f:11:d7:2f:81:eb:95:c1:89: 8e:58:b7:c6:4a:a2:b3:4a:de:64:d1:79:95:58:11: 0b:97:fb:e7:d9:8f:8c:0b:80:74:12:6e:fc:fd:3f: c6:00:82:d0:f8:38:3f:f5:f2:d5:6d:f3:b9:be:e0: 28:ec:64:5d:d5:81:5b:be:b0:9c:ea:e6:19:79:94: 31:01:5a:d7:7e:4f:59:98:6d:ee:a6:bf:50:e9:67: 09:0a:fe:bf:d8:ec:4b:57:df:24:b1:1e:18:95:57: 6c:b5:1b:e4:34:95:39:95:94:93:f7:3d:c2:61:ec: 07:f1:ad:9d:ef:4b:e4:c9:1a:fc:da:96:c5:89:89: bc:84:b2:9f:dc:42:c7:8e:60:07:6e:fb:92:17:d9: 5a:7c:48:b7:07:f4:02:c5:88:ff:35:f8:1c:a5:6d: d9:cb:dc:d7:22:a7:88:fb:70:e2:ee:39:7d:40:1c: fa:72:21:58:66:77:fe:a3:ce:5c:9d:fc:fc:5b:0d: 80:99:30:63:cc:c3:a6:aa:a0:6d:bf:ee:08:9c:c8: 5f:94:63:62:da:54:68:7c:d4:06:d3:90:e5:f8:49: 63:f1:c7:0e:66:d4:e7:94:66:03:d5:83:38:42:c9: 17:00:3c:e5:84:74:ca:b8:67:1c:50:b3:7d:5b:ed: 6a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:85:EE:52:EA:10:C0:68:4E:84:D6:B5:F3:F0:C1:51:33:54:1A:91 X509v3 Authority Key Identifier: keyid:EF:2A:98:B2:21:AB:E4:DD:95:99:9E:EF:29:2F:F0:BE:A4:12:18:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:03:2d:77:40:51:7b:ab:20:29:6e:fc:dc:b2:86:49:e5:33: 43:af:5f:98:55:bf:6c:a3:a7:36:93:d3:1f:6d:be:54:d2:51: 07:e8:76:85:16:bc:0d:60:9f:6d:7f:57:dd:d2:ea:52:ea:28: 30:e8:91:72:b0:06:fe:bf:39:74:4e:f6:e1:06:58:52:ae:18: c1:28:a1:e0:53:23:3e:e5:3b:1a:56:cb:81:33:01:a4:65:e7: db:00:77:78:5c:46:b1:cb:ed:91:cd:d4:cd:66:72:40:9f:6c: 47:81:1c:2a:15:9f:85:d7:fe:f5:dc:9b:03:05:d1:de:0c:ee: 73:ea:3c:ea:bd:a4:43:d2:9d:2f:ce:58:df:18:a3:66:18:ca: cf:03:94:53:ed:b8:16:52:b3:ee:0b:80:74:13:d5:9e:b1:2e: 1d:a9:a3:3d:79:83:a5:86:c1:f5:86:6e:d9:be:8c:e4:42:ed: 52:fb:42:bb:2f:8c:98:6f:57:96:f6:34:65:6b:d2:74:d3:c3: 18:7e:57:74:36:a5:b7:2d:d2:5b:3d:92:ad:73:a0:f2:7d:20: 3b:07:f9:da:0e:71:64:b7:b4:35:89:89:df:f9:99:d8:76:b5: 44:0e:7c:31:1b:0f:0a:c8:80:5a:fb:60:8e:22:46:5c:37:72: 3c:f0:4c:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9ZcU00a8R1wS41PwPetmFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMmE5OGIyMjFhYmU0ZGQ5NTk5OWVlZjI5MmZmMGJlYTQx MjE4YWMwHhcNMjYwMTI3MDMwMTAzWhcNMjYwMTI4MDMwMTAzWjAzMTEwLwYDVQQD Eyg2YTg1ZWU1MmVhMTBjMDY4NGU4NGQ2YjVmM2YwYzE1MTMzNTQxYTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnc77YUE/EdcvgeuVwYmOWLfGSqKz St5k0XmVWBELl/vn2Y+MC4B0Em78/T/GAILQ+Dg/9fLVbfO5vuAo7GRd1YFbvrCc 6uYZeZQxAVrXfk9ZmG3upr9Q6WcJCv6/2OxLV98ksR4YlVdstRvkNJU5lZST9z3C YewH8a2d70vkyRr82pbFiYm8hLKf3ELHjmAHbvuSF9lafEi3B/QCxYj/NfgcpW3Z y9zXIqeI+3Di7jl9QBz6ciFYZnf+o85cnfz8Ww2AmTBjzMOmqqBtv+4InMhflGNi 2lRofNQG05Dl+Elj8ccOZtTnlGYD1YM4QskXADzlhHTKuGccULN9W+1qmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGqF7lLqEMBoToTWtfPwwVEzVBqRMB8GA1UdIwQY MBaAFO8qmLIhq+TdlZme7ykv8L6kEhisMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3lxWXNpR3I1TjJWbVo3dktTX3d2cVFTR0t3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC80MWExNjYtM2EwMC00OWJjLTkzNWQt NTZiNjViOTFhNzNjLzEvN3lxWXNpR3I1TjJWbVo3dktTX3d2cVFTR0t3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC80MWExNjYtM2EwMC00OWJjLTkzNWQtNTZiNjViOTFhNzNj LzEvN3lxWXNpR3I1TjJWbVo3dktTX3d2cVFTR0t3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbAMtd0BR e6sgKW783LKGSeUzQ69fmFW/bKOnNpPTH22+VNJRB+h2hRa8DWCfbX9X3dLqUuoo MOiRcrAG/r85dE724QZYUq4YwSih4FMjPuU7GlbLgTMBpGXn2wB3eFxGscvtkc3U zWZyQJ9sR4EcKhWfhdf+9dybAwXR3gzuc+o86r2kQ9KdL85Y3xijZhjKzwOUU+24 FlKz7guAdBPVnrEuHamjPXmDpYbB9YZu2b6M5ELtUvtCuy+MmG9XlvY0ZWvSdNPD GH5XdDalty3SWz2SrXOg8n0gOwf52g5xZLe0NYmJ3/mZ2Ha1RA58MRsPCsiAWvtg jiJGXDdyPPBMwQ== -----END CERTIFICATE-----Generated at Tue Jan 27 06:09:37 2026 by rpki-client