This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft File: T7K7e61Q8ZIYEKAo547dZfgfan0.mft (raw, json) Hash identifier: tdy8gWp+iOVUhgH3WjVMSaPDgdvBkOKmp3f0iBkSLQo= Subject key identifier: 92:78:B6:81:B3:FA:5B:42:E2:1F:88:0C:66:4B:58:22:29:FA:E9:49 Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D Certificate issuer: /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d Certificate serial: 019BDCC8877619BE780702D962FAD29EDA30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft Manifest number: 17E6 Signing time: Tue 20 Jan 2026 19:01:27 +0000 Manifest this update: Tue 20 Jan 2026 19:01:27 +0000 Manifest next update: Wed 21 Jan 2026 19:01:27 +0000 Files and hashes: 1: 5lFyIZmBLBFDx76RfuZHevsHQQY.roa (hash: PI10EPnFAgNZeRBfLyN6vfxKBB4r+mmccm1SKvgO9H0=) 2: 8JXNaaQmDQHdM4yP_RNeiswPEDI.roa (hash: UUO1y8o89Fboq48v1C/MZYuzKEwlodMmFc6P3ytbtj4=) 3: F1XFKolR75CvzOCyFlTtMYXp3UA.roa (hash: 1NsFIv/Vqxyf17zBRZ7ykgjIIYfbwgtJjmnNI1bztF0=) 4: Ho8BmWtRsGIfoh9TadeITydo350.roa (hash: jhic1+8GxEt2CK46n93QnO3HxEVdv0LVkgGPn/QSDf0=) 5: NDEJ4OPh2jQQg5h1HdKinOuNm1g.roa (hash: 6YV/mvu0IZaB1NRM8e6QdrWu4qWaOce8H7G5lo4LpOc=) 6: RZIRujuATxyGFu7vyVFwuqcF_SQ.roa (hash: Xzw0JIxMKCjDxp6MZ1M1HZsvjLoxOzSeEJc0NGIFQ4I=) 7: T7K7e61Q8ZIYEKAo547dZfgfan0.crl (hash: 4SdAN0WpKMiqZ4wSaNHQ0bZC7wC8OxdpzRHtoJq7CZ4=) 8: TE1mk8OMQ-AFSeYSxaRjCT-JMBY.roa (hash: +OLGI5HPjva1QCNnk16poRDsJUrrhAXiZgKlpTVLOyE=) 9: Tj4Mcwc_96ZTjJYw-9rKbpG4AXA.roa (hash: 6X5APSqbz1P2mkb03h8c2CZF8YBdY33egLhUsQ1Fh0E=) 10: VlCsH-gKeuLV89RCvfubppUzoBM.roa (hash: E6tZ0jd2kOODThTzIfCZg56DVUHPrBwKWicp2pqqUq8=) 11: WLquCazhAB0ScMP5a1mkOMpQjSk.roa (hash: X6EOl+E5HOgYEVAmBJUO3eMgT+pMlGAkOYSNqnB4rac=) 12: Z7cr1HbCrsDtXUyxT8SJLiqzP6o.roa (hash: xU544IyvXcLXM7e3JvHPAxxk8EzCmMrxrlsPcRWgF9s=) 13: _Sp9nWnMGENvs_5RlKIg522yEo0.roa (hash: 5BiB2YKH8y+FxStt90RRFoc5lwCZkm5vmcOChmEykmI=) 14: g42Q3rfj3fjhRrs2uUZJTzJHPLw.roa (hash: rei0mXZ0e1OpcgQkOfyol1npQmkAiPOFooYIEbC45BU=) 15: uGLn1rNehfP8gUHfuPWItHTs-Q4.roa (hash: rbb+/QdbyMdZWalyD4M+Cib5fxLsrq9/EvfwTaumIsE=) 16: xBqBXFmQrw0nrQUmLex4ucUbm6k.roa (hash: TnBMggLi5CIQ1hShDDAuB88To8EI50H2RKa7i+0/tRc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:dc:c8:87:76:19:be:78:07:02:d9:62:fa:d2:9e:da:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d Validity Not Before: Jan 20 19:01:27 2026 GMT Not After : Jan 21 19:01:27 2026 GMT Subject: CN=9278b681b3fa5b42e21f880c664b582229fae949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:62:fd:e3:e8:4a:85:69:e6:43:16:a3:96:b8: 2a:47:3a:7f:e0:72:37:ae:f0:62:58:a0:8f:e8:8c: 1c:87:a1:45:af:0c:91:f3:0c:86:99:c5:51:aa:14: 88:39:77:c2:49:af:73:57:be:51:ed:7f:5e:10:6a: 8f:b0:35:54:1c:da:0d:c4:99:f3:73:96:d4:89:9f: 71:92:77:a2:34:72:49:ab:a8:e7:73:5b:34:9f:d7: 05:56:d0:61:fc:1e:47:95:78:87:27:e9:15:f9:7a: cc:2d:0a:a0:2a:5f:b6:58:8b:fc:e1:ea:be:c9:76: 3f:76:85:65:a5:b2:4d:66:22:e5:1e:dc:6f:12:f1: 57:7a:4c:65:f4:db:e3:53:31:64:40:6c:55:a7:51: 04:9b:6a:91:88:a2:1b:73:28:db:68:77:2f:7c:d4: 17:1e:12:8c:34:f5:8d:93:4c:d0:3b:2a:64:b1:b2: 4e:c0:30:1d:90:79:87:3e:6c:54:4f:15:c6:c0:f7: 47:96:e6:e6:e6:4b:fa:0f:1e:c5:fc:46:f0:4d:b3: f6:bc:1d:66:b0:e6:73:0f:11:96:40:95:fc:a2:47: 03:2f:a9:9d:e4:18:f1:cd:0e:91:10:e8:28:ab:4a: bd:38:b5:c5:f7:44:ff:e9:62:68:2d:55:02:af:55: 2c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:78:B6:81:B3:FA:5B:42:E2:1F:88:0C:66:4B:58:22:29:FA:E9:49 X509v3 Authority Key Identifier: keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:22:00:e3:c7:a0:95:52:1f:0c:fe:39:a4:c0:a3:7a:8b:a9: 42:a5:bd:f9:4f:5e:c5:2c:f3:78:29:c0:1f:45:0f:0c:a3:88: 9a:51:54:2f:fd:63:ff:68:ee:06:f9:1e:44:64:e0:4a:32:a9: 2f:2d:83:7a:25:a0:5a:e6:e8:b4:3c:9d:90:80:5b:35:bc:1b: bf:2d:c9:a9:eb:93:4b:99:9b:9e:dc:14:fc:9e:b4:65:f0:f2: 04:ae:9f:0a:22:00:b0:cc:5b:30:84:35:6a:8f:d8:2f:61:d0: 70:e3:00:87:59:9b:36:e4:2e:13:ec:44:53:ee:b6:14:4d:3b: 3a:1b:7a:3e:f2:90:c9:ae:07:02:d0:84:60:24:d5:e1:f7:86: ad:d4:3f:3f:e1:6f:7c:0c:5b:7b:72:98:39:e2:ce:4f:04:cc: 9e:04:2d:33:34:d5:eb:38:23:53:0b:6c:78:87:63:11:7f:63: 9f:1b:83:98:05:52:ce:c2:53:2d:50:6a:8e:bd:71:4c:1d:f7: e4:2a:19:c9:c4:e3:90:a7:84:9b:9e:9d:06:f1:3f:1b:28:20: 0b:ac:86:36:5d:47:fb:56:80:f3:77:c3:de:3a:0d:3d:bc:e0: cd:eb:77:d1:57:eb:18:06:d9:21:ff:44:64:06:c9:54:22:96: 1a:8b:5e:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvcyId2Gb54BwLZYvrSntowMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYjJiYjdiYWQ1MGYxOTIxODEwYTAyOGU3OGVkZDY1Zjgx ZjZhN2QwHhcNMjYwMTIwMTkwMTI3WhcNMjYwMTIxMTkwMTI3WjAzMTEwLwYDVQQD Eyg5Mjc4YjY4MWIzZmE1YjQyZTIxZjg4MGM2NjRiNTgyMjI5ZmFlOTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GL94+hKhWnmQxajlrgqRzp/4HI3 rvBiWKCP6Iwch6FFrwyR8wyGmcVRqhSIOXfCSa9zV75R7X9eEGqPsDVUHNoNxJnz c5bUiZ9xkneiNHJJq6jnc1s0n9cFVtBh/B5HlXiHJ+kV+XrMLQqgKl+2WIv84eq+ yXY/doVlpbJNZiLlHtxvEvFXekxl9NvjUzFkQGxVp1EEm2qRiKIbcyjbaHcvfNQX HhKMNPWNk0zQOypksbJOwDAdkHmHPmxUTxXGwPdHlubm5kv6Dx7F/EbwTbP2vB1m sOZzDxGWQJX8okcDL6md5BjxzQ6REOgoq0q9OLXF90T/6WJoLVUCr1UsKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJJ4toGz+ltC4h+IDGZLWCIp+ulJMB8GA1UdIwQY MBaAFE+yu3utUPGSGBCgKOeO3WX4H2p9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYt MjdmYmM5OWVhM2M2LzEvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYtMjdmYmM5OWVhM2M2 LzEvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGSIA48eg lVIfDP45pMCjeoupQqW9+U9exSzzeCnAH0UPDKOImlFUL/1j/2juBvkeRGTgSjKp Ly2DeiWgWubotDydkIBbNbwbvy3JqeuTS5mbntwU/J60ZfDyBK6fCiIAsMxbMIQ1 ao/YL2HQcOMAh1mbNuQuE+xEU+62FE07Oht6PvKQya4HAtCEYCTV4feGrdQ/P+Fv fAxbe3KYOeLOTwTMngQtMzTV6zgjUwtseIdjEX9jnxuDmAVSzsJTLVBqjr1xTB33 5CoZycTjkKeEm56dBvE/GyggC6yGNl1H+1aA83fD3joNPbzgzet30VfrGAbZIf9E ZAbJVCKWGotefg== -----END CERTIFICATE-----Generated at Wed Jan 21 00:20:06 2026 by rpki-client