This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft File: 738xvW2YXkUpnDHQUspKjr71V4s.mft (raw, json) Hash identifier: nVcKEzijG3szkdDgmsF7/xpz14o6IaxH6qa7e6qRJ7E= Subject key identifier: 4B:3A:43:10:73:56:E5:D0:53:15:0D:58:A5:AC:A9:A0:18:9F:BA:1A Authority key identifier: EF:7F:31:BD:6D:98:5E:45:29:9C:31:D0:52:CA:4A:8E:BE:F5:57:8B Certificate issuer: /CN=ef7f31bd6d985e45299c31d052ca4a8ebef5578b Certificate serial: 019BA2A247BF0C31BB1FC040D9F291936F6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft Manifest number: 17C1 Signing time: Fri 09 Jan 2026 12:01:42 +0000 Manifest this update: Fri 09 Jan 2026 12:01:42 +0000 Manifest next update: Sat 10 Jan 2026 12:01:42 +0000 Files and hashes: 1: 1hsgVZkjGiwPGwbT4Yu5mw_gR1E.roa (hash: sbJm7A7LKoBguraWEh+cEaoDEunVqRtivursvoz8Rkw=) 2: 738xvW2YXkUpnDHQUspKjr71V4s.crl (hash: opBaNIlSOFdgvb3aU2ebmHkgYkh6f8Jzjgas3idCnQY=) 3: uTawXit8aKEj4eVxiOZXv6mDUXQ.roa (hash: XkBO6tOwqDjqwxQC1w04z4HLKY8F+H0OZu2mmN1+iAs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.crl rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a2:a2:47:bf:0c:31:bb:1f:c0:40:d9:f2:91:93:6f:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef7f31bd6d985e45299c31d052ca4a8ebef5578b Validity Not Before: Jan 9 12:01:42 2026 GMT Not After : Jan 10 12:01:42 2026 GMT Subject: CN=4b3a43107356e5d053150d58a5aca9a0189fba1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:70:b5:e6:cf:69:6a:c3:cb:c0:38:2d:58:85: 86:a1:48:3d:c7:13:5b:49:7e:7e:c7:03:49:fc:f5: 18:57:df:fa:9b:0b:1d:69:ae:5e:91:c0:84:a8:50: df:3f:eb:bc:bf:76:06:3c:ce:8a:dc:87:8a:ad:4d: b4:f0:c5:26:2c:fa:2a:bc:05:93:d6:5a:a5:40:ed: 28:99:01:de:5e:06:0f:c2:4c:4f:5d:65:15:ec:77: 8b:c6:99:48:bf:69:51:a2:3d:cb:80:00:e1:26:b6: 8c:c7:c8:c0:1f:9f:29:fa:60:09:1a:d5:58:93:bc: 21:3f:47:df:09:7d:cf:53:22:eb:48:a3:22:ff:65: 13:b8:3b:b3:bc:cc:33:e1:89:c8:50:5e:c4:46:95: 5d:7a:7b:0b:5d:34:50:51:fd:c7:dc:bc:f6:02:d9: 34:de:fc:6a:3b:49:fc:96:f5:9e:17:5c:19:c5:f9: e4:a6:15:96:f1:ff:6b:01:a8:3a:35:18:2d:b9:c9: ef:b3:f4:15:f2:4a:2f:ec:b0:4e:9a:0b:c6:51:26: 46:30:1c:d8:33:34:ac:3c:13:5a:e3:40:0d:12:db: 1b:bf:7e:23:70:1e:3b:c9:16:33:86:eb:53:a4:dc: 4c:48:d7:6e:af:a6:84:1f:df:d5:2f:2f:08:52:8d: c1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:3A:43:10:73:56:E5:D0:53:15:0D:58:A5:AC:A9:A0:18:9F:BA:1A X509v3 Authority Key Identifier: keyid:EF:7F:31:BD:6D:98:5E:45:29:9C:31:D0:52:CA:4A:8E:BE:F5:57:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:ad:9e:f2:a7:1c:c5:e7:3b:da:51:07:5a:02:16:6e:71:df: 23:a8:2b:3b:84:dd:ff:d0:63:8c:71:d0:14:b2:0a:97:20:0c: 41:1f:f5:10:b6:43:c1:39:11:ab:c5:05:53:98:b4:5e:f1:3c: a7:f8:90:9e:47:66:e7:70:ba:4d:9c:32:02:07:cd:fd:e3:dd: 4e:eb:d0:c9:f0:41:43:1b:d8:52:49:5a:93:ac:77:73:09:bf: 7f:fb:a6:bc:df:ce:47:f9:80:f2:27:e9:93:a5:c4:4f:ed:af: 05:3f:50:99:57:2c:41:49:00:1b:87:04:78:39:5d:83:b7:21: 7a:47:65:4a:ab:ee:c9:28:70:42:43:01:c8:57:b8:4a:6a:e6: 5d:6f:cb:1c:1c:9c:21:e5:a7:6e:2c:3b:e8:c1:0b:d5:fc:24: 42:39:1a:1b:1e:ff:c4:21:9d:aa:02:ec:1c:c0:09:35:2f:3d: e7:a5:98:16:a8:e3:6a:20:2c:ba:97:d9:48:a4:fc:32:4f:ef: 4c:cb:b7:29:cb:a6:71:37:3e:22:6b:53:de:c4:38:7e:0f:63: 19:ba:c3:7f:3e:32:a4:23:bc:54:20:06:75:91:7a:cf:9c:9c: 15:86:3b:bc:96:10:48:e6:18:81:78:cb:fe:2a:8a:9c:67:62: ef:70:4d:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuioke/DDG7H8BA2fKRk29rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmN2YzMWJkNmQ5ODVlNDUyOTljMzFkMDUyY2E0YThlYmVm NTU3OGIwHhcNMjYwMTA5MTIwMTQyWhcNMjYwMTEwMTIwMTQyWjAzMTEwLwYDVQQD Eyg0YjNhNDMxMDczNTZlNWQwNTMxNTBkNThhNWFjYTlhMDE4OWZiYTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXC15s9pasPLwDgtWIWGoUg9xxNb SX5+xwNJ/PUYV9/6mwsdaa5ekcCEqFDfP+u8v3YGPM6K3IeKrU208MUmLPoqvAWT 1lqlQO0omQHeXgYPwkxPXWUV7HeLxplIv2lRoj3LgADhJraMx8jAH58p+mAJGtVY k7whP0ffCX3PUyLrSKMi/2UTuDuzvMwz4YnIUF7ERpVdensLXTRQUf3H3Lz2Atk0 3vxqO0n8lvWeF1wZxfnkphWW8f9rAag6NRgtucnvs/QV8kov7LBOmgvGUSZGMBzY MzSsPBNa40ANEtsbv34jcB47yRYzhutTpNxMSNdur6aEH9/VLy8IUo3BjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEs6QxBzVuXQUxUNWKWsqaAYn7oaMB8GA1UdIwQY MBaAFO9/Mb1tmF5FKZwx0FLKSo6+9VeLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzM4eHZXMllYa1VwbkRIUVVzcEtqcjcxVjRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lYmVhNjAtZDIzMS00ODBiLTg0ZmQt YTc2M2RmM2FlZTZkLzEvNzM4eHZXMllYa1VwbkRIUVVzcEtqcjcxVjRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lYmVhNjAtZDIzMS00ODBiLTg0ZmQtYTc2M2RmM2FlZTZk LzEvNzM4eHZXMllYa1VwbkRIUVVzcEtqcjcxVjRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA62e8qcc xec72lEHWgIWbnHfI6grO4Td/9BjjHHQFLIKlyAMQR/1ELZDwTkRq8UFU5i0XvE8 p/iQnkdm53C6TZwyAgfN/ePdTuvQyfBBQxvYUklak6x3cwm/f/umvN/OR/mA8ifp k6XET+2vBT9QmVcsQUkAG4cEeDldg7chekdlSqvuyShwQkMByFe4SmrmXW/LHByc IeWnbiw76MEL1fwkQjkaGx7/xCGdqgLsHMAJNS8956WYFqjjaiAsupfZSKT8Mk/v TMu3KcumcTc+ImtT3sQ4fg9jGbrDfz4ypCO8VCAGdZF6z5ycFYY7vJYQSOYYgXjL /iqKnGdi73BNWA== -----END CERTIFICATE-----Generated at Fri Jan 9 15:59:45 2026 by rpki-client