This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft File: 7KM8lvAqnwvvJc04BqJGfKFlY3s.mft (raw, json) Hash identifier: kmTh5CqNqBv8zZ8aPD0gAx3TOR3ZBS3CiD9aa55lnx0= Subject key identifier: B1:A6:85:EB:8D:9F:41:5A:AB:79:D9:38:DB:8A:7C:FD:FF:67:32:1F Authority key identifier: EC:A3:3C:96:F0:2A:9F:0B:EF:25:CD:38:06:A2:46:7C:A1:65:63:7B Certificate issuer: /CN=eca33c96f02a9f0bef25cd3806a2467ca165637b Certificate serial: 019B7A5BEFA83188E3860FFC2BF47989E10F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft Manifest number: 17A7 Signing time: Thu 01 Jan 2026 16:20:04 +0000 Manifest this update: Thu 01 Jan 2026 16:20:04 +0000 Manifest next update: Fri 02 Jan 2026 16:20:04 +0000 Files and hashes: 1: 7KM8lvAqnwvvJc04BqJGfKFlY3s.crl (hash: zPFRPiZSTKkyTmEvV05XLFQy4e/lluRQRuMfyfnFEJc=) 2: C7fQ7Ve9jd1KjW3OO8oxR9QhSyI.roa (hash: R/aIjhVfQy4DuH2HYkC6Yf9teDlMa+Wx7kzzvb2vFZ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.crl rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 16:20:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:ef:a8:31:88:e3:86:0f:fc:2b:f4:79:89:e1:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eca33c96f02a9f0bef25cd3806a2467ca165637b Validity Not Before: Jan 1 16:20:04 2026 GMT Not After : Jan 2 16:20:04 2026 GMT Subject: CN=b1a685eb8d9f415aab79d938db8a7cfdff67321f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d7:ac:e0:1c:61:7a:0b:9b:85:72:71:1a:72: 0c:e7:95:2b:95:2b:16:63:07:4c:27:6a:08:3b:dc: ad:a6:9b:54:4c:24:44:6c:25:f6:87:b5:36:a5:87: 8e:50:13:60:0f:b3:c5:23:e0:ad:f1:f0:a8:49:ab: ef:95:48:e3:d2:c8:c0:ec:1f:25:39:15:1a:a3:d3: 13:c3:45:60:cc:e1:3c:df:71:eb:3b:3e:3a:7d:60: 99:00:e5:4b:06:ae:4d:54:4e:c7:f7:f8:1d:f3:7f: 20:c5:ea:5d:ec:43:31:18:85:ac:a9:5c:80:9d:1b: 57:b0:80:7d:ef:14:26:eb:ff:2f:06:40:8e:00:93: fc:83:26:bd:13:81:56:3b:95:9e:92:3e:91:39:91: 95:88:eb:43:e1:b7:32:99:2b:cc:d8:5c:93:ba:53: 5e:b0:62:6c:06:c4:45:17:70:c9:2c:9d:da:d6:0a: 90:b3:b2:d3:6f:6c:08:45:81:17:1c:c9:7d:81:b8: 4e:e9:11:16:72:85:64:58:fa:ef:9e:33:76:53:8d: cd:8e:73:f2:3b:18:ae:7e:3f:1f:8a:16:50:41:0e: 48:39:a2:76:7e:16:28:02:73:59:05:fc:b2:5b:19: a2:e2:33:72:ff:c8:90:d5:65:e1:7b:31:75:86:36: 0d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A6:85:EB:8D:9F:41:5A:AB:79:D9:38:DB:8A:7C:FD:FF:67:32:1F X509v3 Authority Key Identifier: keyid:EC:A3:3C:96:F0:2A:9F:0B:EF:25:CD:38:06:A2:46:7C:A1:65:63:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:c4:65:08:a1:21:c0:bd:d1:8f:0d:2a:cc:05:22:01:70:e3: 04:1c:58:5f:0e:fd:7a:b5:93:53:74:28:9f:78:6c:cb:14:11: 4b:49:38:ba:61:50:e9:0b:12:a1:07:f7:fe:f3:75:a1:84:e4: 17:f8:71:8b:44:7f:8d:33:0a:f6:07:76:d4:f8:27:c1:d6:d7: 66:c8:8e:bd:7f:9a:65:20:81:42:b9:4b:83:91:32:10:5f:e0: ef:60:87:29:39:c1:2c:05:94:ed:9f:f6:b3:14:ad:8a:f4:54: c8:1e:a8:cd:72:c5:ee:ce:ae:ea:ec:27:1f:0e:20:83:bd:62: 0f:fa:43:43:29:4a:57:1c:d6:1d:42:60:a3:63:9b:1f:a0:bf: 08:da:61:88:03:bd:a1:4f:a8:19:d5:13:1b:22:22:f5:31:ae: 83:22:a0:3e:a5:d3:13:cf:7c:f9:2a:9c:91:3f:3e:dd:46:28: ed:8f:ac:d8:d1:e4:09:be:a9:62:1d:ee:91:21:17:0a:70:a2: 89:63:a4:55:66:83:a5:59:6a:3c:18:8b:bb:e0:66:57:aa:22: ed:a1:c9:59:73:48:0e:f3:c3:db:11:06:0d:9d:72:d2:4b:6a: a9:d4:e4:c1:22:51:91:14:6a:fd:70:f6:fe:f6:77:fd:66:22: df:9b:ac:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt6W++oMYjjhg/8K/R5ieEPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjYTMzYzk2ZjAyYTlmMGJlZjI1Y2QzODA2YTI0NjdjYTE2 NTYzN2IwHhcNMjYwMTAxMTYyMDA0WhcNMjYwMTAyMTYyMDA0WjAzMTEwLwYDVQQD EyhiMWE2ODVlYjhkOWY0MTVhYWI3OWQ5MzhkYjhhN2NmZGZmNjczMjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtes4BxhegubhXJxGnIM55UrlSsW YwdMJ2oIO9ytpptUTCREbCX2h7U2pYeOUBNgD7PFI+Ct8fCoSavvlUjj0sjA7B8l ORUao9MTw0VgzOE833HrOz46fWCZAOVLBq5NVE7H9/gd838gxepd7EMxGIWsqVyA nRtXsIB97xQm6/8vBkCOAJP8gya9E4FWO5Wekj6ROZGViOtD4bcymSvM2FyTulNe sGJsBsRFF3DJLJ3a1gqQs7LTb2wIRYEXHMl9gbhO6REWcoVkWPrvnjN2U43NjnPy Oxiufj8fihZQQQ5IOaJ2fhYoAnNZBfyyWxmi4jNy/8iQ1WXhezF1hjYN+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLGmheuNn0Faq3nZONuKfP3/ZzIfMB8GA1UdIwQY MBaAFOyjPJbwKp8L7yXNOAaiRnyhZWN7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0tNOGx2QXFud3Z2SmMwNEJxSkdmS0ZsWTNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi80OWFlNDItMGU5YS00ZTI0LWJhMTUt MjVlZjI5OTBmMTY2LzEvN0tNOGx2QXFud3Z2SmMwNEJxSkdmS0ZsWTNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi80OWFlNDItMGU5YS00ZTI0LWJhMTUtMjVlZjI5OTBmMTY2 LzEvN0tNOGx2QXFud3Z2SmMwNEJxSkdmS0ZsWTNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxsRlCKEh wL3Rjw0qzAUiAXDjBBxYXw79erWTU3Qon3hsyxQRS0k4umFQ6QsSoQf3/vN1oYTk F/hxi0R/jTMK9gd21PgnwdbXZsiOvX+aZSCBQrlLg5EyEF/g72CHKTnBLAWU7Z/2 sxStivRUyB6ozXLF7s6u6uwnHw4gg71iD/pDQylKVxzWHUJgo2ObH6C/CNphiAO9 oU+oGdUTGyIi9TGugyKgPqXTE898+SqckT8+3UYo7Y+s2NHkCb6pYh3ukSEXCnCi iWOkVWaDpVlqPBiLu+BmV6oi7aHJWXNIDvPD2xEGDZ1y0ktqqdTkwSJRkRRq/XD2 /vZ3/WYi35usSg== -----END CERTIFICATE-----Generated at Thu Jan 1 19:54:35 2026 by rpki-client