This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.mft File: 7N0ioeDFuwAoDxkz7uz4HNig5rI.mft (raw, json) Hash identifier: iniaterWFg2vziJs34WfkpWoSFem8N15zC/fO0XLaSs= Subject key identifier: A7:01:29:91:05:04:10:04:94:20:1C:56:E9:FD:E9:1A:A5:7A:0A:65 Authority key identifier: EC:DD:22:A1:E0:C5:BB:00:28:0F:19:33:EE:EC:F8:1C:D8:A0:E6:B2 Certificate issuer: /CN=ecdd22a1e0c5bb00280f1933eeecf81cd8a0e6b2 Certificate serial: 019BB05D67A2AED360418532EB804474FDD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7N0ioeDFuwAoDxkz7uz4HNig5rI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.mft Manifest number: 1754 Signing time: Mon 12 Jan 2026 04:01:09 +0000 Manifest this update: Mon 12 Jan 2026 04:01:09 +0000 Manifest next update: Tue 13 Jan 2026 04:01:09 +0000 Files and hashes: 1: 7N0ioeDFuwAoDxkz7uz4HNig5rI.crl (hash: zgVp4g0UMom+NqszXdJL9gTSOSZzWhNf0/dUI33iG7U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.crl rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.mft rsync://rpki.ripe.net/repository/DEFAULT/7N0ioeDFuwAoDxkz7uz4HNig5rI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b0:5d:67:a2:ae:d3:60:41:85:32:eb:80:44:74:fd:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecdd22a1e0c5bb00280f1933eeecf81cd8a0e6b2 Validity Not Before: Jan 12 04:01:09 2026 GMT Not After : Jan 13 04:01:09 2026 GMT Subject: CN=a70129910504100494201c56e9fde91aa57a0a65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:3b:6a:e9:ba:e2:d1:9a:fa:6d:03:42:18:88: 86:0a:9c:36:11:89:d1:d2:c1:1f:d7:b1:69:ea:30: 88:7e:67:72:46:9f:b1:97:51:07:ab:31:b2:f1:0f: b7:ae:46:e3:8d:25:a6:8a:ea:eb:ca:24:93:85:e2: f5:4c:ed:55:e6:2b:22:1e:6d:32:6f:66:1e:65:98: 1f:6e:dc:cd:35:97:84:55:8e:0d:a6:ee:40:78:b8: ee:60:7b:c4:4e:ff:05:7a:b6:3a:75:2d:27:4c:55: ec:49:90:78:80:bb:3e:f6:5e:50:b8:ce:69:55:f1: c4:4f:7b:a9:d3:e2:69:6c:da:c1:29:34:c9:de:dc: 7b:6a:f4:a4:34:97:37:7b:2a:86:12:ba:8f:84:a6: f6:4a:4e:38:0d:2b:48:4c:ea:54:43:a3:5d:03:10: 82:42:f8:e3:61:a7:71:ad:da:3b:a9:90:1e:4d:b9: ae:a0:3d:6e:43:e0:97:61:05:35:41:2f:c3:69:8d: 8a:63:c9:31:e1:0e:b7:e9:17:24:1c:c5:4c:32:f8: 64:b7:22:16:e1:ae:2f:a8:62:55:20:e4:18:6d:0b: 1c:3c:94:5b:92:16:e2:d3:b0:a4:4e:1b:61:bf:df: a6:e1:29:0c:38:e4:a9:8c:ee:86:40:48:66:7e:c9: aa:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:01:29:91:05:04:10:04:94:20:1C:56:E9:FD:E9:1A:A5:7A:0A:65 X509v3 Authority Key Identifier: keyid:EC:DD:22:A1:E0:C5:BB:00:28:0F:19:33:EE:EC:F8:1C:D8:A0:E6:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N0ioeDFuwAoDxkz7uz4HNig5rI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:a4:9a:73:20:f6:94:ed:10:f9:3e:68:78:09:2e:9a:18:d7: 50:d6:38:8a:65:8b:6b:1c:6f:47:0b:94:7b:1d:68:1e:c9:53: f5:31:8b:5b:29:12:31:58:4c:3b:81:7d:33:45:4a:91:8b:c3: 6f:8f:54:b9:5f:ff:8e:7b:11:93:fd:ce:0c:60:b9:33:09:74: e0:b3:b1:89:18:21:ad:d0:b0:6c:69:70:68:11:97:84:f8:6f: 6d:cd:73:02:c3:dc:c7:0e:3c:7d:93:e4:69:51:3d:e7:96:6a: 6d:20:b8:e7:13:e3:69:53:83:d4:e8:9c:e5:a0:26:2c:83:89: d3:de:b0:76:17:18:f3:b0:30:1b:c3:1f:62:8a:19:0e:5a:85: 5b:c8:e9:07:af:06:01:7d:d0:d3:71:6d:d2:b6:6a:22:bb:30: 5f:bf:71:a5:af:ff:53:0f:54:f4:02:20:73:ce:ab:e1:a9:b8: aa:4a:74:95:81:55:f2:fe:61:d6:69:0f:c3:33:89:3c:ea:e3: 78:8c:70:49:6d:0c:3c:80:04:d9:38:4f:f7:73:8c:d7:e2:0e: bd:8a:ff:e4:ec:8b:a7:e4:4a:70:89:77:6d:88:68:53:91:50: ab:1b:84:a3:a5:8e:c2:3f:92:11:14:5a:ca:9a:7b:73:d9:f3: a3:86:9a:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuwXWeirtNgQYUy64BEdP3XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjZGQyMmExZTBjNWJiMDAyODBmMTkzM2VlZWNmODFjZDhh MGU2YjIwHhcNMjYwMTEyMDQwMTA5WhcNMjYwMTEzMDQwMTA5WjAzMTEwLwYDVQQD EyhhNzAxMjk5MTA1MDQxMDA0OTQyMDFjNTZlOWZkZTkxYWE1N2EwYTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6jtq6bri0Zr6bQNCGIiGCpw2EYnR 0sEf17Fp6jCIfmdyRp+xl1EHqzGy8Q+3rkbjjSWmiurryiSTheL1TO1V5isiHm0y b2YeZZgfbtzNNZeEVY4Npu5AeLjuYHvETv8FerY6dS0nTFXsSZB4gLs+9l5QuM5p VfHET3up0+JpbNrBKTTJ3tx7avSkNJc3eyqGErqPhKb2Sk44DStITOpUQ6NdAxCC QvjjYadxrdo7qZAeTbmuoD1uQ+CXYQU1QS/DaY2KY8kx4Q636RckHMVMMvhktyIW 4a4vqGJVIOQYbQscPJRbkhbi07CkThthv9+m4SkMOOSpjO6GQEhmfsmqewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKcBKZEFBBAElCAcVun96RqlegplMB8GA1UdIwQY MBaAFOzdIqHgxbsAKA8ZM+7s+BzYoOayMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN04waW9lREZ1d0FvRHhrejd1ejRITmlnNXJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi83MTc2NDgtNTVjMC00MDdhLTgxMWUt NTk2MTY1NWMzNGQ5LzEvN04waW9lREZ1d0FvRHhrejd1ejRITmlnNXJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi83MTc2NDgtNTVjMC00MDdhLTgxMWUtNTk2MTY1NWMzNGQ5 LzEvN04waW9lREZ1d0FvRHhrejd1ejRITmlnNXJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACKSacyD2 lO0Q+T5oeAkumhjXUNY4imWLaxxvRwuUex1oHslT9TGLWykSMVhMO4F9M0VKkYvD b49UuV//jnsRk/3ODGC5Mwl04LOxiRghrdCwbGlwaBGXhPhvbc1zAsPcxw48fZPk aVE955ZqbSC45xPjaVOD1Oic5aAmLIOJ096wdhcY87AwG8MfYooZDlqFW8jpB68G AX3Q03Ft0rZqIrswX79xpa//Uw9U9AIgc86r4am4qkp0lYFV8v5h1mkPwzOJPOrj eIxwSW0MPIAE2ThP93OM1+IOvYr/5OyLp+RKcIl3bYhoU5FQqxuEo6WOwj+SERRa ypp7c9nzo4aaCQ== -----END CERTIFICATE-----Generated at Mon Jan 12 13:11:29 2026 by rpki-client