This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft File: 7HOKOB5g9aj-BYf8axo8gTyOPKg.mft (raw, json) Hash identifier: NUJ2cdijqFQ6nUgWts7ux9P3AKZQNLSQyRTipZ/Y//s= Subject key identifier: CB:27:FE:C9:DF:6F:01:6F:E6:72:92:51:08:79:67:FA:CF:71:4E:1C Authority key identifier: EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8 Certificate issuer: /CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8 Certificate serial: 019B771241FCF6A894ADCDD9849D0272BAC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft Manifest number: 0A18 Signing time: Thu 01 Jan 2026 01:00:43 +0000 Manifest this update: Thu 01 Jan 2026 01:00:43 +0000 Manifest next update: Fri 02 Jan 2026 01:00:43 +0000 Files and hashes: 1: 7HOKOB5g9aj-BYf8axo8gTyOPKg.crl (hash: YHZMLkjCXABlEgbJFUa4AL8dpHGmw/0v9jt8k23ZyDE=) 2: 9QnDkxV0-5vbum3ReIObVEkcGRE.roa (hash: zosi65Q+fpy1DBt4qsf0U/lkljOCwQHreS1fZR3vXn0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:12:41:fc:f6:a8:94:ad:cd:d9:84:9d:02:72:ba:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8 Validity Not Before: Jan 1 01:00:43 2026 GMT Not After : Jan 2 01:00:43 2026 GMT Subject: CN=cb27fec9df6f016fe6729251087967facf714e1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:71:dc:b9:2e:57:cd:55:9f:2b:ba:a9:e8:02: d9:85:6d:49:ab:d5:ea:b1:77:cb:7c:45:fe:29:1c: 7b:0b:15:ce:bc:f7:40:c1:3a:54:e3:1d:1c:82:92: 1c:aa:c7:57:e6:28:6c:81:53:ae:7c:2e:2e:37:bb: ed:45:45:bb:94:37:65:be:1a:7b:95:d2:26:43:55: ec:32:a8:75:66:4e:42:e4:7f:1d:49:87:d6:f5:06: cd:30:62:43:b1:87:e5:5d:0f:cd:6f:6e:06:d3:d1: 81:35:12:00:26:dd:5a:c2:9b:89:d4:28:51:f6:2f: ac:13:59:06:00:dd:c6:a5:0e:4e:99:fb:40:48:dc: a8:a5:5f:2b:2d:82:e1:24:fa:89:5e:90:f8:06:2d: 0d:30:00:31:9f:dc:71:d1:c3:06:6b:74:0a:54:d4: 93:a8:b6:35:ef:0b:9c:45:dd:b3:6e:f8:ca:49:1c: fb:a7:50:8d:78:bb:63:ff:62:44:78:65:21:fb:6a: 69:83:02:d8:f9:00:f9:cc:6c:e1:f7:63:e6:e2:e1: 5b:de:ec:8b:57:34:a3:16:c5:e9:71:f8:7a:b6:82: dd:1b:5b:3b:1e:bf:67:49:7c:d9:37:82:f2:8c:cc: 98:05:a5:42:6c:18:8f:5b:f2:67:45:19:fe:d9:5d: ab:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:27:FE:C9:DF:6F:01:6F:E6:72:92:51:08:79:67:FA:CF:71:4E:1C X509v3 Authority Key Identifier: keyid:EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:e9:44:99:7c:c1:cd:9c:1c:43:ca:f2:12:a8:63:64:c2:f8: e1:7a:79:31:91:28:50:ff:45:12:7c:0e:8f:27:90:16:c9:a9: 34:c8:0e:82:97:e5:65:6e:5a:ae:54:db:6b:17:f4:37:f7:67: 55:58:df:6e:51:70:9c:78:9e:ec:c0:7b:50:0e:21:be:0c:0d: bb:24:ee:75:92:9f:70:dd:ac:c9:96:da:e2:cc:63:72:9f:b5: b2:18:32:79:b6:04:18:b7:82:64:cb:61:41:29:f0:c6:c8:f3: 46:d9:2e:6d:60:0f:3e:0f:c3:cd:d8:4a:38:47:b1:2d:47:f9: 26:78:4f:36:e4:bb:b6:9b:2a:f8:1c:41:94:02:1f:da:cc:5e: 2c:6b:bb:8d:6f:d1:27:67:14:7c:28:b1:37:ef:e9:24:bd:13: 10:16:67:44:3a:30:52:d3:9a:3c:45:1a:24:3c:61:7f:06:bc: 90:7f:b9:51:f4:a0:4d:e7:2a:df:1c:27:cd:0b:9e:67:db:64: 48:ab:13:d2:79:29:d6:9a:65:3a:e6:74:38:b4:ba:6c:31:f0: 40:f4:33:0d:65:54:b1:8f:62:8a:0d:27:82:57:49:43:14:1f: 2c:e7:ca:f3:38:36:d5:bf:f1:fe:55:61:63:27:df:f2:14:b2: b6:14:5d:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt3EkH89qiUrc3ZhJ0CcrrHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNzM4YTM4MWU2MGY1YThmZTA1ODdmYzZiMWEzYzgxM2M4 ZTNjYTgwHhcNMjYwMTAxMDEwMDQzWhcNMjYwMTAyMDEwMDQzWjAzMTEwLwYDVQQD EyhjYjI3ZmVjOWRmNmYwMTZmZTY3MjkyNTEwODc5NjdmYWNmNzE0ZTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HHcuS5XzVWfK7qp6ALZhW1Jq9Xq sXfLfEX+KRx7CxXOvPdAwTpU4x0cgpIcqsdX5ihsgVOufC4uN7vtRUW7lDdlvhp7 ldImQ1XsMqh1Zk5C5H8dSYfW9QbNMGJDsYflXQ/Nb24G09GBNRIAJt1awpuJ1ChR 9i+sE1kGAN3GpQ5OmftASNyopV8rLYLhJPqJXpD4Bi0NMAAxn9xx0cMGa3QKVNST qLY17wucRd2zbvjKSRz7p1CNeLtj/2JEeGUh+2ppgwLY+QD5zGzh92Pm4uFb3uyL VzSjFsXpcfh6toLdG1s7Hr9nSXzZN4LyjMyYBaVCbBiPW/JnRRn+2V2rSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMsn/snfbwFv5nKSUQh5Z/rPcU4cMB8GA1UdIwQY MBaAFOxzijgeYPWo/gWH/GsaPIE8jjyoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0hPS09CNWc5YWotQllmOGF4bzhnVHlPUEtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8wYzFjZTAtNDUzMy00ZTQzLWJlOWMt NTNjZjI2YjBhNzI0LzEvN0hPS09CNWc5YWotQllmOGF4bzhnVHlPUEtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi8wYzFjZTAtNDUzMy00ZTQzLWJlOWMtNTNjZjI2YjBhNzI0 LzEvN0hPS09CNWc5YWotQllmOGF4bzhnVHlPUEtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR+lEmXzB zZwcQ8ryEqhjZML44Xp5MZEoUP9FEnwOjyeQFsmpNMgOgpflZW5arlTbaxf0N/dn VVjfblFwnHie7MB7UA4hvgwNuyTudZKfcN2syZba4sxjcp+1shgyebYEGLeCZMth QSnwxsjzRtkubWAPPg/DzdhKOEexLUf5JnhPNuS7tpsq+BxBlAIf2sxeLGu7jW/R J2cUfCixN+/pJL0TEBZnRDowUtOaPEUaJDxhfwa8kH+5UfSgTecq3xwnzQueZ9tk SKsT0nkp1pplOuZ0OLS6bDHwQPQzDWVUsY9iig0ngldJQxQfLOfK8zg21b/x/lVh Yyff8hSythRd/A== -----END CERTIFICATE-----Generated at Thu Jan 1 08:46:18 2026 by rpki-client