This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft File: 7jSQhUVj0yIi6azlrYpknptKFyk.mft (raw, json) Hash identifier: RsfsNhkL574qd6TSsiAMWrXmlbAmB4pRh9ZryDh2178= Subject key identifier: B7:7C:A0:BE:C8:66:B3:3B:67:96:DE:94:30:2F:35:F5:31:57:04:1F Authority key identifier: EE:34:90:85:45:63:D3:22:22:E9:AC:E5:AD:8A:64:9E:9B:4A:17:29 Certificate issuer: /CN=ee3490854563d32222e9ace5ad8a649e9b4a1729 Certificate serial: 019BAE6F1D25C85B5C6CD74A3739C4ABAB2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft Manifest number: 0424 Signing time: Sun 11 Jan 2026 19:01:16 +0000 Manifest this update: Sun 11 Jan 2026 19:01:16 +0000 Manifest next update: Mon 12 Jan 2026 19:01:16 +0000 Files and hashes: 1: 7jSQhUVj0yIi6azlrYpknptKFyk.crl (hash: QpJlzW4ei62qDMcShbmrcCbqnE6p5rYXgQXwrFKq514=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:6f:1d:25:c8:5b:5c:6c:d7:4a:37:39:c4:ab:ab:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee3490854563d32222e9ace5ad8a649e9b4a1729 Validity Not Before: Jan 11 19:01:16 2026 GMT Not After : Jan 12 19:01:16 2026 GMT Subject: CN=b77ca0bec866b33b6796de94302f35f53157041f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:08:09:4f:aa:25:79:e5:bb:bd:3c:67:d4:2b: 6d:a4:dd:52:4d:28:ce:81:9a:f0:a5:c4:b2:db:a6: 79:69:84:47:e1:75:96:88:28:97:17:e1:de:1e:75: 2b:81:4e:9d:0f:f9:c9:ce:f0:29:4a:d8:f6:ce:e4: e6:03:41:22:a7:99:85:bf:ae:37:27:6d:a9:a5:63: 34:d0:b4:67:b4:cc:d3:6b:41:94:89:e7:07:4e:19: 6e:45:cc:ee:f1:1b:56:cd:fe:49:6b:06:0a:11:7b: 15:e6:84:e0:e5:b6:4e:9a:90:b3:50:98:39:91:4c: 0b:1e:4c:9e:65:91:32:1f:4c:82:4f:99:bd:97:ca: 44:b7:66:41:a8:b2:4f:66:f3:22:c7:61:4b:42:a5: d3:fb:1d:98:e3:70:22:8c:31:a6:f3:dc:a3:b8:b1: f5:cb:33:ca:0f:74:2a:de:49:9a:8e:88:3f:ab:4a: a8:ae:07:39:f9:2e:2c:d8:de:cb:a1:41:aa:49:85: 07:73:1e:68:46:01:e6:d4:d0:2c:1f:1a:11:31:70: 54:57:f8:1a:39:1a:1e:df:a7:2d:cd:1f:9d:66:f7: 08:a9:ee:1a:1a:04:05:e4:f3:43:75:fc:a2:47:94: f8:1b:c5:e9:1e:95:d3:da:5b:b7:1e:37:04:5a:b8: 45:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:7C:A0:BE:C8:66:B3:3B:67:96:DE:94:30:2F:35:F5:31:57:04:1F X509v3 Authority Key Identifier: keyid:EE:34:90:85:45:63:D3:22:22:E9:AC:E5:AD:8A:64:9E:9B:4A:17:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:f6:01:33:5b:71:fd:a6:12:97:fa:cc:ac:73:aa:ff:82:22: f3:84:c2:84:5b:23:8c:0d:6a:13:02:dd:a0:91:d5:99:3c:72: f4:16:9d:1d:90:53:ef:28:d2:18:1c:fc:74:2c:b4:5b:cc:52: 36:86:83:de:32:b7:28:c4:c9:01:68:79:3f:14:53:dc:d5:af: 5c:33:0a:d1:86:7b:41:75:86:e6:f1:fe:23:5a:54:64:c1:7e: 9d:53:b4:24:d6:24:39:31:13:51:fc:df:77:a8:78:1a:ab:06: 77:7b:10:cf:7f:0c:dc:08:ca:7d:6d:fa:0d:31:f4:76:68:7b: 89:8f:b0:17:b7:b8:2e:9f:ce:65:e3:12:b7:48:d8:96:7b:ea: 0f:8a:09:0a:40:08:c9:51:16:73:b7:f6:a2:39:e6:f0:e6:4f: 5f:58:6f:bb:c5:d0:b0:39:7e:a3:df:4d:85:da:86:ae:b2:66: cf:dd:53:d9:ff:21:b2:0e:9e:a6:ff:10:95:d6:ed:03:48:7c: 54:49:5f:f7:9e:83:1e:0b:7e:74:cf:ee:3c:86:2a:b7:78:f1: 0e:53:34:54:33:0e:ed:87:11:b4:a2:73:37:67:f4:e8:c8:95: 36:81:80:b3:78:2d:d4:12:09:f2:8f:e5:2b:24:a3:b8:54:c0: dd:04:2a:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuubx0lyFtcbNdKNznEq6stMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMzQ5MDg1NDU2M2QzMjIyMmU5YWNlNWFkOGE2NDllOWI0 YTE3MjkwHhcNMjYwMTExMTkwMTE2WhcNMjYwMTEyMTkwMTE2WjAzMTEwLwYDVQQD EyhiNzdjYTBiZWM4NjZiMzNiNjc5NmRlOTQzMDJmMzVmNTMxNTcwNDFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wgJT6oleeW7vTxn1CttpN1STSjO gZrwpcSy26Z5aYRH4XWWiCiXF+HeHnUrgU6dD/nJzvApStj2zuTmA0Eip5mFv643 J22ppWM00LRntMzTa0GUiecHThluRczu8RtWzf5JawYKEXsV5oTg5bZOmpCzUJg5 kUwLHkyeZZEyH0yCT5m9l8pEt2ZBqLJPZvMix2FLQqXT+x2Y43AijDGm89yjuLH1 yzPKD3Qq3kmajog/q0qorgc5+S4s2N7LoUGqSYUHcx5oRgHm1NAsHxoRMXBUV/ga ORoe36ctzR+dZvcIqe4aGgQF5PNDdfyiR5T4G8XpHpXT2lu3HjcEWrhFFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLd8oL7IZrM7Z5belDAvNfUxVwQfMB8GA1UdIwQY MBaAFO40kIVFY9MiIums5a2KZJ6bShcpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2pTUWhVVmoweUlpNmF6bHJZcGtucHRLRnlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9kMDJmYmMtOGJmNS00NjhkLWEyYTMt NDVjNTNiN2VmOWZhLzEvN2pTUWhVVmoweUlpNmF6bHJZcGtucHRLRnlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9kMDJmYmMtOGJmNS00NjhkLWEyYTMtNDVjNTNiN2VmOWZh LzEvN2pTUWhVVmoweUlpNmF6bHJZcGtucHRLRnlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsvYBM1tx /aYSl/rMrHOq/4Ii84TChFsjjA1qEwLdoJHVmTxy9BadHZBT7yjSGBz8dCy0W8xS NoaD3jK3KMTJAWh5PxRT3NWvXDMK0YZ7QXWG5vH+I1pUZMF+nVO0JNYkOTETUfzf d6h4GqsGd3sQz38M3AjKfW36DTH0dmh7iY+wF7e4Lp/OZeMSt0jYlnvqD4oJCkAI yVEWc7f2ojnm8OZPX1hvu8XQsDl+o99NhdqGrrJmz91T2f8hsg6epv8QldbtA0h8 VElf956DHgt+dM/uPIYqt3jxDlM0VDMO7YcRtKJzN2f06MiVNoGAs3gt1BIJ8o/l KySjuFTA3QQqUA== -----END CERTIFICATE-----Generated at Mon Jan 12 02:58:39 2026 by rpki-client