This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft File: 7d1hus9lTmZdkSp23o9jtQBMfkg.mft (raw, json) Hash identifier: bsxv4FMz21WxUtAnyednilSaB39T22tcSI0Kq1l1g0U= Subject key identifier: EF:7E:BE:33:88:31:6C:FC:22:3E:CF:38:87:DA:76:E7:6A:5F:51:01 Authority key identifier: ED:DD:61:BA:CF:65:4E:66:5D:91:2A:76:DE:8F:63:B5:00:4C:7E:48 Certificate issuer: /CN=eddd61bacf654e665d912a76de8f63b5004c7e48 Certificate serial: 019BB24C46AAE8B4202D6C1A73A348000ACF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft Manifest number: 17C7 Signing time: Mon 12 Jan 2026 13:01:41 +0000 Manifest this update: Mon 12 Jan 2026 13:01:41 +0000 Manifest next update: Tue 13 Jan 2026 13:01:41 +0000 Files and hashes: 1: 7d1hus9lTmZdkSp23o9jtQBMfkg.crl (hash: ql9JuwKpKwv/gY10xLTbQzRXcbHnEj1eKk7Tp8Ou+0I=) 2: lBKb95x_7BAv49LYfrO19Hosuas.roa (hash: u8R/9/gVEM8wPOouFpMqLvJteQ0bg4i6gAiI/GzejGU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b2:4c:46:aa:e8:b4:20:2d:6c:1a:73:a3:48:00:0a:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eddd61bacf654e665d912a76de8f63b5004c7e48 Validity Not Before: Jan 12 13:01:41 2026 GMT Not After : Jan 13 13:01:41 2026 GMT Subject: CN=ef7ebe3388316cfc223ecf3887da76e76a5f5101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:06:b0:8f:22:3a:39:d6:6c:1c:96:32:e4:f1: de:49:bc:23:bf:62:98:e5:1f:8b:fb:6e:34:99:ce: 44:d8:30:1f:88:7b:26:1a:7b:4b:88:da:c5:79:0e: 1c:52:4a:e8:94:9e:45:3a:47:e4:01:1b:7b:60:10: 5c:b2:7f:20:ec:25:03:69:91:b2:de:9e:32:86:3e: 11:91:52:82:0b:d5:c6:f3:7a:b0:09:94:dd:e4:9c: b7:5f:6a:f9:d2:03:68:7e:91:d8:5c:ac:a3:07:a9: b4:82:53:69:21:f8:ee:41:85:94:84:d7:80:f6:57: ae:a5:f7:db:95:2d:9e:93:c0:bf:3c:f0:a7:19:31: ee:5f:17:e9:1a:b2:0b:fb:9f:74:ad:b8:f7:23:21: 3a:f0:4f:3c:f5:1d:99:c2:61:cc:7c:8e:d2:a2:1b: 7c:86:a6:94:b4:5e:af:9a:f4:64:de:3c:ef:c6:7c: 24:a7:b5:aa:56:db:07:2c:e6:4a:70:e4:11:86:3d: 23:66:e6:c0:27:c4:e4:88:f1:4a:c3:4a:25:bb:20: 57:0a:90:88:99:a2:79:5f:3a:a8:b3:e8:c1:60:6f: cb:15:13:ea:ad:82:9d:d7:99:2b:62:52:13:01:38: cb:cb:0e:bf:19:43:df:8b:3e:06:8f:e0:a1:ab:17: 7b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:7E:BE:33:88:31:6C:FC:22:3E:CF:38:87:DA:76:E7:6A:5F:51:01 X509v3 Authority Key Identifier: keyid:ED:DD:61:BA:CF:65:4E:66:5D:91:2A:76:DE:8F:63:B5:00:4C:7E:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:63:f4:5e:3b:67:8e:52:ca:df:2c:b7:40:6a:d3:b5:48:fe: 85:48:68:d4:4e:dc:20:b9:57:4f:28:d5:f8:e0:3f:7e:30:c1: c8:0e:ff:db:a6:c7:9f:45:01:04:d8:0a:ad:b5:f4:9e:2e:3d: 05:39:83:77:47:b7:19:21:43:b7:8a:8b:71:33:72:37:84:ff: 23:2e:8d:34:b9:47:c7:c8:7e:46:b1:c3:b4:85:ac:40:fe:68: 2d:53:d3:29:cc:aa:00:13:5b:74:b3:dd:86:80:12:ce:47:2b: 14:ea:05:bb:dc:9c:4d:df:a3:a0:78:b5:58:04:82:c7:00:5a: 94:dc:9e:d9:30:96:1a:3f:ba:f5:1e:0d:97:f0:31:e5:ae:8e: d7:4c:a3:7f:3d:c4:f0:23:df:26:8b:a7:68:f8:2c:93:30:86: fb:39:8a:21:02:7f:62:84:92:d5:f0:2e:f3:67:d2:8e:10:31: 75:69:15:38:75:03:bd:d2:70:64:08:3b:a7:66:d6:9d:eb:ab: 6e:41:28:d8:3f:16:02:0b:7e:3c:8f:dd:a7:ee:39:73:75:1a: 66:7e:3d:aa:12:0d:a5:a4:a3:72:a3:a6:c8:3f:1c:37:a7:16: 03:75:09:61:2e:9e:d4:94:66:76:39:8b:2a:6c:7a:6a:be:be: 24:f8:69:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuyTEaq6LQgLWwac6NIAArPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkZGQ2MWJhY2Y2NTRlNjY1ZDkxMmE3NmRlOGY2M2I1MDA0 YzdlNDgwHhcNMjYwMTEyMTMwMTQxWhcNMjYwMTEzMTMwMTQxWjAzMTEwLwYDVQQD EyhlZjdlYmUzMzg4MzE2Y2ZjMjIzZWNmMzg4N2RhNzZlNzZhNWY1MTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAawjyI6OdZsHJYy5PHeSbwjv2KY 5R+L+240mc5E2DAfiHsmGntLiNrFeQ4cUkrolJ5FOkfkARt7YBBcsn8g7CUDaZGy 3p4yhj4RkVKCC9XG83qwCZTd5Jy3X2r50gNofpHYXKyjB6m0glNpIfjuQYWUhNeA 9leupffblS2ek8C/PPCnGTHuXxfpGrIL+590rbj3IyE68E889R2ZwmHMfI7Soht8 hqaUtF6vmvRk3jzvxnwkp7WqVtsHLOZKcOQRhj0jZubAJ8TkiPFKw0oluyBXCpCI maJ5Xzqos+jBYG/LFRPqrYKd15krYlITATjLyw6/GUPfiz4Gj+Chqxd7dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO9+vjOIMWz8Ij7POIfadudqX1EBMB8GA1UdIwQY MBaAFO3dYbrPZU5mXZEqdt6PY7UATH5IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2QxaHVzOWxUbVpka1NwMjNvOWp0UUJNZmtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wNDVhMzgtZTBiYS00ODdmLWI0NjEt NzI2NmFmYzk4ZGJhLzEvN2QxaHVzOWxUbVpka1NwMjNvOWp0UUJNZmtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8wNDVhMzgtZTBiYS00ODdmLWI0NjEtNzI2NmFmYzk4ZGJh LzEvN2QxaHVzOWxUbVpka1NwMjNvOWp0UUJNZmtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1GP0Xjtn jlLK3yy3QGrTtUj+hUho1E7cILlXTyjV+OA/fjDByA7/26bHn0UBBNgKrbX0ni49 BTmDd0e3GSFDt4qLcTNyN4T/Iy6NNLlHx8h+RrHDtIWsQP5oLVPTKcyqABNbdLPd hoASzkcrFOoFu9ycTd+joHi1WASCxwBalNye2TCWGj+69R4Nl/Ax5a6O10yjfz3E 8CPfJounaPgskzCG+zmKIQJ/YoSS1fAu82fSjhAxdWkVOHUDvdJwZAg7p2bWneur bkEo2D8WAgt+PI/dp+45c3UaZn49qhINpaSjcqOmyD8cN6cWA3UJYS6e1JRmdjmL Kmx6ar6+JPhpgg== -----END CERTIFICATE-----Generated at Mon Jan 12 15:47:10 2026 by rpki-client