This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft File: T7EQS7paPx3dLe67o0gZGfT5YaQ.mft (raw, json) Hash identifier: 4le71ByiSjQJUzPNjbOU6OOoJK/bOhlyGhbhaMi1PTw= Subject key identifier: 8F:8E:61:37:61:63:83:C4:FC:D2:63:06:8E:67:B4:D7:DB:95:07:0A Authority key identifier: 4F:B1:10:4B:BA:5A:3F:1D:DD:2D:EE:BB:A3:48:19:19:F4:F9:61:A4 Certificate issuer: /CN=4fb1104bba5a3f1ddd2deebba3481919f4f961a4 Certificate serial: 019B79382D590F76B1E4ED39506B755155D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft Manifest number: 11A2 Signing time: Thu 01 Jan 2026 11:01:23 +0000 Manifest this update: Thu 01 Jan 2026 11:01:23 +0000 Manifest next update: Fri 02 Jan 2026 11:01:23 +0000 Files and hashes: 1: PHtHgmSOY6QlNjsIyECg_KW7ZYU.roa (hash: cSzW9+Tdn6riD70yyykVu3Jxk7SzmVYuL8aIL6ZeXmM=) 2: T7EQS7paPx3dLe67o0gZGfT5YaQ.crl (hash: x68enoPF9y6EcAYUwNnGGvQ7xZnwsHEXPFBodG31lJg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 11:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:38:2d:59:0f:76:b1:e4:ed:39:50:6b:75:51:55:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fb1104bba5a3f1ddd2deebba3481919f4f961a4 Validity Not Before: Jan 1 11:01:23 2026 GMT Not After : Jan 2 11:01:23 2026 GMT Subject: CN=8f8e6137616383c4fcd263068e67b4d7db95070a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:63:b7:02:77:16:37:91:e8:ed:8e:93:65:ca: ec:30:bf:6d:01:c2:bd:74:3a:a9:2d:bf:9c:71:7a: b0:28:7c:c2:eb:d4:27:99:b8:32:d0:f8:f2:14:8d: dc:7a:14:2f:cc:c5:bc:3c:c4:05:d7:db:e2:28:5f: 22:86:2d:4b:00:c9:7f:22:af:b0:61:e3:54:57:d6: 07:d6:19:a5:f0:e8:41:21:b9:3d:3c:f5:ec:de:b9: db:93:59:1c:91:ca:68:5e:85:7a:08:93:03:01:01: ea:2c:6f:f6:d0:22:60:bb:85:51:65:b8:09:00:af: c4:45:12:fd:b1:3d:cb:ea:1c:06:7b:e0:e7:ab:8e: 67:63:8e:42:7c:b2:4f:b4:73:9a:84:a4:c5:58:65: 48:5a:10:b4:dd:4b:21:82:6f:a2:9a:0b:18:7a:16: 8a:79:62:d5:88:de:f8:f6:d6:d1:2d:98:47:53:50: 15:e7:51:b0:1c:cd:18:e3:05:da:81:01:bb:0e:10: ab:d3:29:25:00:60:1a:ea:00:ed:70:68:c2:03:7e: ce:1f:9d:df:bc:05:36:e0:98:b4:14:19:b5:7d:31: e2:d5:97:8c:3b:ac:63:bb:d7:cd:b9:b7:0c:38:5b: 0c:1b:a6:d4:96:1a:c3:b1:c9:be:bc:23:96:ed:96: 17:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:8E:61:37:61:63:83:C4:FC:D2:63:06:8E:67:B4:D7:DB:95:07:0A X509v3 Authority Key Identifier: keyid:4F:B1:10:4B:BA:5A:3F:1D:DD:2D:EE:BB:A3:48:19:19:F4:F9:61:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:66:eb:47:e3:01:12:2f:fc:a5:68:6c:1e:06:14:5d:be:61: df:d7:8f:b5:f2:81:a2:70:bc:12:86:ce:90:0e:f1:99:2f:df: d7:c0:48:c0:48:e7:ba:37:3a:b9:ad:09:ba:3d:25:62:ae:10: f5:1e:39:98:14:2f:4b:6b:d7:86:56:59:6d:27:f2:0c:31:d0: 17:73:75:8e:e3:46:68:6d:59:78:70:ae:5a:1b:96:d0:2b:5d: b7:d3:b6:2c:82:3b:ee:d7:f6:a4:5f:01:3a:ca:f5:3c:3c:85: fe:21:49:5c:b3:63:0c:a1:5a:c2:9a:75:90:4b:e4:c0:fb:72: 99:d4:f1:fd:ac:f8:85:a6:2b:43:8f:4e:a3:46:a0:1e:92:fa: c8:7e:9f:f3:79:a4:35:5e:06:0e:90:23:65:c4:a5:74:77:c9: e8:64:5b:fa:08:bf:a1:1d:ba:1e:6b:77:a1:38:9e:86:90:24: 91:65:f8:d4:e8:07:a5:66:5c:b5:8a:44:5f:46:55:03:6c:20: 01:ad:dd:36:63:ed:e3:de:69:72:d5:fb:e5:65:25:ed:d6:5c: a9:5f:f8:11:48:45:17:45:1b:d6:11:21:8f:6c:05:ea:db:58: 89:7e:43:fc:9e:58:0b:fc:64:e3:b8:79:25:b7:89:12:75:9b: f0:b2:e2:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt5OC1ZD3ax5O05UGt1UVXVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYjExMDRiYmE1YTNmMWRkZDJkZWViYmEzNDgxOTE5ZjRm OTYxYTQwHhcNMjYwMTAxMTEwMTIzWhcNMjYwMTAyMTEwMTIzWjAzMTEwLwYDVQQD Eyg4ZjhlNjEzNzYxNjM4M2M0ZmNkMjYzMDY4ZTY3YjRkN2RiOTUwNzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWO3AncWN5Ho7Y6TZcrsML9tAcK9 dDqpLb+ccXqwKHzC69Qnmbgy0PjyFI3cehQvzMW8PMQF19viKF8ihi1LAMl/Iq+w YeNUV9YH1hml8OhBIbk9PPXs3rnbk1kckcpoXoV6CJMDAQHqLG/20CJgu4VRZbgJ AK/ERRL9sT3L6hwGe+Dnq45nY45CfLJPtHOahKTFWGVIWhC03Ushgm+imgsYehaK eWLViN749tbRLZhHU1AV51GwHM0Y4wXagQG7DhCr0yklAGAa6gDtcGjCA37OH53f vAU24Ji0FBm1fTHi1ZeMO6xju9fNubcMOFsMG6bUlhrDscm+vCOW7ZYX8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI+OYTdhY4PE/NJjBo5ntNfblQcKMB8GA1UdIwQY MBaAFE+xEEu6Wj8d3S3uu6NIGRn0+WGkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDdFUVM3cGFQeDNkTGU2N28wZ1pHZlQ1WWFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84OWVlOTQtNTAxMC00NGFkLTllMTct NDM2YWI0YWRlMGE3LzEvVDdFUVM3cGFQeDNkTGU2N28wZ1pHZlQ1WWFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny84OWVlOTQtNTAxMC00NGFkLTllMTctNDM2YWI0YWRlMGE3 LzEvVDdFUVM3cGFQeDNkTGU2N28wZ1pHZlQ1WWFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmWbrR+MB Ei/8pWhsHgYUXb5h39ePtfKBonC8EobOkA7xmS/f18BIwEjnujc6ua0Juj0lYq4Q 9R45mBQvS2vXhlZZbSfyDDHQF3N1juNGaG1ZeHCuWhuW0Ctdt9O2LII77tf2pF8B Osr1PDyF/iFJXLNjDKFawpp1kEvkwPtymdTx/az4haYrQ49Oo0agHpL6yH6f83mk NV4GDpAjZcSldHfJ6GRb+gi/oR26Hmt3oTiehpAkkWX41OgHpWZctYpEX0ZVA2wg Aa3dNmPt495pctX75WUl7dZcqV/4EUhFF0Ub1hEhj2wF6ttYiX5D/J5YC/xk47h5 JbeJEnWb8LLiIQ== -----END CERTIFICATE-----Generated at Thu Jan 1 21:23:30 2026 by rpki-client