This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft File: 7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft (raw, json) Hash identifier: 8e7xmyu2zsaLMHrAvSpGPfXVTFy+J0CnFSnBnfFbfXw= Subject key identifier: AE:DD:D3:CD:E6:93:B5:68:57:E4:4C:C7:C9:C5:C1:37:75:83:5D:5A Authority key identifier: EC:97:B7:2D:5D:4F:75:0F:1B:13:8C:2A:90:1D:D6:51:09:21:BE:41 Certificate issuer: /CN=ec97b72d5d4f750f1b138c2a901dd6510921be41 Certificate serial: 019BACEF4332F830B18CDA00DAEDCB9E16AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft Manifest number: 17C2 Signing time: Sun 11 Jan 2026 12:01:59 +0000 Manifest this update: Sun 11 Jan 2026 12:01:59 +0000 Manifest next update: Mon 12 Jan 2026 12:01:59 +0000 Files and hashes: 1: 1LtQ8yyQTy0Z9FcFRr_CRKY4wmA.roa (hash: ZIqC9QiveD2lOUDRGF1cl6cKWZLfSdgfnE3L9iB+Xuw=) 2: 7Je3LV1PdQ8bE4wqkB3WUQkhvkE.crl (hash: RF0VwJF9aDaNws0WPNRhUR+mQdVcAm1pTb4dFDC/x1Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.crl rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft rsync://rpki.ripe.net/repository/DEFAULT/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 12:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ac:ef:43:32:f8:30:b1:8c:da:00:da:ed:cb:9e:16:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec97b72d5d4f750f1b138c2a901dd6510921be41 Validity Not Before: Jan 11 12:01:59 2026 GMT Not After : Jan 12 12:01:59 2026 GMT Subject: CN=aeddd3cde693b56857e44cc7c9c5c13775835d5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1f:65:db:75:47:15:85:58:25:61:ab:59:59: 2c:b1:50:ed:61:a1:2e:dd:e5:4f:da:72:e8:f8:b0: b4:a7:c3:95:31:b1:c5:4d:47:b9:5a:5d:04:2a:13: 17:cc:3e:74:95:6e:fb:4f:2b:2e:48:ec:bc:22:34: 0f:f4:ff:77:d5:ab:8a:3d:9a:39:4e:1b:9e:8a:72: 87:4c:73:38:5b:0b:f7:70:bb:e9:2d:6e:3e:bb:16: 6e:ee:2b:ae:78:a4:22:f8:07:8a:d3:f2:f9:e0:c1: c9:88:b1:d2:55:da:62:c7:98:6d:c3:e4:71:ad:f7: 85:7d:9f:8c:17:71:06:62:b7:7e:3e:25:a6:c5:c2: 79:38:a1:c8:8f:63:70:a3:70:9b:db:c4:8f:d2:6f: 38:79:42:42:83:5b:f5:1f:b2:46:2e:95:0e:8a:c2: 76:a0:1d:f5:08:81:c4:bb:c0:6b:10:e0:d0:c2:f8: 47:1e:5f:46:52:93:5c:bb:03:f6:22:a8:82:35:a7: 58:7c:af:83:8f:28:9f:07:e6:d5:d1:14:82:9b:50: 67:52:3d:d2:7a:32:f3:02:d9:36:1a:8f:33:0a:86: 56:73:4b:b2:60:c4:01:68:d6:de:af:e4:ee:ac:a3: ce:39:b3:00:0b:54:36:7a:d1:23:37:6b:d8:ce:99: 42:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:DD:D3:CD:E6:93:B5:68:57:E4:4C:C7:C9:C5:C1:37:75:83:5D:5A X509v3 Authority Key Identifier: keyid:EC:97:B7:2D:5D:4F:75:0F:1B:13:8C:2A:90:1D:D6:51:09:21:BE:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:14:c7:55:69:5f:d2:b4:63:b1:de:c2:f3:3f:84:43:e9:13: 1f:fa:2f:6d:8c:3c:00:58:79:7f:fa:14:6c:40:07:2b:84:0b: 2b:ab:5b:38:1b:9a:8f:b5:ef:d5:f5:cc:e5:82:33:59:ca:d4: 94:4e:34:0a:ed:98:3c:9e:f9:f7:67:25:f6:a3:bb:9d:b8:8f: 54:a8:66:70:a4:92:a6:26:b5:e0:c2:52:78:85:e7:bb:ab:6c: ea:b7:3b:f4:4a:77:2c:c0:91:88:61:aa:1d:e3:e0:15:40:00: 86:19:6e:fe:ba:ce:4b:3b:bb:7b:68:e8:8e:eb:32:d2:c6:c1: 3a:68:2b:e3:2b:ed:10:41:86:ae:d1:94:08:d1:2a:8c:5d:21: 2b:97:04:c4:20:5e:4a:92:89:f3:aa:11:14:cc:ba:45:b8:b5: 1c:a7:6e:88:14:4c:96:d6:9c:af:e7:b1:43:e3:02:2b:6c:65: 47:aa:e7:6a:9b:18:5b:21:07:47:49:0e:ef:7d:c6:27:c1:ca: 30:6d:e8:b5:a4:8a:8a:5a:a4:f6:58:9d:f7:c5:ed:33:1f:25: c7:7c:28:ef:7f:9d:d5:0e:ed:0d:7b:9c:82:88:e7:01:68:e8: 74:6b:78:37:e7:16:6f:0b:f1:cf:e8:53:5e:cb:17:85:47:80: 03:32:07:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZus70My+DCxjNoA2u3LnhauMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjOTdiNzJkNWQ0Zjc1MGYxYjEzOGMyYTkwMWRkNjUxMDky MWJlNDEwHhcNMjYwMTExMTIwMTU5WhcNMjYwMTEyMTIwMTU5WjAzMTEwLwYDVQQD EyhhZWRkZDNjZGU2OTNiNTY4NTdlNDRjYzdjOWM1YzEzNzc1ODM1ZDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3x9l23VHFYVYJWGrWVkssVDtYaEu 3eVP2nLo+LC0p8OVMbHFTUe5Wl0EKhMXzD50lW77TysuSOy8IjQP9P931auKPZo5 ThueinKHTHM4Wwv3cLvpLW4+uxZu7iuueKQi+AeK0/L54MHJiLHSVdpix5htw+Rx rfeFfZ+MF3EGYrd+PiWmxcJ5OKHIj2Nwo3Cb28SP0m84eUJCg1v1H7JGLpUOisJ2 oB31CIHEu8BrEODQwvhHHl9GUpNcuwP2IqiCNadYfK+DjyifB+bV0RSCm1BnUj3S ejLzAtk2Go8zCoZWc0uyYMQBaNber+TurKPOObMAC1Q2etEjN2vYzplCWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK7d083mk7VoV+RMx8nFwTd1g11aMB8GA1UdIwQY MBaAFOyXty1dT3UPGxOMKpAd1lEJIb5BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0plM0xWMVBkUThiRTR3cWtCM1dVUWtodmtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9lZjk4NjAtMjY1OC00NGRmLWIxNzIt ODA2NmZhMjEyNDFhLzEvN0plM0xWMVBkUThiRTR3cWtCM1dVUWtodmtFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9lZjk4NjAtMjY1OC00NGRmLWIxNzItODA2NmZhMjEyNDFh LzEvN0plM0xWMVBkUThiRTR3cWtCM1dVUWtodmtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFhTHVWlf 0rRjsd7C8z+EQ+kTH/ovbYw8AFh5f/oUbEAHK4QLK6tbOBuaj7Xv1fXM5YIzWcrU lE40Cu2YPJ7592cl9qO7nbiPVKhmcKSSpia14MJSeIXnu6ts6rc79Ep3LMCRiGGq HePgFUAAhhlu/rrOSzu7e2jojusy0sbBOmgr4yvtEEGGrtGUCNEqjF0hK5cExCBe SpKJ86oRFMy6Rbi1HKduiBRMltacr+exQ+MCK2xlR6rnapsYWyEHR0kO733GJ8HK MG3otaSKilqk9lid98XtMx8lx3wo73+d1Q7tDXucgojnAWjodGt4N+cWbwvxz+hT XssXhUeAAzIHHg== -----END CERTIFICATE-----Generated at Sun Jan 11 19:57:26 2026 by rpki-client