This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4f311b-46e3-4ac1-8e9f-debc282d483e/1/e_7CSauE-BJlaciz2OP0PNgsYRU.mft File: e_7CSauE-BJlaciz2OP0PNgsYRU.mft (raw, json) Hash identifier: qCI7N8dRi3130prZ1sNd8S7aI6VQ+EIfcEV11RQCI28= Subject key identifier: 77:AB:3C:C5:D5:F7:87:E7:C1:A9:14:B4:25:96:DE:14:5B:98:48:49 Authority key identifier: 7B:FE:C2:49:AB:84:F8:12:65:69:C8:B3:D8:E3:F4:3C:D8:2C:61:15 Certificate issuer: /CN=7bfec249ab84f8126569c8b3d8e3f43cd82c6115 Certificate serial: 019BB6CD837E7A3817B514CEDAEF55B34364 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e_7CSauE-BJlaciz2OP0PNgsYRU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4f311b-46e3-4ac1-8e9f-debc282d483e/1/e_7CSauE-BJlaciz2OP0PNgsYRU.mft Manifest number: 17C3 Signing time: Tue 13 Jan 2026 10:01:20 +0000 Manifest this update: Tue 13 Jan 2026 10:01:20 +0000 Manifest next update: Wed 14 Jan 2026 10:01:20 +0000 Files and hashes: 1: e_7CSauE-BJlaciz2OP0PNgsYRU.crl (hash: pxpxKFiMuS7R7xF76bFl4gWOYh9LZsvvg29A47TBuAg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4f311b-46e3-4ac1-8e9f-debc282d483e/1/e_7CSauE-BJlaciz2OP0PNgsYRU.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/4f311b-46e3-4ac1-8e9f-debc282d483e/1/e_7CSauE-BJlaciz2OP0PNgsYRU.mft rsync://rpki.ripe.net/repository/DEFAULT/e_7CSauE-BJlaciz2OP0PNgsYRU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 09:36:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b6:cd:83:7e:7a:38:17:b5:14:ce:da:ef:55:b3:43:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bfec249ab84f8126569c8b3d8e3f43cd82c6115 Validity Not Before: Jan 13 10:01:20 2026 GMT Not After : Jan 14 10:01:20 2026 GMT Subject: CN=77ab3cc5d5f787e7c1a914b42596de145b984849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b8:fa:a2:d3:67:33:5f:89:28:7e:40:04:ba: f1:57:cc:b7:97:bb:ee:e4:7f:ec:71:1c:24:52:98: 3b:32:9a:f3:cd:df:de:b7:28:52:e7:56:0c:61:63: 6b:f6:f2:27:0e:c6:e7:80:86:84:60:a8:09:73:40: 49:1c:87:76:ed:61:73:ea:3b:b3:d7:3a:2d:de:71: ad:e0:07:83:6b:e8:5a:1a:68:3b:d9:92:de:49:a6: b1:03:8e:24:18:ef:a5:9f:70:54:19:09:b4:f1:55: 4d:45:c5:0a:02:96:ee:ac:0f:8c:ea:8c:dc:58:6d: 42:ed:52:a7:56:91:4f:b3:70:1a:09:8d:d9:f3:eb: ca:61:0e:cc:63:4b:9d:f4:a8:11:92:f2:30:5d:fa: 65:4d:41:2e:92:e8:f9:b9:28:6a:46:ef:23:56:24: 08:49:8e:d3:c6:00:cc:51:c1:4b:5e:2d:51:5f:24: 19:7d:65:62:d5:40:e5:5b:40:e9:52:f3:ef:be:1f: ab:b9:eb:27:e8:e9:87:b5:ca:db:22:82:23:e0:17: 13:80:79:77:c2:04:57:cb:1e:e7:e1:38:db:0f:42: 59:d4:55:0b:77:b2:de:ca:a3:d2:95:fc:22:eb:ab: 03:d2:a5:65:8c:6d:7e:db:26:10:dc:44:50:bb:87: 4c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:AB:3C:C5:D5:F7:87:E7:C1:A9:14:B4:25:96:DE:14:5B:98:48:49 X509v3 Authority Key Identifier: keyid:7B:FE:C2:49:AB:84:F8:12:65:69:C8:B3:D8:E3:F4:3C:D8:2C:61:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e_7CSauE-BJlaciz2OP0PNgsYRU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4f311b-46e3-4ac1-8e9f-debc282d483e/1/e_7CSauE-BJlaciz2OP0PNgsYRU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4f311b-46e3-4ac1-8e9f-debc282d483e/1/e_7CSauE-BJlaciz2OP0PNgsYRU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:4c:49:6a:f7:c4:a6:4a:09:78:d3:ca:f9:5e:5b:5e:8f:8c: 2c:fc:49:b4:49:78:e2:14:27:e0:42:0f:ac:9a:a2:b5:05:bf: a6:5f:63:9e:02:2c:bd:44:8a:21:74:1f:d4:b8:3b:f0:8a:bc: 10:7f:ec:53:ef:aa:9b:97:21:b0:23:92:cc:5c:c4:65:60:fb: f5:92:90:29:86:1d:ec:61:cd:6a:65:f1:07:92:0b:23:de:27: b0:6e:cf:a6:96:3a:32:d5:ec:8a:9e:12:53:e5:f0:e4:b2:ce: c8:57:ca:d0:b8:69:f0:38:92:9c:84:e3:99:9f:fa:02:9f:87: 62:76:be:8f:ce:55:63:1b:9a:2c:d8:3f:e4:5c:9d:08:89:0f: d0:92:b9:1e:cb:09:f6:3f:aa:97:44:5c:bf:c5:3b:34:d0:7f: e7:0e:3c:8f:35:a5:0f:00:d4:1c:f2:1a:bf:e4:02:df:64:ff: ee:64:bf:af:7d:59:ec:7a:e5:a4:cd:6a:3f:ad:a8:4b:f4:fd: b4:57:3d:6c:21:6a:73:ea:26:cf:d0:a8:02:f7:fb:b2:fa:40: b4:88:27:30:66:73:de:e2:1e:60:02:59:f8:bd:a3:dc:67:ee: b1:60:b9:25:e2:b4:27:4e:9c:de:55:c6:1d:04:0a:1d:37:52: 1d:d0:35:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZu2zYN+ejgXtRTO2u9Vs0NkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiZmVjMjQ5YWI4NGY4MTI2NTY5YzhiM2Q4ZTNmNDNjZDgy YzYxMTUwHhcNMjYwMTEzMTAwMTIwWhcNMjYwMTE0MTAwMTIwWjAzMTEwLwYDVQQD Eyg3N2FiM2NjNWQ1Zjc4N2U3YzFhOTE0YjQyNTk2ZGUxNDViOTg0ODQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLj6otNnM1+JKH5ABLrxV8y3l7vu 5H/scRwkUpg7Mprzzd/etyhS51YMYWNr9vInDsbngIaEYKgJc0BJHId27WFz6juz 1zot3nGt4AeDa+haGmg72ZLeSaaxA44kGO+ln3BUGQm08VVNRcUKApburA+M6ozc WG1C7VKnVpFPs3AaCY3Z8+vKYQ7MY0ud9KgRkvIwXfplTUEukuj5uShqRu8jViQI SY7TxgDMUcFLXi1RXyQZfWVi1UDlW0DpUvPvvh+ruesn6OmHtcrbIoIj4BcTgHl3 wgRXyx7n4TjbD0JZ1FULd7LeyqPSlfwi66sD0qVljG1+2yYQ3ERQu4dMlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHerPMXV94fnwakUtCWW3hRbmEhJMB8GA1UdIwQY MBaAFHv+wkmrhPgSZWnIs9jj9DzYLGEVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZV83Q1NhdUUtQkpsYWNpejJPUDBQTmdzWVJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80ZjMxMWItNDZlMy00YWMxLThlOWYt ZGViYzI4MmQ0ODNlLzEvZV83Q1NhdUUtQkpsYWNpejJPUDBQTmdzWVJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80ZjMxMWItNDZlMy00YWMxLThlOWYtZGViYzI4MmQ0ODNl LzEvZV83Q1NhdUUtQkpsYWNpejJPUDBQTmdzWVJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ0xJavfE pkoJeNPK+V5bXo+MLPxJtEl44hQn4EIPrJqitQW/pl9jngIsvUSKIXQf1Lg78Iq8 EH/sU++qm5chsCOSzFzEZWD79ZKQKYYd7GHNamXxB5ILI94nsG7PppY6MtXsip4S U+Xw5LLOyFfK0Lhp8DiSnITjmZ/6Ap+HYna+j85VYxuaLNg/5FydCIkP0JK5HssJ 9j+ql0Rcv8U7NNB/5w48jzWlDwDUHPIav+QC32T/7mS/r31Z7HrlpM1qP62oS/T9 tFc9bCFqc+omz9CoAvf7svpAtIgnMGZz3uIeYAJZ+L2j3GfusWC5JeK0J06c3lXG HQQKHTdSHdA1LQ== -----END CERTIFICATE-----Generated at Tue Jan 13 12:32:31 2026 by rpki-client