This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft File: 7w7IG5xlO440BQj_hI2wZuNncrA.mft (raw, json) Hash identifier: mrYhKxjqZhYkaPblQjd4uorZuaWnBsnyZCx08K0zdew= Subject key identifier: 32:9E:6B:F0:76:24:1F:E0:8F:D2:67:AE:69:62:65:F7:DD:32:16:A2 Authority key identifier: EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0 Certificate issuer: /CN=ef0ec81b9c653b8e340508ff848db066e36772b0 Certificate serial: 019B804C53888CD01251DB2553B6AF1EF47B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft Manifest number: 07DD Signing time: Fri 02 Jan 2026 20:00:44 +0000 Manifest this update: Fri 02 Jan 2026 20:00:44 +0000 Manifest next update: Sat 03 Jan 2026 20:00:44 +0000 Files and hashes: 1: 1-iYojE0-bkqoV5dZTp5mESZkuMc.roa (hash: IBrMOBEILaJ3aIFlHGFpIPbUN6/UuC5r0K5zqJd+Mnk=) 2: 7w7IG5xlO440BQj_hI2wZuNncrA.crl (hash: Q1Ra0Wkr5Jchx+XpCE8iy2Uwmu6QFHbHIDe/+iqVKo4=) 3: atHWqvE_ZaHJPo5qCwW1PGxUw7s.roa (hash: jkDG3raOa2YgMVxrQwlxDz2jPOeQPczc27crizlM5xM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:80:4c:53:88:8c:d0:12:51:db:25:53:b6:af:1e:f4:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef0ec81b9c653b8e340508ff848db066e36772b0 Validity Not Before: Jan 2 20:00:44 2026 GMT Not After : Jan 3 20:00:44 2026 GMT Subject: CN=329e6bf076241fe08fd267ae696265f7dd3216a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ea:78:9f:d7:37:c2:8d:c1:28:4f:0d:50:f1: 6b:b1:a0:fa:4a:e5:82:03:79:16:e3:f6:a5:a2:29: 00:41:f0:d2:0e:08:fa:43:05:1f:14:f4:b8:e8:b7: 96:45:7f:de:b3:69:04:7c:d8:78:f2:5b:ad:2e:ae: 39:55:40:b8:8e:b1:15:dc:ce:9f:a7:42:13:d9:af: a9:a4:0d:71:07:06:b9:b9:01:d7:de:16:04:26:5c: 46:77:86:df:7f:96:10:1f:cb:6a:a4:b8:f8:c3:ca: 31:9a:43:73:c8:d3:75:a0:9c:ca:66:6e:39:8f:8c: 19:35:1d:e6:91:81:9a:4e:95:15:54:e4:5d:77:b9: 00:f8:73:aa:e1:1d:f4:8c:5c:d6:66:51:08:63:38: 97:b2:b9:fe:e0:4d:63:51:63:34:59:ae:7a:dc:ec: dc:ab:ae:9b:6d:13:64:92:f4:4b:22:7b:32:2c:bc: 99:60:85:9a:74:48:9f:08:ee:49:08:56:bb:b3:4d: 50:47:a5:a5:6d:04:09:92:85:2f:bf:f8:bf:d1:3f: 0b:a2:98:59:60:0a:ab:68:b7:7f:c7:f9:35:27:8f: f8:1f:9d:49:94:46:20:92:81:e2:6b:e2:09:8d:77: 9b:22:57:23:5b:6b:f0:de:34:c0:b9:f5:39:98:61: f2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:9E:6B:F0:76:24:1F:E0:8F:D2:67:AE:69:62:65:F7:DD:32:16:A2 X509v3 Authority Key Identifier: keyid:EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:93:7f:40:ab:18:fd:5d:a8:f5:69:d7:df:77:c0:d6:de:95: 8b:19:7e:92:a8:24:5a:d2:87:e3:51:c1:5c:16:11:65:45:3a: 6f:e8:30:92:43:97:31:47:e5:af:43:01:c3:f6:fc:ad:d2:d8: 35:33:c1:f2:e3:72:65:06:50:7f:e5:9d:d3:f1:cd:da:7a:1d: 92:28:be:1c:7d:9a:02:1e:55:b7:d7:3f:0d:58:2a:f0:d9:9a: 18:42:cc:f1:5a:27:94:2a:90:07:2b:ae:7c:83:8f:74:8b:dc: e2:23:d6:8f:74:e4:f8:c7:00:13:fa:77:49:77:e1:00:11:36: 29:e3:8d:fb:da:92:be:e0:37:a9:70:8e:02:dc:18:40:07:dd: 0b:8a:74:61:df:72:4f:1f:1e:dd:6c:0c:08:93:f0:92:c5:1b: a9:f0:17:7d:b1:9e:0d:c6:a4:13:51:1d:20:8b:e8:9f:0f:c9: de:57:08:48:61:f0:25:cb:39:c0:8d:a8:d1:98:65:90:9f:52: b8:7c:ae:bc:71:74:43:9e:a4:a7:2b:3e:e2:fb:1d:57:71:d4: 1d:09:0e:01:33:16:37:42:4b:2b:25:b7:54:1c:38:7e:c1:1f: 5d:18:b9:42:7f:e9:a0:8b:ee:49:3d:8e:6d:08:59:af:44:d7: 24:0d:f8:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuATFOIjNASUdslU7avHvR7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMGVjODFiOWM2NTNiOGUzNDA1MDhmZjg0OGRiMDY2ZTM2 NzcyYjAwHhcNMjYwMTAyMjAwMDQ0WhcNMjYwMTAzMjAwMDQ0WjAzMTEwLwYDVQQD EygzMjllNmJmMDc2MjQxZmUwOGZkMjY3YWU2OTYyNjVmN2RkMzIxNmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnup4n9c3wo3BKE8NUPFrsaD6SuWC A3kW4/aloikAQfDSDgj6QwUfFPS46LeWRX/es2kEfNh48lutLq45VUC4jrEV3M6f p0IT2a+ppA1xBwa5uQHX3hYEJlxGd4bff5YQH8tqpLj4w8oxmkNzyNN1oJzKZm45 j4wZNR3mkYGaTpUVVORdd7kA+HOq4R30jFzWZlEIYziXsrn+4E1jUWM0Wa563Ozc q66bbRNkkvRLInsyLLyZYIWadEifCO5JCFa7s01QR6WlbQQJkoUvv/i/0T8LophZ YAqraLd/x/k1J4/4H51JlEYgkoHia+IJjXebIlcjW2vw3jTAufU5mGHy+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDKea/B2JB/gj9JnrmliZffdMhaiMB8GA1UdIwQY MBaAFO8OyBucZTuONAUI/4SNsGbjZ3KwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3c3SUc1eGxPNDQwQlFqX2hJMndadU5uY3JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy80ZjEwODctMmYxYi00YWI1LWFlNzEt MjZjZGM1NTY0NGQ0LzEvN3c3SUc1eGxPNDQwQlFqX2hJMndadU5uY3JBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy80ZjEwODctMmYxYi00YWI1LWFlNzEtMjZjZGM1NTY0NGQ0 LzEvN3c3SUc1eGxPNDQwQlFqX2hJMndadU5uY3JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJpN/QKsY /V2o9WnX33fA1t6Vixl+kqgkWtKH41HBXBYRZUU6b+gwkkOXMUflr0MBw/b8rdLY NTPB8uNyZQZQf+Wd0/HN2nodkii+HH2aAh5Vt9c/DVgq8NmaGELM8VonlCqQByuu fIOPdIvc4iPWj3Tk+McAE/p3SXfhABE2KeON+9qSvuA3qXCOAtwYQAfdC4p0Yd9y Tx8e3WwMCJPwksUbqfAXfbGeDcakE1EdIIvonw/J3lcISGHwJcs5wI2o0ZhlkJ9S uHyuvHF0Q56kpys+4vsdV3HUHQkOATMWN0JLKyW3VBw4fsEfXRi5Qn/poIvuST2O bQhZr0TXJA34xg== -----END CERTIFICATE-----Generated at Fri Jan 2 23:29:26 2026 by rpki-client