This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft File: 7uTEl10mDZew0zxNbNDVh_EMIqA.mft (raw, json) Hash identifier: mGKKDwW44PxMUSH3Cja9WdRrcLOQI7g540ngsll7kiA= Subject key identifier: DB:D4:8F:40:B5:91:9C:54:CA:A3:6D:D3:1E:EE:6D:67:8D:9A:C2:2C Authority key identifier: EE:E4:C4:97:5D:26:0D:97:B0:D3:3C:4D:6C:D0:D5:87:F1:0C:22:A0 Certificate issuer: /CN=eee4c4975d260d97b0d33c4d6cd0d587f10c22a0 Certificate serial: 019BB628CFD5C3780BC46B56290B380AD5B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7uTEl10mDZew0zxNbNDVh_EMIqA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft Manifest number: 17B4 Signing time: Tue 13 Jan 2026 07:01:26 +0000 Manifest this update: Tue 13 Jan 2026 07:01:26 +0000 Manifest next update: Wed 14 Jan 2026 07:01:26 +0000 Files and hashes: 1: 7uTEl10mDZew0zxNbNDVh_EMIqA.crl (hash: nuCC1KeciEYikLQBPHio1hBpvnwBCFpuERC4rc0zD8g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft rsync://rpki.ripe.net/repository/DEFAULT/7uTEl10mDZew0zxNbNDVh_EMIqA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 07:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b6:28:cf:d5:c3:78:0b:c4:6b:56:29:0b:38:0a:d5:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eee4c4975d260d97b0d33c4d6cd0d587f10c22a0 Validity Not Before: Jan 13 07:01:26 2026 GMT Not After : Jan 14 07:01:26 2026 GMT Subject: CN=dbd48f40b5919c54caa36dd31eee6d678d9ac22c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5b:56:0c:47:30:61:f8:6e:45:86:38:72:2e: 9f:2f:42:c2:27:2d:58:81:04:a4:7a:90:01:65:61: 71:bb:ce:f2:ff:1f:61:39:92:0e:ff:e8:81:01:03: 19:d7:1f:b3:1e:a9:f2:01:1f:f5:01:85:0b:fe:10: 5b:e4:c0:9d:62:d4:a3:ef:33:73:2e:e5:15:76:89: 60:7c:69:8f:b8:07:80:f4:27:7a:dd:9d:c8:77:29: d9:84:bb:8d:4b:7b:35:45:68:89:6a:ea:df:5a:d4: bd:25:40:a6:42:2a:0a:6b:ec:d0:53:90:c2:d5:e9: f9:d5:9a:7a:8a:8c:45:ba:0c:6f:5a:22:cc:b3:f0: 37:54:9c:d5:94:90:bf:f2:36:24:31:ff:32:13:eb: 46:52:e9:64:d1:56:bf:44:d0:fc:41:31:a8:55:0d: 40:f1:87:6d:b6:6a:58:f6:2c:5c:eb:31:a8:92:b6: 43:9b:fc:c7:95:9c:33:b7:24:df:01:ef:2e:9a:65: 79:6e:94:93:8b:39:97:4e:a4:9b:ed:a5:1e:6d:df: 83:75:b0:91:e4:fd:0b:12:85:bb:71:a3:83:9a:39: f0:f8:3c:36:7b:99:8c:53:e1:64:9d:d8:b0:98:d0: 1f:22:7a:ec:71:f2:3e:0b:fb:50:9c:b5:e1:11:70: 52:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:D4:8F:40:B5:91:9C:54:CA:A3:6D:D3:1E:EE:6D:67:8D:9A:C2:2C X509v3 Authority Key Identifier: keyid:EE:E4:C4:97:5D:26:0D:97:B0:D3:3C:4D:6C:D0:D5:87:F1:0C:22:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uTEl10mDZew0zxNbNDVh_EMIqA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:f4:60:55:a7:7d:84:40:2c:8c:7e:fe:1d:99:5a:03:51:2f: ff:a8:ad:ef:d4:03:2d:8a:96:86:33:76:30:aa:13:28:8a:58: f1:ac:83:36:93:e9:0c:ee:b8:25:93:09:43:4d:38:2b:bf:d5: c0:e5:42:f1:ec:bc:36:b3:62:c6:8d:dd:1f:d3:88:65:ff:1f: 7c:b1:69:28:75:37:32:f0:44:cf:57:79:04:c4:15:70:83:b6: a5:ef:9d:3d:ac:a2:a9:e1:f4:81:8b:d0:93:41:77:0f:45:4b: 4f:a7:76:9a:1e:b6:71:13:84:3c:7d:e8:b6:61:99:cd:ce:f4: 81:bc:68:52:42:55:83:19:21:3f:a5:8b:02:b4:ba:c0:b8:8d: ad:97:e3:4f:ee:f8:e0:db:29:19:6d:38:27:17:0a:c7:95:38: a0:ec:df:49:bc:ff:81:ef:08:e4:6b:28:0a:7b:82:25:1e:fe: 07:7b:7a:c1:3d:b5:07:57:f7:6e:5c:a4:78:1f:20:62:7e:2c: 76:fe:d5:7a:7f:09:4c:50:e6:a6:53:6c:5d:90:db:85:50:48: 95:af:c3:79:85:c0:9b:8d:37:ed:0e:8f:a3:a9:33:ec:07:78: e7:c3:64:ed:eb:60:f1:bd:be:e2:25:d4:e2:f4:6a:b1:0b:0e: 19:b4:f2:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZu2KM/Vw3gLxGtWKQs4CtW2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlZTRjNDk3NWQyNjBkOTdiMGQzM2M0ZDZjZDBkNTg3ZjEw YzIyYTAwHhcNMjYwMTEzMDcwMTI2WhcNMjYwMTE0MDcwMTI2WjAzMTEwLwYDVQQD EyhkYmQ0OGY0MGI1OTE5YzU0Y2FhMzZkZDMxZWVlNmQ2NzhkOWFjMjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVtWDEcwYfhuRYY4ci6fL0LCJy1Y gQSkepABZWFxu87y/x9hOZIO/+iBAQMZ1x+zHqnyAR/1AYUL/hBb5MCdYtSj7zNz LuUVdolgfGmPuAeA9Cd63Z3IdynZhLuNS3s1RWiJaurfWtS9JUCmQioKa+zQU5DC 1en51Zp6ioxFugxvWiLMs/A3VJzVlJC/8jYkMf8yE+tGUulk0Va/RND8QTGoVQ1A 8YdttmpY9ixc6zGokrZDm/zHlZwztyTfAe8ummV5bpSTizmXTqSb7aUebd+DdbCR 5P0LEoW7caODmjnw+Dw2e5mMU+FkndiwmNAfInrscfI+C/tQnLXhEXBSGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNvUj0C1kZxUyqNt0x7ubWeNmsIsMB8GA1UdIwQY MBaAFO7kxJddJg2XsNM8TWzQ1YfxDCKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3VURWwxMG1EWmV3MHp4TmJORFZoX0VNSXFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9lODRiZmMtOGEzNi00NDA5LThkY2Mt NDMyZDNmYjBmYzIyLzEvN3VURWwxMG1EWmV3MHp4TmJORFZoX0VNSXFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9lODRiZmMtOGEzNi00NDA5LThkY2MtNDMyZDNmYjBmYzIy LzEvN3VURWwxMG1EWmV3MHp4TmJORFZoX0VNSXFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdfRgVad9 hEAsjH7+HZlaA1Ev/6it79QDLYqWhjN2MKoTKIpY8ayDNpPpDO64JZMJQ004K7/V wOVC8ey8NrNixo3dH9OIZf8ffLFpKHU3MvBEz1d5BMQVcIO2pe+dPayiqeH0gYvQ k0F3D0VLT6d2mh62cROEPH3otmGZzc70gbxoUkJVgxkhP6WLArS6wLiNrZfjT+74 4NspGW04JxcKx5U4oOzfSbz/ge8I5GsoCnuCJR7+B3t6wT21B1f3blykeB8gYn4s dv7Ven8JTFDmplNsXZDbhVBIla/DeYXAm4037Q6Po6kz7Ad458Nk7etg8b2+4iXU 4vRqsQsOGbTyFw== -----END CERTIFICATE-----Generated at Tue Jan 13 13:09:49 2026 by rpki-client