This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft File: K7MwlCKY91gjy7mAyOsqzwt8DBs.mft (raw, json) Hash identifier: y0l9DyoqDJE2aik2d1svstZi2riJOw4IP5DQYQ7cSFI= Subject key identifier: 87:B7:64:C7:F0:81:DD:72:2A:7D:AB:AA:BE:D6:0F:52:A2:1A:C4:72 Authority key identifier: 2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B Certificate issuer: /CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b Certificate serial: 019BAD5D0C9FA5E464BE6DD64647177FB147 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft Manifest number: 17C8 Signing time: Sun 11 Jan 2026 14:01:54 +0000 Manifest this update: Sun 11 Jan 2026 14:01:54 +0000 Manifest next update: Mon 12 Jan 2026 14:01:54 +0000 Files and hashes: 1: K7MwlCKY91gjy7mAyOsqzwt8DBs.crl (hash: g5gFXI90+hxdjEJzOVuqoQT0HpOZy4VNt8JUZi5cHmc=) 2: jW75sPmmFSuAByKBWvYaeRnFXOM.roa (hash: v2zg0sfjDzeH0JGU5ldDB2qU5wPCOcMy8diYca8w+d4=) 3: rYSG2dYjGVa3YG5opt3m2blLdDQ.roa (hash: 0jQGDr8z5IsaWt/3i/Wtvl19AvDMpjEhc4vCy+qWV/A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 14:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ad:5d:0c:9f:a5:e4:64:be:6d:d6:46:47:17:7f:b1:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b Validity Not Before: Jan 11 14:01:54 2026 GMT Not After : Jan 12 14:01:54 2026 GMT Subject: CN=87b764c7f081dd722a7dabaabed60f52a21ac472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ce:6a:46:a0:06:0c:37:50:a5:7c:24:f9:bf: da:2d:cc:31:89:4c:94:b6:2b:da:01:6c:5b:fc:2c: 31:c3:38:65:b5:f7:56:97:ad:18:3d:0f:dc:65:2c: ca:4f:bd:27:cb:a1:38:0b:f5:5b:2f:fe:12:4c:9b: dd:3d:1d:5d:c7:9e:50:19:1d:b8:88:9e:13:19:f8: 9b:1b:77:03:f6:97:c1:1f:bc:e0:b0:74:2c:9e:23: 1c:7c:06:eb:db:39:c3:a9:a5:91:50:ff:a1:ba:9e: ed:e7:9d:b1:ac:d0:d5:90:4b:06:22:6d:d3:3d:e4: ab:af:f0:71:87:ac:84:d1:93:fc:d6:81:04:74:18: 78:06:04:24:b4:5f:a8:5c:d8:20:5e:e4:a7:12:63: e2:d4:39:61:ab:c7:ed:51:97:9d:49:95:b7:df:12: 7e:2e:ad:10:76:08:7d:37:17:80:bf:b7:97:b0:4b: 03:6f:fc:01:2b:a0:fb:0b:72:3c:34:3d:f8:e0:08: 7c:24:16:8a:dc:e1:09:98:4c:81:5a:d7:7e:4f:97: cd:5c:89:59:4e:6f:f8:ff:77:87:3c:f6:8a:31:2c: 89:8d:72:40:32:6b:85:3e:99:b2:32:a0:c4:a7:a6: 89:b5:19:e7:3c:61:7d:78:0b:44:f2:b3:52:6a:b3: 1a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:B7:64:C7:F0:81:DD:72:2A:7D:AB:AA:BE:D6:0F:52:A2:1A:C4:72 X509v3 Authority Key Identifier: keyid:2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:45:24:aa:fb:94:9d:13:e7:d8:59:f3:ea:bf:37:02:d7:c1: 82:f8:55:b6:f3:35:09:1b:6f:e3:e1:2b:e3:01:9b:99:8f:a6: d2:dc:0d:16:8a:02:83:54:36:05:55:d4:ef:6e:ff:32:58:d7: 01:a5:94:a8:e4:49:27:46:9b:e2:a3:10:3a:8d:08:0e:5b:b3: 58:84:cf:f9:10:38:b3:21:84:5c:de:ae:2a:21:48:c4:bd:36: 28:92:a1:f5:58:a3:74:f5:95:48:41:46:45:6c:88:69:d6:8d: 84:79:c0:eb:42:03:56:f7:31:44:ad:1c:06:2f:ef:1d:7f:a3: a3:cf:26:b5:fc:1e:62:5e:07:2f:ee:09:a9:61:23:a6:49:6e: 7e:23:41:8c:cc:9e:53:2c:d7:93:ff:a9:9e:e7:6c:30:39:c9: 02:95:5c:d2:d1:57:09:e0:05:50:ef:4e:48:e5:84:46:71:55: 00:0e:44:ea:f6:76:28:e4:f1:de:fc:2f:87:d7:67:11:05:76: a9:2a:a9:45:6e:09:e6:5d:bd:af:2a:9e:eb:6b:0a:87:8b:73: 67:77:86:85:1d:d4:7c:7d:88:92:a8:e0:10:3d:73:75:9b:4f: 7e:f1:b5:90:7d:92:4b:d2:8c:94:e4:b1:30:64:48:28:ec:07: 1c:11:92:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZutXQyfpeRkvm3WRkcXf7FHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiYjMzMDk0MjI5OGY3NTgyM2NiYjk4MGM4ZWIyYWNmMGI3 YzBjMWIwHhcNMjYwMTExMTQwMTU0WhcNMjYwMTEyMTQwMTU0WjAzMTEwLwYDVQQD Eyg4N2I3NjRjN2YwODFkZDcyMmE3ZGFiYWFiZWQ2MGY1MmEyMWFjNDcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnM5qRqAGDDdQpXwk+b/aLcwxiUyU tivaAWxb/CwxwzhltfdWl60YPQ/cZSzKT70ny6E4C/VbL/4STJvdPR1dx55QGR24 iJ4TGfibG3cD9pfBH7zgsHQsniMcfAbr2znDqaWRUP+hup7t552xrNDVkEsGIm3T PeSrr/Bxh6yE0ZP81oEEdBh4BgQktF+oXNggXuSnEmPi1Dlhq8ftUZedSZW33xJ+ Lq0Qdgh9NxeAv7eXsEsDb/wBK6D7C3I8ND344Ah8JBaK3OEJmEyBWtd+T5fNXIlZ Tm/4/3eHPPaKMSyJjXJAMmuFPpmyMqDEp6aJtRnnPGF9eAtE8rNSarMaowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIe3ZMfwgd1yKn2rqr7WD1KiGsRyMB8GA1UdIwQY MBaAFCuzMJQimPdYI8u5gMjrKs8LfAwbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzdNd2xDS1k5MWdqeTdtQXlPc3F6d3Q4REJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85OTA3NDctMzQ1NC00NDEyLThmMDYt NmIzYTQ3NjY3Y2E4LzEvSzdNd2xDS1k5MWdqeTdtQXlPc3F6d3Q4REJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85OTA3NDctMzQ1NC00NDEyLThmMDYtNmIzYTQ3NjY3Y2E4 LzEvSzdNd2xDS1k5MWdqeTdtQXlPc3F6d3Q4REJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr0UkqvuU nRPn2Fnz6r83AtfBgvhVtvM1CRtv4+Er4wGbmY+m0twNFooCg1Q2BVXU727/MljX AaWUqORJJ0ab4qMQOo0IDluzWITP+RA4syGEXN6uKiFIxL02KJKh9VijdPWVSEFG RWyIadaNhHnA60IDVvcxRK0cBi/vHX+jo88mtfweYl4HL+4JqWEjpklufiNBjMye UyzXk/+pnudsMDnJApVc0tFXCeAFUO9OSOWERnFVAA5E6vZ2KOTx3vwvh9dnEQV2 qSqpRW4J5l29ryqe62sKh4tzZ3eGhR3UfH2IkqjgED1zdZtPfvG1kH2SS9KMlOSx MGRIKOwHHBGS2w== -----END CERTIFICATE-----Generated at Sun Jan 11 19:57:54 2026 by rpki-client