This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft File: 7FExTgTslnbytgJI4bm9Au8A4Wg.mft (raw, json) Hash identifier: M7hj/w619J9a6LgkYK9jozlxgr2pCaFhqRG5DvP4IPY= Subject key identifier: CA:9C:E5:28:FE:10:8B:1D:25:45:D1:A6:CF:CC:ED:86:C5:73:AA:6B Authority key identifier: EC:51:31:4E:04:EC:96:76:F2:B6:02:48:E1:B9:BD:02:EF:00:E1:68 Certificate issuer: /CN=ec51314e04ec9676f2b60248e1b9bd02ef00e168 Certificate serial: 019B7A4A18C879187CBB7AF1A0828591659F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft Manifest number: 17A6 Signing time: Thu 01 Jan 2026 16:00:34 +0000 Manifest this update: Thu 01 Jan 2026 16:00:34 +0000 Manifest next update: Fri 02 Jan 2026 16:00:34 +0000 Files and hashes: 1: 7FExTgTslnbytgJI4bm9Au8A4Wg.crl (hash: lZMaZ0rw9qlIe/0zKYPmKaWYq/7LMEK/LqVP/aT/8F4=) 2: xE_JDYJwb1MCr7C57Rm2iLhdKIw.roa (hash: sRhgH4Cj24QxldRTdKVZiNUSEzN+8JXEsh8ETe2KACg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 16:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:4a:18:c8:79:18:7c:bb:7a:f1:a0:82:85:91:65:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec51314e04ec9676f2b60248e1b9bd02ef00e168 Validity Not Before: Jan 1 16:00:34 2026 GMT Not After : Jan 2 16:00:34 2026 GMT Subject: CN=ca9ce528fe108b1d2545d1a6cfcced86c573aa6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2b:cf:e8:e9:39:d8:2c:59:b8:5a:f5:7d:2b: 41:48:f5:7a:5c:4b:4e:da:c5:67:19:51:26:6b:e0: 47:d3:14:ff:2a:00:00:86:7f:ec:a6:b3:21:a2:24: f7:b0:6e:15:be:52:60:ff:57:51:bd:1d:90:7a:24: 09:0c:88:ea:42:9f:a4:c2:31:96:85:ac:f0:29:aa: 91:71:74:81:cc:d6:f5:cd:62:3b:4a:9c:b8:e6:60: df:96:c2:62:a7:ee:3b:4d:5f:64:3e:16:2a:8a:fa: c2:4f:47:54:eb:06:09:5e:9f:9b:68:9d:bf:f3:af: 91:73:ad:ae:cf:fe:d0:b2:a9:45:99:04:b8:d0:c9: c5:7c:e8:1f:be:4b:62:d7:81:86:5b:60:37:2b:0e: ee:e6:ce:97:85:a8:2d:f9:47:5f:8c:0d:18:a4:67: 3d:92:f1:7a:b4:d4:61:47:c2:6e:03:6b:95:20:d8: 2f:7d:5d:7c:5e:70:d2:08:bf:a2:8a:b3:83:7a:01: 3f:da:e3:e7:24:50:43:ee:dd:d6:b0:56:85:25:56: 6a:44:d9:f0:41:14:7b:1e:0a:cb:38:75:82:07:0a: ec:6d:5d:87:c4:56:43:12:79:62:1c:25:da:ca:37: 02:74:6f:ed:03:90:ff:b4:9a:1b:34:2e:47:49:d8: 71:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:9C:E5:28:FE:10:8B:1D:25:45:D1:A6:CF:CC:ED:86:C5:73:AA:6B X509v3 Authority Key Identifier: keyid:EC:51:31:4E:04:EC:96:76:F2:B6:02:48:E1:B9:BD:02:EF:00:E1:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:b6:d9:53:84:16:06:4d:97:c9:23:02:ed:01:0f:2a:81:e1: 32:30:4a:d5:24:f5:5d:90:e8:76:bb:0c:38:87:26:fe:17:27: 98:cd:f8:a1:ed:fc:41:5a:63:90:88:fe:bc:7e:ae:60:10:35: 5c:5d:17:8a:56:0f:95:f1:7a:41:4d:3e:d7:f8:28:75:90:32: 50:dc:f9:79:40:1e:8d:8f:09:86:49:c0:ad:79:c1:b8:37:8b: 78:bc:ba:59:93:51:19:36:e0:14:58:1c:7e:9a:b1:b0:68:95: 73:f0:5f:7e:1b:11:d6:3b:06:4c:64:35:48:17:21:2d:a2:ca: 28:bd:c5:f2:62:92:f2:87:11:cf:62:d3:c5:73:72:e9:0b:f8: ff:04:6a:c9:25:14:18:f7:c8:2b:d3:00:3a:66:36:29:80:0c: 59:71:d7:9f:37:33:78:f4:93:91:96:85:59:ab:8a:f8:80:0c: ef:ca:b9:26:75:92:bb:7f:a9:bd:36:3b:95:19:1b:4b:67:17: 5f:27:46:fe:50:13:b9:76:db:15:f2:73:07:3d:dc:73:df:7a: d9:4a:a1:78:0b:09:7b:96:34:ad:a6:be:f1:1e:45:cf:04:ea: 8f:d3:e3:2d:84:f1:b7:00:16:1e:83:44:9e:ee:0c:0f:5e:c6: 0f:fd:3a:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt6ShjIeRh8u3rxoIKFkWWfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNTEzMTRlMDRlYzk2NzZmMmI2MDI0OGUxYjliZDAyZWYw MGUxNjgwHhcNMjYwMTAxMTYwMDM0WhcNMjYwMTAyMTYwMDM0WjAzMTEwLwYDVQQD EyhjYTljZTUyOGZlMTA4YjFkMjU0NWQxYTZjZmNjZWQ4NmM1NzNhYTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySvP6Ok52CxZuFr1fStBSPV6XEtO 2sVnGVEma+BH0xT/KgAAhn/sprMhoiT3sG4VvlJg/1dRvR2QeiQJDIjqQp+kwjGW hazwKaqRcXSBzNb1zWI7Spy45mDflsJip+47TV9kPhYqivrCT0dU6wYJXp+baJ2/ 86+Rc62uz/7QsqlFmQS40MnFfOgfvkti14GGW2A3Kw7u5s6Xhagt+UdfjA0YpGc9 kvF6tNRhR8JuA2uVINgvfV18XnDSCL+iirODegE/2uPnJFBD7t3WsFaFJVZqRNnw QRR7HgrLOHWCBwrsbV2HxFZDEnliHCXayjcCdG/tA5D/tJobNC5HSdhxlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMqc5Sj+EIsdJUXRps/M7YbFc6prMB8GA1UdIwQY MBaAFOxRMU4E7JZ28rYCSOG5vQLvAOFoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0ZFeFRnVHNsbmJ5dGdKSTRibTlBdThBNFdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kYjUzOTktNmZiYi00Y2UyLTg5N2It M2JiYmNhMzEwZDcxLzEvN0ZFeFRnVHNsbmJ5dGdKSTRibTlBdThBNFdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9kYjUzOTktNmZiYi00Y2UyLTg5N2ItM2JiYmNhMzEwZDcx LzEvN0ZFeFRnVHNsbmJ5dGdKSTRibTlBdThBNFdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu7bZU4QW Bk2XySMC7QEPKoHhMjBK1ST1XZDodrsMOIcm/hcnmM34oe38QVpjkIj+vH6uYBA1 XF0XilYPlfF6QU0+1/godZAyUNz5eUAejY8JhknArXnBuDeLeLy6WZNRGTbgFFgc fpqxsGiVc/BffhsR1jsGTGQ1SBchLaLKKL3F8mKS8ocRz2LTxXNy6Qv4/wRqySUU GPfIK9MAOmY2KYAMWXHXnzczePSTkZaFWauK+IAM78q5JnWSu3+pvTY7lRkbS2cX XydG/lATuXbbFfJzBz3cc9962UqheAsJe5Y0raa+8R5FzwTqj9PjLYTxtwAWHoNE nu4MD17GD/06Cg== -----END CERTIFICATE-----Generated at Thu Jan 1 19:34:34 2026 by rpki-client