This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft File: IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft (raw, json) Hash identifier: 5Ixh+6ABAxeUE9VVRr0pqZa4u1/isUkuLb5c/sCtQOQ= Subject key identifier: C1:EF:BB:88:55:2A:A4:1A:75:DE:94:DE:67:78:E5:F0:B1:EA:F7:13 Authority key identifier: 20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45 Certificate issuer: /CN=20feef391f16300157bb78b2eaea06d61c20c945 Certificate serial: 019B7AB8890C02D1EE4AC1B8CEF838720787 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft Manifest number: 06BC Signing time: Thu 01 Jan 2026 18:01:12 +0000 Manifest this update: Thu 01 Jan 2026 18:01:12 +0000 Manifest next update: Fri 02 Jan 2026 18:01:12 +0000 Files and hashes: 1: 5xxcAEo_4vIQvQTZ11nCDFMgZo4.roa (hash: N8rxJgsy2l36Fd1o/jwhRwE3qaDQpQB4/meaBlVTHWs=) 2: IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl (hash: cTOK+JwoGdmsBj63iKkxnpyLGeZxs+SPonicXfqUj4I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 17:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:b8:89:0c:02:d1:ee:4a:c1:b8:ce:f8:38:72:07:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20feef391f16300157bb78b2eaea06d61c20c945 Validity Not Before: Jan 1 18:01:12 2026 GMT Not After : Jan 2 18:01:12 2026 GMT Subject: CN=c1efbb88552aa41a75de94de6778e5f0b1eaf713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2e:00:0e:bf:cb:5f:ed:1f:66:9b:68:5f:b5: ac:c9:e7:e3:9f:19:8c:7d:36:85:ba:2d:f2:2e:b7: 9c:9e:f4:b8:98:32:fd:19:f6:43:ef:ef:35:25:e8: 23:ee:51:a2:2e:ed:0c:db:ad:5c:ac:c9:e1:34:37: c3:2c:2a:7b:73:0d:7b:b9:e5:94:1d:2e:42:4e:9b: 95:9f:6c:e5:ed:76:3b:92:d6:a3:ee:e6:87:b9:69: b5:61:32:d4:ef:cb:4e:1b:d5:90:03:f0:b3:e5:e5: 0a:b4:4b:ea:4f:81:8a:9b:b5:4c:0b:cb:5e:11:3a: 0d:07:8b:84:66:04:4c:6b:24:e2:ea:65:01:7a:94: 2c:e3:80:d5:fc:21:85:73:28:16:76:9f:23:e4:6d: 28:04:e5:c7:98:8c:a9:ba:ae:47:9c:87:dc:62:c7: 2f:e2:df:21:4b:86:21:e7:45:4c:fd:de:c0:e7:5e: 64:bf:cf:75:28:88:0b:93:53:1b:b9:bf:18:e9:d3: 3c:aa:3e:e1:10:14:40:56:6a:1a:c8:64:8b:84:7f: 42:f1:95:15:b3:3d:1d:f5:4a:09:db:c8:a1:82:18: 8d:1c:a6:ed:df:15:03:df:35:f6:bb:cd:20:82:b9: 95:3f:c1:1a:07:7b:15:02:56:fa:94:69:d3:bd:23: 2b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:EF:BB:88:55:2A:A4:1A:75:DE:94:DE:67:78:E5:F0:B1:EA:F7:13 X509v3 Authority Key Identifier: keyid:20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:37:f4:ff:7f:ec:80:fa:49:69:9d:23:bc:93:23:9d:42:bb: d3:48:e2:04:02:fd:ed:b3:e3:0e:fb:fe:eb:79:af:08:3a:de: 67:bd:12:70:db:46:45:39:d9:1c:f0:da:f3:96:d0:2d:0d:64: 9e:bd:bc:5a:ca:6c:bf:bf:2f:1e:f5:af:0f:29:2f:f9:08:1c: 12:7d:6e:61:b8:17:d0:cd:9e:54:97:4a:ed:43:db:d8:c5:82: 66:ce:17:ee:7e:9a:57:4e:40:1d:67:43:a3:13:63:82:e0:a0: 62:0c:3a:05:14:fb:ea:eb:db:34:bb:64:8d:4e:bc:d4:ea:77: f8:41:3d:31:87:de:c5:9c:a6:41:e6:bc:c6:a6:d6:51:96:1a: c9:ee:b7:54:a5:22:73:08:4c:dc:ee:ea:34:69:65:a9:c5:9f: 05:45:6f:39:2c:79:a5:43:4f:65:b3:0f:c2:8a:7e:05:a6:b5: 83:76:bd:0e:5e:a1:b5:27:33:cf:33:d9:06:80:9f:38:f4:9c: 66:bc:54:61:c3:a7:53:22:27:3e:04:7b:aa:85:e9:6c:c6:29: 83:1b:0f:fb:75:aa:b9:17:e1:44:f4:f3:cd:4d:e9:37:13:c5: d3:63:c2:b9:be:f7:b2:e9:9d:e1:33:a1:7c:63:3f:8c:38:7d: 25:b4:4b:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt6uIkMAtHuSsG4zvg4cgeHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZmVlZjM5MWYxNjMwMDE1N2JiNzhiMmVhZWEwNmQ2MWMy MGM5NDUwHhcNMjYwMTAxMTgwMTEyWhcNMjYwMTAyMTgwMTEyWjAzMTEwLwYDVQQD EyhjMWVmYmI4ODU1MmFhNDFhNzVkZTk0ZGU2Nzc4ZTVmMGIxZWFmNzEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxy4ADr/LX+0fZptoX7WsyefjnxmM fTaFui3yLrecnvS4mDL9GfZD7+81Jegj7lGiLu0M261crMnhNDfDLCp7cw17ueWU HS5CTpuVn2zl7XY7ktaj7uaHuWm1YTLU78tOG9WQA/Cz5eUKtEvqT4GKm7VMC8te EToNB4uEZgRMayTi6mUBepQs44DV/CGFcygWdp8j5G0oBOXHmIypuq5HnIfcYscv 4t8hS4Yh50VM/d7A515kv891KIgLk1Mbub8Y6dM8qj7hEBRAVmoayGSLhH9C8ZUV sz0d9UoJ28ihghiNHKbt3xUD3zX2u80ggrmVP8EaB3sVAlb6lGnTvSMrkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMHvu4hVKqQadd6U3md45fCx6vcTMB8GA1UdIwQY MBaAFCD+7zkfFjABV7t4surqBtYcIMlFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVA3dk9SOFdNQUZYdTNpeTZ1b0cxaHdneVVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC82NDcyMmItMjk5NS00MGRlLThiODct MjI2YjhkNGE1ZjYwLzEvSVA3dk9SOFdNQUZYdTNpeTZ1b0cxaHdneVVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC82NDcyMmItMjk5NS00MGRlLThiODctMjI2YjhkNGE1ZjYw LzEvSVA3dk9SOFdNQUZYdTNpeTZ1b0cxaHdneVVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvTf0/3/s gPpJaZ0jvJMjnUK700jiBAL97bPjDvv+63mvCDreZ70ScNtGRTnZHPDa85bQLQ1k nr28Wspsv78vHvWvDykv+QgcEn1uYbgX0M2eVJdK7UPb2MWCZs4X7n6aV05AHWdD oxNjguCgYgw6BRT76uvbNLtkjU681Op3+EE9MYfexZymQea8xqbWUZYaye63VKUi cwhM3O7qNGllqcWfBUVvOSx5pUNPZbMPwop+Baa1g3a9Dl6htSczzzPZBoCfOPSc ZrxUYcOnUyInPgR7qoXpbMYpgxsP+3WquRfhRPTzzU3pNxPF02PCub73sumd4TOh fGM/jDh9JbRL2w== -----END CERTIFICATE-----Generated at Thu Jan 1 19:53:16 2026 by rpki-client