This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft File: 7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft (raw, json) Hash identifier: ssC7Ur91bM1BhSh1LeqEQBw9i9XjhvJuczM/19Frs6U= Subject key identifier: 22:92:60:1B:70:B0:E3:0F:30:D8:79:E5:EC:3E:B3:AE:1B:C4:FD:BB Authority key identifier: EC:64:3B:4F:A3:F0:E1:3C:CA:80:55:83:3A:C7:0C:69:DD:1C:A8:E1 Certificate issuer: /CN=ec643b4fa3f0e13cca8055833ac70c69dd1ca8e1 Certificate serial: 019BAF145BCC820C91975ACACB9846240F2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft Manifest number: 0547 Signing time: Sun 11 Jan 2026 22:01:45 +0000 Manifest this update: Sun 11 Jan 2026 22:01:45 +0000 Manifest next update: Mon 12 Jan 2026 22:01:45 +0000 Files and hashes: 1: 7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl (hash: qeAj5aeMG61QCapybhdl0O1tQtmFC20oiq3jxFeZqmU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:af:14:5b:cc:82:0c:91:97:5a:ca:cb:98:46:24:0f:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec643b4fa3f0e13cca8055833ac70c69dd1ca8e1 Validity Not Before: Jan 11 22:01:45 2026 GMT Not After : Jan 12 22:01:45 2026 GMT Subject: CN=2292601b70b0e30f30d879e5ec3eb3ae1bc4fdbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:15:02:1c:48:5d:ad:48:a9:14:54:4b:05:89: cc:82:02:ea:f2:2d:0d:89:06:66:52:d7:cc:e8:79: c7:4f:97:d5:d7:dc:ac:bc:c7:bf:f6:7f:33:52:8e: a7:a3:1c:21:56:de:07:ca:cb:18:21:eb:b8:d0:36: 73:87:78:b2:93:e0:6c:25:19:a5:3a:cf:a7:13:2f: 02:07:bd:56:02:62:b9:78:92:58:63:ea:f8:b6:ef: 01:0f:5e:35:a3:32:57:b3:ec:db:af:da:23:d3:f4: d6:44:60:58:87:fe:5d:8e:1d:c1:c9:08:b2:50:40: 0c:aa:b1:6f:83:e8:24:db:84:13:f4:0e:0f:83:cd: 94:99:5c:f1:1f:b8:f8:4b:06:3a:17:f0:21:10:06: 3e:e7:fa:1e:e4:41:a0:75:e3:b5:47:7c:d7:54:85: f1:c5:14:d2:c7:84:09:28:95:ce:24:8e:2f:82:fb: 8b:eb:8f:b8:64:a2:9d:77:17:7f:f9:07:fb:5d:29: 5b:5c:9a:8f:d6:61:92:39:a7:19:a1:ea:b1:56:98: f8:80:20:fb:b8:82:86:79:54:13:f3:52:0b:18:d2: 4a:89:7c:64:98:5c:df:bb:00:62:f4:ac:3e:23:39: a0:2b:60:19:19:5b:2c:1d:60:77:83:7b:98:aa:7c: 13:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:92:60:1B:70:B0:E3:0F:30:D8:79:E5:EC:3E:B3:AE:1B:C4:FD:BB X509v3 Authority Key Identifier: keyid:EC:64:3B:4F:A3:F0:E1:3C:CA:80:55:83:3A:C7:0C:69:DD:1C:A8:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:2d:65:cc:6b:74:15:60:e9:6e:5b:4f:67:6b:c5:d5:8c:ea: 84:02:14:ff:00:c7:ed:ac:94:6c:75:e0:18:9b:57:5f:78:e4: 81:1e:f0:1b:97:78:6b:08:9e:54:90:59:05:7c:22:98:90:34: 44:0a:66:81:22:c5:00:65:f6:81:30:90:da:7c:40:54:cb:33: 59:8e:c2:c2:1d:56:e3:98:e3:03:aa:ec:10:7e:77:9b:22:c4: a8:c8:72:79:38:d9:75:d5:96:18:cd:2c:38:df:48:7e:59:09: bb:62:6f:34:07:1f:ca:8b:35:66:66:99:62:0d:4c:f4:87:1d: 2a:16:6a:26:c8:4b:34:bc:19:1a:36:8f:3b:85:9e:fb:67:73: e5:37:b9:fd:68:f7:6b:d9:92:36:e9:b4:95:c2:88:1c:5e:53: b4:78:e5:5c:d1:e3:ae:3f:76:ef:02:a2:58:8c:33:66:2a:97: e7:00:11:4a:d6:05:58:55:61:4a:c7:ff:73:7a:35:2c:a8:6c: 1b:4b:0e:a1:83:5b:16:3c:9d:62:e8:35:c3:df:51:c8:66:50: 76:4d:6a:b7:13:e1:8d:04:22:c0:55:a6:c4:42:43:13:27:6f: b8:2e:00:21:41:db:b2:31:84:b2:e1:d2:39:a9:74:ae:d9:3b: bd:ca:d3:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuvFFvMggyRl1rKy5hGJA8qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNjQzYjRmYTNmMGUxM2NjYTgwNTU4MzNhYzcwYzY5ZGQx Y2E4ZTEwHhcNMjYwMTExMjIwMTQ1WhcNMjYwMTEyMjIwMTQ1WjAzMTEwLwYDVQQD EygyMjkyNjAxYjcwYjBlMzBmMzBkODc5ZTVlYzNlYjNhZTFiYzRmZGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9BUCHEhdrUipFFRLBYnMggLq8i0N iQZmUtfM6HnHT5fV19ysvMe/9n8zUo6noxwhVt4HyssYIeu40DZzh3iyk+BsJRml Os+nEy8CB71WAmK5eJJYY+r4tu8BD141ozJXs+zbr9oj0/TWRGBYh/5djh3ByQiy UEAMqrFvg+gk24QT9A4Pg82UmVzxH7j4SwY6F/AhEAY+5/oe5EGgdeO1R3zXVIXx xRTSx4QJKJXOJI4vgvuL64+4ZKKddxd/+Qf7XSlbXJqP1mGSOacZoeqxVpj4gCD7 uIKGeVQT81ILGNJKiXxkmFzfuwBi9Kw+IzmgK2AZGVssHWB3g3uYqnwTSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCKSYBtwsOMPMNh55ew+s64bxP27MB8GA1UdIwQY MBaAFOxkO0+j8OE8yoBVgzrHDGndHKjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0dRN1Q2UHc0VHpLZ0ZXRE9zY01hZDBjcU9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS83NGQ0OTAtYjg1YS00OTM5LTkwZGMt NzllNzQ2MzgzZjhkLzEvN0dRN1Q2UHc0VHpLZ0ZXRE9zY01hZDBjcU9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS83NGQ0OTAtYjg1YS00OTM5LTkwZGMtNzllNzQ2MzgzZjhk LzEvN0dRN1Q2UHc0VHpLZ0ZXRE9zY01hZDBjcU9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhi1lzGt0 FWDpbltPZ2vF1YzqhAIU/wDH7ayUbHXgGJtXX3jkgR7wG5d4awieVJBZBXwimJA0 RApmgSLFAGX2gTCQ2nxAVMszWY7Cwh1W45jjA6rsEH53myLEqMhyeTjZddWWGM0s ON9IflkJu2JvNAcfyos1ZmaZYg1M9IcdKhZqJshLNLwZGjaPO4We+2dz5Te5/Wj3 a9mSNum0lcKIHF5TtHjlXNHjrj927wKiWIwzZiqX5wARStYFWFVhSsf/c3o1LKhs G0sOoYNbFjydYug1w99RyGZQdk1qtxPhjQQiwFWmxEJDEydvuC4AIUHbsjGEsuHS Oal0rtk7vcrTzA== -----END CERTIFICATE-----Generated at Mon Jan 12 02:02:19 2026 by rpki-client