This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft File: i7CxfdibOGQklyi5_C7q5RD95Ps.mft (raw, json) Hash identifier: U5pQgWO3WSVx2ceiXfVGxDMK1YFLIc3BUsP/4YQaKkw= Subject key identifier: F7:DA:77:36:C7:BB:3D:31:D1:9F:60:C0:D1:22:0B:96:6D:EB:46:0C Authority key identifier: 8B:B0:B1:7D:D8:9B:38:64:24:97:28:B9:FC:2E:EA:E5:10:FD:E4:FB Certificate issuer: /CN=8bb0b17dd89b3864249728b9fc2eeae510fde4fb Certificate serial: 019BB13955BB5A796C25EA27BB690B31F0FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft Manifest number: 09EA Signing time: Mon 12 Jan 2026 08:01:23 +0000 Manifest this update: Mon 12 Jan 2026 08:01:23 +0000 Manifest next update: Tue 13 Jan 2026 08:01:23 +0000 Files and hashes: 1: i7CxfdibOGQklyi5_C7q5RD95Ps.crl (hash: AOc2DmQd6ET8LSyV/vVvkOZUG/LW3uJCzmrL/r8CBHk=) 2: prj-gjU2FJGtEVAkFqN1UEoiuck.roa (hash: MBD1FKmACbSwTw7FTssOYwGdssDUFI7ku4bKYJP3LtI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 08:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b1:39:55:bb:5a:79:6c:25:ea:27:bb:69:0b:31:f0:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bb0b17dd89b3864249728b9fc2eeae510fde4fb Validity Not Before: Jan 12 08:01:23 2026 GMT Not After : Jan 13 08:01:23 2026 GMT Subject: CN=f7da7736c7bb3d31d19f60c0d1220b966deb460c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:36:41:54:a7:bd:ef:a8:e2:3c:dd:16:ca:f7: 96:fe:d1:47:0e:c7:6b:8b:e3:32:b5:22:67:53:12: df:98:1b:8a:0b:3c:53:7c:29:83:dc:e9:47:8d:a3: 4a:6b:09:7d:d8:df:f1:27:e7:41:f8:c4:7d:c9:20: 42:13:96:42:d6:3e:82:8f:1c:fc:23:bb:20:55:4d: 07:e3:34:d5:29:9a:dc:76:89:56:ff:6a:c0:9f:6e: 64:a7:a1:5d:4d:b0:fc:74:33:63:17:7c:32:e4:86: 1b:f6:ad:f9:f0:48:c8:c3:7b:d7:6e:b1:38:6d:0a: a3:a6:dc:be:2b:aa:45:bb:57:a9:ad:8b:d1:c2:2d: 36:53:02:e0:ee:d1:cb:5a:58:60:c4:f7:30:d6:53: d6:0e:38:79:11:03:9a:04:e5:f6:75:fd:db:b3:72: 2d:91:d3:af:31:a1:13:3c:f1:6d:49:df:95:6a:39: c6:92:f5:6c:0f:88:33:bb:a6:eb:98:7a:e9:90:90: f8:3b:97:0f:62:13:eb:35:58:67:5b:af:7c:0b:b7: 6c:d0:8d:84:e4:b7:60:2c:a4:98:67:19:5e:6d:7a: 42:70:07:83:42:f7:24:dd:4b:3a:e7:6e:57:37:f9: ee:60:11:d4:ad:2f:05:4c:3a:36:41:15:2d:0c:af: b9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:DA:77:36:C7:BB:3D:31:D1:9F:60:C0:D1:22:0B:96:6D:EB:46:0C X509v3 Authority Key Identifier: keyid:8B:B0:B1:7D:D8:9B:38:64:24:97:28:B9:FC:2E:EA:E5:10:FD:E4:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:10:b4:b9:21:64:a0:a8:02:5e:58:6f:64:40:99:16:7b:80: 78:95:48:1f:c3:50:6f:49:0e:a4:4a:e9:c5:d9:e4:bb:ef:11: d8:91:53:fa:e6:77:da:a5:5a:fe:6c:9f:09:11:fc:1c:c1:62: 81:39:c1:1f:99:4b:f2:e8:b0:f3:8b:f7:a2:59:9f:70:40:b9: 2c:84:d4:2b:d9:7b:27:dc:83:f3:9e:49:b2:5b:0e:b3:47:ea: 49:87:0e:d9:fd:a6:a5:4b:44:71:71:88:8f:19:b0:64:1e:67: 97:93:17:c2:d0:55:0c:d2:7e:6e:0d:58:68:e5:b3:fe:79:f7: 8b:f4:1b:30:5d:58:cf:9e:bb:75:f1:85:94:b4:c3:25:d2:1c: de:07:3b:06:10:55:d7:a9:27:cd:72:b2:77:d3:16:c9:f4:e3: 4c:32:4d:7e:1f:cd:b3:5e:2c:37:6b:51:e7:fc:ec:45:78:74: 43:17:f7:e3:11:7c:23:a4:ac:17:d7:82:44:0e:41:c9:69:e1: 4b:bc:21:63:cd:6e:ef:f0:01:6a:58:05:37:06:70:26:0d:70: 7c:89:f9:41:34:c4:76:62:81:57:1e:dc:c6:44:3a:fa:af:6e: 14:01:ee:0b:15:da:e7:be:63:e3:80:9d:81:e0:25:39:28:46: ce:8d:91:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuxOVW7WnlsJeonu2kLMfD9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYjBiMTdkZDg5YjM4NjQyNDk3MjhiOWZjMmVlYWU1MTBm ZGU0ZmIwHhcNMjYwMTEyMDgwMTIzWhcNMjYwMTEzMDgwMTIzWjAzMTEwLwYDVQQD EyhmN2RhNzczNmM3YmIzZDMxZDE5ZjYwYzBkMTIyMGI5NjZkZWI0NjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjZBVKe976jiPN0WyveW/tFHDsdr i+MytSJnUxLfmBuKCzxTfCmD3OlHjaNKawl92N/xJ+dB+MR9ySBCE5ZC1j6Cjxz8 I7sgVU0H4zTVKZrcdolW/2rAn25kp6FdTbD8dDNjF3wy5IYb9q358EjIw3vXbrE4 bQqjpty+K6pFu1eprYvRwi02UwLg7tHLWlhgxPcw1lPWDjh5EQOaBOX2df3bs3It kdOvMaETPPFtSd+VajnGkvVsD4gzu6brmHrpkJD4O5cPYhPrNVhnW698C7ds0I2E 5LdgLKSYZxlebXpCcAeDQvck3Us6525XN/nuYBHUrS8FTDo2QRUtDK+5RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPfadzbHuz0x0Z9gwNEiC5Zt60YMMB8GA1UdIwQY MBaAFIuwsX3YmzhkJJcoufwu6uUQ/eT7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTdDeGZkaWJPR1FrbHlpNV9DN3E1UkQ5NVBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9iYTk1ZmUtNDU5OS00ZDgzLWI2YmQt ZTAxOTE5ZmNmZWRmLzEvaTdDeGZkaWJPR1FrbHlpNV9DN3E1UkQ5NVBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9iYTk1ZmUtNDU5OS00ZDgzLWI2YmQtZTAxOTE5ZmNmZWRm LzEvaTdDeGZkaWJPR1FrbHlpNV9DN3E1UkQ5NVBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZRC0uSFk oKgCXlhvZECZFnuAeJVIH8NQb0kOpErpxdnku+8R2JFT+uZ32qVa/myfCRH8HMFi gTnBH5lL8uiw84v3olmfcEC5LITUK9l7J9yD855JslsOs0fqSYcO2f2mpUtEcXGI jxmwZB5nl5MXwtBVDNJ+bg1YaOWz/nn3i/QbMF1Yz567dfGFlLTDJdIc3gc7BhBV 16knzXKyd9MWyfTjTDJNfh/Ns14sN2tR5/zsRXh0Qxf34xF8I6SsF9eCRA5ByWnh S7whY81u7/ABalgFNwZwJg1wfIn5QTTEdmKBVx7cxkQ6+q9uFAHuCxXa575j44Cd geAlOShGzo2RGA== -----END CERTIFICATE-----Generated at Mon Jan 12 15:47:11 2026 by rpki-client