This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft File: felj7OLwup93SayjhUIPnXAuqos.mft (raw, json) Hash identifier: jwWj2Re7efrMjWNDVTN8Lz9v0+oZ4LkZOGrE9L1CAlI= Subject key identifier: 65:8C:73:10:6F:10:1A:B2:D1:59:DC:54:31:1C:BA:C8:DC:DC:03:97 Authority key identifier: 7D:E9:63:EC:E2:F0:BA:9F:77:49:AC:A3:85:42:0F:9D:70:2E:AA:8B Certificate issuer: /CN=7de963ece2f0ba9f7749aca385420f9d702eaa8b Certificate serial: 019BF83FCF27DD704617573AF81A6A76302C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft Manifest number: 109C Signing time: Mon 26 Jan 2026 03:01:29 +0000 Manifest this update: Mon 26 Jan 2026 03:01:29 +0000 Manifest next update: Tue 27 Jan 2026 03:01:29 +0000 Files and hashes: 1: NZpb2E9m2foAvsfyivT97O1jcng.roa (hash: 0RJf0q9CZo1wWgsu4Kz3lRf78w4e5oNe9BmVigDLVTE=) 2: felj7OLwup93SayjhUIPnXAuqos.crl (hash: ki76tLkNLwWD/KevR87AIotAWlKmohwZTDXXVXRhB7k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:cf:27:dd:70:46:17:57:3a:f8:1a:6a:76:30:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7de963ece2f0ba9f7749aca385420f9d702eaa8b Validity Not Before: Jan 26 03:01:29 2026 GMT Not After : Jan 27 03:01:29 2026 GMT Subject: CN=658c73106f101ab2d159dc54311cbac8dcdc0397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:87:db:20:d3:2c:df:d2:68:1a:63:a3:97:89: 50:f0:9d:dc:1a:fa:f1:b2:cf:85:3d:a3:79:2e:0b: bb:ed:2b:bb:53:1a:47:f4:0e:3f:88:b1:f1:47:5f: bb:ec:80:29:e8:6b:23:c2:b4:d6:64:07:5a:5f:5c: de:c9:65:94:95:58:21:3f:e1:a3:71:df:5f:0f:7c: ad:cb:71:58:60:e4:0a:34:1e:c8:3f:4a:67:7f:e9: a9:88:a0:03:dc:2d:dc:11:5e:aa:39:61:55:0e:f5: 27:18:17:d3:e0:0f:bd:a1:ae:ab:9a:6e:18:32:6d: 02:ea:87:2e:39:20:ef:ec:40:84:eb:4b:39:b2:69: 07:23:0e:82:d7:18:87:8e:e7:22:f7:2d:84:54:8c: 0e:b9:81:a5:78:74:51:d0:fd:d5:cf:b8:56:14:81: 1e:52:8d:74:fb:30:87:cd:c5:35:f1:d0:6a:94:6f: ad:3c:32:d5:85:49:42:d1:3f:3d:fd:6f:4d:e0:84: b7:f8:27:1b:bc:8b:bb:03:4e:c4:6b:95:bb:06:0e: 38:d6:7a:33:98:3e:07:3b:38:53:db:13:3f:98:c5: c1:fd:7f:37:31:09:7a:6e:0c:1c:3d:b9:ac:29:12: 63:c2:76:3f:15:5a:16:8c:17:8f:1a:8b:8e:12:f8: dd:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:8C:73:10:6F:10:1A:B2:D1:59:DC:54:31:1C:BA:C8:DC:DC:03:97 X509v3 Authority Key Identifier: keyid:7D:E9:63:EC:E2:F0:BA:9F:77:49:AC:A3:85:42:0F:9D:70:2E:AA:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:81:3c:c2:4e:cf:c2:30:77:a9:59:ee:3c:87:ab:e5:ac:73: bf:8d:e8:ce:f0:93:2f:86:32:ca:6a:69:85:fb:7a:53:ef:79: eb:9d:c8:44:5f:dd:db:0b:3f:18:bc:c4:18:28:4f:5b:dc:58: 2b:91:9e:df:76:63:85:82:ce:73:59:ec:be:c7:8a:82:46:ef: aa:c4:c6:79:10:5e:63:39:4b:08:ed:83:38:33:e5:fd:9e:01: de:4c:4a:85:37:39:5c:dc:a2:77:a6:d7:82:27:3e:f9:e2:42: 2e:79:47:39:72:85:b1:00:81:7c:ae:bd:5f:5d:fb:1d:2b:93: 30:98:8b:85:94:32:ba:60:e1:85:36:ea:40:39:af:81:74:81: 64:7b:b5:01:20:bd:6f:f7:7b:f1:09:b4:37:00:d7:d0:e8:45: 70:a4:9c:c1:8a:e4:c5:c5:f1:43:86:c9:a0:d3:14:74:fd:f4: b5:49:5d:39:d0:12:e3:01:7c:ac:0a:6e:58:39:dd:73:6f:db: 81:43:97:56:6d:6e:ec:6c:aa:24:9e:04:ff:43:b3:2d:e0:24: a5:67:27:50:02:c1:7d:0e:3b:16:34:cd:c5:17:ba:e0:ca:0e: 36:02:89:bb:60:4d:36:8f:95:a7:c5:a1:69:50:3d:88:cd:a9: ee:ef:2e:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P88n3XBGF1c6+BpqdjAsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZTk2M2VjZTJmMGJhOWY3NzQ5YWNhMzg1NDIwZjlkNzAy ZWFhOGIwHhcNMjYwMTI2MDMwMTI5WhcNMjYwMTI3MDMwMTI5WjAzMTEwLwYDVQQD Eyg2NThjNzMxMDZmMTAxYWIyZDE1OWRjNTQzMTFjYmFjOGRjZGMwMzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5YfbINMs39JoGmOjl4lQ8J3cGvrx ss+FPaN5Lgu77Su7UxpH9A4/iLHxR1+77IAp6GsjwrTWZAdaX1zeyWWUlVghP+Gj cd9fD3yty3FYYOQKNB7IP0pnf+mpiKAD3C3cEV6qOWFVDvUnGBfT4A+9oa6rmm4Y Mm0C6ocuOSDv7ECE60s5smkHIw6C1xiHjuci9y2EVIwOuYGleHRR0P3Vz7hWFIEe Uo10+zCHzcU18dBqlG+tPDLVhUlC0T89/W9N4IS3+CcbvIu7A07Ea5W7Bg441noz mD4HOzhT2xM/mMXB/X83MQl6bgwcPbmsKRJjwnY/FVoWjBePGouOEvjdfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGWMcxBvEBqy0VncVDEcusjc3AOXMB8GA1UdIwQY MBaAFH3pY+zi8Lqfd0mso4VCD51wLqqLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmVsajdPTHd1cDkzU2F5amhVSVBuWEF1cW9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mZjYwNTItZmE4MC00NGI4LWFmY2Et NmUyZGVhMDNkNTk2LzEvZmVsajdPTHd1cDkzU2F5amhVSVBuWEF1cW9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9mZjYwNTItZmE4MC00NGI4LWFmY2EtNmUyZGVhMDNkNTk2 LzEvZmVsajdPTHd1cDkzU2F5amhVSVBuWEF1cW9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB4E8wk7P wjB3qVnuPIer5axzv43ozvCTL4Yyympphft6U+95653IRF/d2ws/GLzEGChPW9xY K5Ge33ZjhYLOc1nsvseKgkbvqsTGeRBeYzlLCO2DODPl/Z4B3kxKhTc5XNyid6bX gic++eJCLnlHOXKFsQCBfK69X137HSuTMJiLhZQyumDhhTbqQDmvgXSBZHu1ASC9 b/d78Qm0NwDX0OhFcKScwYrkxcXxQ4bJoNMUdP30tUldOdAS4wF8rApuWDndc2/b gUOXVm1u7GyqJJ4E/0OzLeAkpWcnUALBfQ47FjTNxRe64MoONgKJu2BNNo+Vp8Wh aVA9iM2p7u8uaA== -----END CERTIFICATE-----Generated at Mon Jan 26 12:25:34 2026 by rpki-client