This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft File: fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft (raw, json) Hash identifier: wyb36jdLg5i7H3ThVL5x8UeTlxo42RE31EpcWl46edw= Subject key identifier: D2:A8:5D:F2:9A:A5:C3:51:C8:72:32:4F:67:20:C9:1F:97:C4:37:84 Authority key identifier: 7D:45:FB:FF:D6:2F:E2:4E:26:33:91:93:AD:9A:6C:31:8B:5D:BB:24 Certificate issuer: /CN=7d45fbffd62fe24e26339193ad9a6c318b5dbb24 Certificate serial: 019BF3BE32B5B7BB13E7F6FF9F6407843B64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft Manifest number: 1112 Signing time: Sun 25 Jan 2026 06:01:26 +0000 Manifest this update: Sun 25 Jan 2026 06:01:26 +0000 Manifest next update: Mon 26 Jan 2026 06:01:26 +0000 Files and hashes: 1: dY8PRHODabkygNlq6-JaDEHqZls.asa (hash: wO6s5irr+VwBuwHpzpyaBiPqP7VqY55H1NCOsRyEv68=) 2: fUX7_9Yv4k4mM5GTrZpsMYtduyQ.crl (hash: vRLTWHVDYiIisDfhPMvcMdbDCIMayANTuaMYnDwl8i4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:be:32:b5:b7:bb:13:e7:f6:ff:9f:64:07:84:3b:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d45fbffd62fe24e26339193ad9a6c318b5dbb24 Validity Not Before: Jan 25 06:01:26 2026 GMT Not After : Jan 26 06:01:26 2026 GMT Subject: CN=d2a85df29aa5c351c872324f6720c91f97c43784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ea:c3:d4:9c:00:7c:0b:4e:55:5b:e8:c6:09: 23:01:92:86:f9:62:83:55:47:b1:2f:ab:70:c2:7f: 86:fd:3f:db:a8:5a:62:8d:96:be:d4:9e:11:9d:f4: c6:2a:fc:69:87:44:56:b2:29:41:67:8d:95:02:0b: d7:03:3f:47:ed:99:69:e5:4a:5a:f6:a8:ca:43:00: 89:fb:2e:2d:ce:e6:29:28:a5:64:c6:c2:7a:7d:82: 00:05:fc:f9:76:22:7a:4d:3d:15:d1:0b:d4:c4:d8: 9e:e9:7a:43:14:1b:41:80:23:81:f6:f3:1c:1c:71: 11:86:be:69:59:5f:8c:85:f4:67:1c:95:be:51:f1: 33:5f:f7:ea:95:7a:ca:fc:aa:36:90:4e:03:95:1f: 06:7c:cf:a4:3c:59:0c:f7:9c:ee:09:8b:b9:55:12: 7a:57:e6:f4:a9:de:2c:df:cd:42:ce:ef:1e:37:39: c3:0f:3c:68:61:00:76:46:bf:92:c4:35:84:75:50: c9:83:12:be:15:bb:fa:5f:25:a7:86:89:d0:42:60: 1c:26:0a:bd:74:bd:b7:57:22:6b:e5:b8:94:b6:18: 54:df:b5:85:32:c4:6f:51:8a:bf:78:4f:12:67:ec: 68:0c:c1:2b:24:86:70:d3:ad:55:51:be:da:b4:72: 60:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:A8:5D:F2:9A:A5:C3:51:C8:72:32:4F:67:20:C9:1F:97:C4:37:84 X509v3 Authority Key Identifier: keyid:7D:45:FB:FF:D6:2F:E2:4E:26:33:91:93:AD:9A:6C:31:8B:5D:BB:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:f8:e6:9f:dd:76:9d:14:cd:04:ca:3a:58:b3:d7:c6:1f:08: d1:ad:a9:40:00:20:4b:ed:83:91:b7:60:a8:2f:56:f1:c6:96: 5d:ea:60:6d:55:58:6b:cd:fa:ce:72:96:9e:58:71:b9:ef:f3: 43:7b:83:10:73:7c:ca:d6:c0:29:3c:df:8a:39:d6:48:35:d3: ca:58:23:03:c0:d2:94:41:ab:e5:31:5e:d4:94:b7:20:d8:73: 74:aa:76:f8:7c:8c:10:cc:6d:e3:8b:aa:cd:86:f3:8b:2b:6c: e8:b9:13:9c:ec:c6:ac:da:b5:d0:64:2a:34:40:62:b4:f8:ab: 5a:86:b8:2c:e5:29:66:9b:a7:e7:3f:30:0f:ac:55:78:56:2f: 08:b0:2f:c1:b1:ea:8c:99:20:a4:9e:fb:c0:30:31:50:0f:ec: 46:ea:0c:de:47:90:d3:f7:c6:3a:48:86:3e:4a:01:ed:a1:06: d0:25:f4:a8:37:84:57:54:48:63:d8:e3:ec:62:b9:c7:95:2a: 34:55:41:2d:3c:b6:5a:ee:09:5a:c3:c6:30:ea:c7:e6:b5:6d: 7e:28:e2:b4:57:36:03:91:8e:c8:56:e8:12:4f:f4:fe:a0:61: fc:73:80:d7:70:32:bc:1b:e2:0e:b5:0b:3f:09:ee:54:d2:02: 33:15:c2:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzvjK1t7sT5/b/n2QHhDtkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNDVmYmZmZDYyZmUyNGUyNjMzOTE5M2FkOWE2YzMxOGI1 ZGJiMjQwHhcNMjYwMTI1MDYwMTI2WhcNMjYwMTI2MDYwMTI2WjAzMTEwLwYDVQQD EyhkMmE4NWRmMjlhYTVjMzUxYzg3MjMyNGY2NzIwYzkxZjk3YzQzNzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOrD1JwAfAtOVVvoxgkjAZKG+WKD VUexL6twwn+G/T/bqFpijZa+1J4RnfTGKvxph0RWsilBZ42VAgvXAz9H7Zlp5Upa 9qjKQwCJ+y4tzuYpKKVkxsJ6fYIABfz5diJ6TT0V0QvUxNie6XpDFBtBgCOB9vMc HHERhr5pWV+MhfRnHJW+UfEzX/fqlXrK/Ko2kE4DlR8GfM+kPFkM95zuCYu5VRJ6 V+b0qd4s381Czu8eNznDDzxoYQB2Rr+SxDWEdVDJgxK+Fbv6XyWnhonQQmAcJgq9 dL23VyJr5biUthhU37WFMsRvUYq/eE8SZ+xoDMErJIZw061VUb7atHJg/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNKoXfKapcNRyHIyT2cgyR+XxDeEMB8GA1UdIwQY MBaAFH1F+//WL+JOJjORk62abDGLXbskMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlVYN185WXY0azRtTTVHVHJacHNNWXRkdXlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9iMjk1M2EtZDk4Ny00NmIwLWJlYTMt ODdhNjJlMGZjNDhjLzEvZlVYN185WXY0azRtTTVHVHJacHNNWXRkdXlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9iMjk1M2EtZDk4Ny00NmIwLWJlYTMtODdhNjJlMGZjNDhj LzEvZlVYN185WXY0azRtTTVHVHJacHNNWXRkdXlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAfjmn912 nRTNBMo6WLPXxh8I0a2pQAAgS+2DkbdgqC9W8caWXepgbVVYa836znKWnlhxue/z Q3uDEHN8ytbAKTzfijnWSDXTylgjA8DSlEGr5TFe1JS3INhzdKp2+HyMEMxt44uq zYbziyts6LkTnOzGrNq10GQqNEBitPirWoa4LOUpZpun5z8wD6xVeFYvCLAvwbHq jJkgpJ77wDAxUA/sRuoM3keQ0/fGOkiGPkoB7aEG0CX0qDeEV1RIY9jj7GK5x5Uq NFVBLTy2Wu4JWsPGMOrH5rVtfijitFc2A5GOyFboEk/0/qBh/HOA13AyvBviDrUL PwnuVNICMxXCbQ== -----END CERTIFICATE-----Generated at Sun Jan 25 17:51:10 2026 by rpki-client