This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft File: fciRFoK8XKcc7OHv46wTW_21ndY.mft (raw, json) Hash identifier: b9a2KxerBBpnzn3hGht+jU52tdtTeyTcTvfTq+/Oxpg= Subject key identifier: 1B:39:2D:1B:08:FA:7D:B6:DD:AF:6D:C5:16:53:39:89:78:8F:97:5C Authority key identifier: 7D:C8:91:16:82:BC:5C:A7:1C:EC:E1:EF:E3:AC:13:5B:FD:B5:9D:D6 Certificate issuer: /CN=7dc8911682bc5ca71cece1efe3ac135bfdb59dd6 Certificate serial: 019BF2E23700DD165563D144E029A4DD6FEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft Manifest number: 12EB Signing time: Sun 25 Jan 2026 02:01:09 +0000 Manifest this update: Sun 25 Jan 2026 02:01:09 +0000 Manifest next update: Mon 26 Jan 2026 02:01:09 +0000 Files and hashes: 1: 9w9SZI03wkoC4C4p8xbj1xyQTSk.roa (hash: 4ZjNUluDOnXe4+ntofvgh0yoY5kqpiMhMwraHxso+o8=) 2: CfxZ0eGeh6IDIqEVp-fjZEspGOw.roa (hash: 64gVJuHjRSQovFr9XT+uIvTrz2Nlh3y9/QzHL+fzAZ0=) 3: fciRFoK8XKcc7OHv46wTW_21ndY.crl (hash: V66cfZHcMdLIRAYXMq1bm9dvUVCT8BtXK08zBG0GzBQ=) 4: hLVnBuf3u_JFi21jPT8scSeq55o.roa (hash: 9Kl/ni4B9iNPukEzlMtSOKbm3FCZbPlEMODKtlh8/eY=) 5: t9sZ-svkNCOn_aB5PqRUJcIA5qw.roa (hash: kWqIg6Zu9e2cjZJBsJNhAniK6OQKlOVK34Tp81YEZc0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.crl rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:e2:37:00:dd:16:55:63:d1:44:e0:29:a4:dd:6f:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7dc8911682bc5ca71cece1efe3ac135bfdb59dd6 Validity Not Before: Jan 25 02:01:09 2026 GMT Not After : Jan 26 02:01:09 2026 GMT Subject: CN=1b392d1b08fa7db6ddaf6dc516533989788f975c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:7f:e1:4a:f3:ef:8d:0f:03:6b:79:ec:25:b5: 8c:1a:8f:f5:4c:27:51:30:d2:68:d0:fe:9a:ae:33: 11:dc:4e:b9:ca:e3:8b:fa:06:84:bb:e1:f6:45:96: 15:e0:87:23:24:d6:eb:c6:75:34:00:4a:d3:e2:d6: a6:70:d8:5c:db:e2:e6:33:83:81:f8:21:55:4a:10: 13:40:eb:3d:aa:39:a9:4d:c3:70:55:0b:c4:c1:df: 0b:5b:84:90:0c:7f:12:04:af:27:32:4b:94:3d:c9: 41:41:0e:3a:02:f9:a4:00:31:93:ef:8b:83:77:24: 9c:60:e6:55:dd:1d:5c:2b:8c:17:7d:86:83:fa:39: a3:9c:fd:36:54:df:ec:2e:7c:da:be:f5:55:ae:3d: 35:b6:0b:22:40:5e:c0:a5:d4:26:98:ec:b6:ac:93: 7d:8c:32:96:d5:7a:1b:1d:62:10:56:a2:f9:bb:d0: 32:e5:c0:20:8f:c9:60:a7:ba:e8:d4:44:32:93:6c: aa:22:e9:68:33:32:7e:2b:5b:55:92:27:49:0f:07: 66:fc:15:96:9f:3f:30:55:b0:cc:6a:7f:7b:ff:d5: 2f:8e:47:7c:8c:97:96:90:0a:8c:62:ea:a3:ee:8a: 1d:83:1f:a0:a5:c0:77:5e:94:b1:6e:ea:cf:be:de: 1d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:39:2D:1B:08:FA:7D:B6:DD:AF:6D:C5:16:53:39:89:78:8F:97:5C X509v3 Authority Key Identifier: keyid:7D:C8:91:16:82:BC:5C:A7:1C:EC:E1:EF:E3:AC:13:5B:FD:B5:9D:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:81:8d:67:3a:51:6c:22:8e:a8:95:88:2f:75:4d:c4:e9:69: f0:7f:e6:95:ca:69:8a:d2:82:63:ab:9e:c2:62:02:62:d2:41: ba:ac:c9:35:27:6e:4b:c0:a4:99:85:66:9a:7d:92:b3:86:45: 38:44:0e:7c:d0:4d:01:34:1d:5d:28:b7:0c:ce:31:18:7b:ff: a5:de:a0:7e:bd:c9:d6:99:29:5e:ef:41:85:a0:66:79:3c:07: 92:ad:e1:5d:65:97:8f:8e:8b:27:70:7f:53:b2:07:24:8b:b3: 9d:f7:28:07:54:21:c9:23:7c:50:6d:4f:94:1f:86:c4:a9:34: 5b:fb:32:ba:e8:9f:06:16:8a:b4:c3:7c:10:fc:ec:e2:15:51: 73:a8:25:42:bf:4b:88:d0:86:fd:e7:34:06:12:71:c8:1d:e1: fc:df:5e:7c:25:2c:f5:13:cd:d0:3d:dc:20:dd:36:10:a6:3d: 20:d4:63:6a:13:4b:ef:1c:79:8f:40:b3:c6:26:50:72:ac:c5: cc:9e:f9:f0:90:68:08:5a:82:c3:de:e9:28:90:53:9d:eb:0d: 9f:29:10:00:ec:39:33:6f:f2:4f:66:91:33:85:7f:02:9b:c7: aa:b6:f3:0d:16:4c:12:d7:9d:40:b7:86:65:a7:36:e3:8b:9b: 0e:c7:a9:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvy4jcA3RZVY9FE4Cmk3W/qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYzg5MTE2ODJiYzVjYTcxY2VjZTFlZmUzYWMxMzViZmRi NTlkZDYwHhcNMjYwMTI1MDIwMTA5WhcNMjYwMTI2MDIwMTA5WjAzMTEwLwYDVQQD EygxYjM5MmQxYjA4ZmE3ZGI2ZGRhZjZkYzUxNjUzMzk4OTc4OGY5NzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkn/hSvPvjQ8Da3nsJbWMGo/1TCdR MNJo0P6arjMR3E65yuOL+gaEu+H2RZYV4IcjJNbrxnU0AErT4tamcNhc2+LmM4OB +CFVShATQOs9qjmpTcNwVQvEwd8LW4SQDH8SBK8nMkuUPclBQQ46AvmkADGT74uD dyScYOZV3R1cK4wXfYaD+jmjnP02VN/sLnzavvVVrj01tgsiQF7ApdQmmOy2rJN9 jDKW1XobHWIQVqL5u9Ay5cAgj8lgp7ro1EQyk2yqIuloMzJ+K1tVkidJDwdm/BWW nz8wVbDMan97/9Uvjkd8jJeWkAqMYuqj7oodgx+gpcB3XpSxburPvt4diQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBs5LRsI+n223a9txRZTOYl4j5dcMB8GA1UdIwQY MBaAFH3IkRaCvFynHOzh7+OsE1v9tZ3WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmNpUkZvSzhYS2NjN09IdjQ2d1RXXzIxbmRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wODMxYmYtMTE4Yy00ZWNlLTkzNGQt NzUyOTUyNTFiMWU4LzEvZmNpUkZvSzhYS2NjN09IdjQ2d1RXXzIxbmRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8wODMxYmYtMTE4Yy00ZWNlLTkzNGQtNzUyOTUyNTFiMWU4 LzEvZmNpUkZvSzhYS2NjN09IdjQ2d1RXXzIxbmRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn4GNZzpR bCKOqJWIL3VNxOlp8H/mlcppitKCY6uewmICYtJBuqzJNSduS8CkmYVmmn2Ss4ZF OEQOfNBNATQdXSi3DM4xGHv/pd6gfr3J1pkpXu9BhaBmeTwHkq3hXWWXj46LJ3B/ U7IHJIuznfcoB1QhySN8UG1PlB+GxKk0W/syuuifBhaKtMN8EPzs4hVRc6glQr9L iNCG/ec0BhJxyB3h/N9efCUs9RPN0D3cIN02EKY9INRjahNL7xx5j0CzxiZQcqzF zJ758JBoCFqCw97pKJBTnesNnykQAOw5M2/yT2aRM4V/ApvHqrbzDRZMEtedQLeG Zac244ubDsepRQ== -----END CERTIFICATE-----Generated at Sun Jan 25 06:08:46 2026 by rpki-client