This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft File: Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft (raw, json) Hash identifier: TQkRXyA7fonhUQ7/HHL7m6mAGX964x77kTov+Yc8y88= Subject key identifier: 55:B3:E6:B3:0E:3C:18:8E:44:9A:D8:E5:36:7F:17:DB:4C:7B:99:9F Authority key identifier: 15:FE:DC:17:05:57:6D:97:FE:4A:D2:02:91:DE:19:84:73:D8:15:6F Certificate issuer: /CN=15fedc1705576d97fe4ad20291de198473d8156f Certificate serial: 019BF5074B1FBEF4F77936D58A2420C3A683 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft Manifest number: 17E7 Signing time: Sun 25 Jan 2026 12:00:54 +0000 Manifest this update: Sun 25 Jan 2026 12:00:54 +0000 Manifest next update: Mon 26 Jan 2026 12:00:54 +0000 Files and hashes: 1: Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl (hash: Uw64uRwQAGiWQWkwGr/vyVEBZZ8KjQ2lFkK2Gevslgs=) 2: Y9TvfDZhPUnmvz8oc1zE1QlM5Js.roa (hash: LtiAP0I3hFV4EJMfOTIDWfqdKu5nKxB9W4yPTHv9hdw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:4b:1f:be:f4:f7:79:36:d5:8a:24:20:c3:a6:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15fedc1705576d97fe4ad20291de198473d8156f Validity Not Before: Jan 25 12:00:54 2026 GMT Not After : Jan 26 12:00:54 2026 GMT Subject: CN=55b3e6b30e3c188e449ad8e5367f17db4c7b999f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:03:6a:b1:4e:af:4d:13:0b:37:16:eb:5d:ed: 21:95:05:c8:57:39:45:16:a5:5b:e4:1d:70:39:ea: 17:b4:2f:73:30:5e:46:6f:87:8f:e7:8f:90:d5:c3: 2b:bb:68:67:34:98:c7:dd:c4:04:e5:cb:be:7c:62: f6:cb:33:b3:b7:fb:48:38:bd:32:aa:9e:36:86:82: b7:f7:ce:0a:1c:59:da:98:38:38:06:9d:e1:4a:fe: eb:ce:fb:9e:56:86:fa:9a:ce:cd:c7:fd:39:9c:66: a3:c7:86:e0:12:42:ce:8e:78:e4:14:1a:0b:8c:b7: d4:50:47:c9:13:06:cd:34:de:3e:ff:f7:4d:8d:29: 50:c3:26:29:ea:a9:a5:17:96:d5:df:8f:86:48:ec: ea:87:39:e5:b7:e2:ab:d5:22:1b:ea:cf:bc:ae:5c: eb:17:e1:df:5d:13:bf:c3:00:c7:1e:69:50:a3:d5: 1c:2b:54:97:ca:1a:ba:15:4b:22:e0:ad:a0:71:f7: 4f:4c:72:a3:f8:ef:12:49:16:62:c1:35:4c:e9:0d: 4f:bf:df:7e:b9:b3:80:7a:4d:08:e3:81:b0:05:85: da:f2:ca:ed:ac:50:e6:8c:d6:d3:05:43:a5:ae:bf: 9b:4d:4f:58:fd:16:f6:fa:e0:7f:1a:7b:ad:ba:7b: 5c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:B3:E6:B3:0E:3C:18:8E:44:9A:D8:E5:36:7F:17:DB:4C:7B:99:9F X509v3 Authority Key Identifier: keyid:15:FE:DC:17:05:57:6D:97:FE:4A:D2:02:91:DE:19:84:73:D8:15:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:9e:b9:c9:62:d9:35:ea:d0:27:96:4c:f8:75:fa:15:18:ee: f2:c1:97:22:d2:14:a4:13:eb:6c:5f:ae:ee:80:32:cb:f3:47: 53:af:d3:4c:b8:91:07:b9:08:15:ff:a2:11:a8:f6:c4:5c:50: 11:9c:3d:48:9e:d4:4c:fc:cf:03:6e:61:25:51:73:11:66:c0: 4a:cd:b1:cd:2d:35:6b:1b:96:d5:73:40:06:11:88:eb:ba:65: 71:9b:e2:45:7c:14:2c:4d:ce:c8:30:3b:09:2d:84:54:84:c4: fd:9a:f8:32:2b:3e:87:a7:4e:da:76:4d:80:ac:bb:6a:f1:7b: 49:31:5c:63:49:f1:53:47:11:6e:32:c7:d3:29:84:04:bd:76: 2f:94:4b:de:ba:5b:db:90:ca:29:ab:c1:79:39:29:7f:c9:47: 51:7b:21:fd:c7:31:36:f9:eb:88:6c:c3:89:05:fb:4b:f2:74: 18:a4:11:a5:31:e2:2e:d4:ac:d7:61:5f:96:15:2f:1c:db:3d: ea:38:b1:d7:f3:de:ea:68:2f:42:71:68:97:c4:fd:95:4a:15: d3:fb:13:59:1e:5c:76:d7:ea:28:74:b2:f1:24:0a:06:9b:3c: 66:0a:ee:a5:2d:cf:7e:40:93:24:b5:46:8c:9f:7a:61:0a:66: 85:30:ed:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B0sfvvT3eTbViiQgw6aDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZmVkYzE3MDU1NzZkOTdmZTRhZDIwMjkxZGUxOTg0NzNk ODE1NmYwHhcNMjYwMTI1MTIwMDU0WhcNMjYwMTI2MTIwMDU0WjAzMTEwLwYDVQQD Eyg1NWIzZTZiMzBlM2MxODhlNDQ5YWQ4ZTUzNjdmMTdkYjRjN2I5OTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgNqsU6vTRMLNxbrXe0hlQXIVzlF FqVb5B1wOeoXtC9zMF5Gb4eP54+Q1cMru2hnNJjH3cQE5cu+fGL2yzOzt/tIOL0y qp42hoK3984KHFnamDg4Bp3hSv7rzvueVob6ms7Nx/05nGajx4bgEkLOjnjkFBoL jLfUUEfJEwbNNN4+//dNjSlQwyYp6qmlF5bV34+GSOzqhznlt+Kr1SIb6s+8rlzr F+HfXRO/wwDHHmlQo9UcK1SXyhq6FUsi4K2gcfdPTHKj+O8SSRZiwTVM6Q1Pv99+ ubOAek0I44GwBYXa8srtrFDmjNbTBUOlrr+bTU9Y/Rb2+uB/GnutuntcPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFWz5rMOPBiORJrY5TZ/F9tMe5mfMB8GA1UdIwQY MBaAFBX+3BcFV22X/krSApHeGYRz2BVvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmY3Y0Z3VlhiWmYtU3RJQ2tkNFpoSFBZRlc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9lMjdlYjgtYWY2NC00NDZlLTg4ZWMt ZDQ3MmU0OWY1OTFlLzEvRmY3Y0Z3VlhiWmYtU3RJQ2tkNFpoSFBZRlc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9lMjdlYjgtYWY2NC00NDZlLTg4ZWMtZDQ3MmU0OWY1OTFl LzEvRmY3Y0Z3VlhiWmYtU3RJQ2tkNFpoSFBZRlc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc565yWLZ NerQJ5ZM+HX6FRju8sGXItIUpBPrbF+u7oAyy/NHU6/TTLiRB7kIFf+iEaj2xFxQ EZw9SJ7UTPzPA25hJVFzEWbASs2xzS01axuW1XNABhGI67plcZviRXwULE3OyDA7 CS2EVITE/Zr4Mis+h6dO2nZNgKy7avF7STFcY0nxU0cRbjLH0ymEBL12L5RL3rpb 25DKKavBeTkpf8lHUXsh/ccxNvnriGzDiQX7S/J0GKQRpTHiLtSs12FflhUvHNs9 6jix1/Pe6mgvQnFol8T9lUoV0/sTWR5cdtfqKHSy8SQKBps8ZgrupS3PfkCTJLVG jJ96YQpmhTDt4g== -----END CERTIFICATE-----Generated at Sun Jan 25 18:53:36 2026 by rpki-client