This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft File: FsbhUuwA0rDjB9YZ5388HRQm7vA.mft (raw, json) Hash identifier: 0JBcdpdTanG0hiYqZzL+4PNILya8q/39YZFWUh09tKU= Subject key identifier: 35:A2:60:45:FD:B4:42:59:E5:EE:82:02:96:2B:6F:86:88:55:61:50 Authority key identifier: 16:C6:E1:52:EC:00:D2:B0:E3:07:D6:19:E7:7F:3C:1D:14:26:EE:F0 Certificate issuer: /CN=16c6e152ec00d2b0e307d619e77f3c1d1426eef0 Certificate serial: 019BF50778C59C77559FEDC70891357F8EC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft Manifest number: 020F Signing time: Sun 25 Jan 2026 12:01:06 +0000 Manifest this update: Sun 25 Jan 2026 12:01:06 +0000 Manifest next update: Mon 26 Jan 2026 12:01:06 +0000 Files and hashes: 1: 14moTVCPRDZ_u1h30FOe4lYZ_Uo.roa (hash: wcUkVN7ia2xJx1oMg8zn/LuYUzAy2xjBnV4ceG0F+9o=) 2: FsbhUuwA0rDjB9YZ5388HRQm7vA.crl (hash: wYc0htP9BLXY39s7QEsghj45Zp4e2TD2CLTZ53OQKWg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.crl rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:78:c5:9c:77:55:9f:ed:c7:08:91:35:7f:8e:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16c6e152ec00d2b0e307d619e77f3c1d1426eef0 Validity Not Before: Jan 25 12:01:06 2026 GMT Not After : Jan 26 12:01:06 2026 GMT Subject: CN=35a26045fdb44259e5ee8202962b6f8688556150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:25:85:45:40:93:79:3f:2d:71:2a:f5:98:14: ad:4d:69:31:82:d0:6b:20:ba:3f:e3:ba:a1:f4:1c: 07:2b:03:3c:66:a0:4d:e3:c3:56:8a:52:b9:7b:c4: d8:ea:2f:c8:a9:b4:06:61:4a:49:eb:12:06:4f:17: 2d:7a:c1:96:6f:17:80:d8:43:05:0b:95:c9:7e:44: a4:98:47:86:c1:b8:b7:43:8c:2e:3f:a8:f0:35:b2: 96:98:49:79:5f:69:fd:2e:bf:09:e4:90:7c:f5:83: 4e:43:61:31:dd:04:3d:35:32:da:f4:88:b0:37:f3: 77:27:8a:b5:f7:18:28:3f:85:29:e9:ae:d3:9f:8b: 41:0c:9d:21:e3:3d:ae:4a:11:e4:d2:2d:9a:9d:fd: 44:fc:d9:29:66:a3:9f:bf:1b:b8:da:5d:4d:13:d5: f3:81:4b:e3:a6:56:f1:1a:23:dd:98:43:df:25:85: 09:bf:b0:e4:26:c9:8c:12:aa:09:00:1b:de:22:17: 6a:6e:78:67:00:f4:00:ea:05:93:b6:0a:79:c3:50: 62:d0:f5:d8:50:2d:22:8a:63:94:12:a3:b0:1b:80: ed:f5:a8:b5:e5:9e:ab:d8:63:84:85:5e:b3:ad:a9: 09:46:af:78:d5:3b:03:cb:cd:d9:c6:8d:d1:25:a2: 9b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A2:60:45:FD:B4:42:59:E5:EE:82:02:96:2B:6F:86:88:55:61:50 X509v3 Authority Key Identifier: keyid:16:C6:E1:52:EC:00:D2:B0:E3:07:D6:19:E7:7F:3C:1D:14:26:EE:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:7b:5f:5a:2d:74:27:c0:15:b4:c6:e4:7b:69:66:58:7a:04: 15:57:1a:2b:14:b6:70:81:54:79:fd:53:0a:90:53:c1:b6:4a: 08:bd:fa:9c:c9:be:e2:3d:74:09:f8:a7:8b:68:74:9f:76:69: 00:a0:89:46:b8:6f:8a:04:05:0f:a4:30:c3:f5:ba:b1:aa:e5: 76:31:ac:b7:a2:28:03:03:51:4c:1f:3d:00:8a:8d:06:8f:fe: 7b:36:d9:69:78:c4:fd:c3:96:81:ac:28:39:a6:4b:ee:0f:60: 4f:e4:a5:02:c5:3b:a8:ac:64:be:ce:bc:b1:79:a4:fb:c5:d3: cf:98:a2:9a:6c:10:2a:cb:6b:ac:5a:9a:a1:38:8e:34:96:33: 1c:1d:cc:69:12:3d:53:a2:c0:b5:95:19:01:8a:b3:83:d1:7f: 65:68:37:fa:c4:ee:a9:c4:2c:78:54:70:66:76:d3:1e:f4:e1: 99:8a:0e:2f:dc:cd:88:09:a9:f4:ab:02:53:16:d9:c7:0c:09: 97:84:5b:5f:c2:6f:19:4a:8e:37:c6:ce:cc:f3:80:93:36:ad: 1e:e4:a0:14:2f:ac:fa:52:6f:02:50:66:d3:1f:3d:5e:0a:28: 8f:76:d7:c4:ba:1d:c9:47:4d:6e:29:44:6d:9f:d3:7d:a7:1d: 33:5b:d5:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B3jFnHdVn+3HCJE1f47EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2YzZlMTUyZWMwMGQyYjBlMzA3ZDYxOWU3N2YzYzFkMTQy NmVlZjAwHhcNMjYwMTI1MTIwMTA2WhcNMjYwMTI2MTIwMTA2WjAzMTEwLwYDVQQD EygzNWEyNjA0NWZkYjQ0MjU5ZTVlZTgyMDI5NjJiNmY4Njg4NTU2MTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6SWFRUCTeT8tcSr1mBStTWkxgtBr ILo/47qh9BwHKwM8ZqBN48NWilK5e8TY6i/IqbQGYUpJ6xIGTxctesGWbxeA2EMF C5XJfkSkmEeGwbi3Q4wuP6jwNbKWmEl5X2n9Lr8J5JB89YNOQ2Ex3QQ9NTLa9Iiw N/N3J4q19xgoP4Up6a7Tn4tBDJ0h4z2uShHk0i2anf1E/NkpZqOfvxu42l1NE9Xz gUvjplbxGiPdmEPfJYUJv7DkJsmMEqoJABveIhdqbnhnAPQA6gWTtgp5w1Bi0PXY UC0iimOUEqOwG4Dt9ai15Z6r2GOEhV6zrakJRq941TsDy83Zxo3RJaKbDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDWiYEX9tEJZ5e6CApYrb4aIVWFQMB8GA1UdIwQY MBaAFBbG4VLsANKw4wfWGed/PB0UJu7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnNiaFV1d0EwckRqQjlZWjUzODhIUlFtN3ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9jM2RkOGUtMzhmZC00Mzk4LWJhZTct NDlmNGUzZWRkODc1LzEvRnNiaFV1d0EwckRqQjlZWjUzODhIUlFtN3ZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9jM2RkOGUtMzhmZC00Mzk4LWJhZTctNDlmNGUzZWRkODc1 LzEvRnNiaFV1d0EwckRqQjlZWjUzODhIUlFtN3ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASHtfWi10 J8AVtMbke2lmWHoEFVcaKxS2cIFUef1TCpBTwbZKCL36nMm+4j10Cfini2h0n3Zp AKCJRrhvigQFD6Qww/W6sarldjGst6IoAwNRTB89AIqNBo/+ezbZaXjE/cOWgawo OaZL7g9gT+SlAsU7qKxkvs68sXmk+8XTz5iimmwQKstrrFqaoTiONJYzHB3MaRI9 U6LAtZUZAYqzg9F/ZWg3+sTuqcQseFRwZnbTHvThmYoOL9zNiAmp9KsCUxbZxwwJ l4RbX8JvGUqON8bOzPOAkzatHuSgFC+s+lJvAlBm0x89Xgooj3bXxLodyUdNbilE bZ/TfacdM1vVEw== -----END CERTIFICATE-----Generated at Sun Jan 25 16:45:21 2026 by rpki-client