This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft File: Fa8HL54VarwgxGhJjiMjFSxzaug.mft (raw, json) Hash identifier: z0k/Aj1+3w44oYW/yKOfslELTuYmZoJzAq+vqyYQHtc= Subject key identifier: 0B:59:B6:56:F6:AA:79:7F:26:0A:67:9A:D9:FD:9F:6E:58:CD:23:FB Authority key identifier: 15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8 Certificate issuer: /CN=15af072f9e156abc20c468498e2323152c736ae8 Certificate serial: 019BF49938800A651878A7908DDD934D9994 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft Manifest number: 1727 Signing time: Sun 25 Jan 2026 10:00:40 +0000 Manifest this update: Sun 25 Jan 2026 10:00:40 +0000 Manifest next update: Mon 26 Jan 2026 10:00:40 +0000 Files and hashes: 1: DP2ZVF5XMtIlb8PSMaOqb9pBnpY.roa (hash: jGqjs9xozz6rpTqRrKhgcskeRFoVeCtnOBzJB/wnJHI=) 2: Fa8HL54VarwgxGhJjiMjFSxzaug.crl (hash: wetQ4+TziKz9Vx8ewbHpHXcXv60PCwqWivaQm+0XrCU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:38:80:0a:65:18:78:a7:90:8d:dd:93:4d:99:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15af072f9e156abc20c468498e2323152c736ae8 Validity Not Before: Jan 25 10:00:40 2026 GMT Not After : Jan 26 10:00:40 2026 GMT Subject: CN=0b59b656f6aa797f260a679ad9fd9f6e58cd23fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3b:84:cd:15:d2:25:a3:80:e4:9d:9e:27:11: ef:f5:fd:3f:cd:68:bf:0a:d4:09:14:9a:b3:07:19: b0:0f:6d:88:d1:b1:d2:15:e9:4e:63:dd:7a:39:f8: 32:89:fa:ad:3f:3d:ec:89:56:45:81:79:1f:22:a8: 38:6c:64:47:65:e9:24:27:93:a4:04:13:22:ba:f7: eb:df:d0:9e:49:72:cd:2e:d6:35:ab:d4:24:16:34: 9d:a8:9a:25:c4:59:1e:26:28:f8:ec:33:c8:30:f6: 5d:1c:6a:c4:f2:28:0a:05:98:b9:73:fa:b8:66:f1: 77:88:8a:12:ef:23:6a:a9:84:3c:a9:1e:08:16:c0: 3e:82:68:a0:8a:ab:63:6e:12:bb:fc:f3:df:7a:4f: f2:97:d1:f3:71:78:ef:5c:b0:cf:aa:39:08:30:78: 08:08:74:31:d4:f3:10:5c:04:0b:45:5f:c6:2d:64: cd:12:7b:97:5c:6e:d1:e5:60:52:6c:c0:d7:77:e4: 96:91:3e:a4:77:a7:d5:5c:98:76:0f:3c:bb:b4:17: 42:aa:b7:2f:a5:97:01:db:ba:70:0c:8d:21:28:a3: 68:bd:7f:c5:50:e3:5d:bb:90:e4:f9:92:bf:8f:90: 6a:df:60:cd:a5:e6:d9:63:19:0f:8c:f2:af:84:8d: 93:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:59:B6:56:F6:AA:79:7F:26:0A:67:9A:D9:FD:9F:6E:58:CD:23:FB X509v3 Authority Key Identifier: keyid:15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:de:f8:db:41:b9:5e:38:72:cd:7f:1a:1a:43:1f:5e:c3:86: ec:b8:53:85:bc:b2:fb:c9:de:57:a6:36:3c:48:73:5c:e0:c3: 7b:c8:ac:e4:fa:32:cb:99:02:68:11:f3:cf:8f:86:cb:48:99: bb:ba:37:91:d2:89:3c:eb:03:2c:e4:97:9e:e2:c0:f1:a5:db: 12:11:be:5a:39:6a:da:e9:b1:5d:cb:50:a9:2e:e1:6a:df:e6: 1a:07:3e:81:a7:96:2c:89:f2:bc:33:09:8c:42:dd:dc:81:46: 06:81:63:4f:73:9c:85:dc:ac:59:3b:38:c0:12:91:00:eb:b5: 51:be:7e:3f:2d:0e:a0:14:8b:c3:b8:cc:0b:e8:05:48:09:3d: 91:17:b8:77:d9:4d:02:c5:b9:ab:3f:b7:c4:f6:01:f9:f1:5d: 8a:dd:db:dc:cf:12:d0:11:05:ff:69:94:92:0e:00:e2:75:fc: 46:9b:6b:68:1e:d1:2e:ee:47:ed:97:66:7d:03:f8:7c:9b:5a: b9:93:e1:4a:55:4a:6a:69:aa:06:03:3f:5f:3f:5c:e8:85:45: fc:93:70:86:66:3e:ae:26:dc:99:d8:ba:37:8f:45:cf:b4:e3: 36:db:76:f5:36:ed:d9:c1:94:a9:0e:90:90:60:01:ad:7d:31: f3:d6:d2:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0mTiACmUYeKeQjd2TTZmUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1YWYwNzJmOWUxNTZhYmMyMGM0Njg0OThlMjMyMzE1MmM3 MzZhZTgwHhcNMjYwMTI1MTAwMDQwWhcNMjYwMTI2MTAwMDQwWjAzMTEwLwYDVQQD EygwYjU5YjY1NmY2YWE3OTdmMjYwYTY3OWFkOWZkOWY2ZTU4Y2QyM2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjuEzRXSJaOA5J2eJxHv9f0/zWi/ CtQJFJqzBxmwD22I0bHSFelOY916OfgyifqtPz3siVZFgXkfIqg4bGRHZekkJ5Ok BBMiuvfr39CeSXLNLtY1q9QkFjSdqJolxFkeJij47DPIMPZdHGrE8igKBZi5c/q4 ZvF3iIoS7yNqqYQ8qR4IFsA+gmigiqtjbhK7/PPfek/yl9HzcXjvXLDPqjkIMHgI CHQx1PMQXAQLRV/GLWTNEnuXXG7R5WBSbMDXd+SWkT6kd6fVXJh2Dzy7tBdCqrcv pZcB27pwDI0hKKNovX/FUONdu5Dk+ZK/j5Bq32DNpebZYxkPjPKvhI2T/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAtZtlb2qnl/Jgpnmtn9n25YzSP7MB8GA1UdIwQY MBaAFBWvBy+eFWq8IMRoSY4jIxUsc2roMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmE4SEw1NFZhcndneEdoSmppTWpGU3h6YXVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xMmYyNmUtZmIxMS00MmUxLWJhY2Mt Mzk2OWVjYTdiN2Q0LzEvRmE4SEw1NFZhcndneEdoSmppTWpGU3h6YXVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi8xMmYyNmUtZmIxMS00MmUxLWJhY2MtMzk2OWVjYTdiN2Q0 LzEvRmE4SEw1NFZhcndneEdoSmppTWpGU3h6YXVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAN7420G5 XjhyzX8aGkMfXsOG7LhThbyy+8neV6Y2PEhzXODDe8is5Poyy5kCaBHzz4+Gy0iZ u7o3kdKJPOsDLOSXnuLA8aXbEhG+Wjlq2umxXctQqS7hat/mGgc+gaeWLInyvDMJ jELd3IFGBoFjT3OchdysWTs4wBKRAOu1Ub5+Py0OoBSLw7jMC+gFSAk9kRe4d9lN AsW5qz+3xPYB+fFdit3b3M8S0BEF/2mUkg4A4nX8RptraB7RLu5H7ZdmfQP4fJta uZPhSlVKammqBgM/Xz9c6IVF/JNwhmY+ribcmdi6N49Fz7TjNtt29Tbt2cGUqQ6Q kGABrX0x89bSTQ== -----END CERTIFICATE-----Generated at Sun Jan 25 20:08:18 2026 by rpki-client