This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft File: fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft (raw, json) Hash identifier: 7q1p7cRN7elVpWfabgvgl7s7ZoKBhOz3rstwbcs3nnk= Subject key identifier: 74:42:6A:35:BB:C6:ED:81:CF:65:3A:A2:B1:04:8C:CC:BF:0C:8F:77 Authority key identifier: 7C:AB:39:C6:E0:41:22:35:EF:C7:87:7A:9F:73:78:99:31:3E:D1:5E Certificate issuer: /CN=7cab39c6e0412235efc7877a9f737899313ed15e Certificate serial: 019BF5E3B8B614186F87FC2AE0040208AFDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft Manifest number: 0302 Signing time: Sun 25 Jan 2026 16:01:40 +0000 Manifest this update: Sun 25 Jan 2026 16:01:40 +0000 Manifest next update: Mon 26 Jan 2026 16:01:40 +0000 Files and hashes: 1: cj2iG-kAiX7g7Q_YyN0wXBDsPQA.roa (hash: Iwu4QuDjHy9svFihD9XS6FTYQQqAdESvSACyQGECMOI=) 2: fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl (hash: Heo7AttZNe9mQ3akCxdeHqUEN+fxfLzU3wrgiAzYhok=) 3: kZ_QLDF4UjP63-RQO5uGQvJwAKg.roa (hash: GT17iGmvyx7VuRxULTyyPoqEbSTqD+0/CsQqVCeuwic=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:b8:b6:14:18:6f:87:fc:2a:e0:04:02:08:af:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7cab39c6e0412235efc7877a9f737899313ed15e Validity Not Before: Jan 25 16:01:40 2026 GMT Not After : Jan 26 16:01:40 2026 GMT Subject: CN=74426a35bbc6ed81cf653aa2b1048cccbf0c8f77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f8:4c:44:68:14:9c:2a:c9:d9:74:f9:2d:9b: af:ca:e1:3c:e1:e4:58:bb:4c:c6:ba:8b:39:66:c6: d0:64:c9:df:15:79:b2:fd:a4:e2:0c:32:c6:10:88: fe:61:76:47:d8:56:bf:6f:40:c2:b8:f6:e9:95:98: c9:c5:b0:d0:2f:d8:78:ba:5d:e8:c6:cb:64:3d:cd: 95:47:d7:19:45:e7:0b:a1:62:99:39:ae:4f:62:3a: 1b:dd:5b:d4:6b:a4:24:c7:6a:96:13:76:1f:62:39: d1:b8:05:98:e0:6f:c1:0f:55:41:09:45:55:81:94: 12:a3:20:21:ee:22:fa:70:e8:9d:75:d1:bc:95:1b: b3:01:53:99:53:04:d0:1d:46:6a:85:83:bf:d4:8a: 6b:0b:6f:b6:80:b0:f4:1a:cf:e7:49:3f:c5:5c:b9: d7:10:a1:05:bf:ab:00:17:96:a4:67:27:de:14:d7: 22:ce:d1:9a:4d:bf:54:26:e3:79:a6:83:fa:24:ca: ae:94:65:1d:86:a8:cd:21:09:65:39:18:bd:82:c5: 99:84:17:d7:02:b0:6d:ac:35:1a:31:bd:73:f5:df: 19:8b:8b:8f:1c:73:c1:9d:d6:b5:ed:43:a7:c5:cf: 4b:47:85:ba:92:a8:7b:15:c9:bd:ca:68:89:2b:6d: 7b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:42:6A:35:BB:C6:ED:81:CF:65:3A:A2:B1:04:8C:CC:BF:0C:8F:77 X509v3 Authority Key Identifier: keyid:7C:AB:39:C6:E0:41:22:35:EF:C7:87:7A:9F:73:78:99:31:3E:D1:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:24:11:a1:a1:2e:90:d2:3d:0a:53:ed:c5:aa:ac:3a:38:11: e2:cc:a4:d3:3b:b6:9d:40:a9:ef:9a:a2:25:a6:69:5b:86:63: f2:4c:6f:b8:30:30:1f:ef:71:7e:d3:cb:94:e2:b6:e6:95:db: 09:ac:4d:83:e7:01:89:e9:ce:4a:c8:01:b2:1d:99:ca:04:69: 75:d4:c1:c0:3b:ed:2c:ad:f7:7c:3b:72:ea:87:21:6b:c1:ef: 50:31:0d:20:64:af:82:23:9d:eb:5e:96:ea:08:51:0f:ed:43: 62:2b:2f:c6:fb:c2:a5:89:77:bb:27:21:32:20:a3:75:d6:96: 81:03:4b:b9:82:93:a6:09:8f:d5:29:cf:d2:14:ce:1d:0a:f3: ec:46:02:c7:f2:2e:a5:ef:d7:20:72:5d:54:e7:fe:e1:99:12: fd:be:09:55:dd:0e:54:ea:31:e8:d9:93:ca:a2:8b:f7:d3:5f: cb:9b:83:a9:43:2c:54:eb:b2:26:6b:8f:5d:03:cb:82:bc:99: 35:f4:6e:aa:c2:a9:cc:ef:7b:af:e4:ee:94:d3:91:44:f6:ef: 40:52:64:24:18:f4:8b:a4:0b:c6:f1:84:74:e7:65:e0:24:73: 01:4d:a4:a7:4d:65:5b:fb:1a:90:81:48:b4:0d:0f:3d:08:70: 63:62:c0:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv147i2FBhvh/wq4AQCCK/bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYWIzOWM2ZTA0MTIyMzVlZmM3ODc3YTlmNzM3ODk5MzEz ZWQxNWUwHhcNMjYwMTI1MTYwMTQwWhcNMjYwMTI2MTYwMTQwWjAzMTEwLwYDVQQD Eyg3NDQyNmEzNWJiYzZlZDgxY2Y2NTNhYTJiMTA0OGNjY2JmMGM4Zjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPhMRGgUnCrJ2XT5LZuvyuE84eRY u0zGuos5ZsbQZMnfFXmy/aTiDDLGEIj+YXZH2Fa/b0DCuPbplZjJxbDQL9h4ul3o xstkPc2VR9cZRecLoWKZOa5PYjob3VvUa6Qkx2qWE3YfYjnRuAWY4G/BD1VBCUVV gZQSoyAh7iL6cOidddG8lRuzAVOZUwTQHUZqhYO/1IprC2+2gLD0Gs/nST/FXLnX EKEFv6sAF5akZyfeFNciztGaTb9UJuN5poP6JMqulGUdhqjNIQllORi9gsWZhBfX ArBtrDUaMb1z9d8Zi4uPHHPBnda17UOnxc9LR4W6kqh7Fcm9ymiJK217xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHRCajW7xu2Bz2U6orEEjMy/DI93MB8GA1UdIwQY MBaAFHyrOcbgQSI178eHep9zeJkxPtFeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZktzNXh1QkJJalh2eDRkNm4zTjRtVEUtMFY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mODkxNzAtMTM4ZS00OTk5LWFlZjct YzQ0MDI5OGRmYzVjLzEvZktzNXh1QkJJalh2eDRkNm4zTjRtVEUtMFY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9mODkxNzAtMTM4ZS00OTk5LWFlZjctYzQ0MDI5OGRmYzVj LzEvZktzNXh1QkJJalh2eDRkNm4zTjRtVEUtMFY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuCQRoaEu kNI9ClPtxaqsOjgR4syk0zu2nUCp75qiJaZpW4Zj8kxvuDAwH+9xftPLlOK25pXb CaxNg+cBienOSsgBsh2ZygRpddTBwDvtLK33fDty6ocha8HvUDENIGSvgiOd616W 6ghRD+1DYisvxvvCpYl3uychMiCjddaWgQNLuYKTpgmP1SnP0hTOHQrz7EYCx/Iu pe/XIHJdVOf+4ZkS/b4JVd0OVOox6NmTyqKL99Nfy5uDqUMsVOuyJmuPXQPLgryZ NfRuqsKpzO97r+TulNORRPbvQFJkJBj0i6QLxvGEdOdl4CRzAU2kp01lW/sakIFI tA0PPQhwY2LA8w== -----END CERTIFICATE-----Generated at Sun Jan 25 19:45:59 2026 by rpki-client