This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft File: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft (raw, json) Hash identifier: yvp7kwPB+0DhuRE7zgs+xKGvwRGyxn/jUQCCFWnd3ic= Subject key identifier: 6A:00:C3:C3:8F:29:24:8D:D2:A3:AE:81:F6:FD:02:77:16:15:31:40 Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Certificate serial: 019BF4D0F94915737790F570D63595CABDC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft Manifest number: 17FB Signing time: Sun 25 Jan 2026 11:01:34 +0000 Manifest this update: Sun 25 Jan 2026 11:01:34 +0000 Manifest next update: Mon 26 Jan 2026 11:01:34 +0000 Files and hashes: 1: 5bw3FxzpBWgCUPFGor6BeS_x13E.roa (hash: vbv6Fyo711z5Y6WllYiF1+hQCuBRfjBj2SnqOdmQ/Ko=) 2: KfDSJyzb9f5qb2_ejV8orifPYoQ.roa (hash: ffWRor2kEy0Bm5u6I9vC5lf9Q7mFKeVt0iScOU1aS8U=) 3: OPUmPq2MCSSLajil_N8xjasEED0.roa (hash: 3ErCgLhuftk7qbnRHyFbXfh2aIHoI6pTjwOjuX9ybbI=) 4: PVZJLc9tODZFqXK-cJmdd7K-baM.roa (hash: nv2FNyj3NvI+l9/bwumlpSj6KXBZJHOiEr8IoIDWWBs=) 5: RD2bQy42cJtcLUpPd6bwEgSdC5g.roa (hash: EXR+FPHGsONaMy04ozJgDUBq2GB63B3p6cERU165gBY=) 6: RTtrcIMD_1Pooh2hybtppswd0Cs.roa (hash: gHzBppcBQRTrZFKZdzTeaIz8G3KIuJKhpm0DEQdKM5o=) 7: ZCwACbeLHY5EcAcLa6xI6rDBVJ8.roa (hash: 3HGI+6qeROUPLoU4ORnifqLKfR+6cyux8LhHwuDQCzI=) 8: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl (hash: MI3kVUtKW2WIbSNLcLN/04J7OuPPAhXgsg+zR5ouYFw=) 9: jwL6ZedQy9jrx6zRLmC34t2VuNI.roa (hash: JjbOSGoIoxnMnWQdAupasyiznFb2Rz/tCe7dz0MfJkM=) 10: taRmnaIWL0Lvnk8-ztV91eCLqRU.roa (hash: Duq2TEYTpeDcixHF5tGgiY61uowG5KKhAb2ieJRR8c4=) 11: wUgkHiQ86rCh1plfV-1fhX-AaMg.roa (hash: 86ia7TUjUS+IoQf3wQbTT6jWw8UWMBIHEfrKwtfOipM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:f9:49:15:73:77:90:f5:70:d6:35:95:ca:bd:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Validity Not Before: Jan 25 11:01:34 2026 GMT Not After : Jan 26 11:01:34 2026 GMT Subject: CN=6a00c3c38f29248dd2a3ae81f6fd027716153140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:2f:95:4c:2f:35:be:ae:f5:4b:c8:66:cb:90: 77:65:b4:8c:04:ec:a9:85:4b:31:e6:f3:a1:67:b9: b1:c3:f1:62:21:9c:ca:2a:20:44:39:39:0f:40:30: 60:bd:7c:b7:8f:3b:bd:57:ea:fd:c7:63:38:57:32: b9:37:03:d7:db:3e:1a:49:65:77:51:e3:e8:b4:a1: 39:19:72:63:14:8a:9b:01:37:82:5a:9c:14:43:dc: a2:61:31:96:b0:77:29:38:64:6a:86:fe:73:e6:d1: dd:e0:87:60:2c:02:d0:2e:e9:27:8e:f4:32:d0:9d: 62:24:76:e9:13:3e:f2:56:55:fb:2a:6d:bb:6f:67: c9:9a:25:cd:e7:70:67:c3:73:41:6c:e6:dd:5d:d6: 86:68:69:06:8d:30:39:ca:b8:85:6b:bb:3c:bf:41: 60:40:03:50:de:d0:3d:65:57:31:52:fe:21:55:fd: 49:e4:b5:c0:b3:28:a5:6d:7a:02:15:31:b5:7b:07: ad:9b:ad:b6:b2:88:59:6c:cb:e7:da:46:99:98:f3: 8a:d5:bd:aa:e7:29:77:8a:77:1f:82:6f:22:5e:cc: 61:80:0d:85:2a:55:ce:e0:3a:cb:bb:b0:0d:a3:15: 7b:43:19:92:9c:8d:fd:fa:9c:ed:2a:b3:0e:ef:e7: dc:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:00:C3:C3:8F:29:24:8D:D2:A3:AE:81:F6:FD:02:77:16:15:31:40 X509v3 Authority Key Identifier: keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:b3:47:21:38:2e:b8:37:d4:65:d4:a2:e2:bb:88:19:90:9c: 8b:7d:7b:ac:e2:25:1d:a3:5b:9b:3e:53:85:50:71:ec:f0:a5: 22:7c:34:42:79:6d:a6:e9:3c:c7:3a:b6:19:2e:90:d6:f4:41: 65:a9:79:29:a4:de:a2:05:40:73:56:b7:4d:8d:72:8a:d6:75: 48:ad:07:2d:e6:e5:79:aa:5f:27:eb:21:2e:4f:2e:08:03:69: a4:8a:10:d4:6d:db:f0:22:59:40:a7:d7:70:62:1d:d5:d5:44: e9:11:3e:72:76:eb:38:3e:f1:86:05:41:c0:c0:11:6d:98:27: a2:46:4e:1c:b5:ee:50:74:ef:8e:da:65:88:39:42:c0:ad:30: 9f:60:a0:e6:7f:f5:c9:9a:8f:ee:fc:21:23:63:eb:e3:3f:59: 11:d6:d9:99:66:62:e8:b8:b8:b8:48:bb:3b:09:34:fb:a1:6c: 53:c7:1a:f6:88:26:b4:bf:3a:37:56:32:14:57:e2:73:3a:54: 24:38:73:d2:f5:9a:6e:fb:17:71:40:3c:ba:7d:51:fc:1c:d9: d7:11:fb:da:4b:c7:83:1d:9e:2c:d3:d6:51:58:54:a1:ae:1a: 31:a6:8e:53:d1:d4:bf:3c:53:ca:ef:56:88:af:81:3b:3c:f1: 6f:a2:62:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00PlJFXN3kPVw1jWVyr3HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDRjMjVjMmY4YjQ3ZTVkYWY1MmQxYzRjNWE1MDk5OWRk MGEwYTkwHhcNMjYwMTI1MTEwMTM0WhcNMjYwMTI2MTEwMTM0WjAzMTEwLwYDVQQD Eyg2YTAwYzNjMzhmMjkyNDhkZDJhM2FlODFmNmZkMDI3NzE2MTUzMTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6C+VTC81vq71S8hmy5B3ZbSMBOyp hUsx5vOhZ7mxw/FiIZzKKiBEOTkPQDBgvXy3jzu9V+r9x2M4VzK5NwPX2z4aSWV3 UePotKE5GXJjFIqbATeCWpwUQ9yiYTGWsHcpOGRqhv5z5tHd4IdgLALQLuknjvQy 0J1iJHbpEz7yVlX7Km27b2fJmiXN53Bnw3NBbObdXdaGaGkGjTA5yriFa7s8v0Fg QANQ3tA9ZVcxUv4hVf1J5LXAsyilbXoCFTG1ewetm622sohZbMvn2kaZmPOK1b2q 5yl3incfgm8iXsxhgA2FKlXO4DrLu7ANoxV7QxmSnI39+pztKrMO7+fcJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGoAw8OPKSSN0qOugfb9AncWFTFAMB8GA1UdIwQY MBaAFH0Ewlwvi0fl2vUtHExaUJmd0KCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMt ZTYzZTk0Y2JhMDlmLzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMtZTYzZTk0Y2JhMDlm LzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVbNHITgu uDfUZdSi4ruIGZCci317rOIlHaNbmz5ThVBx7PClInw0Qnltpuk8xzq2GS6Q1vRB Zal5KaTeogVAc1a3TY1yitZ1SK0HLebleapfJ+shLk8uCANppIoQ1G3b8CJZQKfX cGId1dVE6RE+cnbrOD7xhgVBwMARbZgnokZOHLXuUHTvjtpliDlCwK0wn2Cg5n/1 yZqP7vwhI2Pr4z9ZEdbZmWZi6Li4uEi7Owk0+6FsU8ca9ogmtL86N1YyFFficzpU JDhz0vWabvsXcUA8un1R/BzZ1xH72kvHgx2eLNPWUVhUoa4aMaaOU9HUvzxTyu9W iK+BOzzxb6Jiqw== -----END CERTIFICATE-----Generated at Sun Jan 25 17:36:44 2026 by rpki-client