This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft File: fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft (raw, json) Hash identifier: RK4DwaX2YxfdSFaT9pA/B/joQeeWghPJXowb9k1NTBs= Subject key identifier: FA:3B:4E:8A:A1:9E:42:B7:2C:3A:F4:8B:15:2D:6F:08:81:85:C0:24 Authority key identifier: 7D:0A:C3:34:43:8A:53:D1:8A:E4:0E:FC:93:68:76:8B:93:1C:FA:C2 Certificate issuer: /CN=7d0ac334438a53d18ae40efc9368768b931cfac2 Certificate serial: 019BF4D09D7139375068BC0E434B318D1D56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 11:01:10 +0000 Manifest this update: Sun 25 Jan 2026 11:01:10 +0000 Manifest next update: Mon 26 Jan 2026 11:01:10 +0000 Files and hashes: 1: WJpebRSVLbQrdcjeB04EXCpIhRg.roa (hash: XP6zMi85BeS7CS6gjX07ym99dXpvUnSFZsiLXXS4Qvw=) 2: fQrDNEOKU9GK5A78k2h2i5Mc-sI.crl (hash: n4m09aP6UCjs6fw43Ko/oot+WZUeDX/WNxhKu1tEEeM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.crl rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:9d:71:39:37:50:68:bc:0e:43:4b:31:8d:1d:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d0ac334438a53d18ae40efc9368768b931cfac2 Validity Not Before: Jan 25 11:01:10 2026 GMT Not After : Jan 26 11:01:10 2026 GMT Subject: CN=fa3b4e8aa19e42b72c3af48b152d6f088185c024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e9:65:24:17:63:5c:01:a6:f1:1a:f7:23:3f: 86:cd:02:32:2e:f9:23:93:f5:bb:b1:c3:42:1e:c2: b5:a4:64:93:23:13:dc:4b:08:85:8f:37:81:49:6b: 9f:25:70:73:f4:eb:08:8d:d2:26:82:dd:ed:86:dd: dd:2f:8a:10:50:27:7d:77:c0:cf:b2:41:c0:74:88: 4b:23:99:29:c0:d3:08:72:df:fd:41:4e:4b:cd:78: 3a:92:35:15:34:7b:05:d5:49:cd:93:f5:eb:c7:97: 1d:74:21:82:6b:4e:1c:5d:e4:bf:9b:64:6b:3e:71: 5b:87:42:f6:08:ac:1b:3d:45:d2:a3:35:94:8e:ed: b6:49:1d:57:ee:32:3f:e7:52:42:c0:8e:99:56:68: 26:79:f9:6b:91:de:2a:0d:b3:f8:15:db:82:8f:a2: ef:a6:d6:b8:e8:16:5d:dd:b2:d6:1a:1a:1e:a9:11: 7f:54:0a:11:52:83:63:15:72:b1:39:05:b7:25:94: 05:c3:38:35:74:30:7c:87:e9:f7:48:8b:c0:9d:83: 6c:86:80:52:9e:e2:3f:dd:50:63:a7:14:0a:9a:8b: 64:0b:30:d5:c1:12:8b:c3:0b:38:4b:32:5a:52:23: 81:1d:48:2f:ce:95:59:ec:61:99:6f:ad:3b:f8:95: 50:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:3B:4E:8A:A1:9E:42:B7:2C:3A:F4:8B:15:2D:6F:08:81:85:C0:24 X509v3 Authority Key Identifier: keyid:7D:0A:C3:34:43:8A:53:D1:8A:E4:0E:FC:93:68:76:8B:93:1C:FA:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:71:97:17:4d:e8:60:1d:78:c9:40:f8:1f:9b:6f:2b:e3:6b: 6d:1f:81:5c:d5:37:93:f8:de:f0:50:c6:64:13:bc:25:84:3c: 52:66:91:55:fa:a4:a3:34:2f:1e:36:30:34:e8:2b:47:2b:20: fa:9d:36:55:69:2d:92:f2:2c:1a:6d:10:13:53:e5:5d:9b:93: a2:64:2d:a0:c0:7a:48:30:63:80:50:f5:3d:f3:63:e6:c8:5d: cb:bf:a9:94:48:d1:91:29:16:4c:33:db:e5:cb:eb:4d:d7:2a: 70:52:44:ce:12:8a:c2:62:44:c6:70:d2:5c:cf:62:e3:81:05: 8d:86:8b:31:d4:f5:ed:72:15:2d:c9:09:48:d4:4d:93:f8:77: 25:de:5c:33:9f:65:1b:4d:e4:54:0a:9f:bc:dc:62:2b:f3:fa: 2d:cb:01:1a:82:3c:83:d6:03:92:e4:c9:74:ed:d6:87:dc:98: f8:8b:d2:01:61:e1:d0:b2:28:56:e9:88:d1:5e:a3:57:39:2b: 83:a1:f4:78:e6:e1:b4:95:9c:32:74:fa:f6:66:62:19:ae:80: 19:66:5f:fd:32:bb:46:b0:09:00:cb:a0:69:b9:02:5a:bf:d6: 3c:f9:04:f4:84:72:a2:c7:33:56:d6:6b:93:fa:9c:83:78:1f: d6:7f:0f:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00J1xOTdQaLwOQ0sxjR1WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMGFjMzM0NDM4YTUzZDE4YWU0MGVmYzkzNjg3NjhiOTMx Y2ZhYzIwHhcNMjYwMTI1MTEwMTEwWhcNMjYwMTI2MTEwMTEwWjAzMTEwLwYDVQQD EyhmYTNiNGU4YWExOWU0MmI3MmMzYWY0OGIxNTJkNmYwODgxODVjMDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+llJBdjXAGm8Rr3Iz+GzQIyLvkj k/W7scNCHsK1pGSTIxPcSwiFjzeBSWufJXBz9OsIjdImgt3tht3dL4oQUCd9d8DP skHAdIhLI5kpwNMIct/9QU5LzXg6kjUVNHsF1UnNk/Xrx5cddCGCa04cXeS/m2Rr PnFbh0L2CKwbPUXSozWUju22SR1X7jI/51JCwI6ZVmgmeflrkd4qDbP4FduCj6Lv pta46BZd3bLWGhoeqRF/VAoRUoNjFXKxOQW3JZQFwzg1dDB8h+n3SIvAnYNshoBS nuI/3VBjpxQKmotkCzDVwRKLwws4SzJaUiOBHUgvzpVZ7GGZb607+JVQzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPo7ToqhnkK3LDr0ixUtbwiBhcAkMB8GA1UdIwQY MBaAFH0KwzRDilPRiuQO/JNodouTHPrCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFyRE5FT0tVOUdLNUE3OGsyaDJpNU1jLXNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9mMjZmZDEtYjM3NS00MjZjLWFmNzkt YjUxOWIxMzFiZjg1LzEvZlFyRE5FT0tVOUdLNUE3OGsyaDJpNU1jLXNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9mMjZmZDEtYjM3NS00MjZjLWFmNzktYjUxOWIxMzFiZjg1 LzEvZlFyRE5FT0tVOUdLNUE3OGsyaDJpNU1jLXNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB3GXF03o YB14yUD4H5tvK+NrbR+BXNU3k/je8FDGZBO8JYQ8UmaRVfqkozQvHjYwNOgrRysg +p02VWktkvIsGm0QE1PlXZuTomQtoMB6SDBjgFD1PfNj5shdy7+plEjRkSkWTDPb 5cvrTdcqcFJEzhKKwmJExnDSXM9i44EFjYaLMdT17XIVLckJSNRNk/h3Jd5cM59l G03kVAqfvNxiK/P6LcsBGoI8g9YDkuTJdO3Wh9yY+IvSAWHh0LIoVumI0V6jVzkr g6H0eObhtJWcMnT69mZiGa6AGWZf/TK7RrAJAMugabkCWr/WPPkE9IRyosczVtZr k/qcg3gf1n8PlQ== -----END CERTIFICATE-----Generated at Sun Jan 25 16:19:10 2026 by rpki-client