This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft File: _32KebrU-YPQxJiVr1DqigPrxw0.mft (raw, json) Hash identifier: Pe/QkPw6SYaB2LLIDzluejYaQttLovu/6cIxpgJbVs4= Subject key identifier: FC:18:A5:FC:0A:4E:16:0C:D5:A5:8D:18:65:E1:2E:90:44:E1:B5:4A Authority key identifier: FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D Certificate issuer: /CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d Certificate serial: 019BF53DED576721061969A759B1B97EC006 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft Manifest number: 0E98 Signing time: Sun 25 Jan 2026 13:00:34 +0000 Manifest this update: Sun 25 Jan 2026 13:00:34 +0000 Manifest next update: Mon 26 Jan 2026 13:00:34 +0000 Files and hashes: 1: OMZJTfEMX_P-o40x7sNRJUiIL4c.roa (hash: +/OiISUXHSKCG7hFmdUA41onjdMcxoyC7Y6Vt6TTSZY=) 2: TcH4GIuktxSUfHtquYZnE0nBhtE.roa (hash: rpQl9MUfMf8qQcoJFxTK9nJpUXGjE7ncDisSQXNZN4E=) 3: _32KebrU-YPQxJiVr1DqigPrxw0.crl (hash: A/fdkn/GzrCdeL/BNF9USKMiu2+KDhmI5X/mS9spj4A=) 4: f-YXM7BH83V0kvUXvW2GIs5BDg0.roa (hash: AsELevMPRLK8TdZ3qZnEEYe0IBvxlKOGzstiZBn5CSk=) 5: nkfXYoc4Mcgj_WnSgw1MfRAkUv8.roa (hash: uTw63Gl3rRgs6l5JsMFtSBnpBCOYFjYiM97n8RknJaU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3d:ed:57:67:21:06:19:69:a7:59:b1:b9:7e:c0:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d Validity Not Before: Jan 25 13:00:34 2026 GMT Not After : Jan 26 13:00:34 2026 GMT Subject: CN=fc18a5fc0a4e160cd5a58d1865e12e9044e1b54a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:00:b4:01:a4:ed:bb:12:00:9b:0e:2f:3d:96: 45:f8:12:4f:34:d9:64:92:35:67:a2:2d:cc:45:ba: d6:48:c7:ab:33:ae:c0:fa:8a:2f:c3:52:76:c7:a9: 24:e2:77:d7:71:4b:b5:e9:e3:50:8c:c2:57:8c:f5: fb:08:a1:c7:29:fc:11:4b:b2:90:2f:b6:73:85:84: d1:ca:b7:15:72:36:37:f0:27:65:be:c6:ef:e3:4b: 7e:e8:fb:79:79:d6:78:91:c8:a9:6e:17:75:83:74: 35:60:3b:a3:90:ef:78:bd:c1:a4:3a:68:9d:d5:12: 7c:96:40:1c:63:49:03:cf:01:08:d1:6a:1a:f8:87: 63:d2:19:1d:f3:7b:63:77:5e:d6:8a:ed:84:07:79: 66:4f:65:4e:f1:f9:f2:93:39:6a:39:e5:16:10:4b: 7f:bb:8b:ec:d7:f3:c7:63:5e:0b:68:ac:06:56:11: 8b:22:e3:5e:bd:f5:5a:f4:be:f8:f7:37:ee:f9:4c: d6:cd:47:b4:b5:24:c4:af:2a:79:1a:ba:85:d1:ca: d6:0c:92:4b:81:47:1c:95:86:6f:5b:76:89:b8:08: 20:6e:b4:09:93:20:d5:8b:af:f8:be:92:75:d9:4c: e7:ac:41:1c:68:52:0e:53:7b:89:d3:04:d7:78:e5: 27:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:18:A5:FC:0A:4E:16:0C:D5:A5:8D:18:65:E1:2E:90:44:E1:B5:4A X509v3 Authority Key Identifier: keyid:FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:18:29:1c:3a:a9:5c:99:ff:d3:69:27:61:11:e2:3f:ed:ad: d3:7c:a1:92:c2:67:00:8c:ff:b7:38:27:2c:d2:5d:eb:b8:72: e7:5a:13:7a:ee:dd:13:8f:54:6b:e8:9b:ad:89:50:9e:11:2e: 3e:82:0c:77:8f:b3:73:f3:cf:ea:42:eb:75:e4:81:09:cf:09: c2:d0:8d:ce:2d:ba:48:ff:85:ba:dc:b3:74:c0:15:af:43:37: 19:b0:27:2a:c2:1b:69:69:5e:8d:1a:85:bb:05:33:48:74:6f: 3c:4c:95:9b:dc:e8:6a:f8:cf:41:1d:07:90:a1:21:41:56:dc: 53:d4:98:2f:c1:b5:00:fc:e9:89:97:13:1e:6c:52:17:34:49: 7e:2c:ff:7f:43:d3:ff:7b:99:1d:3f:18:dc:1b:c8:3d:1a:fa: 27:97:9c:28:35:82:4d:f5:8d:e7:88:c5:37:54:d5:d4:43:56: 99:dd:c3:2c:6a:d8:77:69:93:d3:fe:73:7b:6a:51:b2:a6:b6: 3f:6c:52:5d:c5:e5:df:6b:83:81:25:6f:a9:69:65:53:a5:b4: b1:f2:d9:4b:ca:ea:2b:4f:91:0a:4c:a8:1f:8a:ff:9a:6a:a4: 28:80:57:3b:d4:6e:23:43:05:60:e8:c4:5e:32:cd:be:ca:b1: 3e:84:0f:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1Pe1XZyEGGWmnWbG5fsAGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmN2Q4YTc5YmFkNGY5ODNkMGM0OTg5NWFmNTBlYThhMDNl YmM3MGQwHhcNMjYwMTI1MTMwMDM0WhcNMjYwMTI2MTMwMDM0WjAzMTEwLwYDVQQD EyhmYzE4YTVmYzBhNGUxNjBjZDVhNThkMTg2NWUxMmU5MDQ0ZTFiNTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gC0AaTtuxIAmw4vPZZF+BJPNNlk kjVnoi3MRbrWSMerM67A+oovw1J2x6kk4nfXcUu16eNQjMJXjPX7CKHHKfwRS7KQ L7ZzhYTRyrcVcjY38Cdlvsbv40t+6Pt5edZ4kcipbhd1g3Q1YDujkO94vcGkOmid 1RJ8lkAcY0kDzwEI0Woa+Idj0hkd83tjd17Wiu2EB3lmT2VO8fnykzlqOeUWEEt/ u4vs1/PHY14LaKwGVhGLIuNevfVa9L749zfu+UzWzUe0tSTEryp5GrqF0crWDJJL gUcclYZvW3aJuAggbrQJkyDVi6/4vpJ12UznrEEcaFIOU3uJ0wTXeOUnAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPwYpfwKThYM1aWNGGXhLpBE4bVKMB8GA1UdIwQY MBaAFP99inm61PmD0MSYla9Q6ooD68cNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzMyS2ViclUtWVBReEppVnIxRHFpZ1ByeHcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi80NDI0ZWYtNjhhYS00YjcwLWIyY2Mt MDg3M2UzOTk0ZDBlLzEvXzMyS2ViclUtWVBReEppVnIxRHFpZ1ByeHcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi80NDI0ZWYtNjhhYS00YjcwLWIyY2MtMDg3M2UzOTk0ZDBl LzEvXzMyS2ViclUtWVBReEppVnIxRHFpZ1ByeHcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYBgpHDqp XJn/02knYRHiP+2t03yhksJnAIz/tzgnLNJd67hy51oTeu7dE49Ua+ibrYlQnhEu PoIMd4+zc/PP6kLrdeSBCc8JwtCNzi26SP+FutyzdMAVr0M3GbAnKsIbaWlejRqF uwUzSHRvPEyVm9zoavjPQR0HkKEhQVbcU9SYL8G1APzpiZcTHmxSFzRJfiz/f0PT /3uZHT8Y3BvIPRr6J5ecKDWCTfWN54jFN1TV1ENWmd3DLGrYd2mT0/5ze2pRsqa2 P2xSXcXl32uDgSVvqWllU6W0sfLZS8rqK0+RCkyoH4r/mmqkKIBXO9RuI0MFYOjE XjLNvsqxPoQPmw== -----END CERTIFICATE-----Generated at Sun Jan 25 19:24:46 2026 by rpki-client