This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.mft File: 1-FVaeIP5K5-bpCKpa045e_X7j8c.mft (raw, json) Hash identifier: rxDw7W2Uz46liHYN6zztR/ee3pzz1/kLBfZZjfiGafo= Subject key identifier: 43:1F:76:10:0A:F0:7E:9A:65:5E:0E:52:B4:E6:05:16:EB:59:9C:71 Authority key identifier: F8:55:5A:78:83:F9:2B:9F:9B:A4:22:A9:6B:4E:39:7B:F5:FB:8F:C7 Certificate issuer: /CN=f8555a7883f92b9f9ba422a96b4e397bf5fb8fc7 Certificate serial: 019BF5077A3CAA9348538EB1ABC5D02958CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.mft Manifest number: 10FC Signing time: Sun 25 Jan 2026 12:01:06 +0000 Manifest this update: Sun 25 Jan 2026 12:01:06 +0000 Manifest next update: Mon 26 Jan 2026 12:01:06 +0000 Files and hashes: 1: 1-FVaeIP5K5-bpCKpa045e_X7j8c.crl (hash: 8HVcVKMap5tMi9uEzIGYQSQIb7bA7wKFS9t17vR7jRc=) 2: KO-QbiA4B8Fqmh4PoUG1b2CWqyo.roa (hash: AQjqAS5i/LVUFXeGIyKdhva6id7Kjy8HsHgnyuWVcqc=) 3: LBp-f2wTeEG__GeuFL9S2VPjFS4.roa (hash: jbigl4wtO4I3oLlMsdwWFhj1QBqpQaBQsh/wEl6VUQo=) 4: T7-uQqlLNMsiccxdjsoaTK4wseo.roa (hash: +BKfpUhxoHfLf7cPj1R21xoP1tto5+gxC04QZRCZI6c=) 5: ap691plquRdyX3vt85LxuWpbm1c.roa (hash: khufkxMKrWAd/D05QdS5OQV/ljvmohRpPsDkx0sZzKs=) 6: eWAGfLfEp43y_iN-RtSZfG1D49U.roa (hash: POgI5hw92swzuRADnz2nsMp43qgG4i2QfhiIQqJZJqs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.mft rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:7a:3c:aa:93:48:53:8e:b1:ab:c5:d0:29:58:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8555a7883f92b9f9ba422a96b4e397bf5fb8fc7 Validity Not Before: Jan 25 12:01:06 2026 GMT Not After : Jan 26 12:01:06 2026 GMT Subject: CN=431f76100af07e9a655e0e52b4e60516eb599c71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5d:3d:b7:0a:05:bb:15:8a:9c:34:c0:89:60: 73:9d:97:bb:73:98:96:dc:76:f8:ee:79:55:23:10: 29:97:76:92:8a:2e:ae:56:ae:96:ff:98:68:40:61: e2:2e:0b:ba:f1:94:61:b9:1b:82:6d:39:4e:58:1b: 98:97:2b:8f:e1:81:81:e6:49:d8:0d:64:16:97:50: e8:0b:79:f9:5b:46:64:37:ab:6a:5f:6d:04:ce:84: 0a:8b:df:c6:12:e5:b1:78:34:06:25:88:37:7c:74: 61:f8:cc:16:07:8a:35:35:7b:30:b3:01:a7:65:08: 10:0a:ac:7b:29:57:b6:22:11:e9:e5:b0:7b:42:5c: 7d:e5:fe:99:66:8b:3b:aa:b0:56:34:0e:bc:43:4a: 4a:96:f9:bd:31:37:62:25:04:e4:c4:70:4f:2b:77: 67:7a:88:1a:ed:b5:63:7f:d2:65:db:1d:eb:f9:0b: 53:36:8e:12:56:39:62:65:92:9f:91:36:dd:d1:85: 08:df:1d:e7:4e:aa:42:e9:8d:6f:0a:cc:e0:0d:6c: 3d:d7:12:d1:56:8d:28:72:42:01:d2:0e:a7:8b:52: bf:08:60:61:76:fa:8d:a2:00:4c:6d:89:9a:fa:63: 24:17:44:c7:e0:1d:b1:b3:1c:61:6a:c6:ec:5b:b8: e7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:1F:76:10:0A:F0:7E:9A:65:5E:0E:52:B4:E6:05:16:EB:59:9C:71 X509v3 Authority Key Identifier: keyid:F8:55:5A:78:83:F9:2B:9F:9B:A4:22:A9:6B:4E:39:7B:F5:FB:8F:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:3a:b9:07:eb:b0:d8:47:50:ca:73:0f:7e:cc:81:ab:74:95: 9b:b4:8a:06:bc:1a:6c:9c:b2:01:15:e1:a2:6a:5b:da:42:94: 1d:e4:44:b4:04:62:67:5c:46:5c:d3:36:ee:ae:ca:cc:7e:34: e0:80:d9:f6:af:bb:de:d7:13:fb:eb:36:95:de:af:00:3b:2a: b8:3a:21:7f:0d:b8:b6:3e:eb:1e:0d:0d:98:eb:dd:f3:28:bd: f1:a6:41:45:8a:20:41:ce:99:46:21:ff:35:b3:34:8a:d9:70: 4a:f7:66:2a:87:ef:e5:27:53:e7:97:6d:ee:92:bc:88:45:11: c4:6a:37:24:fb:4c:e9:81:6f:d5:c8:77:ea:81:fc:aa:17:5c: e4:d2:ff:d6:34:59:b8:9a:47:83:10:a8:9e:4b:cd:a4:5b:59: 0d:48:0d:1f:ce:94:f9:08:b6:51:8e:3f:ad:5c:c3:b9:62:65: c0:38:40:f0:40:12:4e:14:08:8e:ca:bb:ca:f7:2c:72:6f:d0: 41:0f:dc:5b:ea:49:49:4a:b7:5c:2e:34:a2:f9:17:f2:41:85: eb:20:ab:ad:7a:3d:9b:ec:f9:32:51:76:3c:05:77:3b:16:c2: 1b:9c:a4:a0:1c:81:c0:de:51:c0:2d:01:25:28:6e:f1:6b:20: f9:58:fc:4a -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZv1B3o8qpNIU46xq8XQKVjOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NTU1YTc4ODNmOTJiOWY5YmE0MjJhOTZiNGUzOTdiZjVm YjhmYzcwHhcNMjYwMTI1MTIwMTA2WhcNMjYwMTI2MTIwMTA2WjAzMTEwLwYDVQQD Eyg0MzFmNzYxMDBhZjA3ZTlhNjU1ZTBlNTJiNGU2MDUxNmViNTk5YzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApl09twoFuxWKnDTAiWBznZe7c5iW 3Hb47nlVIxApl3aSii6uVq6W/5hoQGHiLgu68ZRhuRuCbTlOWBuYlyuP4YGB5knY DWQWl1DoC3n5W0ZkN6tqX20EzoQKi9/GEuWxeDQGJYg3fHRh+MwWB4o1NXswswGn ZQgQCqx7KVe2IhHp5bB7Qlx95f6ZZos7qrBWNA68Q0pKlvm9MTdiJQTkxHBPK3dn eoga7bVjf9Jl2x3r+QtTNo4SVjliZZKfkTbd0YUI3x3nTqpC6Y1vCszgDWw91xLR Vo0ockIB0g6ni1K/CGBhdvqNogBMbYma+mMkF0TH4B2xsxxhasbsW7jnPQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFEMfdhAK8H6aZV4OUrTmBRbrWZxxMB8GA1UdIwQY MBaAFPhVWniD+Sufm6QiqWtOOXv1+4/HMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1GVmFlSVA1SzUtYnBDS3BhMDQ1ZV9YN2o4Yy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2IvODI0NDVmLWQxZDctNDZiMC1hZjRm LTc2NmMwNmU1ZjA3NS8xLzEtRlZhZUlQNUs1LWJwQ0twYTA0NWVfWDdqOGMubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzNiLzgyNDQ1Zi1kMWQ3LTQ2YjAtYWY0Zi03NjZjMDZlNWYw NzUvMS8xLUZWYWVJUDVLNS1icENLcGEwNDVlX1g3ajhjLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApzq5 B+uw2EdQynMPfsyBq3SVm7SKBrwabJyyARXhompb2kKUHeREtARiZ1xGXNM27q7K zH404IDZ9q+73tcT++s2ld6vADsquDohfw24tj7rHg0NmOvd8yi98aZBRYogQc6Z RiH/NbM0itlwSvdmKofv5SdT55dt7pK8iEURxGo3JPtM6YFv1ch36oH8qhdc5NL/ 1jRZuJpHgxConkvNpFtZDUgNH86U+Qi2UY4/rVzDuWJlwDhA8EASThQIjsq7yvcs cm/QQQ/cW+pJSUq3XC40ovkX8kGF6yCrrXo9m+z5MlF2PAV3OxbCG5ykoByBwN5R wC0BJShu8Wsg+Vj8Sg== -----END CERTIFICATE-----Generated at Sun Jan 25 16:46:07 2026 by rpki-client