This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft File: FIa0oIrOYOZw7c2J-tslQBFWL1M.mft (raw, json) Hash identifier: UzypwefHO4z8c0+mh89CEeH7uVzIS4T8qE2tBzwilh8= Subject key identifier: 0D:8B:7B:F7:3E:27:79:07:1C:3A:2E:76:12:46:6D:28:3C:94:B5:11 Authority key identifier: 14:86:B4:A0:8A:CE:60:E6:70:ED:CD:89:FA:DB:25:40:11:56:2F:53 Certificate issuer: /CN=1486b4a08ace60e670edcd89fadb254011562f53 Certificate serial: 019BF6BF3FBAA31E5A951704B4237A21B2CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft Manifest number: 0678 Signing time: Sun 25 Jan 2026 20:01:27 +0000 Manifest this update: Sun 25 Jan 2026 20:01:27 +0000 Manifest next update: Mon 26 Jan 2026 20:01:27 +0000 Files and hashes: 1: F79BFzYAIPfw1eLFSox-1us1fgY.roa (hash: s5iDlh7My+Xt6LXot7o7pK46v+NmJUoCkuMmTCQ3Xe8=) 2: FIa0oIrOYOZw7c2J-tslQBFWL1M.crl (hash: ECjMHdFC8EsV+dedD/siLStEV8mqlp3ctO0HWwMN9kg=) 3: Xm7CSatgWoiFWFoLjdzPyqLwt4Y.roa (hash: ljTW1e8jbhPOBJuEbeNSNc8GJIV6MJTPAjrHkhEAZP8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.crl rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:3f:ba:a3:1e:5a:95:17:04:b4:23:7a:21:b2:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1486b4a08ace60e670edcd89fadb254011562f53 Validity Not Before: Jan 25 20:01:27 2026 GMT Not After : Jan 26 20:01:27 2026 GMT Subject: CN=0d8b7bf73e2779071c3a2e7612466d283c94b511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:46:bc:fd:e6:9a:f1:d5:32:b3:63:ae:fe:30: 8c:d5:0a:7f:d0:bc:50:e4:51:5c:c9:b9:7c:71:84: d4:e4:82:a4:b1:10:4e:fb:f0:aa:fe:be:2f:13:cf: 41:d9:66:a5:ec:90:93:bf:ab:1d:bc:fb:1a:47:03: 3f:03:44:ac:3f:56:b8:30:2f:42:95:0c:3c:4c:33: 90:7e:b8:46:dd:69:33:9d:f8:fa:c7:e5:ef:23:11: 61:f0:aa:a7:83:59:0e:76:91:f9:0e:36:d5:83:05: 49:59:5d:85:bd:b0:20:73:33:1d:18:1b:9f:70:3f: fa:a0:36:6d:b0:43:0b:5b:93:98:fc:47:5f:fc:80: 47:b6:ca:d8:f9:e9:26:97:a5:dd:57:07:55:ea:9d: 0e:ae:26:cc:ad:7f:66:41:75:fb:af:7c:18:c6:13: e5:94:7a:ec:51:0f:0e:33:3b:23:a1:d8:9b:55:01: 91:6f:26:8e:05:8a:1b:82:e4:3e:ed:e4:b9:e2:94: 43:13:fa:04:63:25:4d:84:ff:aa:6b:df:f8:63:c1: ce:5b:07:ff:94:44:a0:5c:e1:97:01:61:7a:24:92: 08:6c:35:8c:1b:ff:fe:4f:64:8c:fe:37:c0:14:5e: aa:44:80:a8:38:72:30:c1:27:26:e3:8b:17:47:79: 94:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:8B:7B:F7:3E:27:79:07:1C:3A:2E:76:12:46:6D:28:3C:94:B5:11 X509v3 Authority Key Identifier: keyid:14:86:B4:A0:8A:CE:60:E6:70:ED:CD:89:FA:DB:25:40:11:56:2F:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:27:f8:15:26:26:b0:88:ce:45:e5:cc:a6:dc:7e:4b:f1:b7: b6:70:81:19:3c:e6:bf:49:45:c3:08:05:c5:fc:85:68:1d:21: 92:ad:ab:d4:b4:15:3e:75:93:b6:d2:46:fd:c8:81:55:2f:0c: 78:69:18:66:c0:27:48:fb:99:22:22:70:5f:8d:41:b9:da:83: 4c:e7:a1:de:47:6c:0d:27:2d:6c:7e:fc:5d:a9:a2:0f:bd:ee: de:8a:d2:b3:0f:af:85:6b:08:f1:33:bc:51:27:83:b1:02:2c: 7d:55:44:59:e4:87:9b:0c:e8:b0:14:dd:58:d7:73:5a:df:94: 2e:06:82:29:54:fa:d5:04:d1:c7:9c:0c:e1:41:72:3b:62:59: 46:a2:3d:5a:2b:cc:d8:d0:e9:ce:27:71:51:30:71:27:b3:68: 41:f9:01:38:57:df:3e:4b:98:fd:4c:3f:49:66:58:27:bc:d8: 0e:d9:6e:01:4d:f2:2b:dc:e4:25:52:d4:00:4a:30:70:b9:f8: d0:f7:65:6a:2d:42:2d:51:62:72:5e:e5:91:56:20:62:4f:36: aa:c7:e5:2c:13:4a:c4:a7:30:18:08:88:e2:67:79:b7:ea:e5: 69:08:c9:66:e1:62:0d:10:df:67:9e:4a:9a:7f:40:c8:9c:4a: 50:87:e1:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vz+6ox5alRcEtCN6IbLOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0ODZiNGEwOGFjZTYwZTY3MGVkY2Q4OWZhZGIyNTQwMTE1 NjJmNTMwHhcNMjYwMTI1MjAwMTI3WhcNMjYwMTI2MjAwMTI3WjAzMTEwLwYDVQQD EygwZDhiN2JmNzNlMjc3OTA3MWMzYTJlNzYxMjQ2NmQyODNjOTRiNTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUa8/eaa8dUys2Ou/jCM1Qp/0LxQ 5FFcybl8cYTU5IKksRBO+/Cq/r4vE89B2Wal7JCTv6sdvPsaRwM/A0SsP1a4MC9C lQw8TDOQfrhG3Wkznfj6x+XvIxFh8Kqng1kOdpH5DjbVgwVJWV2FvbAgczMdGBuf cD/6oDZtsEMLW5OY/Edf/IBHtsrY+ekml6XdVwdV6p0OribMrX9mQXX7r3wYxhPl lHrsUQ8OMzsjodibVQGRbyaOBYobguQ+7eS54pRDE/oEYyVNhP+qa9/4Y8HOWwf/ lESgXOGXAWF6JJIIbDWMG//+T2SM/jfAFF6qRICoOHIwwScm44sXR3mU/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA2Le/c+J3kHHDoudhJGbSg8lLURMB8GA1UdIwQY MBaAFBSGtKCKzmDmcO3NifrbJUARVi9TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRklhMG9Jck9ZT1p3N2MySi10c2xRQkZXTDFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iYjkxODItY2Q3Ny00ZGQwLWJmMTUt ZTgxODdmMzQ0YzgwLzEvRklhMG9Jck9ZT1p3N2MySi10c2xRQkZXTDFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9iYjkxODItY2Q3Ny00ZGQwLWJmMTUtZTgxODdmMzQ0Yzgw LzEvRklhMG9Jck9ZT1p3N2MySi10c2xRQkZXTDFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiif4FSYm sIjOReXMptx+S/G3tnCBGTzmv0lFwwgFxfyFaB0hkq2r1LQVPnWTttJG/ciBVS8M eGkYZsAnSPuZIiJwX41BudqDTOeh3kdsDSctbH78XamiD73u3orSsw+vhWsI8TO8 USeDsQIsfVVEWeSHmwzosBTdWNdzWt+ULgaCKVT61QTRx5wM4UFyO2JZRqI9WivM 2NDpzidxUTBxJ7NoQfkBOFffPkuY/Uw/SWZYJ7zYDtluAU3yK9zkJVLUAEowcLn4 0Pdlai1CLVFicl7lkVYgYk82qsflLBNKxKcwGAiI4md5t+rlaQjJZuFiDRDfZ55K mn9AyJxKUIfhVw== -----END CERTIFICATE-----Generated at Mon Jan 26 02:15:11 2026 by rpki-client