This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.mft File: Fxv91C-pSE9W4Ym6aD1RiMUkCDs.mft (raw, json) Hash identifier: F9U1PfUoDeq/rGpNSXOs2uPnnO2Qr2EyKqvFXSC8UkA= Subject key identifier: 3C:C4:2A:32:24:B6:0D:1A:51:F3:1E:53:3D:B4:AE:EF:7B:A0:60:8B Authority key identifier: 17:1B:FD:D4:2F:A9:48:4F:56:E1:89:BA:68:3D:51:88:C5:24:08:3B Certificate issuer: /CN=171bfdd42fa9484f56e189ba683d5188c524083b Certificate serial: 019BF72D1752E9B909A087B51C537AA9224F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.mft Manifest number: 0250 Signing time: Sun 25 Jan 2026 22:01:25 +0000 Manifest this update: Sun 25 Jan 2026 22:01:25 +0000 Manifest next update: Mon 26 Jan 2026 22:01:25 +0000 Files and hashes: 1: Fxv91C-pSE9W4Ym6aD1RiMUkCDs.crl (hash: wgMQgzD2bo9M/Ltm82GHp5YfHFM7vmxS9k98hPt2FnM=) 2: Juzj2uWFNNcGNxZgq6Ns5mV8eN0.roa (hash: 43m9udxpd/q88DzOc722p98By6DFIuMj99m1Ii2HfgU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.crl rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.mft rsync://rpki.ripe.net/repository/DEFAULT/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:17:52:e9:b9:09:a0:87:b5:1c:53:7a:a9:22:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=171bfdd42fa9484f56e189ba683d5188c524083b Validity Not Before: Jan 25 22:01:25 2026 GMT Not After : Jan 26 22:01:25 2026 GMT Subject: CN=3cc42a3224b60d1a51f31e533db4aeef7ba0608b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:01:5d:aa:65:69:cd:f3:03:64:99:42:c7:0e: c6:c8:ef:79:f7:f2:ff:00:a7:d6:3f:7b:da:e7:5c: 96:bd:02:62:cc:35:f5:22:77:57:57:fa:4e:15:2a: 7e:8f:a9:85:f1:d4:fe:ff:d8:42:eb:a2:97:36:20: 38:f0:94:ad:95:56:63:6e:e1:30:84:85:ad:f4:da: 2f:88:63:5e:a6:90:1c:9c:b8:ec:f8:c0:f4:ca:23: db:12:43:fe:fc:c7:d9:62:e5:5b:d8:d7:74:a6:bf: 77:68:8f:bd:73:20:94:20:c6:26:8c:4f:7a:3d:35: ff:ed:6a:27:92:c7:e4:59:79:14:fb:ce:13:af:16: 1c:ea:e1:50:a5:f4:71:e9:92:d8:20:ad:fd:73:82: 22:8c:df:6f:b2:27:d9:d2:25:cf:c0:98:e0:75:06: a1:b5:76:38:15:04:87:06:e5:ad:e0:b7:c6:1a:9e: 62:fd:fd:19:98:d0:4b:06:6a:69:f2:96:f0:ba:31: 93:a9:f9:89:63:f3:d7:d7:43:5e:48:1b:5c:64:99: c5:9c:d9:d5:a1:15:f1:4f:80:a4:44:c4:61:b3:a7: 16:b8:00:1f:a6:a1:9c:9d:48:8a:bf:80:51:c3:07: 6a:8c:67:66:f8:59:e9:9e:53:17:e0:ff:90:f6:0c: f1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C4:2A:32:24:B6:0D:1A:51:F3:1E:53:3D:B4:AE:EF:7B:A0:60:8B X509v3 Authority Key Identifier: keyid:17:1B:FD:D4:2F:A9:48:4F:56:E1:89:BA:68:3D:51:88:C5:24:08:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:b1:e8:01:b4:85:fa:e8:7d:56:19:d8:c2:e2:16:e9:0f:93: 85:a4:7a:73:c9:ad:12:85:5b:fe:59:65:a4:c9:8c:c5:4e:ad: e0:b6:3c:63:59:56:c1:60:ad:6a:07:64:74:7b:e2:6c:62:46: 28:1c:3c:94:5f:d8:f8:9d:32:6f:83:b3:c2:63:52:c3:6e:27: d4:ad:ed:eb:df:0f:8a:01:e1:ec:c1:2e:5b:95:8b:35:64:4e: c7:e2:7a:f3:0f:05:e0:5e:cd:9f:4e:ae:de:a4:a7:fe:cf:b3: 51:a4:12:a9:89:35:15:0c:97:a7:ca:e1:79:a5:97:b2:71:8c: 10:3a:12:59:70:e6:c9:49:c8:94:c7:31:93:64:2b:40:25:db: 8d:bb:fb:f2:54:91:52:2d:6b:7c:ef:08:85:a2:5b:5a:9d:db: 56:cf:7c:eb:d3:a3:cc:52:1d:b2:69:70:5a:ed:8b:74:4c:a7: 38:0c:fb:80:b5:93:55:65:9f:c2:bb:77:4b:8d:fb:b9:88:82: 92:11:48:d7:15:da:ce:78:c7:dc:1d:20:b0:9f:d6:35:17:73: a1:c8:dd:bc:5e:37:c6:d6:ac:d2:2a:2d:4d:3e:ad:a5:65:00: 19:67:b0:89:5d:d4:2a:02:00:bb:56:91:cb:0b:20:9f:3e:f9: ed:21:96:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LRdS6bkJoIe1HFN6qSJPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MWJmZGQ0MmZhOTQ4NGY1NmUxODliYTY4M2Q1MTg4YzUy NDA4M2IwHhcNMjYwMTI1MjIwMTI1WhcNMjYwMTI2MjIwMTI1WjAzMTEwLwYDVQQD EygzY2M0MmEzMjI0YjYwZDFhNTFmMzFlNTMzZGI0YWVlZjdiYTA2MDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAFdqmVpzfMDZJlCxw7GyO959/L/ AKfWP3va51yWvQJizDX1IndXV/pOFSp+j6mF8dT+/9hC66KXNiA48JStlVZjbuEw hIWt9NoviGNeppAcnLjs+MD0yiPbEkP+/MfZYuVb2Nd0pr93aI+9cyCUIMYmjE96 PTX/7WonksfkWXkU+84TrxYc6uFQpfRx6ZLYIK39c4IijN9vsifZ0iXPwJjgdQah tXY4FQSHBuWt4LfGGp5i/f0ZmNBLBmpp8pbwujGTqfmJY/PX10NeSBtcZJnFnNnV oRXxT4CkRMRhs6cWuAAfpqGcnUiKv4BRwwdqjGdm+FnpnlMX4P+Q9gzxjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDzEKjIktg0aUfMeUz20ru97oGCLMB8GA1UdIwQY MBaAFBcb/dQvqUhPVuGJumg9UYjFJAg7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnh2OTFDLXBTRTlXNFltNmFEMVJpTVVrQ0RzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9mZTRlZDMtMDM2Yi00ZjJhLWE5Y2Yt YjRkOTY0Nzc2Yzg1LzEvRnh2OTFDLXBTRTlXNFltNmFEMVJpTVVrQ0RzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9mZTRlZDMtMDM2Yi00ZjJhLWE5Y2YtYjRkOTY0Nzc2Yzg1 LzEvRnh2OTFDLXBTRTlXNFltNmFEMVJpTVVrQ0RzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAerHoAbSF +uh9VhnYwuIW6Q+ThaR6c8mtEoVb/lllpMmMxU6t4LY8Y1lWwWCtagdkdHvibGJG KBw8lF/Y+J0yb4OzwmNSw24n1K3t698PigHh7MEuW5WLNWROx+J68w8F4F7Nn06u 3qSn/s+zUaQSqYk1FQyXp8rheaWXsnGMEDoSWXDmyUnIlMcxk2QrQCXbjbv78lSR Ui1rfO8IhaJbWp3bVs9869OjzFIdsmlwWu2LdEynOAz7gLWTVWWfwrt3S437uYiC khFI1xXaznjH3B0gsJ/WNRdzocjdvF43xtas0iotTT6tpWUAGWewiV3UKgIAu1aR ywsgnz757SGWkA== -----END CERTIFICATE-----Generated at Mon Jan 26 02:15:16 2026 by rpki-client