This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft File: fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft (raw, json) Hash identifier: ZKueep0wHP9pKbQvynhZ6AtKJQmp/K00J0ODQXDkP1A= Subject key identifier: 75:7A:49:F8:9A:FE:36:C2:54:AC:E2:35:FD:05:59:4F:84:5B:F6:A0 Authority key identifier: 7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A Certificate issuer: /CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a Certificate serial: 019BF5752844BD28102AF5EBCCCDBC2EFAD5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft Manifest number: 17E5 Signing time: Sun 25 Jan 2026 14:00:54 +0000 Manifest this update: Sun 25 Jan 2026 14:00:54 +0000 Manifest next update: Mon 26 Jan 2026 14:00:54 +0000 Files and hashes: 1: OYXBnR_i_32vVbXh0HFOhPBkIao.roa (hash: uFNMDyNJ2OVPR9PkOadpZs87yuOZdywd47eCM9lTesc=) 2: fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl (hash: pXNwJKgimn1M9i6TA93lbHZA0aXmWlitnlNMQ7il4hk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:28:44:bd:28:10:2a:f5:eb:cc:cd:bc:2e:fa:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a Validity Not Before: Jan 25 14:00:54 2026 GMT Not After : Jan 26 14:00:54 2026 GMT Subject: CN=757a49f89afe36c254ace235fd05594f845bf6a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0c:d6:b7:68:d4:3c:1a:82:b0:78:60:c4:26: be:fd:b4:4b:96:17:bf:5e:7d:70:f8:43:2e:60:6f: 8b:32:19:37:13:05:7b:cc:6c:9d:15:66:79:a3:79: 8c:43:73:2c:03:d8:21:e0:20:68:c5:13:e2:b4:cd: 85:1b:e8:af:59:b1:fd:37:09:58:b8:3f:34:75:61: 24:ba:ad:ff:d7:c8:a4:85:4a:56:86:2b:74:18:d2: 5c:b5:a5:43:0b:2a:74:ec:29:33:36:da:4b:3b:3a: 08:9d:43:c8:01:83:9b:95:18:b7:2d:0f:66:91:bb: 6b:e7:2b:02:a2:55:11:9f:0e:42:dc:6f:ab:91:ba: 21:16:de:0e:6f:56:21:9d:7f:e7:b7:c5:20:98:81: 91:7d:bd:1b:02:7f:f0:c3:d2:04:8e:70:02:63:fc: 61:9b:27:9f:83:ba:b2:09:d8:ec:7f:21:d2:ac:2d: 73:37:c1:17:7d:e0:41:ed:88:8c:ff:35:06:1b:d3: 1b:eb:69:5d:f8:9a:f7:62:28:f2:ea:93:ed:0f:b8: 57:b8:f1:ca:18:cb:18:8e:71:e7:bc:44:9d:d6:26: fa:e6:83:bd:a1:7e:51:36:1d:61:ad:dd:44:ff:b3: 0b:ca:5d:4a:1f:cf:a5:65:72:a4:90:84:59:f1:83: 49:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:7A:49:F8:9A:FE:36:C2:54:AC:E2:35:FD:05:59:4F:84:5B:F6:A0 X509v3 Authority Key Identifier: keyid:7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:b4:08:ab:af:b8:94:d6:31:f7:6c:6f:73:f0:e5:7f:0d:d5: 77:db:7e:bb:f4:1d:1a:75:6e:43:64:f6:d7:16:2d:d1:4d:27: 84:f8:88:53:4e:7e:e5:27:c1:42:4a:40:b4:61:b7:1f:1e:02: 20:72:8e:78:a6:fd:2a:31:de:be:33:15:00:4c:c4:f7:e8:cf: 8d:5e:3b:ce:23:e1:df:a0:de:21:d0:e7:18:fb:0d:ee:19:35: ea:4c:b9:47:7f:9a:b4:c8:30:bd:4a:18:08:ef:d7:33:ec:55: 43:e1:f3:b2:a4:e1:56:5d:65:19:e3:a0:d6:1d:57:9b:aa:be: 1d:66:d9:e7:53:21:88:e9:ae:e0:d3:0c:57:95:b7:bb:18:4a: 9f:0e:58:78:89:22:b8:01:0c:99:40:09:fb:6a:b6:e0:33:ac: 70:89:09:fa:52:f9:f9:c9:a4:6d:96:1a:31:06:9c:17:85:0d: 52:75:d0:33:3b:ec:4f:91:16:65:e5:c6:07:6e:70:86:12:e8: 28:1f:58:84:87:2a:6b:40:d4:be:eb:cd:12:c7:63:ad:74:41: f4:66:f0:b6:1b:f5:f5:ca:fb:c2:6c:d8:5a:24:c8:42:01:cb: ea:d5:d4:4b:2e:a8:a7:d5:54:83:d9:3a:2a:f1:28:ea:b4:ef: 90:b0:8d:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dShEvSgQKvXrzM28LvrVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmMWQ1OGQ2MmRkZDdlNDdhZjIxOTZmZDc1NGJiM2ZmMjY3 OTg5MmEwHhcNMjYwMTI1MTQwMDU0WhcNMjYwMTI2MTQwMDU0WjAzMTEwLwYDVQQD Eyg3NTdhNDlmODlhZmUzNmMyNTRhY2UyMzVmZDA1NTk0Zjg0NWJmNmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngzWt2jUPBqCsHhgxCa+/bRLlhe/ Xn1w+EMuYG+LMhk3EwV7zGydFWZ5o3mMQ3MsA9gh4CBoxRPitM2FG+ivWbH9NwlY uD80dWEkuq3/18ikhUpWhit0GNJctaVDCyp07CkzNtpLOzoInUPIAYOblRi3LQ9m kbtr5ysColURnw5C3G+rkbohFt4Ob1YhnX/nt8UgmIGRfb0bAn/ww9IEjnACY/xh myefg7qyCdjsfyHSrC1zN8EXfeBB7YiM/zUGG9Mb62ld+Jr3Yijy6pPtD7hXuPHK GMsYjnHnvESd1ib65oO9oX5RNh1hrd1E/7MLyl1KH8+lZXKkkIRZ8YNJ9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHV6Sfia/jbCVKziNf0FWU+EW/agMB8GA1UdIwQY MBaAFH8dWNYt3X5HryGW/XVLs/8meYkqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZngxWTFpM2Rma2V2SVpiOWRVdXpfeVo1aVNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8yOTBhNjAtNzkyZi00NDc1LWE5ZjQt ZTNiOWUwYmFlNmFiLzEvZngxWTFpM2Rma2V2SVpiOWRVdXpfeVo1aVNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8yOTBhNjAtNzkyZi00NDc1LWE5ZjQtZTNiOWUwYmFlNmFi LzEvZngxWTFpM2Rma2V2SVpiOWRVdXpfeVo1aVNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbbQIq6+4 lNYx92xvc/Dlfw3Vd9t+u/QdGnVuQ2T21xYt0U0nhPiIU05+5SfBQkpAtGG3Hx4C IHKOeKb9KjHevjMVAEzE9+jPjV47ziPh36DeIdDnGPsN7hk16ky5R3+atMgwvUoY CO/XM+xVQ+HzsqThVl1lGeOg1h1Xm6q+HWbZ51MhiOmu4NMMV5W3uxhKnw5YeIki uAEMmUAJ+2q24DOscIkJ+lL5+cmkbZYaMQacF4UNUnXQMzvsT5EWZeXGB25whhLo KB9YhIcqa0DUvuvNEsdjrXRB9Gbwthv19cr7wmzYWiTIQgHL6tXUSy6op9VUg9k6 KvEo6rTvkLCNRg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:52:42 2026 by rpki-client