This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft File: FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft (raw, json) Hash identifier: ymKUqnPga/mNqiL/33SKczVZTJLIL+J0jkqdQnVJTUY= Subject key identifier: 7A:41:BB:62:65:AA:F2:64:6E:FF:D3:46:AF:34:59:46:C5:F2:F6:A0 Authority key identifier: 14:C6:6A:78:6E:6E:F3:16:74:BE:C6:83:3C:78:AE:BE:C1:63:39:72 Certificate issuer: /CN=14c66a786e6ef31674bec6833c78aebec1633972 Certificate serial: 019BF6BE70C78B535BCA6E2F8C5F3882DD53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft Manifest number: 17E7 Signing time: Sun 25 Jan 2026 20:00:34 +0000 Manifest this update: Sun 25 Jan 2026 20:00:34 +0000 Manifest next update: Mon 26 Jan 2026 20:00:34 +0000 Files and hashes: 1: FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl (hash: G6cRzdebxqzhDTBjmMl0haOzXVsP7EFHKgrorxYjBFo=) 2: lmzI8mKK7VNK4bS0BEeEZ9whyrI.roa (hash: V1SxHQwjwN4AmdXg8rhG9lnM2vuDDx2mOA2my+gG8OQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:70:c7:8b:53:5b:ca:6e:2f:8c:5f:38:82:dd:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14c66a786e6ef31674bec6833c78aebec1633972 Validity Not Before: Jan 25 20:00:34 2026 GMT Not After : Jan 26 20:00:34 2026 GMT Subject: CN=7a41bb6265aaf2646effd346af345946c5f2f6a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:97:40:28:52:ef:9a:46:d2:61:12:55:10:e9: 8c:77:dc:90:60:89:63:bd:0a:88:1a:fa:9e:61:97: 5f:30:70:ab:98:52:92:38:27:1b:84:08:7d:15:8c: d9:c4:fc:e8:ca:d2:93:7b:fc:5a:1a:46:3b:91:5e: 82:53:95:db:46:39:38:f8:fd:5c:8b:28:d1:63:5e: 69:3c:32:81:dc:03:b1:26:49:d5:c6:2b:c5:8e:41: df:72:e2:5a:b5:62:ff:be:3f:4c:12:20:70:eb:bb: 30:1a:3a:57:51:cc:48:30:51:cc:4c:b2:bf:85:cb: 19:7f:ee:97:bf:a3:7f:5b:3f:a3:ff:c9:4a:d3:93: 15:a7:09:91:63:5e:01:87:5b:43:b0:de:ce:7f:9b: 9a:4c:67:d9:fa:19:46:74:ba:ea:57:dc:ef:bb:2e: c4:a1:66:65:99:5a:7a:ba:ca:68:aa:31:75:ae:60: 3c:50:c1:e8:99:72:a7:81:71:47:55:55:60:3b:02: d7:b8:0a:3c:c0:07:59:74:f4:45:40:c8:77:6b:32: 6b:66:78:e7:f7:cb:67:84:23:11:3b:8c:ae:66:bd: e1:a8:22:9d:61:e1:1a:93:9c:19:26:90:80:4b:9a: 6e:16:38:9a:a2:95:ba:fe:6f:82:1e:e2:cb:47:fe: f1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:41:BB:62:65:AA:F2:64:6E:FF:D3:46:AF:34:59:46:C5:F2:F6:A0 X509v3 Authority Key Identifier: keyid:14:C6:6A:78:6E:6E:F3:16:74:BE:C6:83:3C:78:AE:BE:C1:63:39:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:a7:53:b6:3f:59:57:4b:3e:a7:d4:3a:c4:e3:e0:be:5b:c8: ac:c9:70:bd:3a:53:4a:22:06:8a:25:4c:ba:8f:63:d1:62:36: 38:48:5c:3e:31:4c:c1:33:b9:f7:cb:f1:a7:92:61:5a:3a:cf: 1f:e8:12:f0:77:ad:1e:55:5e:3d:c3:26:70:82:4d:39:e1:98: d2:52:50:01:22:a7:59:c5:d7:4a:95:eb:85:73:c9:2a:6b:7f: 71:ee:86:59:a5:39:a4:19:f4:de:9e:2a:9d:9b:ba:be:71:8b: e8:51:e1:57:49:c3:a4:d0:cd:82:5a:96:ed:f3:3b:30:cb:76: a0:6f:25:9e:f7:7a:a4:01:8e:e9:1d:27:1b:ea:5e:52:29:b4: b3:43:bf:95:49:12:7c:44:26:fa:67:4f:c1:41:7e:3d:9d:05: 3b:c6:00:3c:c1:9e:c1:9e:96:df:78:e8:c1:68:6c:be:2b:0e: 1a:94:8d:0b:5e:51:48:45:5f:87:cc:89:5d:32:32:7c:8c:db: d9:b5:89:2c:b8:b0:3e:55:d7:45:84:8e:72:a5:77:ae:12:b7: 9d:10:a3:d9:00:d8:b7:1a:c8:84:d8:4f:e5:b6:a5:f6:ae:1e: 25:87:20:9f:53:07:ea:0b:f0:7c:0f:08:33:6e:15:8c:0d:6d: 26:80:12:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vnDHi1Nbym4vjF84gt1TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YzY2YTc4NmU2ZWYzMTY3NGJlYzY4MzNjNzhhZWJlYzE2 MzM5NzIwHhcNMjYwMTI1MjAwMDM0WhcNMjYwMTI2MjAwMDM0WjAzMTEwLwYDVQQD Eyg3YTQxYmI2MjY1YWFmMjY0NmVmZmQzNDZhZjM0NTk0NmM1ZjJmNmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpdAKFLvmkbSYRJVEOmMd9yQYIlj vQqIGvqeYZdfMHCrmFKSOCcbhAh9FYzZxPzoytKTe/xaGkY7kV6CU5XbRjk4+P1c iyjRY15pPDKB3AOxJknVxivFjkHfcuJatWL/vj9MEiBw67swGjpXUcxIMFHMTLK/ hcsZf+6Xv6N/Wz+j/8lK05MVpwmRY14Bh1tDsN7Of5uaTGfZ+hlGdLrqV9zvuy7E oWZlmVp6uspoqjF1rmA8UMHomXKngXFHVVVgOwLXuAo8wAdZdPRFQMh3azJrZnjn 98tnhCMRO4yuZr3hqCKdYeEak5wZJpCAS5puFjiaopW6/m+CHuLLR/7x5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHpBu2JlqvJkbv/TRq80WUbF8vagMB8GA1UdIwQY MBaAFBTGanhubvMWdL7Ggzx4rr7BYzlyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRk1acWVHNXU4eFowdnNhRFBIaXV2c0ZqT1hJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9hMTZjNGUtYjVhZC00N2Q3LThiNWIt MzllNzZkYjJmODA4LzEvRk1acWVHNXU4eFowdnNhRFBIaXV2c0ZqT1hJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9hMTZjNGUtYjVhZC00N2Q3LThiNWItMzllNzZkYjJmODA4 LzEvRk1acWVHNXU4eFowdnNhRFBIaXV2c0ZqT1hJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB6dTtj9Z V0s+p9Q6xOPgvlvIrMlwvTpTSiIGiiVMuo9j0WI2OEhcPjFMwTO598vxp5JhWjrP H+gS8HetHlVePcMmcIJNOeGY0lJQASKnWcXXSpXrhXPJKmt/ce6GWaU5pBn03p4q nZu6vnGL6FHhV0nDpNDNglqW7fM7MMt2oG8lnvd6pAGO6R0nG+peUim0s0O/lUkS fEQm+mdPwUF+PZ0FO8YAPMGewZ6W33jowWhsvisOGpSNC15RSEVfh8yJXTIyfIzb 2bWJLLiwPlXXRYSOcqV3rhK3nRCj2QDYtxrIhNhP5bal9q4eJYcgn1MH6gvwfA8I M24VjA1tJoASMA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:08:38 2026 by rpki-client