This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft File: fGc9qtbZMX8BAdQaBCph5XaJRTo.mft (raw, json) Hash identifier: PD2s0PvHCI/9bfAb8BfbJcdgpwakXe53xAuF2sUz9KI= Subject key identifier: 72:AC:5B:6C:58:F7:4D:58:FF:2F:D4:8E:CD:B6:A3:E4:E5:FA:BF:D6 Authority key identifier: 7C:67:3D:AA:D6:D9:31:7F:01:01:D4:1A:04:2A:61:E5:76:89:45:3A Certificate issuer: /CN=7c673daad6d9317f0101d41a042a61e57689453a Certificate serial: 019BF318FF6D45C8CA272B11901F040B9951 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGc9qtbZMX8BAdQaBCph5XaJRTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft Manifest number: 1248 Signing time: Sun 25 Jan 2026 03:01:00 +0000 Manifest this update: Sun 25 Jan 2026 03:01:00 +0000 Manifest next update: Mon 26 Jan 2026 03:01:00 +0000 Files and hashes: 1: FcqAiF3EThDIPDgHYMKF7h827Ak.roa (hash: hj1WPPiWdc5Pq1vcNkWnuae//TLNXB25Q0RnmkCQN6M=) 2: cLDYz_9Zwwk3zoYCWc3vL36p2Vo.roa (hash: uPEOYCvzSynMBRgZqpFSHcFo4Rr8aojoGV6YDin4A8w=) 3: fGc9qtbZMX8BAdQaBCph5XaJRTo.crl (hash: CPaFBA5oSXmeLstuh2k9f/eu6AOjYvu2jhXaYpdtLGs=) 4: ojjTeCwITpsroHdqRJmBTDsfojU.roa (hash: VpFG7gODq/AE1339wVlEzI/S3bsYFlFzAzKyeo7uKPs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.crl rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft rsync://rpki.ripe.net/repository/DEFAULT/fGc9qtbZMX8BAdQaBCph5XaJRTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:18:ff:6d:45:c8:ca:27:2b:11:90:1f:04:0b:99:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c673daad6d9317f0101d41a042a61e57689453a Validity Not Before: Jan 25 03:01:00 2026 GMT Not After : Jan 26 03:01:00 2026 GMT Subject: CN=72ac5b6c58f74d58ff2fd48ecdb6a3e4e5fabfd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:cf:ed:c4:c5:38:07:ae:ec:ad:31:60:b9:e6: fc:2a:bb:48:d9:3c:28:03:a5:03:27:a6:c4:3a:c4: c9:6c:d2:20:47:a2:22:ed:ff:6e:bd:79:54:c0:53: 31:88:be:37:19:82:d7:3d:18:3c:bf:da:40:73:bd: 34:90:2f:59:48:e8:02:76:39:18:77:0e:9a:ba:1d: ca:29:6b:38:0e:59:f7:65:33:37:21:61:df:7c:b3: 6d:00:2a:02:14:c2:3e:49:d5:29:0d:0c:17:00:63: fa:3b:be:68:80:92:d7:8c:1b:db:89:3f:f0:47:f9: 06:54:89:b2:a1:85:4c:5b:02:d1:27:62:8c:c1:45: d0:8f:11:97:fa:3c:78:0f:23:58:46:80:38:36:34: c8:18:45:ba:3c:5a:cc:6d:c3:d8:44:46:bf:e2:3b: ac:fe:df:2b:64:96:1c:b2:0c:c9:7b:1f:50:45:3a: 06:b3:9b:e2:82:1b:5e:3e:8a:7a:e5:62:33:93:d5: 58:4f:5d:15:a1:81:26:dd:f3:ab:cb:ad:45:fd:da: 74:1a:bb:ba:cc:1b:ef:22:be:c8:b8:43:3b:c1:f9: 84:b6:c1:28:1e:86:6e:65:21:b5:e3:b0:2a:57:20: 04:2b:0c:8c:9e:c6:4e:c7:85:4f:07:b1:a5:b7:a5: ec:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:AC:5B:6C:58:F7:4D:58:FF:2F:D4:8E:CD:B6:A3:E4:E5:FA:BF:D6 X509v3 Authority Key Identifier: keyid:7C:67:3D:AA:D6:D9:31:7F:01:01:D4:1A:04:2A:61:E5:76:89:45:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGc9qtbZMX8BAdQaBCph5XaJRTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:cd:b5:59:2a:92:f7:d6:6e:21:e2:15:42:fc:40:da:66:f0: 8e:a8:aa:e8:fe:be:b7:1e:e5:8e:ce:6a:c3:89:ce:66:13:2a: 12:fd:02:fe:6c:a0:fe:8f:63:6a:6b:45:30:df:4f:49:2f:23: 29:71:e1:1a:12:b8:59:8d:23:18:81:83:40:54:f2:2c:f5:e8: e8:d9:54:bf:29:1e:5b:d9:d8:18:ac:2b:34:15:ee:4c:72:44: 13:05:17:3b:72:29:58:61:5a:9e:55:b1:c1:32:c5:e3:0d:87: fb:75:d2:b8:cb:bd:5e:e0:fe:b1:d1:18:13:b5:23:0f:d4:70: aa:be:bc:9d:da:30:f9:6d:f5:c6:0b:07:6c:78:be:5b:09:b1: f6:bd:23:e8:78:47:39:bb:f1:2e:2e:b8:69:51:f2:88:64:85: a8:f5:1e:c9:33:9a:78:2d:20:b8:af:c7:d5:57:bc:3b:8d:88: d0:db:a9:7e:53:e2:74:ea:16:42:2b:12:c0:34:ff:6b:d7:d4: cd:32:54:7b:14:dc:6f:d5:c9:80:8c:0e:ca:fa:21:1e:f8:1f: 00:82:09:41:3a:72:61:57:81:6c:0d:dd:5e:05:b6:bc:95:02: 2c:18:22:46:b3:f7:4c:a9:ca:6d:8f:23:b5:70:5c:9f:d6:04: 2f:b4:22:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzGP9tRcjKJysRkB8EC5lRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjNjczZGFhZDZkOTMxN2YwMTAxZDQxYTA0MmE2MWU1NzY4 OTQ1M2EwHhcNMjYwMTI1MDMwMTAwWhcNMjYwMTI2MDMwMTAwWjAzMTEwLwYDVQQD Eyg3MmFjNWI2YzU4Zjc0ZDU4ZmYyZmQ0OGVjZGI2YTNlNGU1ZmFiZmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2c/txMU4B67srTFgueb8KrtI2Two A6UDJ6bEOsTJbNIgR6Ii7f9uvXlUwFMxiL43GYLXPRg8v9pAc700kC9ZSOgCdjkY dw6auh3KKWs4Dln3ZTM3IWHffLNtACoCFMI+SdUpDQwXAGP6O75ogJLXjBvbiT/w R/kGVImyoYVMWwLRJ2KMwUXQjxGX+jx4DyNYRoA4NjTIGEW6PFrMbcPYREa/4jus /t8rZJYcsgzJex9QRToGs5vightePop65WIzk9VYT10VoYEm3fOry61F/dp0Gru6 zBvvIr7IuEM7wfmEtsEoHoZuZSG147AqVyAEKwyMnsZOx4VPB7Glt6XsTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHKsW2xY901Y/y/Ujs22o+Tl+r/WMB8GA1UdIwQY MBaAFHxnParW2TF/AQHUGgQqYeV2iUU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkdjOXF0YlpNWDhCQWRRYUJDcGg1WGFKUlRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9mMDM3ZGItNzU5Mi00YjYyLWJkYWEt MDRlNDZlZjBjZDIxLzEvZkdjOXF0YlpNWDhCQWRRYUJDcGg1WGFKUlRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9mMDM3ZGItNzU5Mi00YjYyLWJkYWEtMDRlNDZlZjBjZDIx LzEvZkdjOXF0YlpNWDhCQWRRYUJDcGg1WGFKUlRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATM21WSqS 99ZuIeIVQvxA2mbwjqiq6P6+tx7ljs5qw4nOZhMqEv0C/myg/o9jamtFMN9PSS8j KXHhGhK4WY0jGIGDQFTyLPXo6NlUvykeW9nYGKwrNBXuTHJEEwUXO3IpWGFanlWx wTLF4w2H+3XSuMu9XuD+sdEYE7UjD9Rwqr68ndow+W31xgsHbHi+Wwmx9r0j6HhH ObvxLi64aVHyiGSFqPUeyTOaeC0guK/H1Ve8O42I0NupflPidOoWQisSwDT/a9fU zTJUexTcb9XJgIwOyvohHvgfAIIJQTpyYVeBbA3dXgW2vJUCLBgiRrP3TKnKbY8j tXBcn9YEL7QiGg== -----END CERTIFICATE-----Generated at Sun Jan 25 06:00:08 2026 by rpki-client