This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft File: FlnrYEAZPfBoE1CQXmOdDljV-d8.mft (raw, json) Hash identifier: 2RLn4ZUgEGU/MG2zban3DPOLzZ/CZcWGtqKywJ8l//A= Subject key identifier: 4B:9E:73:40:96:2D:97:61:84:6E:60:84:7D:55:D9:28:C8:26:2A:8A Authority key identifier: 16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF Certificate issuer: /CN=1659eb6040193df0681350905e639d0e58d5f9df Certificate serial: 019BF5079A0F40FAA1FAE691DAC9F7D55003 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft Manifest number: 1651 Signing time: Sun 25 Jan 2026 12:01:14 +0000 Manifest this update: Sun 25 Jan 2026 12:01:14 +0000 Manifest next update: Mon 26 Jan 2026 12:01:14 +0000 Files and hashes: 1: Ebw7UmhhiZG_Nrfoble_YWsPVu4.roa (hash: 9BXqjTT23ZUPj2QuWTEKVvPbzIY1hciLXoi7NrQptsU=) 2: FlnrYEAZPfBoE1CQXmOdDljV-d8.crl (hash: Xn2ksq71WiIgFBQgoiNu8hk+U5h4Cwn3j8hPv6KGMH0=) 3: aKt1IzaRyYfROpZHibRsZ71BdRE.roa (hash: oXZivLJhewPC3l7955mcOzVeeerdPRVG1F9b3jjovao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:9a:0f:40:fa:a1:fa:e6:91:da:c9:f7:d5:50:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1659eb6040193df0681350905e639d0e58d5f9df Validity Not Before: Jan 25 12:01:14 2026 GMT Not After : Jan 26 12:01:14 2026 GMT Subject: CN=4b9e7340962d9761846e60847d55d928c8262a8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:09:7b:62:9b:5e:45:ed:ca:3d:49:30:32:f0: 98:cd:24:d9:30:06:9e:4b:31:c9:09:ce:e1:a3:36: 88:83:85:c4:8a:1c:16:73:a6:ac:48:53:b1:26:1f: f4:2b:4b:d3:3b:21:54:12:a4:84:56:4a:bc:fc:f2: a5:1c:b2:0b:b0:9c:58:ac:6b:67:cf:e7:7d:67:91: f5:ef:1e:f1:af:43:1d:3b:b5:33:4c:16:3f:ee:10: 78:e9:22:6a:e8:62:23:db:e1:3c:53:7e:a1:a3:61: 60:a6:48:6d:24:c8:1b:8c:ec:da:c0:62:0b:8f:e8: ee:a6:8f:49:54:92:25:7f:7b:b8:db:36:cf:c2:b6: c2:89:ff:e8:7f:b7:5f:a8:ff:45:c5:cb:32:c0:08: ac:af:4d:62:cc:64:3e:87:d0:09:14:e6:af:ad:cf: 59:28:09:29:5d:28:6a:b9:ea:2d:90:7c:a0:54:cc: 43:a3:d1:05:93:60:08:4b:2f:bf:f8:83:c6:78:91: d6:e8:4f:99:8a:8d:24:20:df:0e:a3:a5:c8:34:6a: 81:e5:8e:8e:18:8b:46:58:12:fd:c2:a4:68:08:d2: 0f:11:a7:d4:a7:0d:55:41:6b:3e:fa:91:38:37:51: c4:8a:1f:6c:b8:d9:f6:50:5a:86:b3:8b:1c:74:35: 36:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:9E:73:40:96:2D:97:61:84:6E:60:84:7D:55:D9:28:C8:26:2A:8A X509v3 Authority Key Identifier: keyid:16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:08:6d:f2:9d:bf:6e:23:22:37:36:0b:31:6f:47:54:02:95: 31:cc:7d:37:f9:85:26:ce:9d:4a:b4:d2:35:06:f4:45:12:a4: 45:3f:02:3d:e4:dc:28:fa:3c:7f:e8:0b:2e:7b:72:b6:6a:e0: a7:1b:0e:45:36:dc:86:ce:c2:82:76:ac:e4:37:dd:e0:d0:16: c5:e2:f3:8f:6a:9a:f0:56:89:e3:4f:e3:f2:9d:5b:8b:84:e7: 7f:df:51:64:a5:44:e4:fa:fb:0a:a4:f4:5d:78:93:3c:9b:db: 6e:88:df:b5:14:d4:40:c3:65:e6:9b:81:68:03:7f:6e:98:b7: 01:68:c0:0f:ab:05:97:58:c1:c4:fb:f1:0d:43:d9:6d:f1:77: ca:5b:4e:39:18:90:df:c6:22:9e:ad:3f:98:40:32:8f:3e:ed: 27:92:80:29:00:32:95:d3:b3:08:00:01:90:90:81:c7:fd:0f: 9a:95:d2:71:29:59:fd:9f:03:de:8e:7e:67:d7:ee:85:7d:7e: 6a:12:ad:9c:84:33:bb:44:b3:d5:69:0c:ec:ec:a5:d3:5b:d9: 23:f9:ab:b1:b5:d9:ea:b4:7a:90:be:37:4f:33:aa:61:ab:2a: dc:ff:78:6a:27:d8:f2:84:f1:b9:4f:df:2f:86:35:66:67:12: 0e:26:64:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B5oPQPqh+uaR2sn31VADMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NTllYjYwNDAxOTNkZjA2ODEzNTA5MDVlNjM5ZDBlNThk NWY5ZGYwHhcNMjYwMTI1MTIwMTE0WhcNMjYwMTI2MTIwMTE0WjAzMTEwLwYDVQQD Eyg0YjllNzM0MDk2MmQ5NzYxODQ2ZTYwODQ3ZDU1ZDkyOGM4MjYyYThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQl7YpteRe3KPUkwMvCYzSTZMAae SzHJCc7hozaIg4XEihwWc6asSFOxJh/0K0vTOyFUEqSEVkq8/PKlHLILsJxYrGtn z+d9Z5H17x7xr0MdO7UzTBY/7hB46SJq6GIj2+E8U36ho2FgpkhtJMgbjOzawGIL j+jupo9JVJIlf3u42zbPwrbCif/of7dfqP9FxcsywAisr01izGQ+h9AJFOavrc9Z KAkpXShqueotkHygVMxDo9EFk2AISy+/+IPGeJHW6E+Zio0kIN8Oo6XINGqB5Y6O GItGWBL9wqRoCNIPEafUpw1VQWs++pE4N1HEih9suNn2UFqGs4scdDU27QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEuec0CWLZdhhG5ghH1V2SjIJiqKMB8GA1UdIwQY MBaAFBZZ62BAGT3waBNQkF5jnQ5Y1fnfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmxucllFQVpQZkJvRTFDUVhtT2REbGpWLWQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mZjUxMzMtY2ExMS00MmRiLWIwM2Qt NTQ0ODU1Y2M0ZjU3LzEvRmxucllFQVpQZkJvRTFDUVhtT2REbGpWLWQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9mZjUxMzMtY2ExMS00MmRiLWIwM2QtNTQ0ODU1Y2M0ZjU3 LzEvRmxucllFQVpQZkJvRTFDUVhtT2REbGpWLWQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACAht8p2/ biMiNzYLMW9HVAKVMcx9N/mFJs6dSrTSNQb0RRKkRT8CPeTcKPo8f+gLLntytmrg pxsORTbchs7Cgnas5Dfd4NAWxeLzj2qa8FaJ40/j8p1bi4Tnf99RZKVE5Pr7CqT0 XXiTPJvbbojftRTUQMNl5puBaAN/bpi3AWjAD6sFl1jBxPvxDUPZbfF3yltOORiQ 38Yinq0/mEAyjz7tJ5KAKQAyldOzCAABkJCBx/0PmpXScSlZ/Z8D3o5+Z9fuhX1+ ahKtnIQzu0Sz1WkM7Oyl01vZI/mrsbXZ6rR6kL43TzOqYasq3P94aifY8oTxuU/f L4Y1ZmcSDiZk0A== -----END CERTIFICATE-----Generated at Sun Jan 25 15:21:24 2026 by rpki-client