This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft File: fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft (raw, json) Hash identifier: isJ5ZXa0fBOB9+RQPy9NNFOsKBnqu/i+S34Xj+mGHrs= Subject key identifier: EC:0C:F3:A0:EE:65:3E:8C:9F:32:E4:96:36:D8:41:BC:EB:C3:CB:77 Authority key identifier: 7E:75:0D:6F:CB:8A:40:CD:66:1C:F7:3D:1A:CA:BD:83:05:E8:77:FD Certificate issuer: /CN=7e750d6fcb8a40cd661cf73d1acabd8305e877fd Certificate serial: 019BF5E321E9B1AD667A5B003C7055516D8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft Manifest number: 17E5 Signing time: Sun 25 Jan 2026 16:01:01 +0000 Manifest this update: Sun 25 Jan 2026 16:01:01 +0000 Manifest next update: Mon 26 Jan 2026 16:01:01 +0000 Files and hashes: 1: Hxp2KZnDVTAomBXoNFjjRH1VUTM.roa (hash: 6wCn2sStp7lMoBisyxoOVg7CQrVyP+8JEmZ6TdkNK6k=) 2: fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl (hash: oAy4nSTwePBsSxQXCUDhmNj9T+dnehR+Ed6NBKYDP1Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:21:e9:b1:ad:66:7a:5b:00:3c:70:55:51:6d:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e750d6fcb8a40cd661cf73d1acabd8305e877fd Validity Not Before: Jan 25 16:01:01 2026 GMT Not After : Jan 26 16:01:01 2026 GMT Subject: CN=ec0cf3a0ee653e8c9f32e49636d841bcebc3cb77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:cb:b8:64:c1:6c:af:be:c8:87:f5:15:aa:7b: 30:75:65:df:2f:96:a3:62:3a:05:a9:db:97:fb:a5: 21:f4:0f:77:df:67:42:72:d1:b0:85:84:a8:74:70: 5f:5a:7d:a4:4f:f3:87:f0:ff:45:71:6e:d2:f7:73: 0b:ae:3f:6c:3c:83:98:dd:81:c6:5c:d4:c2:28:62: 68:12:1e:e4:88:1e:01:34:b8:6f:99:80:71:84:bc: c1:f2:17:dd:86:1d:8e:70:86:92:52:64:e2:8d:c6: ab:ae:08:bf:60:22:d3:c0:3d:20:fe:5a:6e:11:eb: d5:a9:15:c9:4a:a7:c5:12:4d:68:b7:68:73:e6:08: 0a:3f:85:99:e8:bf:cb:ff:9b:c5:f5:bc:f4:2e:3f: b8:0b:bd:73:51:c8:59:cf:a0:1b:2e:2a:67:5a:fb: c1:b0:29:e8:4f:87:2a:e1:8d:43:4e:a4:32:6c:c3: ef:b9:a9:ec:d6:3f:e4:74:91:c4:fa:5c:c9:42:b3: 83:a4:a0:af:5e:62:e3:17:a7:0b:c4:e0:41:cc:42: 7d:a2:af:c8:57:d8:3b:08:8e:0d:87:35:bd:ce:b7: 02:ce:02:c4:eb:c3:29:69:e0:f8:c0:e1:cf:d5:19: 7f:02:69:97:3d:fe:58:02:38:8a:2f:f9:a5:40:1e: e4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:0C:F3:A0:EE:65:3E:8C:9F:32:E4:96:36:D8:41:BC:EB:C3:CB:77 X509v3 Authority Key Identifier: keyid:7E:75:0D:6F:CB:8A:40:CD:66:1C:F7:3D:1A:CA:BD:83:05:E8:77:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:54:e5:d8:5f:e2:e6:0b:29:6b:66:45:f3:76:d9:93:68:b3: e3:12:e7:7f:fd:6e:7f:a5:40:b1:f5:73:69:5f:63:65:51:cd: b7:1a:43:8f:de:b0:2e:f8:90:92:82:2b:f1:cf:88:cf:e2:60: 93:c2:5c:e6:5f:3f:92:ad:06:82:8b:7e:a6:08:2f:b2:3f:b8: 0e:87:53:e0:08:47:9d:02:96:a3:33:34:2d:bf:a7:c2:79:a5: 7a:11:8b:65:2d:cd:cf:8d:b4:29:29:12:c8:2b:59:c0:c7:70: 4b:22:05:c6:a3:58:e1:27:b2:21:8b:5e:f5:11:aa:0d:f2:5f: 42:aa:90:ec:09:f0:28:3a:06:e6:49:27:1d:f5:a2:dc:62:f0: d2:e0:98:a1:4e:28:1a:30:ce:01:ea:29:c6:24:72:40:e9:aa: e5:aa:cf:92:f5:10:8f:75:f8:d1:74:6f:4e:6f:10:41:82:87: 97:14:d4:f8:b2:4c:01:7e:b0:55:83:e7:90:d9:b5:8a:59:7f: ab:b6:7f:d2:99:27:81:b3:52:ab:4a:a8:09:ae:52:ab:bb:03: 32:ca:3e:1d:f9:47:ed:d3:66:60:7d:56:86:c6:d6:f6:92:a6: cc:87:6e:9b:57:db:37:c5:4d:4e:63:dd:48:6e:f4:5a:3f:60: f4:f2:28:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv14yHpsa1melsAPHBVUW2KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlNzUwZDZmY2I4YTQwY2Q2NjFjZjczZDFhY2FiZDgzMDVl ODc3ZmQwHhcNMjYwMTI1MTYwMTAxWhcNMjYwMTI2MTYwMTAxWjAzMTEwLwYDVQQD EyhlYzBjZjNhMGVlNjUzZThjOWYzMmU0OTYzNmQ4NDFiY2ViYzNjYjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcu4ZMFsr77Ih/UVqnswdWXfL5aj YjoFqduX+6Uh9A9332dCctGwhYSodHBfWn2kT/OH8P9FcW7S93MLrj9sPIOY3YHG XNTCKGJoEh7kiB4BNLhvmYBxhLzB8hfdhh2OcIaSUmTijcarrgi/YCLTwD0g/lpu EevVqRXJSqfFEk1ot2hz5ggKP4WZ6L/L/5vF9bz0Lj+4C71zUchZz6AbLipnWvvB sCnoT4cq4Y1DTqQybMPvuans1j/kdJHE+lzJQrODpKCvXmLjF6cLxOBBzEJ9oq/I V9g7CI4NhzW9zrcCzgLE68MpaeD4wOHP1Rl/AmmXPf5YAjiKL/mlQB7kWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOwM86DuZT6MnzLkljbYQbzrw8t3MB8GA1UdIwQY MBaAFH51DW/LikDNZhz3PRrKvYMF6Hf9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZm5VTmI4dUtRTTFtSFBjOUdzcTlnd1hvZF8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80Y2UwMTItMzNlYS00YjZlLTkwNjUt YTJjNGMyMzFkZGY3LzEvZm5VTmI4dUtRTTFtSFBjOUdzcTlnd1hvZF8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS80Y2UwMTItMzNlYS00YjZlLTkwNjUtYTJjNGMyMzFkZGY3 LzEvZm5VTmI4dUtRTTFtSFBjOUdzcTlnd1hvZF8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlFTl2F/i 5gspa2ZF83bZk2iz4xLnf/1uf6VAsfVzaV9jZVHNtxpDj96wLviQkoIr8c+Iz+Jg k8Jc5l8/kq0Ggot+pggvsj+4DodT4AhHnQKWozM0Lb+nwnmlehGLZS3Nz420KSkS yCtZwMdwSyIFxqNY4SeyIYte9RGqDfJfQqqQ7AnwKDoG5kknHfWi3GLw0uCYoU4o GjDOAeopxiRyQOmq5arPkvUQj3X40XRvTm8QQYKHlxTU+LJMAX6wVYPnkNm1ill/ q7Z/0pkngbNSq0qoCa5Sq7sDMso+HflH7dNmYH1WhsbW9pKmzIdum1fbN8VNTmPd SG70Wj9g9PIokw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:52:04 2026 by rpki-client