This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft File: fdUdwQKkl1GOFgkeZegFwkOO8ls.mft (raw, json) Hash identifier: c1e9fFFPUmEFR+0BqD9WhqJuD43qjqO/v8FoYRtPU0E= Subject key identifier: 32:02:0B:3F:97:95:74:25:00:DE:B9:B2:B6:3F:88:5F:33:AD:20:E6 Authority key identifier: 7D:D5:1D:C1:02:A4:97:51:8E:16:09:1E:65:E8:05:C2:43:8E:F2:5B Certificate issuer: /CN=7dd51dc102a497518e16091e65e805c2438ef25b Certificate serial: 019BF951F130C1A755E52E8D9B7037319402 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft Manifest number: 08FC Signing time: Mon 26 Jan 2026 08:00:55 +0000 Manifest this update: Mon 26 Jan 2026 08:00:55 +0000 Manifest next update: Tue 27 Jan 2026 08:00:55 +0000 Files and hashes: 1: Wx2W2x44SbNMpet_nxHfcd54RRg.roa (hash: RaqqpE5anacxSOoNS8mABkC5o0iVF+x65+b349Ql+4w=) 2: fdUdwQKkl1GOFgkeZegFwkOO8ls.crl (hash: kVuKI/W6+Duq+f8S1vdJsW5AIHa35fMbNvIO8Rxaqr0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:51:f1:30:c1:a7:55:e5:2e:8d:9b:70:37:31:94:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7dd51dc102a497518e16091e65e805c2438ef25b Validity Not Before: Jan 26 08:00:55 2026 GMT Not After : Jan 27 08:00:55 2026 GMT Subject: CN=32020b3f9795742500deb9b2b63f885f33ad20e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e3:80:14:95:56:e9:b1:e6:09:e1:54:d5:0d: a7:d6:b7:3a:a1:bb:16:1a:d9:7e:ca:e2:81:6f:b3: c0:1d:09:1f:db:81:ec:66:06:0f:b0:16:4f:6d:8d: ca:89:63:de:fb:40:92:e6:07:ff:6e:85:a9:4c:54: b1:25:18:72:db:f3:db:c6:f9:d7:5d:37:0f:a3:15: b6:65:52:26:b4:89:d4:44:c8:e4:c4:1e:9f:58:39: f9:6d:b2:e7:85:7f:f7:9b:c7:72:57:ab:9a:ad:95: de:4b:41:3f:5a:71:25:72:f5:1c:bd:fd:a7:bb:4c: fa:50:16:c2:91:a7:56:b5:d1:aa:ef:4c:b0:b2:d9: 4a:50:5b:03:c2:a6:53:bb:84:4a:fc:b9:30:63:ac: f8:29:41:57:d7:de:0a:e0:7f:a3:6f:3f:bf:ae:49: 6e:7c:36:e6:c1:80:3c:e1:e7:33:50:74:e2:50:e1: 96:3f:1c:ef:bb:63:e6:93:ce:c1:a1:2d:67:8a:1e: 85:04:92:12:12:c6:09:e8:8f:75:7e:63:e4:7b:46: 19:29:e0:e0:2d:71:df:6d:d7:64:9e:36:6e:d5:64: 12:e0:b3:13:75:1d:36:12:83:35:83:5a:c7:28:26: da:11:b7:41:11:68:3b:a4:e3:8f:56:11:1a:cb:db: a1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:02:0B:3F:97:95:74:25:00:DE:B9:B2:B6:3F:88:5F:33:AD:20:E6 X509v3 Authority Key Identifier: keyid:7D:D5:1D:C1:02:A4:97:51:8E:16:09:1E:65:E8:05:C2:43:8E:F2:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:d7:56:ed:89:c4:40:2d:78:79:18:ae:30:67:0d:5d:7d:5e: 8c:00:cc:a0:1a:ae:77:1d:61:48:75:3b:c4:64:c5:4a:77:f6: 8e:a1:01:c3:85:bb:2d:0b:4c:24:b9:2d:e3:62:8c:c0:0a:6a: 85:54:af:e8:77:10:88:01:b8:e1:b1:f6:ae:0d:ab:70:94:8f: 93:a3:e7:4f:54:e9:d2:01:08:7c:b4:0d:d0:fd:1d:d5:6e:b1: e5:b5:46:81:cb:8c:19:68:d7:0a:ff:a0:cf:07:a7:9c:60:f9: 6c:a9:84:0e:9e:15:f5:02:5a:f5:89:8c:b7:03:98:e4:e1:5b: d9:34:2f:37:35:14:b4:d2:e9:04:44:7f:64:09:5b:d4:f9:2c: 16:91:29:c2:a8:d7:b2:1d:ac:13:91:4a:fa:a0:a7:88:c9:ea: 5c:65:95:5c:c9:c2:02:bb:09:31:c6:ce:88:c3:eb:02:a3:30: 52:7d:08:7d:66:ae:d2:0f:2b:61:cb:4b:07:fa:39:51:8a:f0: 24:b4:46:5d:88:39:1a:ae:ea:23:e8:2f:5c:80:99:2b:78:1f: 3e:f1:ba:35:3d:81:a3:da:b4:b7:ba:2a:34:6f:cf:a1:8d:04: 94:47:b0:b5:66:22:7a:19:6e:0c:25:c6:22:f9:46:6f:ae:4d: aa:b7:cc:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5UfEwwadV5S6Nm3A3MZQCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZDUxZGMxMDJhNDk3NTE4ZTE2MDkxZTY1ZTgwNWMyNDM4 ZWYyNWIwHhcNMjYwMTI2MDgwMDU1WhcNMjYwMTI3MDgwMDU1WjAzMTEwLwYDVQQD EygzMjAyMGIzZjk3OTU3NDI1MDBkZWI5YjJiNjNmODg1ZjMzYWQyMGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweOAFJVW6bHmCeFU1Q2n1rc6obsW Gtl+yuKBb7PAHQkf24HsZgYPsBZPbY3KiWPe+0CS5gf/boWpTFSxJRhy2/PbxvnX XTcPoxW2ZVImtInURMjkxB6fWDn5bbLnhX/3m8dyV6uarZXeS0E/WnElcvUcvf2n u0z6UBbCkadWtdGq70ywstlKUFsDwqZTu4RK/LkwY6z4KUFX194K4H+jbz+/rklu fDbmwYA84eczUHTiUOGWPxzvu2Pmk87BoS1nih6FBJISEsYJ6I91fmPke0YZKeDg LXHfbddknjZu1WQS4LMTdR02EoM1g1rHKCbaEbdBEWg7pOOPVhEay9uhjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDICCz+XlXQlAN65srY/iF8zrSDmMB8GA1UdIwQY MBaAFH3VHcECpJdRjhYJHmXoBcJDjvJbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmRVZHdRS2tsMUdPRmdrZVplZ0Z3a09POGxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi81ZjhhNzYtOTIxNS00NWI1LTkzOGIt NzZlNGUxYzkzNjA2LzEvZmRVZHdRS2tsMUdPRmdrZVplZ0Z3a09POGxzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi81ZjhhNzYtOTIxNS00NWI1LTkzOGItNzZlNGUxYzkzNjA2 LzEvZmRVZHdRS2tsMUdPRmdrZVplZ0Z3a09POGxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeddW7YnE QC14eRiuMGcNXX1ejADMoBqudx1hSHU7xGTFSnf2jqEBw4W7LQtMJLkt42KMwApq hVSv6HcQiAG44bH2rg2rcJSPk6PnT1Tp0gEIfLQN0P0d1W6x5bVGgcuMGWjXCv+g zwennGD5bKmEDp4V9QJa9YmMtwOY5OFb2TQvNzUUtNLpBER/ZAlb1PksFpEpwqjX sh2sE5FK+qCniMnqXGWVXMnCArsJMcbOiMPrAqMwUn0IfWau0g8rYctLB/o5UYrw JLRGXYg5Gq7qI+gvXICZK3gfPvG6NT2Bo9q0t7oqNG/PoY0ElEewtWYiehluDCXG IvlGb65NqrfM3A== -----END CERTIFICATE-----Generated at Mon Jan 26 18:14:25 2026 by rpki-client