This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft File: fd0jbYBNWqmiyrOc9RAirAXgsYM.mft (raw, json) Hash identifier: Jrq94J8DyX+ektL1kMHkwAN437cUlbveQBrakeOp5Ts= Subject key identifier: AF:9B:BB:3C:11:AC:9B:D2:8F:5B:1F:5F:95:39:EF:37:A0:41:5E:4A Authority key identifier: 7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83 Certificate issuer: /CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183 Certificate serial: 019BF619EBE2436B70EF8131897D16330169 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft Manifest number: 0A48 Signing time: Sun 25 Jan 2026 17:00:52 +0000 Manifest this update: Sun 25 Jan 2026 17:00:52 +0000 Manifest next update: Mon 26 Jan 2026 17:00:52 +0000 Files and hashes: 1: QxPgQhLZSciZvWPoXaWmbFy5GQE.roa (hash: 2+siJJXulwAfsr5WZH3cVtlll3XHnNe+UHkOgJC93jY=) 2: fd0jbYBNWqmiyrOc9RAirAXgsYM.crl (hash: NWRHFTYLf3uycPzlVVRC0NAoMAPLkqWO6MdoJFfUvvk=) 3: oDJd8k7v9hL4ELhX81UKtkrtMzs.roa (hash: ABmbVakjWPfaGm1nLXm6gvNYxUl2NncxIiAinPvtap4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:eb:e2:43:6b:70:ef:81:31:89:7d:16:33:01:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183 Validity Not Before: Jan 25 17:00:52 2026 GMT Not After : Jan 26 17:00:52 2026 GMT Subject: CN=af9bbb3c11ac9bd28f5b1f5f9539ef37a0415e4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5a:ca:fb:e7:eb:6e:fd:09:26:a4:c8:81:e7: 48:2b:87:c1:1c:10:ff:53:30:3b:c6:84:18:3b:08: 6e:38:ea:8f:cb:94:e9:f9:fd:2c:a8:1c:ce:cc:4f: d6:ac:4b:99:fa:6e:67:1a:2d:03:4f:7a:0d:6e:48: 20:25:17:f7:1e:36:29:8e:21:e6:1b:52:9d:0f:1f: 47:5c:96:9b:8b:e7:e9:72:86:d3:79:94:8f:2f:3b: 7f:0e:c9:78:00:1c:30:17:1f:41:ca:69:d1:64:0d: 56:78:a0:c7:31:9c:3d:19:93:9f:58:a6:3f:4b:74: cc:a3:93:2e:11:04:cd:51:e6:25:d0:aa:40:14:72: 98:cb:fa:2a:9e:de:85:9b:a4:09:8e:14:14:16:8d: 9d:9b:e9:db:34:1e:28:1e:f4:86:4c:e2:5c:fd:ba: 18:13:60:d6:80:9f:25:01:60:cc:a2:fa:f6:55:7f: 4b:fa:78:06:85:a4:1d:ee:2d:e2:33:71:d0:50:af: 02:2b:14:3d:64:bc:83:2b:78:27:3c:35:f0:18:dd: 80:cb:d2:6a:a2:e2:f2:a9:fe:ff:2f:34:b8:9b:c8: bc:a6:7c:dd:f8:4e:3e:6a:1e:58:94:a9:50:94:09: 63:33:9f:0c:02:8c:4a:fb:40:47:38:6e:f7:a3:ef: 54:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:9B:BB:3C:11:AC:9B:D2:8F:5B:1F:5F:95:39:EF:37:A0:41:5E:4A X509v3 Authority Key Identifier: keyid:7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:98:6f:97:fc:87:73:0b:e6:3f:07:ee:35:a9:db:d3:3f:b6: 83:03:7f:28:94:9c:d9:b4:c5:63:11:12:e4:4f:8a:c5:a5:9a: c6:62:89:0d:c4:37:ec:35:2f:fe:31:05:be:46:6d:63:9e:b2: 92:78:66:5c:68:57:9e:d8:52:a5:c9:e4:3c:96:21:b8:1a:16: 6a:42:b7:10:97:8a:6e:4f:31:4b:4e:8a:61:6c:2e:ca:36:2f: bf:a9:98:e2:5f:86:03:26:32:e4:6f:3b:e8:90:c7:36:4b:49: b3:31:38:dd:c2:d3:db:f7:eb:dd:21:f3:e9:0c:41:26:75:f4: bc:1c:d3:06:da:d0:58:db:89:06:d9:6c:0a:ba:49:a3:dd:43: d1:93:37:96:71:ce:d0:1c:fe:c0:2d:e7:73:86:7a:38:9f:fe: 95:89:3f:a7:05:4d:e5:43:4a:f5:8a:89:21:96:80:74:68:80: 93:13:30:4e:3a:2f:d2:9e:ac:3d:a8:89:3d:0c:89:af:77:e3: da:a0:ae:02:73:b5:0c:f3:97:e2:c8:45:a6:d8:4a:ec:74:92: 44:6f:00:e3:00:2d:14:5f:ed:3b:18:2c:6f:c2:ff:06:44:11: d9:ca:c6:8a:e5:19:6a:1b:39:36:b7:a0:ff:d4:f2:fa:38:14: 5e:38:b7:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GeviQ2tw74ExiX0WMwFpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZGQyMzZkODA0ZDVhYTlhMmNhYjM5Y2Y1MTAyMmFjMDVl MGIxODMwHhcNMjYwMTI1MTcwMDUyWhcNMjYwMTI2MTcwMDUyWjAzMTEwLwYDVQQD EyhhZjliYmIzYzExYWM5YmQyOGY1YjFmNWY5NTM5ZWYzN2EwNDE1ZTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulrK++frbv0JJqTIgedIK4fBHBD/ UzA7xoQYOwhuOOqPy5Tp+f0sqBzOzE/WrEuZ+m5nGi0DT3oNbkggJRf3HjYpjiHm G1KdDx9HXJabi+fpcobTeZSPLzt/Dsl4ABwwFx9BymnRZA1WeKDHMZw9GZOfWKY/ S3TMo5MuEQTNUeYl0KpAFHKYy/oqnt6Fm6QJjhQUFo2dm+nbNB4oHvSGTOJc/boY E2DWgJ8lAWDMovr2VX9L+ngGhaQd7i3iM3HQUK8CKxQ9ZLyDK3gnPDXwGN2Ay9Jq ouLyqf7/LzS4m8i8pnzd+E4+ah5YlKlQlAljM58MAoxK+0BHOG73o+9UMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK+buzwRrJvSj1sfX5U57zegQV5KMB8GA1UdIwQY MBaAFH3dI22ATVqposqznPUQIqwF4LGDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmQwamJZQk5XcW1peXJPYzlSQWlyQVhnc1lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xZTk4YzItMmJhZS00ZDE0LTliY2Mt ODU1ZTYwNzJlZjM2LzEvZmQwamJZQk5XcW1peXJPYzlSQWlyQVhnc1lNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xZTk4YzItMmJhZS00ZDE0LTliY2MtODU1ZTYwNzJlZjM2 LzEvZmQwamJZQk5XcW1peXJPYzlSQWlyQVhnc1lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv5hvl/yH cwvmPwfuNanb0z+2gwN/KJSc2bTFYxES5E+KxaWaxmKJDcQ37DUv/jEFvkZtY56y knhmXGhXnthSpcnkPJYhuBoWakK3EJeKbk8xS06KYWwuyjYvv6mY4l+GAyYy5G87 6JDHNktJszE43cLT2/fr3SHz6QxBJnX0vBzTBtrQWNuJBtlsCrpJo91D0ZM3lnHO 0Bz+wC3nc4Z6OJ/+lYk/pwVN5UNK9YqJIZaAdGiAkxMwTjov0p6sPaiJPQyJr3fj 2qCuAnO1DPOX4shFpthK7HSSRG8A4wAtFF/tOxgsb8L/BkQR2crGiuUZahs5Nreg /9Ty+jgUXji3KQ== -----END CERTIFICATE-----Generated at Mon Jan 26 00:18:33 2026 by rpki-client