This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft File: F1lDaGkInNnH5tAgKPJKL-SbhtU.mft (raw, json) Hash identifier: aV/XOKYDpqA7KPJIhTwLsl5A9q/t1zQc0NayI9fzyn8= Subject key identifier: 5D:8A:DA:4A:10:68:1C:4C:A3:BE:F8:90:16:CF:C8:B2:A6:CA:AF:0A Authority key identifier: 17:59:43:68:69:08:9C:D9:C7:E6:D0:20:28:F2:4A:2F:E4:9B:86:D5 Certificate issuer: /CN=1759436869089cd9c7e6d02028f24a2fe49b86d5 Certificate serial: 019BF6F5C51D65C6155CC647F45CB5223C76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft Manifest number: 17F7 Signing time: Sun 25 Jan 2026 21:01:00 +0000 Manifest this update: Sun 25 Jan 2026 21:01:00 +0000 Manifest next update: Mon 26 Jan 2026 21:01:00 +0000 Files and hashes: 1: 7QjRRYA7jcCFNync-7ZqAYQ9Lvk.roa (hash: Ww9Vf4lv8aoiNND6Ah1rgZbAtQ03hE7wpG+7oWtfpX4=) 2: F1lDaGkInNnH5tAgKPJKL-SbhtU.crl (hash: ZidnNrPZQCY52nCs4LmcUP1orR1dYtsfLQ9VIwTKQ4k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:c5:1d:65:c6:15:5c:c6:47:f4:5c:b5:22:3c:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1759436869089cd9c7e6d02028f24a2fe49b86d5 Validity Not Before: Jan 25 21:01:00 2026 GMT Not After : Jan 26 21:01:00 2026 GMT Subject: CN=5d8ada4a10681c4ca3bef89016cfc8b2a6caaf0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4c:32:e1:25:95:f0:f2:df:f5:b8:24:b7:fd: b9:99:4e:9c:37:8e:2d:77:1b:05:40:9b:cd:9b:89: c0:0a:17:1f:2b:a0:17:c6:5c:d5:6d:2c:2a:96:cf: 3e:0d:e9:6e:76:1a:42:6e:b8:23:75:11:ff:ef:70: e1:76:dc:0a:f5:cd:ba:e0:c5:cd:46:a8:de:10:9b: 8a:60:af:72:75:87:7e:7f:27:39:1c:e5:63:0c:e9: 5a:8e:bf:fb:85:b7:91:f0:53:18:e2:fb:33:d3:9e: 7a:3f:57:d9:f0:e9:dd:93:af:1d:7b:38:10:54:9f: 25:66:2d:7e:4b:fa:30:25:62:d7:38:b4:84:50:69: bb:0c:38:2b:a9:ad:90:31:d6:e2:9d:fb:1a:8a:f4: ae:1a:54:e7:ab:bb:fe:7d:dd:f7:ca:61:ab:55:0b: 13:e9:cd:cf:ab:74:31:4f:0a:4b:29:c2:83:db:42: 09:06:d1:10:8b:86:c9:6b:12:02:f7:94:4f:0a:3c: a6:2a:68:c2:24:20:2a:71:24:1a:70:88:cd:9d:a8: cc:b5:72:72:1e:68:06:af:a5:15:95:ca:4d:5f:8a: 34:c8:d1:f0:49:31:10:9f:c4:0e:36:15:ac:42:66: 4c:1b:d8:ee:b6:9d:88:b8:93:97:58:1a:d5:8a:14: a4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:8A:DA:4A:10:68:1C:4C:A3:BE:F8:90:16:CF:C8:B2:A6:CA:AF:0A X509v3 Authority Key Identifier: keyid:17:59:43:68:69:08:9C:D9:C7:E6:D0:20:28:F2:4A:2F:E4:9B:86:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:aa:11:5c:44:1d:f8:44:5c:cc:73:7c:7d:b8:b2:d4:c3:95: 55:b0:d6:f4:54:8d:da:46:20:9c:bb:09:04:ff:55:52:d5:c9: 1e:77:1c:5b:32:0c:43:6d:f4:89:a0:c1:da:df:71:31:92:bd: 39:bd:54:4c:04:f0:41:a2:95:be:21:67:2a:7d:98:e8:4c:47: 0c:75:36:35:a3:a6:95:66:08:73:e7:b7:ef:67:2d:6c:8b:2e: cd:7a:b5:a8:8e:32:bd:bd:be:5a:bd:f7:01:a8:9a:cc:20:42: 1b:d9:f8:9c:a6:47:d5:6b:d9:f3:e5:43:e6:28:2e:b5:e4:58: 61:36:57:b2:5d:b8:74:0f:49:7b:e1:a0:42:11:61:2a:fe:e4: 4f:ed:26:64:fb:c5:c1:7d:64:00:be:44:95:4b:36:3b:71:8c: 14:2d:e8:68:d5:64:23:a7:de:e8:02:b0:71:85:b5:10:4c:ce: 5d:a2:1b:86:0c:89:54:d3:df:dc:04:3f:12:4b:72:79:57:de: 4d:2f:34:f4:db:54:a5:23:56:39:54:bc:02:02:6d:d1:4f:71: 8f:5c:8f:cb:2a:1c:d4:ad:0b:30:1e:ac:0f:2e:4f:be:3e:02: 50:3c:cc:e3:85:e9:b4:89:ef:62:26:d2:96:b0:68:64:8f:3d: 80:ad:a5:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29cUdZcYVXMZH9Fy1Ijx2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NTk0MzY4NjkwODljZDljN2U2ZDAyMDI4ZjI0YTJmZTQ5 Yjg2ZDUwHhcNMjYwMTI1MjEwMTAwWhcNMjYwMTI2MjEwMTAwWjAzMTEwLwYDVQQD Eyg1ZDhhZGE0YTEwNjgxYzRjYTNiZWY4OTAxNmNmYzhiMmE2Y2FhZjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEwy4SWV8PLf9bgkt/25mU6cN44t dxsFQJvNm4nAChcfK6AXxlzVbSwqls8+DeludhpCbrgjdRH/73DhdtwK9c264MXN RqjeEJuKYK9ydYd+fyc5HOVjDOlajr/7hbeR8FMY4vsz0556P1fZ8Ondk68dezgQ VJ8lZi1+S/owJWLXOLSEUGm7DDgrqa2QMdbinfsaivSuGlTnq7v+fd33ymGrVQsT 6c3Pq3QxTwpLKcKD20IJBtEQi4bJaxIC95RPCjymKmjCJCAqcSQacIjNnajMtXJy HmgGr6UVlcpNX4o0yNHwSTEQn8QONhWsQmZMG9jutp2IuJOXWBrVihSk9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF2K2koQaBxMo774kBbPyLKmyq8KMB8GA1UdIwQY MBaAFBdZQ2hpCJzZx+bQICjySi/km4bVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjFsRGFHa0luTm5INXRBZ0tQSktMLVNiaHRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS83MjQ3ZDItMGEyOC00ZTRhLWFhMGMt ZmVmNDFkZDg3NmMwLzEvRjFsRGFHa0luTm5INXRBZ0tQSktMLVNiaHRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS83MjQ3ZDItMGEyOC00ZTRhLWFhMGMtZmVmNDFkZDg3NmMw LzEvRjFsRGFHa0luTm5INXRBZ0tQSktMLVNiaHRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALaoRXEQd +ERczHN8fbiy1MOVVbDW9FSN2kYgnLsJBP9VUtXJHnccWzIMQ230iaDB2t9xMZK9 Ob1UTATwQaKVviFnKn2Y6ExHDHU2NaOmlWYIc+e372ctbIsuzXq1qI4yvb2+Wr33 AaiazCBCG9n4nKZH1WvZ8+VD5iguteRYYTZXsl24dA9Je+GgQhFhKv7kT+0mZPvF wX1kAL5ElUs2O3GMFC3oaNVkI6fe6AKwcYW1EEzOXaIbhgyJVNPf3AQ/EktyeVfe TS809NtUpSNWOVS8AgJt0U9xj1yPyyoc1K0LMB6sDy5Pvj4CUDzM44XptInvYibS lrBoZI89gK2lgQ== -----END CERTIFICATE-----Generated at Sun Jan 25 23:54:34 2026 by rpki-client