This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft File: fhNA7SMjqShumA9mRpmQqaHjB10.mft (raw, json) Hash identifier: Qdx3QxCbNkelVvosjb2fpBXik7ZLRhZBULAo1WpDiqU= Subject key identifier: 76:B6:F4:74:BC:77:00:92:EA:6B:AD:99:24:C7:D7:49:EF:9E:CB:D4 Authority key identifier: 7E:13:40:ED:23:23:A9:28:6E:98:0F:66:46:99:90:A9:A1:E3:07:5D Certificate issuer: /CN=7e1340ed2323a9286e980f66469990a9a1e3075d Certificate serial: 019BF53E0D42DB0294F58F498F6EEBF324C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft Manifest number: 03A0 Signing time: Sun 25 Jan 2026 13:00:42 +0000 Manifest this update: Sun 25 Jan 2026 13:00:42 +0000 Manifest next update: Mon 26 Jan 2026 13:00:42 +0000 Files and hashes: 1: fhNA7SMjqShumA9mRpmQqaHjB10.crl (hash: Ew8WF8aSPEoDGVYoOfXmlhm58R+eysZ8R+BpKRMEnho=) 2: l1nrHCg1JaRGqWglwBj3oSy_fj8.roa (hash: y4C2wS/8hOK+ga53wXjcr5tBKnj/Yfql4LK0XM8fOmk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.crl rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:0d:42:db:02:94:f5:8f:49:8f:6e:eb:f3:24:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e1340ed2323a9286e980f66469990a9a1e3075d Validity Not Before: Jan 25 13:00:42 2026 GMT Not After : Jan 26 13:00:42 2026 GMT Subject: CN=76b6f474bc770092ea6bad9924c7d749ef9ecbd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:28:c3:14:45:d3:d9:5b:60:83:e9:32:f6:07: 4d:ca:5c:f1:ca:d1:ad:82:27:ee:e5:7e:9c:8f:cb: d5:10:1a:a1:6c:89:98:b1:3c:4a:90:46:ac:cb:58: d2:08:6d:2e:40:32:31:fa:1f:7f:6d:12:cf:89:a3: 8d:a5:5c:7b:06:aa:f5:a7:97:8b:b7:72:59:07:7a: 9c:d3:b7:a2:76:30:90:02:9b:cf:52:68:67:cf:96: 0e:d0:35:ce:fb:ea:2b:4d:a7:4f:3b:a3:f3:40:fe: a7:f3:a5:61:23:03:36:79:3a:65:cb:ab:39:0c:7c: 5a:66:42:72:71:9d:03:59:52:80:8b:4a:6a:1f:7e: a5:f2:63:e2:4b:e6:3f:3c:a2:9e:76:fc:b8:61:e1: 55:94:1f:03:83:38:a4:43:e2:5e:67:43:06:4d:c7: fe:1d:b2:bc:e2:c0:d7:d3:b0:48:88:14:e8:72:0b: a0:cd:6b:af:6a:2f:8f:bd:f8:73:e4:93:3c:e4:a4: 92:05:fb:32:b0:22:de:12:30:6c:a9:a7:88:59:61: 53:5d:15:03:71:d2:a7:3b:1b:5d:94:29:f9:a3:f9: ec:28:1f:48:c5:35:ca:14:65:ff:a0:cf:e1:27:b7: 80:e2:bd:cf:52:4e:9d:6f:84:6a:61:c7:66:2c:71: 28:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:B6:F4:74:BC:77:00:92:EA:6B:AD:99:24:C7:D7:49:EF:9E:CB:D4 X509v3 Authority Key Identifier: keyid:7E:13:40:ED:23:23:A9:28:6E:98:0F:66:46:99:90:A9:A1:E3:07:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:2c:52:6f:12:62:21:78:0b:ca:e4:c8:fa:9a:f7:9d:cd:38: 20:9b:9e:fb:78:37:93:11:47:80:e8:9d:ba:30:e0:b2:c3:66: c1:ca:21:c9:67:01:1d:e2:17:4d:a6:75:10:d6:5b:38:0f:98: 68:67:0f:08:30:f3:df:60:d9:cb:c4:3e:d5:08:25:70:77:17: be:5b:5b:ac:cf:95:0a:f7:44:8b:7d:0e:96:f5:9e:d8:30:98: 61:33:7b:83:65:30:6a:1d:57:d2:36:13:c0:74:2b:59:f9:7d: d3:6d:1d:f1:bc:23:cc:d1:c6:c0:71:b3:8e:7a:3a:03:07:18: 14:dc:37:43:01:35:69:17:6e:62:91:29:8b:11:c6:bc:5f:77: 04:97:71:87:fb:67:fc:f3:d0:6b:35:4b:25:f1:d1:e5:2f:d0: 5e:4f:ba:e4:1c:ca:31:aa:59:1b:06:73:a5:3a:52:68:23:a7: 7f:8d:bd:c1:02:41:4a:c7:a7:3a:cb:84:50:f2:ea:ea:8f:ef: fa:28:38:9b:95:4a:f8:9d:44:ca:44:4c:2e:9a:c6:73:5f:2a: f8:72:f9:bf:b8:09:c9:02:8f:8e:ab:1b:be:34:7a:76:34:f8: 89:12:82:48:54:ba:13:f9:a7:3c:a5:5f:b5:47:8b:ee:ab:31: 85:83:43:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1Pg1C2wKU9Y9Jj27r8yTAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMTM0MGVkMjMyM2E5Mjg2ZTk4MGY2NjQ2OTk5MGE5YTFl MzA3NWQwHhcNMjYwMTI1MTMwMDQyWhcNMjYwMTI2MTMwMDQyWjAzMTEwLwYDVQQD Eyg3NmI2ZjQ3NGJjNzcwMDkyZWE2YmFkOTkyNGM3ZDc0OWVmOWVjYmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwijDFEXT2Vtgg+ky9gdNylzxytGt gifu5X6cj8vVEBqhbImYsTxKkEasy1jSCG0uQDIx+h9/bRLPiaONpVx7Bqr1p5eL t3JZB3qc07eidjCQApvPUmhnz5YO0DXO++orTadPO6PzQP6n86VhIwM2eTply6s5 DHxaZkJycZ0DWVKAi0pqH36l8mPiS+Y/PKKedvy4YeFVlB8DgzikQ+JeZ0MGTcf+ HbK84sDX07BIiBTocgugzWuvai+Pvfhz5JM85KSSBfsysCLeEjBsqaeIWWFTXRUD cdKnOxtdlCn5o/nsKB9IxTXKFGX/oM/hJ7eA4r3PUk6db4RqYcdmLHEokwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHa29HS8dwCS6mutmSTH10nvnsvUMB8GA1UdIwQY MBaAFH4TQO0jI6kobpgPZkaZkKmh4wddMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmhOQTdTTWpxU2h1bUE5bVJwbVFxYUhqQjEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8xOWZjYzktY2IzMy00MjU1LTg4ODMt ZmUwMjdhMDM0NDQ5LzEvZmhOQTdTTWpxU2h1bUE5bVJwbVFxYUhqQjEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS8xOWZjYzktY2IzMy00MjU1LTg4ODMtZmUwMjdhMDM0NDQ5 LzEvZmhOQTdTTWpxU2h1bUE5bVJwbVFxYUhqQjEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMyxSbxJi IXgLyuTI+pr3nc04IJue+3g3kxFHgOidujDgssNmwcohyWcBHeIXTaZ1ENZbOA+Y aGcPCDDz32DZy8Q+1QglcHcXvltbrM+VCvdEi30OlvWe2DCYYTN7g2Uwah1X0jYT wHQrWfl9020d8bwjzNHGwHGzjno6AwcYFNw3QwE1aRduYpEpixHGvF93BJdxh/tn /PPQazVLJfHR5S/QXk+65BzKMapZGwZzpTpSaCOnf429wQJBSsenOsuEUPLq6o/v +ig4m5VK+J1EykRMLprGc18q+HL5v7gJyQKPjqsbvjR6djT4iRKCSFS6E/mnPKVf tUeL7qsxhYNDvA== -----END CERTIFICATE-----Generated at Sun Jan 25 19:23:51 2026 by rpki-client