This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft File: fgLiCr0iA7BXaGscrWzBJTREuLI.mft (raw, json) Hash identifier: 7fj1b7e/6D8xQjqonpsi/xfSZJ06IBzcP1NL4v+Yn7I= Subject key identifier: 3A:6A:AC:04:1E:77:4A:F3:6C:B0:9B:56:64:8B:F8:C5:F4:81:B9:F9 Authority key identifier: 7E:02:E2:0A:BD:22:03:B0:57:68:6B:1C:AD:6C:C1:25:34:44:B8:B2 Certificate issuer: /CN=7e02e20abd2203b057686b1cad6cc1253444b8b2 Certificate serial: 019BF5751DAAB2CF0847A6137673CA15FBB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft Manifest number: 0164 Signing time: Sun 25 Jan 2026 14:00:51 +0000 Manifest this update: Sun 25 Jan 2026 14:00:51 +0000 Manifest next update: Mon 26 Jan 2026 14:00:51 +0000 Files and hashes: 1: KP-ylf8ytthvJyIxnF220410W_w.roa (hash: C5HlcdAoo1o+AnwI6JDZzjVDacowCGaTh3ddFqxBD4g=) 2: fgLiCr0iA7BXaGscrWzBJTREuLI.crl (hash: M9EfMNPLcXrLzNpL3AuUtKdHtWnASu9a037ba8KVhLA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.crl rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:1d:aa:b2:cf:08:47:a6:13:76:73:ca:15:fb:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e02e20abd2203b057686b1cad6cc1253444b8b2 Validity Not Before: Jan 25 14:00:51 2026 GMT Not After : Jan 26 14:00:51 2026 GMT Subject: CN=3a6aac041e774af36cb09b56648bf8c5f481b9f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:af:27:12:ba:62:3b:ed:9d:cd:73:85:a7:24: 05:d2:68:9f:9c:01:b9:c3:cd:84:bb:7b:2a:36:44: c8:c6:35:8e:74:3a:77:2c:c9:c0:24:e4:a5:a9:e2: 06:9b:e6:cb:45:67:92:29:fd:4a:18:b0:5d:0b:1b: b4:1d:74:ff:87:d5:ff:01:ba:1c:a6:9b:c4:db:6a: 71:f5:fd:c7:0f:83:80:70:91:8a:b0:fe:33:a3:9f: 14:08:09:52:06:5f:ea:02:dc:db:52:80:13:d8:1e: 0a:80:6b:b4:1f:35:f3:f9:f4:c3:41:f8:87:c2:28: b4:a0:f1:59:5e:3b:1b:f5:2f:b6:62:1a:a9:0d:41: 4a:e2:bd:8a:0c:f1:f9:d5:5e:a0:8e:fb:3e:8f:dc: 01:93:e3:cf:f5:00:bc:6c:f3:d5:43:b3:c1:95:08: 11:4b:79:84:73:66:3d:a3:1c:0d:13:f3:80:61:57: 73:98:e5:ee:15:86:9d:ca:7b:1c:c9:52:6a:67:9a: 55:4c:70:0f:bd:3a:b0:61:d7:8f:06:25:5a:63:06: 55:de:7a:51:85:83:4b:0f:79:3d:0c:52:79:35:1c: f0:12:e0:68:3d:2f:47:53:15:63:3a:ed:ad:1e:ca: ab:44:b8:78:bd:09:6c:2c:a2:72:60:ad:26:36:24: 33:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:6A:AC:04:1E:77:4A:F3:6C:B0:9B:56:64:8B:F8:C5:F4:81:B9:F9 X509v3 Authority Key Identifier: keyid:7E:02:E2:0A:BD:22:03:B0:57:68:6B:1C:AD:6C:C1:25:34:44:B8:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:2e:f1:11:5a:e1:d5:b2:85:b2:be:6e:80:8a:c7:e7:df:79: d1:c9:db:43:fd:1a:72:47:19:be:73:ac:be:3e:ac:b8:1e:5e: 9b:17:7b:84:a9:88:d9:3a:bc:7f:55:cd:04:62:36:46:8b:6a: 60:c6:f1:9c:b3:4b:24:7d:4e:40:ed:e1:ca:2a:85:a9:9c:16: 67:f7:b3:29:84:9d:ab:0b:ce:da:15:71:b3:64:03:86:d6:f1: 75:27:12:87:d6:bd:73:98:d6:73:cf:f0:a3:5f:21:ef:40:8d: ea:02:09:1e:de:4a:0e:54:28:a9:04:ca:65:af:af:12:b2:92: e4:6a:74:0f:6c:28:76:ba:0d:5d:37:82:0b:98:b3:c9:d5:3d: a3:0f:57:ee:7d:ea:26:34:7f:5c:ed:b1:d0:41:14:04:42:e7: 5a:ef:41:b0:93:d9:78:22:e5:80:4f:bd:c7:4c:9f:9a:e4:4b: 96:91:c6:60:a9:9a:11:de:e2:bb:81:ed:87:c0:3c:fb:fa:7a: f3:84:93:e3:b8:95:5c:25:12:34:f6:28:93:ba:f8:7f:88:04: 17:1f:f1:49:ca:55:fb:23:11:86:a1:c0:fb:6d:19:5d:b8:af: 68:7f:ad:fc:98:ac:c0:e1:a7:43:9b:78:44:84:77:67:28:c8: a3:4c:3a:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dR2qss8IR6YTdnPKFfu4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMDJlMjBhYmQyMjAzYjA1NzY4NmIxY2FkNmNjMTI1MzQ0 NGI4YjIwHhcNMjYwMTI1MTQwMDUxWhcNMjYwMTI2MTQwMDUxWjAzMTEwLwYDVQQD EygzYTZhYWMwNDFlNzc0YWYzNmNiMDliNTY2NDhiZjhjNWY0ODFiOWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAka8nErpiO+2dzXOFpyQF0mifnAG5 w82Eu3sqNkTIxjWOdDp3LMnAJOSlqeIGm+bLRWeSKf1KGLBdCxu0HXT/h9X/Aboc ppvE22px9f3HD4OAcJGKsP4zo58UCAlSBl/qAtzbUoAT2B4KgGu0HzXz+fTDQfiH wii0oPFZXjsb9S+2YhqpDUFK4r2KDPH51V6gjvs+j9wBk+PP9QC8bPPVQ7PBlQgR S3mEc2Y9oxwNE/OAYVdzmOXuFYadynscyVJqZ5pVTHAPvTqwYdePBiVaYwZV3npR hYNLD3k9DFJ5NRzwEuBoPS9HUxVjOu2tHsqrRLh4vQlsLKJyYK0mNiQzQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDpqrAQed0rzbLCbVmSL+MX0gbn5MB8GA1UdIwQY MBaAFH4C4gq9IgOwV2hrHK1swSU0RLiyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmdMaUNyMGlBN0JYYUdzY3JXekJKVFJFdUxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lOThhNzktMjQ5YS00MDQ4LTk1ODEt ZjMwNzA5ZDljMzc5LzEvZmdMaUNyMGlBN0JYYUdzY3JXekJKVFJFdUxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9lOThhNzktMjQ5YS00MDQ4LTk1ODEtZjMwNzA5ZDljMzc5 LzEvZmdMaUNyMGlBN0JYYUdzY3JXekJKVFJFdUxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATS7xEVrh 1bKFsr5ugIrH59950cnbQ/0ackcZvnOsvj6suB5emxd7hKmI2Tq8f1XNBGI2Rotq YMbxnLNLJH1OQO3hyiqFqZwWZ/ezKYSdqwvO2hVxs2QDhtbxdScSh9a9c5jWc8/w o18h70CN6gIJHt5KDlQoqQTKZa+vErKS5Gp0D2wodroNXTeCC5izydU9ow9X7n3q JjR/XO2x0EEUBELnWu9BsJPZeCLlgE+9x0yfmuRLlpHGYKmaEd7iu4Hth8A8+/p6 84ST47iVXCUSNPYok7r4f4gEFx/xScpV+yMRhqHA+20ZXbivaH+t/JiswOGnQ5t4 RIR3ZyjIo0w6DA== -----END CERTIFICATE-----Generated at Sun Jan 25 20:55:47 2026 by rpki-client