This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft File: fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft (raw, json) Hash identifier: kLvm9ShMNFbqEO7Fjvzi9ovl1hh8EMsXfruC9NQAJgE= Subject key identifier: 71:AC:B6:2E:F1:EF:B8:6F:29:F2:21:52:3F:35:DD:C9:85:B9:D2:00 Authority key identifier: 7C:91:29:AA:DB:20:33:54:D1:5F:F5:6A:27:E8:DB:AD:AF:8D:07:05 Certificate issuer: /CN=7c9129aadb203354d15ff56a27e8dbadaf8d0705 Certificate serial: 019BF72D241AAFEC8F9BEC9C1978AF57A3AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fJEpqtsgM1TRX_VqJ-jbra-NBwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft Manifest number: 0B40 Signing time: Sun 25 Jan 2026 22:01:29 +0000 Manifest this update: Sun 25 Jan 2026 22:01:29 +0000 Manifest next update: Mon 26 Jan 2026 22:01:29 +0000 Files and hashes: 1: 2Vg8mtqhtEjY6JU3zi44laQwebs.roa (hash: Uc9g1r54C8yp0GXiH0sU3THCD+1hgCm7+9g2Pk5/hcs=) 2: fJEpqtsgM1TRX_VqJ-jbra-NBwU.crl (hash: K3r8KTEL8JQDQtLOch48ZK/3xpYkDWtAxFQWTIlhI9k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft rsync://rpki.ripe.net/repository/DEFAULT/fJEpqtsgM1TRX_VqJ-jbra-NBwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:24:1a:af:ec:8f:9b:ec:9c:19:78:af:57:a3:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c9129aadb203354d15ff56a27e8dbadaf8d0705 Validity Not Before: Jan 25 22:01:29 2026 GMT Not After : Jan 26 22:01:29 2026 GMT Subject: CN=71acb62ef1efb86f29f221523f35ddc985b9d200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:53:87:a7:ea:c3:30:85:cc:8a:cd:47:53:bd: 24:da:5e:83:79:cb:e3:ff:03:2f:d4:4a:13:6a:a4: 88:36:56:b9:01:c7:c1:b4:fd:a7:62:a1:6b:7c:df: f0:fc:2a:b3:5a:65:73:f8:89:3b:13:f6:69:02:ea: e6:72:85:c4:af:09:2b:57:f6:02:79:45:55:a0:f0: 2d:28:66:2b:32:27:8d:e3:8f:c6:bd:af:b8:f3:0d: 0b:be:ac:a1:6f:8c:71:82:19:d5:fb:af:02:e1:35: 7a:84:6d:a1:3d:c4:ef:f4:8c:09:61:65:7a:c0:5b: e4:be:a8:2c:3e:b7:1e:a4:9d:45:0a:1a:43:e4:aa: 55:cd:ab:53:f7:38:f4:2b:9a:55:14:50:02:af:7c: de:de:0b:52:a6:ab:0a:18:f2:dc:64:77:e0:2b:e0: a2:00:49:3a:53:d9:bf:45:f7:a6:35:b5:08:c7:d4: 5a:5e:27:a0:7e:c1:2b:a4:8e:8f:e1:47:bc:b3:db: 81:e5:f7:51:f7:43:fa:d2:61:1a:78:7d:29:e6:c2: ca:ff:66:2f:0b:8c:e6:d5:58:a7:cb:5e:d7:20:b3: b8:c4:66:58:90:6c:23:a5:98:fb:c6:30:e5:18:a0: 68:0a:df:2a:eb:7c:3d:35:01:93:6c:3d:ec:90:f6: bb:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:AC:B6:2E:F1:EF:B8:6F:29:F2:21:52:3F:35:DD:C9:85:B9:D2:00 X509v3 Authority Key Identifier: keyid:7C:91:29:AA:DB:20:33:54:D1:5F:F5:6A:27:E8:DB:AD:AF:8D:07:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJEpqtsgM1TRX_VqJ-jbra-NBwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:c2:12:5f:75:75:62:c1:12:05:40:95:b1:a3:97:9e:d0:b6: 71:db:f7:61:8f:58:36:1f:75:ca:3e:8b:bc:f0:97:1f:cb:64: 86:d4:5d:2c:f4:23:0c:46:0a:68:fd:29:c3:0c:d0:67:67:4c: 8a:16:61:8e:34:db:57:61:10:6c:ca:db:16:3e:a4:66:56:c0: a4:b5:75:11:07:0f:48:6d:34:2b:1a:c8:7b:d2:a1:1d:fe:ee: 46:6c:c2:28:7d:ea:bc:31:81:c2:21:bc:68:78:ef:0d:04:7f: ea:63:4a:fc:76:dd:63:b7:76:af:08:e2:7b:9b:8f:16:3e:f3: a6:cd:30:86:8a:21:71:1d:c4:24:66:6c:66:af:43:4f:80:7f: d4:c2:e3:05:ad:61:df:0d:5f:05:95:ad:98:d4:de:cb:92:de: b1:9b:dc:f4:80:ae:7d:03:ce:01:84:fc:d6:14:93:fd:40:6c: 29:c5:89:b7:18:e7:da:8f:b9:6e:1f:66:cc:10:50:12:6d:93: 8b:00:41:f4:f7:50:02:8d:ec:0c:64:c3:6b:76:ca:b4:18:89: 9a:86:da:aa:6a:7e:ae:b0:1c:24:d9:2d:89:9a:12:68:3f:c7: 61:54:63:03:a6:56:32:bd:c4:5e:a0:e5:e7:3a:1d:e9:49:0e: 66:34:63:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LSQar+yPm+ycGXivV6OsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjOTEyOWFhZGIyMDMzNTRkMTVmZjU2YTI3ZThkYmFkYWY4 ZDA3MDUwHhcNMjYwMTI1MjIwMTI5WhcNMjYwMTI2MjIwMTI5WjAzMTEwLwYDVQQD Eyg3MWFjYjYyZWYxZWZiODZmMjlmMjIxNTIzZjM1ZGRjOTg1YjlkMjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lOHp+rDMIXMis1HU70k2l6Decvj /wMv1EoTaqSINla5AcfBtP2nYqFrfN/w/CqzWmVz+Ik7E/ZpAurmcoXErwkrV/YC eUVVoPAtKGYrMieN44/Gva+48w0Lvqyhb4xxghnV+68C4TV6hG2hPcTv9IwJYWV6 wFvkvqgsPrcepJ1FChpD5KpVzatT9zj0K5pVFFACr3ze3gtSpqsKGPLcZHfgK+Ci AEk6U9m/RfemNbUIx9RaXiegfsErpI6P4Ue8s9uB5fdR90P60mEaeH0p5sLK/2Yv C4zm1Viny17XILO4xGZYkGwjpZj7xjDlGKBoCt8q63w9NQGTbD3skPa7xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHGsti7x77hvKfIhUj813cmFudIAMB8GA1UdIwQY MBaAFHyRKarbIDNU0V/1aifo262vjQcFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkpFcHF0c2dNMVRSWF9WcUotamJyYS1OQndVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi82ZTRmZWQtNjZjOC00ZDI0LWFhNjYt ZjJjNGM5Y2ExNTU2LzEvZkpFcHF0c2dNMVRSWF9WcUotamJyYS1OQndVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi82ZTRmZWQtNjZjOC00ZDI0LWFhNjYtZjJjNGM5Y2ExNTU2 LzEvZkpFcHF0c2dNMVRSWF9WcUotamJyYS1OQndVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhcISX3V1 YsESBUCVsaOXntC2cdv3YY9YNh91yj6LvPCXH8tkhtRdLPQjDEYKaP0pwwzQZ2dM ihZhjjTbV2EQbMrbFj6kZlbApLV1EQcPSG00KxrIe9KhHf7uRmzCKH3qvDGBwiG8 aHjvDQR/6mNK/HbdY7d2rwjie5uPFj7zps0whoohcR3EJGZsZq9DT4B/1MLjBa1h 3w1fBZWtmNTey5LesZvc9ICufQPOAYT81hST/UBsKcWJtxjn2o+5bh9mzBBQEm2T iwBB9PdQAo3sDGTDa3bKtBiJmobaqmp+rrAcJNktiZoSaD/HYVRjA6ZWMr3EXqDl 5zod6UkOZjRjyA== -----END CERTIFICATE-----Generated at Mon Jan 26 03:11:31 2026 by rpki-client