This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.mft File: FgRPZYu8kicHhfe7ByrJNolfSTM.mft (raw, json) Hash identifier: n9WM0h5uBfhQAJPo+RhjSxgAqcxczaDLR8e3KG6gT3M= Subject key identifier: 52:87:C8:F6:BF:22:F1:74:55:17:C6:B7:C7:61:A3:DB:1A:36:6F:4F Authority key identifier: 16:04:4F:65:8B:BC:92:27:07:85:F7:BB:07:2A:C9:36:89:5F:49:33 Certificate issuer: /CN=16044f658bbc92270785f7bb072ac936895f4933 Certificate serial: 019BF65091E46B18C7007D55341F8605BEA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgRPZYu8kicHhfe7ByrJNolfSTM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.mft Manifest number: 7D Signing time: Sun 25 Jan 2026 18:00:33 +0000 Manifest this update: Sun 25 Jan 2026 18:00:33 +0000 Manifest next update: Mon 26 Jan 2026 18:00:33 +0000 Files and hashes: 1: FgRPZYu8kicHhfe7ByrJNolfSTM.crl (hash: moPqbEHkzXMsjwtPZCI+PyGgynFVvhmLS7Hp7kn70fI=) 2: WatKg_0MoVqhZNrvrktjemd-kkU.roa (hash: HB6mZ1x55io1eH3g2s4HymshoqNX8HC4t8plzzNViRg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.crl rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.mft rsync://rpki.ripe.net/repository/DEFAULT/FgRPZYu8kicHhfe7ByrJNolfSTM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:50:91:e4:6b:18:c7:00:7d:55:34:1f:86:05:be:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16044f658bbc92270785f7bb072ac936895f4933 Validity Not Before: Jan 25 18:00:33 2026 GMT Not After : Jan 26 18:00:33 2026 GMT Subject: CN=5287c8f6bf22f1745517c6b7c761a3db1a366f4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f5:ad:39:0b:e9:33:cc:4b:8f:7f:44:24:e7: cf:e2:7f:85:6e:8f:bb:1f:ff:db:1e:aa:3f:09:dc: d0:35:a5:7e:99:1e:0f:7d:4e:9d:34:8e:24:22:ba: 9e:7c:72:37:2d:1e:2d:d3:ec:0e:5b:bd:2f:34:4b: f1:a3:e6:25:b4:29:8c:fb:a0:5a:ed:a6:8e:0a:12: 49:08:d2:34:40:eb:c3:30:51:06:0b:29:1e:fd:2f: 76:52:96:48:b9:a9:8b:74:eb:fd:0f:89:8b:f8:28: b0:23:73:48:08:6a:55:49:a6:93:58:c9:32:75:3e: 9c:25:a7:86:dc:9a:f4:5d:e4:2a:64:f7:d8:48:44: 91:98:3c:ba:ac:de:0f:e6:ec:bf:f3:85:a6:ff:d0: 80:ca:0b:a3:4f:8e:8b:a0:e1:22:81:2e:f1:0b:92: 30:87:fd:b2:59:4e:c0:23:99:51:27:12:24:7c:3c: e1:91:20:60:e1:c9:05:95:a3:b6:05:84:65:af:e4: b3:3f:27:11:95:28:22:e5:a3:db:97:7d:d6:0c:3c: 46:98:76:f1:c7:b4:46:04:bc:93:ef:4e:09:d5:34: b2:4a:cc:89:2b:da:48:bb:9a:3e:f8:cc:b6:81:da: f0:f8:da:ab:73:b2:8a:89:2d:0b:a3:85:69:9b:61: 5f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:87:C8:F6:BF:22:F1:74:55:17:C6:B7:C7:61:A3:DB:1A:36:6F:4F X509v3 Authority Key Identifier: keyid:16:04:4F:65:8B:BC:92:27:07:85:F7:BB:07:2A:C9:36:89:5F:49:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgRPZYu8kicHhfe7ByrJNolfSTM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:12:0c:89:5a:3c:7f:e0:81:d9:d3:fc:bc:0c:71:ab:40:71: 48:e2:4a:ea:79:70:80:b1:cc:a6:50:11:aa:28:72:fc:3b:6c: 8c:8e:a0:f2:63:3f:43:e1:b5:42:40:45:8a:ae:79:d2:f6:86: aa:79:17:70:16:66:0a:ed:39:19:f9:a7:6c:fa:f4:e9:d5:d0: ea:cb:57:24:a2:13:73:8f:d1:dd:a7:51:52:d4:fc:9e:0c:dc: fe:f5:60:98:e4:28:ce:0a:eb:e1:aa:14:59:64:d2:9a:a7:43: e0:52:71:f5:a3:da:ab:ed:61:3c:62:3c:ce:a3:28:e2:d0:1c: 03:9a:03:83:29:51:7b:ec:e2:c1:41:c0:f0:55:d3:a8:6e:89: 4a:f2:36:0b:05:e4:27:d1:57:81:29:d3:83:48:c6:2f:9e:fa: 60:4b:e1:d0:0e:58:13:21:61:1e:ac:eb:2b:5d:53:c2:9f:91: 5c:ce:a2:ce:f9:de:91:37:11:8c:3c:1a:23:86:a3:1f:28:6f: 96:f3:03:24:86:71:b5:da:6b:6f:cf:7d:e9:9a:c9:62:49:76: ac:d2:01:35:83:29:c3:22:22:22:a1:ba:53:20:f7:cd:f1:34: 70:92:1f:21:65:47:8b:b7:2a:63:af:53:86:04:4c:62:10:6a: 84:84:cc:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UJHkaxjHAH1VNB+GBb6gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MDQ0ZjY1OGJiYzkyMjcwNzg1ZjdiYjA3MmFjOTM2ODk1 ZjQ5MzMwHhcNMjYwMTI1MTgwMDMzWhcNMjYwMTI2MTgwMDMzWjAzMTEwLwYDVQQD Eyg1Mjg3YzhmNmJmMjJmMTc0NTUxN2M2YjdjNzYxYTNkYjFhMzY2ZjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfWtOQvpM8xLj39EJOfP4n+Fbo+7 H//bHqo/CdzQNaV+mR4PfU6dNI4kIrqefHI3LR4t0+wOW70vNEvxo+YltCmM+6Ba 7aaOChJJCNI0QOvDMFEGCyke/S92UpZIuamLdOv9D4mL+CiwI3NICGpVSaaTWMky dT6cJaeG3Jr0XeQqZPfYSESRmDy6rN4P5uy/84Wm/9CAygujT46LoOEigS7xC5Iw h/2yWU7AI5lRJxIkfDzhkSBg4ckFlaO2BYRlr+SzPycRlSgi5aPbl33WDDxGmHbx x7RGBLyT704J1TSySsyJK9pIu5o++My2gdrw+Nqrc7KKiS0Lo4Vpm2FfFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFKHyPa/IvF0VRfGt8dho9saNm9PMB8GA1UdIwQY MBaAFBYET2WLvJInB4X3uwcqyTaJX0kzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmdSUFpZdThraWNIaGZlN0J5ckpOb2xmU1RNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9kYjUwM2MtZDY1NC00YjQ2LTliOGIt ODIyYjI1NTUzOGZlLzEvRmdSUFpZdThraWNIaGZlN0J5ckpOb2xmU1RNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9kYjUwM2MtZDY1NC00YjQ2LTliOGItODIyYjI1NTUzOGZl LzEvRmdSUFpZdThraWNIaGZlN0J5ckpOb2xmU1RNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAxIMiVo8 f+CB2dP8vAxxq0BxSOJK6nlwgLHMplARqihy/DtsjI6g8mM/Q+G1QkBFiq550vaG qnkXcBZmCu05GfmnbPr06dXQ6stXJKITc4/R3adRUtT8ngzc/vVgmOQozgrr4aoU WWTSmqdD4FJx9aPaq+1hPGI8zqMo4tAcA5oDgylRe+ziwUHA8FXTqG6JSvI2CwXk J9FXgSnTg0jGL576YEvh0A5YEyFhHqzrK11Twp+RXM6izvnekTcRjDwaI4ajHyhv lvMDJIZxtdprb8996ZrJYkl2rNIBNYMpwyIiIqG6UyD3zfE0cJIfIWVHi7cqY69T hgRMYhBqhITMow== -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:07 2026 by rpki-client