This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft File: fySblURiBoP5SziKdVGmimST7RI.mft (raw, json) Hash identifier: Zn7+XLP1yhseNaD1SwuvoHbHffY8rXHK23VzYVW9P50= Subject key identifier: 79:78:2B:8D:73:0E:59:D2:90:EF:16:1B:29:10:FD:5A:75:E0:87:6F Authority key identifier: 7F:24:9B:95:44:62:06:83:F9:4B:38:8A:75:51:A6:8A:64:93:ED:12 Certificate issuer: /CN=7f249b9544620683f94b388a7551a68a6493ed12 Certificate serial: 019BF988DC768C3CB2E52DB2126D0D823072 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fySblURiBoP5SziKdVGmimST7RI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft Manifest number: 041A Signing time: Mon 26 Jan 2026 09:00:54 +0000 Manifest this update: Mon 26 Jan 2026 09:00:54 +0000 Manifest next update: Tue 27 Jan 2026 09:00:54 +0000 Files and hashes: 1: dnXyH3vZjdJd8T6MD3l1oA-JYEE.roa (hash: xs3AEKZ6AnA/WEhDya53kTTaCVsu33jeAdkrvd9mk2w=) 2: fySblURiBoP5SziKdVGmimST7RI.crl (hash: l98m1yPJdqLvKiYDnBjhynfV/y7n0A0sg15SeMQZBog=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft rsync://rpki.ripe.net/repository/DEFAULT/fySblURiBoP5SziKdVGmimST7RI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:88:dc:76:8c:3c:b2:e5:2d:b2:12:6d:0d:82:30:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f249b9544620683f94b388a7551a68a6493ed12 Validity Not Before: Jan 26 09:00:54 2026 GMT Not After : Jan 27 09:00:54 2026 GMT Subject: CN=79782b8d730e59d290ef161b2910fd5a75e0876f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:56:77:8e:49:44:3a:fb:22:da:02:55:90:a6: 4a:5d:ab:02:18:a9:d3:2f:19:35:64:7a:8c:40:38: 55:f0:05:6d:39:37:b6:06:a3:d5:af:e0:0a:c9:12: 54:8d:85:08:3d:69:a2:0e:93:cf:85:f9:a8:39:93: 57:95:4a:eb:a4:91:9b:02:46:97:ee:9b:52:e3:31: 72:0b:cc:57:18:19:31:20:50:24:09:56:7a:a5:f6: 57:9a:85:31:33:0e:fb:97:68:39:e2:63:85:34:da: 17:67:ad:b3:79:31:22:07:41:d1:63:fd:23:49:30: ab:6e:5e:dc:b0:fc:67:c9:ff:9b:0c:b2:62:77:6c: 66:8d:05:d3:a4:2e:92:71:2a:f3:98:69:ca:6a:2e: 4e:b7:0a:84:65:6b:ce:88:af:0b:c9:d3:33:8a:b3: 2d:6e:56:8f:a7:61:04:83:1f:5d:0e:2f:58:cb:20: 3c:7a:0a:ec:52:1f:9c:e6:70:6f:f7:be:94:6a:89: 85:ab:d0:01:ca:5d:f7:b6:80:aa:b8:e2:ac:cd:77: 99:b1:4b:3a:29:2d:c5:cf:5f:29:f8:84:cd:8b:15: 7f:4e:a8:ce:4b:fb:c8:84:51:b4:6b:a6:4c:5f:a8: 3d:b5:2e:fe:80:04:64:be:6c:e8:b3:bd:5d:cb:ae: b3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:78:2B:8D:73:0E:59:D2:90:EF:16:1B:29:10:FD:5A:75:E0:87:6F X509v3 Authority Key Identifier: keyid:7F:24:9B:95:44:62:06:83:F9:4B:38:8A:75:51:A6:8A:64:93:ED:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fySblURiBoP5SziKdVGmimST7RI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:84:66:c9:97:17:70:28:8b:b3:24:5c:da:08:2d:a0:b0:69: e0:b6:33:10:d9:01:6e:0d:85:e6:79:91:e3:ec:da:82:7a:9d: 29:7f:b8:2e:3f:45:7b:0f:c1:d0:ac:e7:8b:1e:85:bf:08:95: 94:53:f6:c2:23:0d:e0:4b:7f:27:ba:0e:57:17:2a:31:56:99: e7:88:56:26:25:72:13:ac:60:25:62:67:6a:05:0a:f0:31:d8: 7e:28:f6:26:2a:68:f1:7e:f9:39:10:ae:67:f7:ad:33:95:55: dc:22:cc:b6:7d:41:e4:26:c0:0c:b2:e0:ca:b7:b9:19:1b:e6: c1:3d:94:16:a8:c1:8e:24:85:51:36:0f:c9:51:95:ef:43:8e: 87:3d:73:76:4d:c1:9f:c9:b6:d0:1e:1d:08:cc:a9:b0:a4:dd: c8:2f:7c:01:19:d9:c2:fd:c8:5d:dd:8f:00:9e:38:2b:36:5f: 41:e2:25:7b:2e:2c:42:b4:6e:78:1c:46:ce:01:db:87:e1:df: 7b:41:41:ff:29:c2:c5:c0:71:13:e0:e9:40:39:22:30:bc:09: c7:c9:6c:1a:a9:c7:19:39:69:f9:e7:9a:e8:3b:ec:69:d0:b6: c2:f2:f4:51:fa:d7:20:cc:0b:d3:ff:c2:cd:9f:df:e6:7e:6c: be:a1:62:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5iNx2jDyy5S2yEm0NgjByMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmMjQ5Yjk1NDQ2MjA2ODNmOTRiMzg4YTc1NTFhNjhhNjQ5 M2VkMTIwHhcNMjYwMTI2MDkwMDU0WhcNMjYwMTI3MDkwMDU0WjAzMTEwLwYDVQQD Eyg3OTc4MmI4ZDczMGU1OWQyOTBlZjE2MWIyOTEwZmQ1YTc1ZTA4NzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6VZ3jklEOvsi2gJVkKZKXasCGKnT Lxk1ZHqMQDhV8AVtOTe2BqPVr+AKyRJUjYUIPWmiDpPPhfmoOZNXlUrrpJGbAkaX 7ptS4zFyC8xXGBkxIFAkCVZ6pfZXmoUxMw77l2g54mOFNNoXZ62zeTEiB0HRY/0j STCrbl7csPxnyf+bDLJid2xmjQXTpC6ScSrzmGnKai5OtwqEZWvOiK8LydMzirMt blaPp2EEgx9dDi9YyyA8egrsUh+c5nBv976UaomFq9AByl33toCquOKszXeZsUs6 KS3Fz18p+ITNixV/TqjOS/vIhFG0a6ZMX6g9tS7+gARkvmzos71dy66znwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHl4K41zDlnSkO8WGykQ/Vp14IdvMB8GA1UdIwQY MBaAFH8km5VEYgaD+Us4inVRpopkk+0SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnlTYmxVUmlCb1A1U3ppS2RWR21pbVNUN1JJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi83YWEwNGUtNDgwNy00OTg4LTkxMDMt ODQyMzk3ZTMwNjQzLzEvZnlTYmxVUmlCb1A1U3ppS2RWR21pbVNUN1JJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi83YWEwNGUtNDgwNy00OTg4LTkxMDMtODQyMzk3ZTMwNjQz LzEvZnlTYmxVUmlCb1A1U3ppS2RWR21pbVNUN1JJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALoRmyZcX cCiLsyRc2ggtoLBp4LYzENkBbg2F5nmR4+zagnqdKX+4Lj9Few/B0Kznix6FvwiV lFP2wiMN4Et/J7oOVxcqMVaZ54hWJiVyE6xgJWJnagUK8DHYfij2Jipo8X75ORCu Z/etM5VV3CLMtn1B5CbADLLgyre5GRvmwT2UFqjBjiSFUTYPyVGV70OOhz1zdk3B n8m20B4dCMypsKTdyC98ARnZwv3IXd2PAJ44KzZfQeIley4sQrRueBxGzgHbh+Hf e0FB/ynCxcBxE+DpQDkiMLwJx8lsGqnHGTlp+eea6DvsadC2wvL0UfrXIMwL0//C zZ/f5n5svqFijA== -----END CERTIFICATE-----Generated at Mon Jan 26 11:47:13 2026 by rpki-client