This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft File: fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft (raw, json) Hash identifier: xODe1tMMmk+ZNqBdIs849uNIMPbRhErUhgLyOr4bGus= Subject key identifier: 79:46:B9:97:64:C4:E4:B9:98:51:AC:AF:CC:83:30:C4:E7:70:88:80 Authority key identifier: 7D:37:8D:5E:9F:6E:22:83:2F:94:36:DE:42:A0:00:03:A3:5E:5A:DC Certificate issuer: /CN=7d378d5e9f6e22832f9436de42a00003a35e5adc Certificate serial: 019BF57542742F7C0A82200285E6A5A924B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTeNXp9uIoMvlDbeQqAAA6NeWtw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft Manifest number: 08C1 Signing time: Sun 25 Jan 2026 14:01:01 +0000 Manifest this update: Sun 25 Jan 2026 14:01:01 +0000 Manifest next update: Mon 26 Jan 2026 14:01:01 +0000 Files and hashes: 1: 70GrOh32dQLUqU95-AO2TD0BpWg.roa (hash: JinzzeihpLTiA6O6jFrNum74gOx6URavCLmJpxWV2cM=) 2: fTeNXp9uIoMvlDbeQqAAA6NeWtw.crl (hash: oN0HVbs5m9WzhuchePLgdS1Ssz0BIgyeJNuUrcM2A/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft rsync://rpki.ripe.net/repository/DEFAULT/fTeNXp9uIoMvlDbeQqAAA6NeWtw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:42:74:2f:7c:0a:82:20:02:85:e6:a5:a9:24:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d378d5e9f6e22832f9436de42a00003a35e5adc Validity Not Before: Jan 25 14:01:01 2026 GMT Not After : Jan 26 14:01:01 2026 GMT Subject: CN=7946b99764c4e4b99851acafcc8330c4e7708880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:58:6f:16:e1:7d:36:10:8f:51:ee:40:1d:ec: e0:ed:98:5e:7e:3e:39:ff:85:ae:91:6c:e4:2c:fe: 13:4a:00:a9:ee:73:11:25:d3:1e:9c:fb:8f:d1:c7: 39:5f:4f:16:0d:c3:63:31:c2:17:49:f4:90:94:ed: 77:88:f8:d9:9e:32:09:45:ec:82:d9:11:77:20:75: fd:fa:87:39:0f:c8:51:31:3a:a8:23:52:a4:c9:e2: 83:4a:0d:00:35:ef:75:81:76:9d:a6:0a:b8:f3:c0: a7:42:a0:d3:36:b9:99:2d:81:85:13:b9:1b:62:ec: 46:95:d3:53:77:53:c5:a4:93:49:61:72:f5:df:bb: 3c:56:41:6f:d6:23:f7:e7:78:f1:0e:4c:1b:e4:51: 8e:67:df:f0:0e:12:75:63:1a:2b:9b:86:d7:3b:39: 41:dc:55:de:6e:e7:b1:32:b9:b3:7a:8f:78:3d:95: b6:cb:b6:59:e4:55:dd:90:e0:21:e6:e2:a1:2a:34: 7d:ab:94:5f:f8:c4:11:81:eb:92:da:e6:27:da:fe: bd:38:4c:53:ef:ba:34:74:e8:e0:aa:ab:f0:67:0a: 26:91:cc:11:eb:93:6b:eb:c3:ed:92:89:41:a6:60: 53:a1:b6:90:c5:81:65:13:97:65:86:0c:d8:4d:c7: 8c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:46:B9:97:64:C4:E4:B9:98:51:AC:AF:CC:83:30:C4:E7:70:88:80 X509v3 Authority Key Identifier: keyid:7D:37:8D:5E:9F:6E:22:83:2F:94:36:DE:42:A0:00:03:A3:5E:5A:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTeNXp9uIoMvlDbeQqAAA6NeWtw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:99:4f:93:c2:91:f7:15:07:d2:2c:b2:18:a6:b8:1f:11:0c: 0b:ed:37:1c:9b:28:06:86:f4:86:c8:62:74:35:18:d3:70:e1: e0:54:82:7b:99:53:df:65:f1:7a:37:34:ea:22:a5:f7:0d:16: 43:d7:e0:6d:1a:42:56:3b:72:00:cf:73:2a:37:69:cc:12:27: 1f:df:cf:c1:64:e7:b7:06:d4:e7:72:ce:d2:15:d3:ca:d3:e2: c2:ad:31:a7:d3:e5:0a:8b:43:f7:7d:b1:0e:d7:ee:ce:c9:24: 78:98:f7:97:5b:ed:12:d1:33:ad:0a:f7:ab:92:eb:a9:76:5f: 5c:9c:27:50:9d:f6:ae:bf:2f:8a:d2:4e:75:61:51:fa:7c:c5: 6d:4b:22:2d:77:e6:b8:3b:fe:a0:7e:b1:27:b1:85:1d:93:53: 11:19:d2:da:3f:ac:79:fa:40:db:47:24:21:03:9a:dc:37:60: ad:65:f1:9b:62:a0:0e:54:50:73:39:5e:ce:bc:e9:e5:2c:83: f6:ca:39:7d:7f:c9:13:e5:53:f4:c2:a3:b0:02:ce:75:c3:9f: b8:8a:3c:eb:94:dd:69:35:b5:77:04:60:ed:1d:38:51:39:ed: 20:af:e9:14:d7:c2:fe:24:c8:34:2a:85:e6:34:8e:92:68:5d: 29:7c:2c:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dUJ0L3wKgiAChealqSS1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMzc4ZDVlOWY2ZTIyODMyZjk0MzZkZTQyYTAwMDAzYTM1 ZTVhZGMwHhcNMjYwMTI1MTQwMTAxWhcNMjYwMTI2MTQwMTAxWjAzMTEwLwYDVQQD Eyg3OTQ2Yjk5NzY0YzRlNGI5OTg1MWFjYWZjYzgzMzBjNGU3NzA4ODgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FhvFuF9NhCPUe5AHezg7Zhefj45 /4WukWzkLP4TSgCp7nMRJdMenPuP0cc5X08WDcNjMcIXSfSQlO13iPjZnjIJReyC 2RF3IHX9+oc5D8hRMTqoI1KkyeKDSg0ANe91gXadpgq488CnQqDTNrmZLYGFE7kb YuxGldNTd1PFpJNJYXL137s8VkFv1iP353jxDkwb5FGOZ9/wDhJ1Yxorm4bXOzlB 3FXebuexMrmzeo94PZW2y7ZZ5FXdkOAh5uKhKjR9q5Rf+MQRgeuS2uYn2v69OExT 77o0dOjgqqvwZwomkcwR65Nr68PtkolBpmBTobaQxYFlE5dlhgzYTceMBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHlGuZdkxOS5mFGsr8yDMMTncIiAMB8GA1UdIwQY MBaAFH03jV6fbiKDL5Q23kKgAAOjXlrcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlRlTlhwOXVJb012bERiZVFxQUFBNk5lV3R3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy80YjVjNTgtNWU4ZS00Yzk3LWI3YzAt NjQwODlmMjI4MjZiLzEvZlRlTlhwOXVJb012bERiZVFxQUFBNk5lV3R3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy80YjVjNTgtNWU4ZS00Yzk3LWI3YzAtNjQwODlmMjI4MjZi LzEvZlRlTlhwOXVJb012bERiZVFxQUFBNk5lV3R3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdJlPk8KR 9xUH0iyyGKa4HxEMC+03HJsoBob0hshidDUY03Dh4FSCe5lT32Xxejc06iKl9w0W Q9fgbRpCVjtyAM9zKjdpzBInH9/PwWTntwbU53LO0hXTytPiwq0xp9PlCotD932x DtfuzskkeJj3l1vtEtEzrQr3q5LrqXZfXJwnUJ32rr8vitJOdWFR+nzFbUsiLXfm uDv+oH6xJ7GFHZNTERnS2j+sefpA20ckIQOa3DdgrWXxm2KgDlRQczlezrzp5SyD 9so5fX/JE+VT9MKjsALOdcOfuIo865TdaTW1dwRg7R04UTntIK/pFNfC/iTINCqF 5jSOkmhdKXwscg== -----END CERTIFICATE-----Generated at Sun Jan 25 18:34:52 2026 by rpki-client