This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft File: fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft (raw, json) Hash identifier: SqsZMp2BGYdMqedZsMnE+e8xDiDJUqR9nQL4onUiTpg= Subject key identifier: A9:66:00:F4:04:FC:87:DD:5B:A9:CE:BD:F1:E6:00:32:45:71:05:26 Authority key identifier: 7E:C6:10:D2:15:D3:89:13:42:BC:32:87:2A:50:F4:D0:CF:A9:DC:9F Certificate issuer: /CN=7ec610d215d3891342bc32872a50f4d0cfa9dc9f Certificate serial: 019BF7639E26C68437B6297ED7FE60D69FAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsYQ0hXTiRNCvDKHKlD00M-p3J8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft Manifest number: 17E7 Signing time: Sun 25 Jan 2026 23:00:59 +0000 Manifest this update: Sun 25 Jan 2026 23:00:59 +0000 Manifest next update: Mon 26 Jan 2026 23:00:59 +0000 Files and hashes: 1: 6EIMxUGXsynPo9rEQzJnVPG98WI.roa (hash: VbFvYrwcCtKMyImGiFiN8H8Az5Dp2KBcZOXOTXrbmhw=) 2: fsYQ0hXTiRNCvDKHKlD00M-p3J8.crl (hash: woN+ABS+XGnhvP44Ucid3Z93AsV7JcrGkPb8Nwip8NI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.crl rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft rsync://rpki.ripe.net/repository/DEFAULT/fsYQ0hXTiRNCvDKHKlD00M-p3J8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:9e:26:c6:84:37:b6:29:7e:d7:fe:60:d6:9f:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ec610d215d3891342bc32872a50f4d0cfa9dc9f Validity Not Before: Jan 25 23:00:59 2026 GMT Not After : Jan 26 23:00:59 2026 GMT Subject: CN=a96600f404fc87dd5ba9cebdf1e6003245710526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:81:08:e4:9b:32:94:33:d3:d2:88:0b:49:bd: db:65:f9:ce:69:82:d1:0b:2a:ec:df:43:ff:86:9f: 79:fb:32:84:56:99:e1:c4:9a:b8:cb:da:e8:6a:f2: 7b:b1:27:21:f5:75:e0:b2:19:95:cf:12:58:49:b0: ec:f5:5a:58:e5:4a:2c:04:12:63:51:5d:6d:67:ff: fc:a9:51:7e:45:bd:2c:88:60:c5:59:5b:01:91:d1: b1:15:b6:b9:0d:b8:3b:ee:9c:c2:3e:fe:a0:87:76: c6:7c:d3:31:0e:6d:85:ad:81:f4:ae:5c:80:a4:de: 92:58:9b:61:69:4f:0f:6f:56:44:b3:10:ef:e4:62: b2:cc:61:1a:56:a3:aa:32:a7:b6:e3:88:be:be:da: a5:96:28:18:72:9c:8e:ed:22:ba:56:fb:8e:5d:0e: d4:69:6d:64:a1:7d:60:87:da:df:54:66:b0:f9:93: 50:07:12:9b:3e:44:ea:44:f6:6d:0b:5f:62:cc:be: f3:3b:48:99:b8:95:cb:66:a9:c8:43:09:7a:33:20: d8:69:78:af:d7:72:6b:6d:8d:84:bb:52:29:16:58: 7c:64:8e:5a:0d:31:90:96:e8:98:63:28:27:e7:34: fb:76:e2:aa:07:22:0f:d9:43:ab:67:3e:f3:ee:4a: 66:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:66:00:F4:04:FC:87:DD:5B:A9:CE:BD:F1:E6:00:32:45:71:05:26 X509v3 Authority Key Identifier: keyid:7E:C6:10:D2:15:D3:89:13:42:BC:32:87:2A:50:F4:D0:CF:A9:DC:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsYQ0hXTiRNCvDKHKlD00M-p3J8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:b5:4d:a3:4e:97:06:2a:7a:f0:3a:9b:03:ef:13:bd:98:69: 3a:f5:fe:a3:01:b8:ee:e3:b7:4d:0e:2c:fb:ed:7d:4b:da:77: 20:86:fb:32:58:c2:af:a1:1d:e2:50:ec:c3:92:68:74:22:2a: 72:cb:b6:c8:2b:cf:d1:3b:8b:47:60:c8:9d:0c:f3:4a:38:fe: a3:0c:ef:ab:e8:e3:11:45:5c:19:62:51:dc:8f:6d:bd:af:a1: df:0f:40:05:fb:7e:81:bc:5b:49:02:a8:87:a4:9d:86:f1:19: c4:bc:86:4f:05:05:db:cc:1b:1b:09:3b:7e:f6:17:8b:de:84: ab:e4:f7:3f:73:d4:0c:cd:bd:e4:0e:e5:d4:6d:13:71:92:5c: 3a:7d:77:17:0f:54:12:0e:13:e8:d6:ce:8f:28:bc:5e:f6:12: 02:35:66:25:7c:20:15:7d:81:34:e9:fd:09:09:ab:4d:68:f1: 46:1c:f8:93:1e:12:c0:1c:17:7d:fa:7c:41:87:1d:fc:d3:ba: 46:33:f8:d3:5b:9e:3b:32:c8:25:ca:a2:24:2e:03:36:e3:06: 3d:df:1e:2d:df:3a:b2:57:50:d3:68:04:73:85:d3:02:32:f9: 71:d8:99:94:fb:10:57:84:48:ab:53:5c:50:53:38:29:23:8e: 9f:63:b3:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y54mxoQ3til+1/5g1p+rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlYzYxMGQyMTVkMzg5MTM0MmJjMzI4NzJhNTBmNGQwY2Zh OWRjOWYwHhcNMjYwMTI1MjMwMDU5WhcNMjYwMTI2MjMwMDU5WjAzMTEwLwYDVQQD EyhhOTY2MDBmNDA0ZmM4N2RkNWJhOWNlYmRmMWU2MDAzMjQ1NzEwNTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoEI5JsylDPT0ogLSb3bZfnOaYLR Cyrs30P/hp95+zKEVpnhxJq4y9roavJ7sSch9XXgshmVzxJYSbDs9VpY5UosBBJj UV1tZ//8qVF+Rb0siGDFWVsBkdGxFba5Dbg77pzCPv6gh3bGfNMxDm2FrYH0rlyA pN6SWJthaU8Pb1ZEsxDv5GKyzGEaVqOqMqe244i+vtqlligYcpyO7SK6VvuOXQ7U aW1koX1gh9rfVGaw+ZNQBxKbPkTqRPZtC19izL7zO0iZuJXLZqnIQwl6MyDYaXiv 13JrbY2Eu1IpFlh8ZI5aDTGQluiYYygn5zT7duKqByIP2UOrZz7z7kpmaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKlmAPQE/IfdW6nOvfHmADJFcQUmMB8GA1UdIwQY MBaAFH7GENIV04kTQrwyhypQ9NDPqdyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnNZUTBoWFRpUk5DdkRLSEtsRDAwTS1wM0o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8yMjkxMWMtY2U1MS00MzhiLTg2Y2Yt ZTg1NjYxM2QyYjEwLzEvZnNZUTBoWFRpUk5DdkRLSEtsRDAwTS1wM0o4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS8yMjkxMWMtY2U1MS00MzhiLTg2Y2YtZTg1NjYxM2QyYjEw LzEvZnNZUTBoWFRpUk5DdkRLSEtsRDAwTS1wM0o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe7VNo06X Bip68DqbA+8TvZhpOvX+owG47uO3TQ4s++19S9p3IIb7MljCr6Ed4lDsw5JodCIq csu2yCvP0TuLR2DInQzzSjj+owzvq+jjEUVcGWJR3I9tva+h3w9ABft+gbxbSQKo h6SdhvEZxLyGTwUF28wbGwk7fvYXi96Eq+T3P3PUDM295A7l1G0TcZJcOn13Fw9U Eg4T6NbOjyi8XvYSAjVmJXwgFX2BNOn9CQmrTWjxRhz4kx4SwBwXffp8QYcd/NO6 RjP401ueOzLIJcqiJC4DNuMGPd8eLd86sldQ02gEc4XTAjL5cdiZlPsQV4RIq1Nc UFM4KSOOn2Ozfw== -----END CERTIFICATE-----Generated at Mon Jan 26 08:42:36 2026 by rpki-client