This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft File: FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft (raw, json) Hash identifier: cnu8z1cnX9vSU41orsSou/dOlPY79HCJzJtuYUV8siA= Subject key identifier: F8:A0:F3:0F:68:6C:FA:8B:15:C6:64:AC:A9:CA:06:28:90:E1:9D:D7 Authority key identifier: 15:94:F0:04:71:E2:48:AB:E3:94:D5:21:E9:6C:BA:96:30:D8:52:0E Certificate issuer: /CN=1594f00471e248abe394d521e96cba9630d8520e Certificate serial: 019BF462B4EEB3046CC1EA15F70135E1D3A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 09:01:08 +0000 Manifest this update: Sun 25 Jan 2026 09:01:08 +0000 Manifest next update: Mon 26 Jan 2026 09:01:08 +0000 Files and hashes: 1: EmDxLEh2Fw2oixd2X0EsOpq-E-E.roa (hash: J39/sid9YkKCBoGhNN+cUZMBo1S7pqnLMPtaeCs59f0=) 2: FZTwBHHiSKvjlNUh6Wy6ljDYUg4.crl (hash: ZXfrMdQvER8VYH/Tw7nwv2vma2iLMedcLfEZ1lKAkTU=) 3: _Y-O8ekNdVfY5HtjN_OYTT1fqM4.roa (hash: pFGA1J6zYejxHObAaVatKz5v/A7RWzNi5OOP9dChUSY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.crl rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft rsync://rpki.ripe.net/repository/DEFAULT/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:b4:ee:b3:04:6c:c1:ea:15:f7:01:35:e1:d3:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1594f00471e248abe394d521e96cba9630d8520e Validity Not Before: Jan 25 09:01:08 2026 GMT Not After : Jan 26 09:01:08 2026 GMT Subject: CN=f8a0f30f686cfa8b15c664aca9ca062890e19dd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:d6:a2:77:9c:69:52:8f:40:51:90:2f:17:f2: 1e:cf:41:00:dd:46:5f:c3:92:50:d6:a3:71:ff:21: 76:5c:5f:6f:b7:01:ec:fa:bb:57:a2:3d:54:90:25: 0b:46:e2:90:fc:01:97:ee:f8:e1:2f:2b:0c:c0:73: 8b:a8:82:f1:a7:e9:e5:b3:04:e8:46:9d:53:9f:a8: ce:50:53:94:aa:61:ec:6c:7b:a7:2a:b6:e3:ea:e7: 21:87:f2:2a:17:2d:01:c6:e5:ca:d4:e0:4e:74:24: 00:d0:a3:87:b8:72:7c:00:0f:ff:c6:35:e6:32:42: 7f:23:5a:26:e5:76:17:93:2d:17:7d:80:16:12:b9: 41:3f:6c:d7:05:8d:51:ec:8b:d1:9b:3b:0b:55:aa: df:a8:8a:43:0c:82:64:44:7e:29:42:7c:f9:4f:14: 4a:a8:d0:12:01:e5:d8:11:dd:ca:6b:27:30:4f:e4: b8:5f:82:23:b4:51:10:0f:eb:32:1b:88:30:3a:9d: ae:f6:fa:57:ca:7e:97:47:ee:95:15:7b:f3:74:73: 33:27:37:4f:24:20:73:0d:92:b8:0f:49:75:2b:e2: 86:13:32:d3:7b:f3:b9:de:6f:cf:08:1e:e2:a0:37: 5d:95:d7:d4:f1:1f:ca:1a:41:fc:60:f6:fb:f1:c7: 52:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A0:F3:0F:68:6C:FA:8B:15:C6:64:AC:A9:CA:06:28:90:E1:9D:D7 X509v3 Authority Key Identifier: keyid:15:94:F0:04:71:E2:48:AB:E3:94:D5:21:E9:6C:BA:96:30:D8:52:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:33:44:9f:5f:3a:34:2e:17:fd:d0:ff:fc:1a:34:8a:f7:0b: 45:ea:ca:47:46:82:76:8f:e8:06:db:c7:69:f1:ed:01:d3:2d: 9d:e6:05:72:25:fa:ba:5d:27:ae:da:e0:c2:c4:44:f8:fc:24: f5:cc:e1:f1:e5:2d:00:84:1b:60:3d:a0:c1:bb:25:ef:cf:6d: f4:11:84:84:ab:a2:20:63:39:74:56:46:92:23:56:82:74:23: 63:d4:aa:55:ef:b8:86:49:a4:05:09:1c:96:9e:b4:cd:80:99: 5e:6b:9e:3a:7a:ed:50:5b:a9:e5:3f:34:04:12:67:6e:a9:27: 0c:95:30:91:36:c6:17:55:e4:65:e5:55:c4:6b:7a:54:c4:c7: f9:54:ec:69:a3:dd:7b:5a:49:a0:4e:2e:58:ef:7c:cc:e9:fc: 87:fe:d8:a0:0e:b1:b5:41:45:fe:66:b4:a2:eb:4a:7f:3e:38: 9c:a7:a4:26:ca:9b:8b:49:be:17:ef:2e:07:db:9f:08:bd:c8: 4a:97:1b:28:c7:cb:90:28:17:66:3a:b1:ab:bd:7b:b0:12:84: 36:75:21:dd:8d:92:6f:46:1b:c9:79:f4:b5:98:f6:c9:c0:8c: 33:50:df:e1:82:05:ef:88:e8:17:fc:11:4d:af:69:6d:df:0d: a0:1f:cb:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YrTuswRsweoV9wE14dOlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1OTRmMDA0NzFlMjQ4YWJlMzk0ZDUyMWU5NmNiYTk2MzBk ODUyMGUwHhcNMjYwMTI1MDkwMTA4WhcNMjYwMTI2MDkwMTA4WjAzMTEwLwYDVQQD EyhmOGEwZjMwZjY4NmNmYThiMTVjNjY0YWNhOWNhMDYyODkwZTE5ZGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6daid5xpUo9AUZAvF/Iez0EA3UZf w5JQ1qNx/yF2XF9vtwHs+rtXoj1UkCULRuKQ/AGX7vjhLysMwHOLqILxp+nlswTo Rp1Tn6jOUFOUqmHsbHunKrbj6uchh/IqFy0BxuXK1OBOdCQA0KOHuHJ8AA//xjXm MkJ/I1om5XYXky0XfYAWErlBP2zXBY1R7IvRmzsLVarfqIpDDIJkRH4pQnz5TxRK qNASAeXYEd3KaycwT+S4X4IjtFEQD+syG4gwOp2u9vpXyn6XR+6VFXvzdHMzJzdP JCBzDZK4D0l1K+KGEzLTe/O53m/PCB7ioDddldfU8R/KGkH8YPb78cdSKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPig8w9obPqLFcZkrKnKBiiQ4Z3XMB8GA1UdIwQY MBaAFBWU8ARx4kir45TVIelsupYw2FIOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlpUd0JISGlTS3ZqbE5VaDZXeTZsakRZVWc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi83OWE2NGUtMDY5Zi00OTlkLWE2MzEt OGNkNDJjZWRlMjIwLzEvRlpUd0JISGlTS3ZqbE5VaDZXeTZsakRZVWc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi83OWE2NGUtMDY5Zi00OTlkLWE2MzEtOGNkNDJjZWRlMjIw LzEvRlpUd0JISGlTS3ZqbE5VaDZXeTZsakRZVWc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACTNEn186 NC4X/dD//Bo0ivcLRerKR0aCdo/oBtvHafHtAdMtneYFciX6ul0nrtrgwsRE+Pwk 9czh8eUtAIQbYD2gwbsl789t9BGEhKuiIGM5dFZGkiNWgnQjY9SqVe+4hkmkBQkc lp60zYCZXmueOnrtUFup5T80BBJnbqknDJUwkTbGF1XkZeVVxGt6VMTH+VTsaaPd e1pJoE4uWO98zOn8h/7YoA6xtUFF/ma0outKfz44nKekJsqbi0m+F+8uB9ufCL3I SpcbKMfLkCgXZjqxq717sBKENnUh3Y2Sb0YbyXn0tZj2ycCMM1Df4YIF74joF/wR Ta9pbd8NoB/Lug== -----END CERTIFICATE-----Generated at Sun Jan 25 19:46:38 2026 by rpki-client