This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.mft File: fF27C541OBhfPm1uPH2i-JIsjOA.mft (raw, json) Hash identifier: E5k/Pppd5iUuzch/NCzhCaF6+fb8LhPOuQwKBgVogWU= Subject key identifier: 58:50:F1:78:80:6F:3A:EE:3F:27:2D:0F:76:76:51:12:A0:B8:60:94 Authority key identifier: 7C:5D:BB:0B:9E:35:38:18:5F:3E:6D:6E:3C:7D:A2:F8:92:2C:8C:E0 Certificate issuer: /CN=7c5dbb0b9e3538185f3e6d6e3c7da2f8922c8ce0 Certificate serial: 019BF7D2385B4D2669E89893BC69A1782AE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fF27C541OBhfPm1uPH2i-JIsjOA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.mft Manifest number: 095C Signing time: Mon 26 Jan 2026 01:01:47 +0000 Manifest this update: Mon 26 Jan 2026 01:01:47 +0000 Manifest next update: Tue 27 Jan 2026 01:01:47 +0000 Files and hashes: 1: fF27C541OBhfPm1uPH2i-JIsjOA.crl (hash: FP1zB4J+tkJ/Avo5OhL0ttHTRtcXN4o3q2Vr/k43TI4=) 2: wwGJXI1Q4Ez5sml_ZmTVacx8kBM.roa (hash: sku+gN8eL3JC9irfaIS3rJD2l21DtLI/BG8hhkJ6nL0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.crl rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.mft rsync://rpki.ripe.net/repository/DEFAULT/fF27C541OBhfPm1uPH2i-JIsjOA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d2:38:5b:4d:26:69:e8:98:93:bc:69:a1:78:2a:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c5dbb0b9e3538185f3e6d6e3c7da2f8922c8ce0 Validity Not Before: Jan 26 01:01:47 2026 GMT Not After : Jan 27 01:01:47 2026 GMT Subject: CN=5850f178806f3aee3f272d0f76765112a0b86094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e6:b0:27:15:56:96:81:f6:7f:29:4e:43:c6: b7:21:90:55:c0:22:fa:c2:4e:06:63:72:82:2b:ba: 8a:13:e1:ef:53:66:0f:67:c8:c5:ca:48:61:5c:67: 66:aa:7f:73:c8:67:57:4b:46:8f:cd:c0:e6:17:43: 3f:95:44:77:07:4d:eb:5e:9c:5e:c1:8f:22:1d:39: 4b:e1:c9:9b:02:77:26:7f:c0:9e:d7:dc:01:8c:96: 9d:65:29:f9:40:42:14:b6:bf:9c:05:20:be:b5:fa: 09:80:9a:50:9c:c3:a5:4c:04:b8:ac:2d:5c:ec:81: 7e:a9:17:cd:df:42:30:f1:78:df:99:67:3e:c6:d7: 45:14:c2:17:d6:12:8b:4d:d6:89:35:aa:bd:e1:9e: 31:75:fb:d1:ad:a4:3a:f6:34:e6:85:06:a6:04:1b: d5:9b:50:d4:9e:dd:24:b2:4b:f8:ee:54:60:1b:3c: 62:8b:09:df:85:cf:2e:e8:a8:e0:23:ea:b9:6c:9e: a9:a7:f1:39:3e:df:cc:bf:4f:71:8f:58:a8:5b:28: 88:64:1f:9e:b3:a7:19:b0:8f:ba:c6:8f:1f:40:e3: 2d:cf:25:3b:01:a4:9d:1c:8e:b4:d9:f6:28:2c:c0: 75:7e:ba:c8:17:49:9d:f7:ca:39:4e:85:71:e4:ba: 85:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:50:F1:78:80:6F:3A:EE:3F:27:2D:0F:76:76:51:12:A0:B8:60:94 X509v3 Authority Key Identifier: keyid:7C:5D:BB:0B:9E:35:38:18:5F:3E:6D:6E:3C:7D:A2:F8:92:2C:8C:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fF27C541OBhfPm1uPH2i-JIsjOA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:0f:e5:d7:71:86:2d:b2:a4:f9:71:59:47:26:76:ae:a8:c4: a9:7d:61:cc:11:4b:8e:6a:5f:ad:2b:35:75:52:95:78:29:64: 33:10:87:f9:a7:f0:1a:7c:e0:a1:bf:ac:5f:53:05:0d:9e:81: 9b:0c:87:60:64:56:5c:47:b0:f5:99:80:06:d3:e6:64:7f:a1: ee:19:2e:11:23:11:9b:8a:2d:d0:3b:f4:f3:88:00:27:e1:a8: 58:c1:1e:fc:2b:16:47:92:49:e5:fe:14:4d:23:84:23:bb:f1: be:ed:19:dd:10:a9:d1:de:48:ab:78:eb:85:c3:3d:ec:8f:cf: be:52:10:4f:ee:16:76:41:fa:01:46:36:33:e6:b0:ce:41:b8: 22:82:2f:45:f7:51:37:0e:82:07:19:22:58:20:c2:76:17:fc: a9:3f:48:96:01:08:eb:73:f9:0c:06:1d:42:f8:8f:78:6b:73: 2b:dd:f3:17:72:09:d3:a7:ef:5f:05:e6:3e:db:63:35:01:ca: a7:60:7a:63:2f:99:45:ec:ec:b0:88:b0:d4:44:3e:3a:93:d5: 19:7f:92:b5:6f:6d:32:6a:e6:f5:01:aa:07:69:11:3f:97:a6: ec:21:3a:77:4b:ba:44:0e:bb:c8:3b:75:9d:df:a5:95:e4:77: 43:88:40:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30jhbTSZp6JiTvGmheCrjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjNWRiYjBiOWUzNTM4MTg1ZjNlNmQ2ZTNjN2RhMmY4OTIy YzhjZTAwHhcNMjYwMTI2MDEwMTQ3WhcNMjYwMTI3MDEwMTQ3WjAzMTEwLwYDVQQD Eyg1ODUwZjE3ODgwNmYzYWVlM2YyNzJkMGY3Njc2NTExMmEwYjg2MDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuawJxVWloH2fylOQ8a3IZBVwCL6 wk4GY3KCK7qKE+HvU2YPZ8jFykhhXGdmqn9zyGdXS0aPzcDmF0M/lUR3B03rXpxe wY8iHTlL4cmbAncmf8Ce19wBjJadZSn5QEIUtr+cBSC+tfoJgJpQnMOlTAS4rC1c 7IF+qRfN30Iw8XjfmWc+xtdFFMIX1hKLTdaJNaq94Z4xdfvRraQ69jTmhQamBBvV m1DUnt0kskv47lRgGzxiiwnfhc8u6KjgI+q5bJ6pp/E5Pt/Mv09xj1ioWyiIZB+e s6cZsI+6xo8fQOMtzyU7AaSdHI602fYoLMB1frrIF0md98o5ToVx5LqFOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFhQ8XiAbzruPyctD3Z2URKguGCUMB8GA1UdIwQY MBaAFHxduwueNTgYXz5tbjx9oviSLIzgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkYyN0M1NDFPQmhmUG0xdVBIMmktSklzak9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9lODEyMGMtNzQ1MS00NWFlLTg5YjAt NzVmNmU1MjkxODZmLzEvZkYyN0M1NDFPQmhmUG0xdVBIMmktSklzak9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9lODEyMGMtNzQ1MS00NWFlLTg5YjAtNzVmNmU1MjkxODZm LzEvZkYyN0M1NDFPQmhmUG0xdVBIMmktSklzak9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIA/l13GG LbKk+XFZRyZ2rqjEqX1hzBFLjmpfrSs1dVKVeClkMxCH+afwGnzgob+sX1MFDZ6B mwyHYGRWXEew9ZmABtPmZH+h7hkuESMRm4ot0Dv084gAJ+GoWMEe/CsWR5JJ5f4U TSOEI7vxvu0Z3RCp0d5Iq3jrhcM97I/PvlIQT+4WdkH6AUY2M+awzkG4IoIvRfdR Nw6CBxkiWCDCdhf8qT9IlgEI63P5DAYdQviPeGtzK93zF3IJ06fvXwXmPttjNQHK p2B6Yy+ZRezssIiw1EQ+OpPVGX+StW9tMmrm9QGqB2kRP5em7CE6d0u6RA67yDt1 nd+lleR3Q4hAoQ== -----END CERTIFICATE-----Generated at Mon Jan 26 07:11:22 2026 by rpki-client