This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft File: F34R9SM-kzmZoqDGiQP8J1rkWeY.mft (raw, json) Hash identifier: eWPQHtOKwZ1ORj0Dvcggotq/KjdrzrpyOVKxYX0qK9g= Subject key identifier: A9:E4:8E:73:B7:8A:2E:D5:8D:BB:68:9F:5A:17:7B:55:1D:82:5E:27 Authority key identifier: 17:7E:11:F5:23:3E:93:39:99:A2:A0:C6:89:03:FC:27:5A:E4:59:E6 Certificate issuer: /CN=177e11f5233e933999a2a0c68903fc275ae459e6 Certificate serial: 019BF8AD95CAD282801B8632838A4375497C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F34R9SM-kzmZoqDGiQP8J1rkWeY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft Manifest number: 0E1B Signing time: Mon 26 Jan 2026 05:01:24 +0000 Manifest this update: Mon 26 Jan 2026 05:01:24 +0000 Manifest next update: Tue 27 Jan 2026 05:01:24 +0000 Files and hashes: 1: F34R9SM-kzmZoqDGiQP8J1rkWeY.crl (hash: NB1Nd1n8xLe3MRMjrGTpK343ctfQqrQog2H2aOoo/AQ=) 2: IY5stn4uFyzkXhxk9GN4WlXIsnU.roa (hash: PjV6+EPoAnHt7bbW6zTa++1bAvRToNMnmP3SVwfF3kE=) 3: iVJgr3Dl6opD93-NFPDb5IpQXE4.roa (hash: 2DZ//oCIJ0qofY4iPB1/JgdzdjLGfxN76M3nWUdUUx0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.crl rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft rsync://rpki.ripe.net/repository/DEFAULT/F34R9SM-kzmZoqDGiQP8J1rkWeY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:95:ca:d2:82:80:1b:86:32:83:8a:43:75:49:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=177e11f5233e933999a2a0c68903fc275ae459e6 Validity Not Before: Jan 26 05:01:24 2026 GMT Not After : Jan 27 05:01:24 2026 GMT Subject: CN=a9e48e73b78a2ed58dbb689f5a177b551d825e27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ae:1a:3e:4a:0d:f7:90:02:02:19:6f:27:db: f6:d4:fa:34:b1:23:bf:e5:0d:3a:ab:e0:e5:53:eb: 4f:e8:21:26:68:b5:3f:3f:92:a2:0b:fc:b6:7c:53: 41:a4:87:65:d0:5e:b8:fa:1a:41:5b:91:80:77:d4: 4b:eb:44:b7:33:41:d1:03:10:76:85:92:46:5e:93: 4b:2e:63:f7:ed:95:b8:83:f1:48:dd:e0:b2:5b:5c: 9a:cc:ff:ba:2c:79:76:e4:5f:7c:73:41:21:09:c6: cd:e3:49:b1:e8:df:fd:33:d4:4d:56:dd:56:c6:e3: 85:b3:2b:6b:c6:99:f7:9b:b8:22:fb:0b:d1:ef:cc: a3:70:1f:a3:01:15:d6:af:b6:a1:dc:0c:7a:a0:39: ca:42:ce:9a:29:37:56:a7:bb:82:0c:63:99:b6:e8: 75:fc:04:20:fb:22:46:2f:34:74:12:7c:a7:38:fc: a2:34:04:9a:43:e5:26:1e:a9:60:c5:93:4c:fd:4d: a1:c9:a6:6d:91:2b:94:6d:f8:85:3c:d7:56:8c:43: ec:3b:67:e6:1b:35:cd:d3:a2:24:80:4b:a1:7c:fe: de:12:be:a8:31:3e:2a:0d:4e:f4:dd:1a:66:2b:db: 82:52:03:d5:ba:b7:a1:62:26:18:e0:7a:d0:d6:3f: b2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E4:8E:73:B7:8A:2E:D5:8D:BB:68:9F:5A:17:7B:55:1D:82:5E:27 X509v3 Authority Key Identifier: keyid:17:7E:11:F5:23:3E:93:39:99:A2:A0:C6:89:03:FC:27:5A:E4:59:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F34R9SM-kzmZoqDGiQP8J1rkWeY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:17:e3:b1:c8:ec:54:b8:0f:32:be:0d:61:71:f4:e0:e6:33: 42:ca:0d:04:8a:2c:64:f8:5d:03:5d:9f:b1:61:df:78:6d:7e: 93:5a:1c:c3:89:dc:70:dc:4e:c6:74:bf:d5:e4:3b:62:b0:be: 62:f4:d3:4d:f7:9a:a4:3f:68:ee:14:21:c7:a8:bf:d8:e4:4a: 69:18:cc:f6:1f:c8:c6:2d:ad:a2:b0:f6:43:02:ff:15:59:4c: 52:4e:c9:9e:0c:65:c9:5b:c7:4b:cf:08:07:6e:62:95:34:7e: 78:a5:6a:d8:81:7f:ea:0a:71:5a:f1:22:ce:32:66:e5:9a:37: 32:74:e8:a8:96:82:15:40:e3:d2:ad:9a:73:8d:a9:55:95:48: 88:9d:d0:99:69:7b:53:6a:57:36:10:d3:f4:0e:ab:ff:79:85: 4f:a6:0e:6d:17:5f:5c:fc:79:a7:43:0a:cb:e9:73:63:7f:52: 6f:57:38:88:2b:fd:dc:51:71:df:3e:6b:89:d4:66:44:c1:a8: 3a:af:8c:d1:3a:77:9c:77:78:e9:6b:97:7e:68:e5:97:2b:79: 6c:a6:00:92:94:1b:98:2a:6f:f0:2a:53:77:80:ec:38:43:ab: 8b:f7:ec:59:4e:2d:9f:20:a4:0b:57:c3:1c:a8:35:2f:bc:fd: d6:ed:91:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rZXK0oKAG4Yyg4pDdUl8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3N2UxMWY1MjMzZTkzMzk5OWEyYTBjNjg5MDNmYzI3NWFl NDU5ZTYwHhcNMjYwMTI2MDUwMTI0WhcNMjYwMTI3MDUwMTI0WjAzMTEwLwYDVQQD EyhhOWU0OGU3M2I3OGEyZWQ1OGRiYjY4OWY1YTE3N2I1NTFkODI1ZTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoa4aPkoN95ACAhlvJ9v21Po0sSO/ 5Q06q+DlU+tP6CEmaLU/P5KiC/y2fFNBpIdl0F64+hpBW5GAd9RL60S3M0HRAxB2 hZJGXpNLLmP37ZW4g/FI3eCyW1yazP+6LHl25F98c0EhCcbN40mx6N/9M9RNVt1W xuOFsytrxpn3m7gi+wvR78yjcB+jARXWr7ah3Ax6oDnKQs6aKTdWp7uCDGOZtuh1 /AQg+yJGLzR0EnynOPyiNASaQ+UmHqlgxZNM/U2hyaZtkSuUbfiFPNdWjEPsO2fm GzXN06IkgEuhfP7eEr6oMT4qDU703RpmK9uCUgPVurehYiYY4HrQ1j+ygwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKnkjnO3ii7Vjbton1oXe1Udgl4nMB8GA1UdIwQY MBaAFBd+EfUjPpM5maKgxokD/Cda5FnmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjM0UjlTTS1rem1ab3FER2lRUDhKMXJrV2VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8xMTlkY2QtODRlMS00OGQ1LWEyODAt YWEwOWQ2ZTFmZmVlLzEvRjM0UjlTTS1rem1ab3FER2lRUDhKMXJrV2VZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8xMTlkY2QtODRlMS00OGQ1LWEyODAtYWEwOWQ2ZTFmZmVl LzEvRjM0UjlTTS1rem1ab3FER2lRUDhKMXJrV2VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAhfjscjs VLgPMr4NYXH04OYzQsoNBIosZPhdA12fsWHfeG1+k1ocw4nccNxOxnS/1eQ7YrC+ YvTTTfeapD9o7hQhx6i/2ORKaRjM9h/Ixi2torD2QwL/FVlMUk7JngxlyVvHS88I B25ilTR+eKVq2IF/6gpxWvEizjJm5Zo3MnToqJaCFUDj0q2ac42pVZVIiJ3QmWl7 U2pXNhDT9A6r/3mFT6YObRdfXPx5p0MKy+lzY39Sb1c4iCv93FFx3z5ridRmRMGo Oq+M0Tp3nHd46WuXfmjllyt5bKYAkpQbmCpv8CpTd4DsOEOri/fsWU4tnyCkC1fD HKg1L7z91u2ROA== -----END CERTIFICATE-----Generated at Mon Jan 26 10:52:45 2026 by rpki-client