This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft File: F8ID4_NlkjqEPTIgMXocaM903g8.mft (raw, json) Hash identifier: hwQYRgqCCVYZiWEs6Iho0YDcVc6LPeZgmSPiw6SOBCM= Subject key identifier: 7D:FE:BB:6C:38:48:08:31:60:78:64:FA:90:5B:6D:99:35:38:D0:C7 Authority key identifier: 17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F Certificate issuer: /CN=17c203e3f365923a843d3220317a1c68cf74de0f Certificate serial: 019BF50708C19A987B43E30837DFD9BFFBDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft Manifest number: 17F2 Signing time: Sun 25 Jan 2026 12:00:37 +0000 Manifest this update: Sun 25 Jan 2026 12:00:37 +0000 Manifest next update: Mon 26 Jan 2026 12:00:37 +0000 Files and hashes: 1: 2Z2Mezr_sYt_rFmNrbgtD7JcvRg.roa (hash: uRg8q37DVfZI6yBc5sgrO+ko0WZotW48TPAF7XoPsVE=) 2: F8ID4_NlkjqEPTIgMXocaM903g8.crl (hash: X3qweBswxDIx5uPD5ouoZg+NlwdXbNbiKTEx66rTUCw=) 3: cu6Wrxo4ZqZMU9GF7q_e9kdBGlo.roa (hash: tMjNINPr3lKeaeyyRSxR6dj8/4hk+Ftm9fb3jtQie/c=) 4: czMfRJgpYWwnULQtqqWPtGxZ034.roa (hash: mbX4pXEOaK5ALTGtde+NqdJWfjILlG0ygUfqaQQo8UI=) 5: dzYbEo-cteZ2L-l9SGVqJRtNPn4.roa (hash: nGkk5VkpkEQp3zSwJU2wzLe3I3V3Q1pcrGZeVvvlJsM=) 6: m-2dYhQrAu-81Ydza21n-eRWlcw.roa (hash: yLjz+lgfJ+jDnIJSu5od2TETiCmbT6+DCzdwHtsWayA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:08:c1:9a:98:7b:43:e3:08:37:df:d9:bf:fb:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17c203e3f365923a843d3220317a1c68cf74de0f Validity Not Before: Jan 25 12:00:37 2026 GMT Not After : Jan 26 12:00:37 2026 GMT Subject: CN=7dfebb6c38480831607864fa905b6d993538d0c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1a:eb:c7:a6:25:6c:15:46:61:76:a3:a9:b1: 55:5b:88:34:71:38:a2:f1:4c:41:72:f6:8d:68:12: 82:22:d6:ac:4e:7a:f3:8d:d2:36:c1:f9:fa:17:13: 6f:63:0f:97:1a:5d:2e:4d:c5:33:69:46:2b:9c:20: ca:c6:ee:a0:4a:83:0e:fc:c7:3e:e4:e5:47:64:91: a9:d1:d4:17:f6:fe:8f:6d:29:b4:da:1f:fc:5a:20: cd:a0:c3:10:ac:95:f0:f2:48:a9:d2:e3:72:6c:0d: f1:e7:b7:59:73:34:19:e3:c3:d2:7c:83:bc:e0:74: 82:74:5c:c4:1f:ef:68:95:b2:b1:99:1a:0c:97:27: 1f:f8:fc:11:8f:2f:46:0e:15:8f:01:69:a6:7e:62: 3d:b3:a7:70:a5:86:17:f9:24:82:83:45:56:41:cd: d0:4f:6f:94:70:4a:8b:7f:fb:1c:a8:29:a4:04:e4: c1:dd:2c:e8:82:b8:e9:f2:29:bb:ec:82:50:09:77: 6c:a9:df:d2:cc:56:64:fc:95:25:93:73:bf:c3:e8: c2:38:b4:77:d4:c9:8e:1d:01:5e:2a:de:07:f0:b2: f1:b1:ca:10:d5:9f:01:ca:75:c5:e1:af:cd:84:68: a5:b1:cd:3d:e9:cf:d2:00:6c:c7:be:3e:8b:8b:3f: b4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:FE:BB:6C:38:48:08:31:60:78:64:FA:90:5B:6D:99:35:38:D0:C7 X509v3 Authority Key Identifier: keyid:17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:5a:fe:9b:9b:68:9a:00:1a:f1:cb:65:30:26:09:c6:9e:af: bc:11:29:81:fc:93:f5:13:da:e9:b1:98:da:a6:09:2e:63:14: 57:83:a3:fb:3b:08:6d:2b:f0:ef:ee:93:3d:62:66:70:32:6f: 2d:2d:ff:75:b8:85:47:1c:3e:b9:34:3d:5f:3a:ac:0f:c0:f4: e7:fb:bd:07:ca:5f:f8:22:88:aa:8b:e3:0a:31:ed:90:4c:57: b9:2b:07:48:e4:a9:1f:fd:41:ba:e6:ee:e7:b4:c3:8b:f7:53: eb:eb:1d:e6:b3:cf:3d:69:8f:ea:6b:3d:eb:f5:dc:58:cc:59: f7:d7:db:5b:84:0c:5b:03:91:67:86:5c:da:b0:f0:7a:c5:64: 9f:73:77:25:76:c8:cf:ee:38:fa:c2:05:c4:69:a5:56:ff:1a: 90:0f:9f:7b:71:49:43:70:f8:f5:83:2f:60:37:1a:1b:2c:53: 73:c3:67:1e:73:ec:90:56:cc:cc:9f:3c:0f:d6:74:65:02:92: b3:a7:c2:44:b7:2a:97:6e:d8:7a:31:60:8f:b3:06:a0:2c:5a: db:17:13:34:6b:68:a3:08:7d:18:50:2a:1a:3a:89:70:af:0f: 5d:87:b9:75:c5:bf:86:2b:17:9e:90:68:68:8c:93:43:ba:b6: 69:30:5e:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1BwjBmph7Q+MIN9/Zv/veMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3YzIwM2UzZjM2NTkyM2E4NDNkMzIyMDMxN2ExYzY4Y2Y3 NGRlMGYwHhcNMjYwMTI1MTIwMDM3WhcNMjYwMTI2MTIwMDM3WjAzMTEwLwYDVQQD Eyg3ZGZlYmI2YzM4NDgwODMxNjA3ODY0ZmE5MDViNmQ5OTM1MzhkMGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhrrx6YlbBVGYXajqbFVW4g0cTii 8UxBcvaNaBKCItasTnrzjdI2wfn6FxNvYw+XGl0uTcUzaUYrnCDKxu6gSoMO/Mc+ 5OVHZJGp0dQX9v6PbSm02h/8WiDNoMMQrJXw8kip0uNybA3x57dZczQZ48PSfIO8 4HSCdFzEH+9olbKxmRoMlycf+PwRjy9GDhWPAWmmfmI9s6dwpYYX+SSCg0VWQc3Q T2+UcEqLf/scqCmkBOTB3Szogrjp8im77IJQCXdsqd/SzFZk/JUlk3O/w+jCOLR3 1MmOHQFeKt4H8LLxscoQ1Z8BynXF4a/NhGilsc096c/SAGzHvj6Liz+0DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH3+u2w4SAgxYHhk+pBbbZk1ONDHMB8GA1UdIwQY MBaAFBfCA+PzZZI6hD0yIDF6HGjPdN4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjhJRDRfTmxranFFUFRJZ01Yb2NhTTkwM2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy84OWFlOGUtNDY3NC00NTVkLTlmMjMt YWM2N2EzNmU0YWFiLzEvRjhJRDRfTmxranFFUFRJZ01Yb2NhTTkwM2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy84OWFlOGUtNDY3NC00NTVkLTlmMjMtYWM2N2EzNmU0YWFi LzEvRjhJRDRfTmxranFFUFRJZ01Yb2NhTTkwM2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT1r+m5to mgAa8ctlMCYJxp6vvBEpgfyT9RPa6bGY2qYJLmMUV4Oj+zsIbSvw7+6TPWJmcDJv LS3/dbiFRxw+uTQ9XzqsD8D05/u9B8pf+CKIqovjCjHtkExXuSsHSOSpH/1Buubu 57TDi/dT6+sd5rPPPWmP6ms96/XcWMxZ99fbW4QMWwORZ4Zc2rDwesVkn3N3JXbI z+44+sIFxGmlVv8akA+fe3FJQ3D49YMvYDcaGyxTc8NnHnPskFbMzJ88D9Z0ZQKS s6fCRLcql27YejFgj7MGoCxa2xcTNGtoowh9GFAqGjqJcK8PXYe5dcW/hisXnpBo aIyTQ7q2aTBe8Q== -----END CERTIFICATE-----Generated at Sun Jan 25 16:19:18 2026 by rpki-client