This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft File: fBvFitldp4SStC2IY9Rej2qmqiQ.mft (raw, json) Hash identifier: fDfC1u84UeZ55eEqLRrdc4X9HEgSkL14shemlyF4Tbo= Subject key identifier: 31:78:8C:8F:DF:15:33:14:50:79:13:6B:D2:61:45:B3:09:55:2F:61 Authority key identifier: 7C:1B:C5:8A:D9:5D:A7:84:92:B4:2D:88:63:D4:5E:8F:6A:A6:AA:24 Certificate issuer: /CN=7c1bc58ad95da78492b42d8863d45e8f6aa6aa24 Certificate serial: 019BF8ADCDCED48F154094328EE93C07F483 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fBvFitldp4SStC2IY9Rej2qmqiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft Manifest number: 152A Signing time: Mon 26 Jan 2026 05:01:38 +0000 Manifest this update: Mon 26 Jan 2026 05:01:38 +0000 Manifest next update: Tue 27 Jan 2026 05:01:38 +0000 Files and hashes: 1: fBvFitldp4SStC2IY9Rej2qmqiQ.crl (hash: FNAiaq3jCzxcRrWxVdJzUquoBzN53HA61JIAzO9BGC0=) 2: iS8uMVcfTxV4oFRPmDdhbpSZpws.roa (hash: MP/qvCm1sWW7tlIkjuMYgAfGTXxSGhkZeUhVHpOpueU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/fBvFitldp4SStC2IY9Rej2qmqiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:cd:ce:d4:8f:15:40:94:32:8e:e9:3c:07:f4:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c1bc58ad95da78492b42d8863d45e8f6aa6aa24 Validity Not Before: Jan 26 05:01:38 2026 GMT Not After : Jan 27 05:01:38 2026 GMT Subject: CN=31788c8fdf1533145079136bd26145b309552f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:84:ba:fb:e9:c6:84:3e:cc:3a:c0:27:3d:ce: b8:97:43:91:ca:56:a5:7f:0c:a7:38:ec:c3:02:d7: 8f:ef:84:14:96:78:8d:3e:3d:13:9c:a7:f1:f2:d9: dd:08:90:1a:7f:b5:f1:98:c4:9d:f9:22:ad:7b:7d: c1:0a:b2:44:e0:54:09:88:7f:dc:0b:8a:20:de:dd: 05:f1:49:0e:bb:f4:5c:cc:3e:95:eb:dc:a1:61:0b: 17:8c:6f:1d:bf:ef:38:96:bc:68:1d:7d:49:6d:b4: d7:12:97:e6:1e:0b:05:c3:69:c3:bd:83:57:bb:c3: ff:f0:4b:c3:5f:50:20:69:ab:08:b6:c1:d9:07:2a: 35:5d:09:ef:4e:28:3b:ef:99:be:e1:68:70:9e:73: 82:bb:8a:46:b8:f4:93:ea:dc:6f:a5:8c:7d:9c:49: 6e:45:c5:fa:5f:b5:0c:3e:f3:79:6c:0b:4f:1b:53: 2b:f6:3e:01:f4:9f:86:ca:e2:cc:eb:66:8b:1d:a0: 18:cd:ee:f3:e4:26:eb:af:66:cd:10:2f:0c:2d:35: 70:d9:da:55:0a:ee:a6:d3:13:f6:1e:42:a6:44:7a: 11:5e:45:f5:c9:39:31:ab:5d:a8:87:b9:f2:ce:fa: e0:95:c3:bc:8a:04:ab:b2:bf:2d:ef:66:76:42:ee: 5a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:78:8C:8F:DF:15:33:14:50:79:13:6B:D2:61:45:B3:09:55:2F:61 X509v3 Authority Key Identifier: keyid:7C:1B:C5:8A:D9:5D:A7:84:92:B4:2D:88:63:D4:5E:8F:6A:A6:AA:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBvFitldp4SStC2IY9Rej2qmqiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:8a:d8:3e:da:f2:82:0f:9b:51:94:9c:1b:fd:ec:0e:14:9b: 46:9e:f4:d7:5a:73:da:d5:7e:98:db:1d:31:98:4d:73:80:bf: 98:91:7d:64:e8:38:e3:6f:eb:58:b5:23:17:43:e8:eb:84:8a: bf:85:f0:46:54:9d:35:fe:44:92:b2:27:b2:9b:01:4a:a9:35: 3c:39:5d:c5:94:a7:bb:0d:11:cd:65:95:e5:bc:0f:3e:c5:8b: 28:e4:99:4d:67:3e:ba:79:90:5f:7b:9a:f5:c5:ee:86:9a:d6: 6b:7c:d6:b1:a5:1a:1e:27:fa:48:92:23:c7:69:8d:34:92:2e: 25:66:fa:4a:63:ff:8c:bf:58:a3:20:87:f4:5c:7e:57:15:ac: 72:c1:78:75:8c:66:61:90:b1:10:e0:a0:47:f3:05:20:9d:8e: f1:b2:52:6d:a5:e0:5b:3c:31:c7:cd:ff:12:99:c9:96:57:8a: 23:2d:ea:45:07:7a:2f:29:ce:e3:b1:5e:5b:71:a4:f0:82:76: c2:bc:31:30:75:bc:da:03:c2:df:51:71:cf:f1:23:e3:53:36: ff:3e:e0:34:21:78:70:65:f0:50:e5:3f:ef:40:49:1c:76:bc: 4a:58:d1:2b:38:e8:fb:6d:7e:2e:bf:3f:55:9a:53:10:49:4a: 83:ff:34:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rc3O1I8VQJQyjuk8B/SDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjMWJjNThhZDk1ZGE3ODQ5MmI0MmQ4ODYzZDQ1ZThmNmFh NmFhMjQwHhcNMjYwMTI2MDUwMTM4WhcNMjYwMTI3MDUwMTM4WjAzMTEwLwYDVQQD EygzMTc4OGM4ZmRmMTUzMzE0NTA3OTEzNmJkMjYxNDViMzA5NTUyZjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIS6++nGhD7MOsAnPc64l0ORylal fwynOOzDAteP74QUlniNPj0TnKfx8tndCJAaf7XxmMSd+SKte33BCrJE4FQJiH/c C4og3t0F8UkOu/RczD6V69yhYQsXjG8dv+84lrxoHX1JbbTXEpfmHgsFw2nDvYNX u8P/8EvDX1AgaasItsHZByo1XQnvTig775m+4WhwnnOCu4pGuPST6txvpYx9nElu RcX6X7UMPvN5bAtPG1Mr9j4B9J+GyuLM62aLHaAYze7z5Cbrr2bNEC8MLTVw2dpV Cu6m0xP2HkKmRHoRXkX1yTkxq12oh7nyzvrglcO8igSrsr8t72Z2Qu5aoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDF4jI/fFTMUUHkTa9JhRbMJVS9hMB8GA1UdIwQY MBaAFHwbxYrZXaeEkrQtiGPUXo9qpqokMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkJ2Rml0bGRwNFNTdEMySVk5UmVqMnFtcWlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC81Yzg4MTgtNTRkNC00Zjc4LWIzMWQt NTE3ZjZmZjNlNGY5LzEvZkJ2Rml0bGRwNFNTdEMySVk5UmVqMnFtcWlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC81Yzg4MTgtNTRkNC00Zjc4LWIzMWQtNTE3ZjZmZjNlNGY5 LzEvZkJ2Rml0bGRwNFNTdEMySVk5UmVqMnFtcWlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW4rYPtry gg+bUZScG/3sDhSbRp7011pz2tV+mNsdMZhNc4C/mJF9ZOg442/rWLUjF0Po64SK v4XwRlSdNf5EkrInspsBSqk1PDldxZSnuw0RzWWV5bwPPsWLKOSZTWc+unmQX3ua 9cXuhprWa3zWsaUaHif6SJIjx2mNNJIuJWb6SmP/jL9YoyCH9Fx+VxWscsF4dYxm YZCxEOCgR/MFIJ2O8bJSbaXgWzwxx83/EpnJlleKIy3qRQd6LynO47FeW3Gk8IJ2 wrwxMHW82gPC31Fxz/Ej41M2/z7gNCF4cGXwUOU/70BJHHa8SljRKzjo+21+Lr8/ VZpTEElKg/80Gw== -----END CERTIFICATE-----Generated at Mon Jan 26 14:10:42 2026 by rpki-client