This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft File: D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft (raw, json) Hash identifier: AROS5fWl2QEAEUG+0lTu1mniVAMrfnXGgtZodpsQWjM= Subject key identifier: 53:1D:CC:C9:3C:6F:50:59:CC:56:C5:73:9B:85:47:B9:98:A0:71:4A Authority key identifier: 0F:B7:CD:B0:52:82:B0:89:B4:76:75:9F:69:ED:4A:43:6B:45:63:62 Certificate issuer: /CN=0fb7cdb05282b089b476759f69ed4a436b456362 Certificate serial: 019BF4623ABCDFF0D62411A80F8B747E7C0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7fNsFKCsIm0dnWfae1KQ2tFY2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft Manifest number: 92 Signing time: Sun 25 Jan 2026 09:00:36 +0000 Manifest this update: Sun 25 Jan 2026 09:00:36 +0000 Manifest next update: Mon 26 Jan 2026 09:00:36 +0000 Files and hashes: 1: D7fNsFKCsIm0dnWfae1KQ2tFY2I.crl (hash: DQkfNtrcSIRIMmRiE8POjk2Vn4QSmDjyv5rkA8sT4yw=) 2: Jv84iN2B8ANANDflC9HEXw5LA8Y.roa (hash: qNF0F5ELDvVzv6IS3eSh9XZM4TiIIZIYRSv7YJ85pZA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft rsync://rpki.ripe.net/repository/DEFAULT/D7fNsFKCsIm0dnWfae1KQ2tFY2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:3a:bc:df:f0:d6:24:11:a8:0f:8b:74:7e:7c:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fb7cdb05282b089b476759f69ed4a436b456362 Validity Not Before: Jan 25 09:00:36 2026 GMT Not After : Jan 26 09:00:36 2026 GMT Subject: CN=531dccc93c6f5059cc56c5739b8547b998a0714a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d5:71:c2:17:c7:04:26:15:fb:36:58:0d:a8: e5:4e:99:2f:76:67:ca:fd:5f:2a:de:ad:05:31:ef: 08:5d:f3:b2:2d:5a:1a:dd:1a:d0:9e:62:35:76:2b: 91:7d:28:0d:61:c4:88:e2:2a:74:52:5e:4a:4d:b0: 79:f4:27:bc:81:82:90:69:78:ac:8b:3f:19:ab:3e: b2:1e:bc:34:55:e9:8b:93:53:fe:d6:1e:b8:17:96: 9a:82:02:b3:09:76:cc:54:b9:ee:f5:2e:6a:48:7b: 62:80:c1:90:68:87:78:a1:04:e6:06:a1:a1:60:3c: 0c:7d:e6:cc:f7:28:17:1b:96:31:43:22:5c:3f:cc: 0c:de:03:66:15:f0:93:06:d0:1f:3e:1c:91:fa:a5: 08:96:8c:3a:b4:75:b1:bc:31:8a:2e:6e:74:35:ef: 8d:a2:30:7e:c0:5e:f0:d3:1e:2d:bb:5c:7b:66:4d: e6:cb:54:41:e5:08:67:74:e6:96:f7:ec:fe:91:b6: ef:ba:82:f0:0b:2b:58:8a:e1:90:97:15:d1:f1:12: d0:4d:7b:bf:26:86:48:ab:19:89:14:fa:0d:6b:1a: 3c:2a:52:7e:dd:ca:cc:82:dc:f3:ea:e0:8f:23:fd: ae:6d:ba:11:74:0b:8d:a9:5c:c4:f1:02:63:13:72: f4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:1D:CC:C9:3C:6F:50:59:CC:56:C5:73:9B:85:47:B9:98:A0:71:4A X509v3 Authority Key Identifier: keyid:0F:B7:CD:B0:52:82:B0:89:B4:76:75:9F:69:ED:4A:43:6B:45:63:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7fNsFKCsIm0dnWfae1KQ2tFY2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:ff:e2:2b:59:1d:9c:19:8e:a0:0e:55:b8:14:f6:58:02:20: e5:66:17:66:fa:b4:90:38:a6:fe:03:3b:35:5c:b4:12:ea:4a: 57:3a:75:67:ed:01:7e:92:61:30:64:12:41:78:fe:bd:fb:a3: f5:e2:d2:63:21:b0:6d:3c:2b:f3:8b:19:9b:93:c1:d6:29:89: d1:df:a0:ed:4a:88:0e:eb:3c:6c:72:1a:15:c8:67:e8:e7:3c: 35:72:f6:69:95:ab:c9:e7:09:0e:2f:91:9b:a4:35:1c:8b:aa: 52:ca:d8:da:66:0f:1c:f2:98:56:96:1f:d0:73:d8:6e:c2:45: 54:a6:c5:91:46:68:a1:55:16:20:65:79:6d:29:3b:89:eb:bf: d6:3f:f5:0f:7d:45:d7:ba:7a:04:e4:fa:6a:44:29:7a:1b:75: 1d:ba:c7:cf:8e:38:20:b2:62:7c:8f:73:c5:6e:39:67:ec:b7: 64:25:09:54:18:6f:62:87:ec:71:55:e5:d0:b8:c1:b8:56:56: 68:3f:66:5c:0f:b1:f2:02:d9:98:55:48:fc:54:da:d0:0e:55: a0:20:be:c3:22:60:46:87:ad:b0:fc:c4:32:b1:74:f5:10:df: 9a:45:99:32:39:6e:60:42:43:82:13:a1:e9:82:93:4e:b8:71: b5:4c:17:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0Yjq83/DWJBGoD4t0fnwKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmYjdjZGIwNTI4MmIwODliNDc2NzU5ZjY5ZWQ0YTQzNmI0 NTYzNjIwHhcNMjYwMTI1MDkwMDM2WhcNMjYwMTI2MDkwMDM2WjAzMTEwLwYDVQQD Eyg1MzFkY2NjOTNjNmY1MDU5Y2M1NmM1NzM5Yjg1NDdiOTk4YTA3MTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9VxwhfHBCYV+zZYDajlTpkvdmfK /V8q3q0FMe8IXfOyLVoa3RrQnmI1diuRfSgNYcSI4ip0Ul5KTbB59Ce8gYKQaXis iz8Zqz6yHrw0VemLk1P+1h64F5aaggKzCXbMVLnu9S5qSHtigMGQaId4oQTmBqGh YDwMfebM9ygXG5YxQyJcP8wM3gNmFfCTBtAfPhyR+qUIlow6tHWxvDGKLm50Ne+N ojB+wF7w0x4tu1x7Zk3my1RB5QhndOaW9+z+kbbvuoLwCytYiuGQlxXR8RLQTXu/ JoZIqxmJFPoNaxo8KlJ+3crMgtzz6uCPI/2ubboRdAuNqVzE8QJjE3L0lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFMdzMk8b1BZzFbFc5uFR7mYoHFKMB8GA1UdIwQY MBaAFA+3zbBSgrCJtHZ1n2ntSkNrRWNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDdmTnNGS0NzSW0wZG5XZmFlMUtRMnRGWTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8xYTA3OTAtZjMzMi00YTgzLTlmYzkt MDE4MzYwY2MwYmE5LzEvRDdmTnNGS0NzSW0wZG5XZmFlMUtRMnRGWTJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8xYTA3OTAtZjMzMi00YTgzLTlmYzktMDE4MzYwY2MwYmE5 LzEvRDdmTnNGS0NzSW0wZG5XZmFlMUtRMnRGWTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqP/iK1kd nBmOoA5VuBT2WAIg5WYXZvq0kDim/gM7NVy0EupKVzp1Z+0BfpJhMGQSQXj+vfuj 9eLSYyGwbTwr84sZm5PB1imJ0d+g7UqIDus8bHIaFchn6Oc8NXL2aZWryecJDi+R m6Q1HIuqUsrY2mYPHPKYVpYf0HPYbsJFVKbFkUZooVUWIGV5bSk7ieu/1j/1D31F 17p6BOT6akQpeht1HbrHz444ILJifI9zxW45Z+y3ZCUJVBhvYofscVXl0LjBuFZW aD9mXA+x8gLZmFVI/FTa0A5VoCC+wyJgRoetsPzEMrF09RDfmkWZMjluYEJDghOh 6YKTTrhxtUwXSA== -----END CERTIFICATE-----Generated at Sun Jan 25 17:50:59 2026 by rpki-client