This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft File: 1_fxawWhEjFRpnekesLY2QYd85A.mft (raw, json) Hash identifier: GmdpcTPJv1gKIFFqntC75eL+6TNOh2cGM5esuxzygkw= Subject key identifier: 7A:49:8A:E1:00:4A:8D:C6:46:DE:46:B9:A8:E8:FB:4F:79:EF:DD:B4 Authority key identifier: D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90 Certificate issuer: /CN=d7f7f16b05a1123151a677a47ac2d8d9061df390 Certificate serial: 019BF6512AEA534D12FDC6D5EC5EE27CA011 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft Manifest number: 17EF Signing time: Sun 25 Jan 2026 18:01:12 +0000 Manifest this update: Sun 25 Jan 2026 18:01:12 +0000 Manifest next update: Mon 26 Jan 2026 18:01:12 +0000 Files and hashes: 1: 1_fxawWhEjFRpnekesLY2QYd85A.crl (hash: mfU1T1as9YkVgjVG6aheMnEEpFczyhsk/j6mVZ8v7f0=) 2: TphEoqHx74oTxzeHIHgNhG40Etg.roa (hash: eKwF4mECICMY1eNS1Z8I/zufgWJJE+arH3zmPUlUZ9U=) 3: kOKbG2uwlgUTF9jmaFzt7vMoGYE.roa (hash: XPUsHAjyze1ymKKQjjk6fHKi5djr0xICcWZpDJI1q+M=) 4: m8_a0R-In6zPsMQtCZU7ofRpJV8.roa (hash: 9Klia2LNkTjTOYme1PTO2tY3GfAWev/ji3owResFBFg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:2a:ea:53:4d:12:fd:c6:d5:ec:5e:e2:7c:a0:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7f7f16b05a1123151a677a47ac2d8d9061df390 Validity Not Before: Jan 25 18:01:12 2026 GMT Not After : Jan 26 18:01:12 2026 GMT Subject: CN=7a498ae1004a8dc646de46b9a8e8fb4f79efddb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8f:90:c8:58:16:80:3e:0f:68:89:bf:82:34: c4:28:80:9e:c3:69:49:d8:01:2d:0e:50:a8:23:25: c9:05:ce:23:20:56:95:97:61:df:b6:b2:60:ed:3e: 5a:ae:65:a3:96:2f:31:a6:b3:7e:37:19:80:06:89: 9f:8e:79:66:db:51:96:7e:d7:80:0c:f1:a5:58:31: 2f:4c:0c:00:03:0b:e5:9c:bd:10:f4:7d:9d:42:93: e0:52:85:75:94:d7:78:50:5e:cb:4c:ff:a8:bb:ad: 22:f2:b3:7a:35:83:57:f4:e5:e2:b9:9d:2e:9d:82: 6a:3a:fe:9d:88:68:f5:d9:d6:f4:05:88:df:53:ab: 04:13:1b:c5:8a:af:a1:d5:69:08:c6:f2:cd:e4:b2: 81:bc:e7:f3:c2:20:ee:a6:c8:40:9e:18:a0:c7:3f: b6:54:a2:8a:69:be:03:4a:92:5b:12:91:58:4c:14: 24:33:50:db:9d:70:ac:af:1e:81:0d:79:88:2a:a1: 68:bd:90:e8:26:da:2e:0d:b5:06:af:d6:68:0c:46: 46:fb:53:d5:02:c2:b2:cb:95:eb:b9:2e:a4:fe:4c: bf:a6:0b:34:d4:ba:33:a9:88:ac:3a:1d:8d:98:3f: 51:a5:ff:b9:3b:e3:10:36:dc:62:5c:2a:cd:ff:9f: b2:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:49:8A:E1:00:4A:8D:C6:46:DE:46:B9:A8:E8:FB:4F:79:EF:DD:B4 X509v3 Authority Key Identifier: keyid:D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:5f:4f:b0:95:f4:c4:52:86:0e:b3:87:f7:9c:fd:35:df:53: ce:c9:3b:3c:43:ba:af:99:a4:fb:ab:7c:df:95:91:e5:44:0b: 15:06:7c:bc:38:39:f0:88:47:8e:0e:d8:37:25:9c:79:c2:3b: df:c6:3c:94:0c:3d:99:6b:86:a5:5e:19:6d:47:b1:d7:5b:39: 2b:8a:69:5d:82:42:fd:b1:2f:7c:43:3d:05:6a:1e:58:6b:66: f4:77:8e:f6:32:0a:41:9e:64:17:13:85:10:30:2a:4f:d8:9e: 32:c7:87:3d:b1:93:e8:af:f6:9c:43:33:5a:ad:27:2e:af:1b: 5c:da:10:d2:ff:44:97:28:86:20:d9:4a:2b:89:53:5b:ee:2e: 50:01:69:3d:90:27:56:d1:ba:d1:f7:ce:82:14:80:10:6b:40: 17:b0:0c:14:30:9e:a9:62:e6:9b:f8:73:7c:70:a0:e4:9c:60: b0:80:52:09:e0:86:48:c0:45:3c:5d:47:92:58:76:27:c1:46: 5e:02:7b:dc:0b:84:7f:9e:19:35:4a:ff:2d:ef:21:d7:d0:4b: 4c:38:60:c5:82:86:26:4b:4d:78:09:9e:fb:96:31:61:72:16: 59:7e:4c:dd:76:c3:81:1e:d4:d0:95:46:eb:cd:9f:0d:77:9d: b5:93:04:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2USrqU00S/cbV7F7ifKARMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3ZjdmMTZiMDVhMTEyMzE1MWE2NzdhNDdhYzJkOGQ5MDYx ZGYzOTAwHhcNMjYwMTI1MTgwMTEyWhcNMjYwMTI2MTgwMTEyWjAzMTEwLwYDVQQD Eyg3YTQ5OGFlMTAwNGE4ZGM2NDZkZTQ2YjlhOGU4ZmI0Zjc5ZWZkZGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuY+QyFgWgD4PaIm/gjTEKICew2lJ 2AEtDlCoIyXJBc4jIFaVl2HftrJg7T5armWjli8xprN+NxmABomfjnlm21GWfteA DPGlWDEvTAwAAwvlnL0Q9H2dQpPgUoV1lNd4UF7LTP+ou60i8rN6NYNX9OXiuZ0u nYJqOv6diGj12db0BYjfU6sEExvFiq+h1WkIxvLN5LKBvOfzwiDupshAnhigxz+2 VKKKab4DSpJbEpFYTBQkM1DbnXCsrx6BDXmIKqFovZDoJtouDbUGr9ZoDEZG+1PV AsKyy5XruS6k/ky/pgs01LozqYisOh2NmD9Rpf+5O+MQNtxiXCrN/5+ywQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHpJiuEASo3GRt5Guajo+0957920MB8GA1UdIwQY MBaAFNf38WsFoRIxUaZ3pHrC2NkGHfOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMV9meGF3V2hFakZScG5la2VzTFkyUVlkODVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wMjI3YjctNTRjYS00ZjU2LWJlMjYt NmNiZTk0OTUzMmU0LzEvMV9meGF3V2hFakZScG5la2VzTFkyUVlkODVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8wMjI3YjctNTRjYS00ZjU2LWJlMjYtNmNiZTk0OTUzMmU0 LzEvMV9meGF3V2hFakZScG5la2VzTFkyUVlkODVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdl9PsJX0 xFKGDrOH95z9Nd9Tzsk7PEO6r5mk+6t835WR5UQLFQZ8vDg58IhHjg7YNyWcecI7 38Y8lAw9mWuGpV4ZbUex11s5K4ppXYJC/bEvfEM9BWoeWGtm9HeO9jIKQZ5kFxOF EDAqT9ieMseHPbGT6K/2nEMzWq0nLq8bXNoQ0v9ElyiGINlKK4lTW+4uUAFpPZAn VtG60ffOghSAEGtAF7AMFDCeqWLmm/hzfHCg5JxgsIBSCeCGSMBFPF1Hklh2J8FG XgJ73AuEf54ZNUr/Le8h19BLTDhgxYKGJktNeAme+5YxYXIWWX5M3XbDgR7U0JVG 682fDXedtZMEiA== -----END CERTIFICATE-----Generated at Mon Jan 26 00:20:46 2026 by rpki-client