This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft File: FfiJ_tAIX8IbCPy7slLDEG35mqg.mft (raw, json) Hash identifier: /TOGnPHGdfgBwwxhrbfFJ1dhRWCI81eTSVIeH9jlvzI= Subject key identifier: 82:89:9B:46:F4:FF:CC:97:59:60:66:E5:09:51:69:5D:8D:BD:4E:A6 Authority key identifier: 15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8 Certificate issuer: /CN=15f889fed0085fc21b08fcbbb252c3106df99aa8 Certificate serial: 019BF8ADE5E139B5120487BAD552DEFDFD4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft Manifest number: 17EB Signing time: Mon 26 Jan 2026 05:01:44 +0000 Manifest this update: Mon 26 Jan 2026 05:01:44 +0000 Manifest next update: Tue 27 Jan 2026 05:01:44 +0000 Files and hashes: 1: Eo3L-3lPzBtGwSWfnMDXuxuu6nc.roa (hash: KayjLv1EKOAgncKf1kvYzIArRjjjosmZ3G86Nh3L73E=) 2: FfiJ_tAIX8IbCPy7slLDEG35mqg.crl (hash: yagn0qbz3E1Iu0ti4VOyRzNM7xMh28OSOD8wJqjq5ec=) 3: uMgy9mSN4M6Tkk_b5KpTL6EISmU.roa (hash: iwm1H/C5w6/e24iulhDBPTWg/eHtZ2JKGfTV0V4+BsQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:e5:e1:39:b5:12:04:87:ba:d5:52:de:fd:fd:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15f889fed0085fc21b08fcbbb252c3106df99aa8 Validity Not Before: Jan 26 05:01:44 2026 GMT Not After : Jan 27 05:01:44 2026 GMT Subject: CN=82899b46f4ffcc97596066e50951695d8dbd4ea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b0:4c:0f:ea:d0:85:02:8e:06:dd:12:5e:cb: 7b:92:68:81:81:79:1e:68:5d:7e:b9:d2:05:39:d9: 69:58:a3:33:10:10:44:e3:d6:58:96:43:d6:f1:56: 64:10:02:de:33:4c:93:ca:ba:cd:75:5a:99:d6:1b: 30:5c:4d:7d:d6:7b:09:15:70:8e:62:3c:42:e7:32: ad:4a:6a:89:77:b3:20:ed:a7:2b:72:39:06:13:1f: 2f:fa:1a:17:8f:da:aa:fa:16:69:66:17:a2:75:5b: 59:ab:4d:0a:bd:43:50:29:c6:ed:d9:60:05:4d:43: 57:de:1d:8f:95:93:a1:b5:15:8b:ef:30:04:c1:69: bc:0f:91:f6:54:e5:cb:99:07:0d:fe:5a:84:c1:c2: 81:4d:d8:97:31:50:2a:1f:ed:de:ef:67:f4:ec:99: 6f:7d:db:ed:3e:bc:9a:40:0c:09:3f:2b:14:32:db: fd:92:d9:e3:d5:41:f7:64:78:6c:0c:9f:8d:49:58: 09:b1:54:f1:74:8c:a7:60:08:96:30:e3:12:80:0d: 35:3e:b7:b5:89:b6:92:69:32:66:5c:eb:18:be:4a: 1e:d3:4e:b5:39:60:91:8f:7a:96:16:9b:1f:01:76: ec:d0:ff:7d:28:4d:66:2b:de:ad:a9:f2:1d:f4:f5: b0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:89:9B:46:F4:FF:CC:97:59:60:66:E5:09:51:69:5D:8D:BD:4E:A6 X509v3 Authority Key Identifier: keyid:15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:15:16:e8:06:83:1d:ce:7c:00:37:ad:ad:d8:3c:91:36:d3: 39:af:1b:05:b2:d4:66:82:67:7b:0d:26:ef:52:3b:ff:f5:4e: f0:a2:b0:c7:80:14:95:16:28:6e:9a:76:50:f6:b6:96:3a:4f: 19:c0:62:66:df:95:12:5f:8f:c3:f3:f0:68:90:be:9e:3d:4e: 95:26:b1:df:92:d3:2c:ce:16:7a:64:70:fa:ce:82:c1:5e:97: bc:4a:e5:02:12:30:97:64:5a:6c:34:80:bf:e1:85:9f:a6:80: 70:18:87:0e:a7:6d:df:38:df:6a:4b:a7:65:10:29:61:6f:7a: 06:89:06:fb:9c:3b:9d:a4:be:4e:e3:68:2a:4c:e4:99:15:6b: c1:dc:58:d7:e6:ea:68:0b:e2:6e:cb:06:3e:cd:16:4f:96:90: f4:7c:41:6e:a2:57:63:ea:1e:0d:75:96:02:af:ae:95:40:fb: 63:11:80:ed:8e:c2:5c:41:d6:09:1b:c1:a9:87:10:4f:52:b8: db:a2:0b:db:52:36:16:b9:35:6f:e0:e4:bd:a8:49:1e:e4:33: df:4f:f8:43:2e:e2:73:2e:2f:d3:ce:71:c0:60:ca:81:65:fc: ad:4b:a5:9f:fb:c6:90:78:96:d7:01:9e:c3:a9:4b:90:a3:c6: e3:82:78:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4reXhObUSBIe61VLe/f1NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1Zjg4OWZlZDAwODVmYzIxYjA4ZmNiYmIyNTJjMzEwNmRm OTlhYTgwHhcNMjYwMTI2MDUwMTQ0WhcNMjYwMTI3MDUwMTQ0WjAzMTEwLwYDVQQD Eyg4Mjg5OWI0NmY0ZmZjYzk3NTk2MDY2ZTUwOTUxNjk1ZDhkYmQ0ZWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7BMD+rQhQKOBt0SXst7kmiBgXke aF1+udIFOdlpWKMzEBBE49ZYlkPW8VZkEALeM0yTyrrNdVqZ1hswXE191nsJFXCO YjxC5zKtSmqJd7Mg7acrcjkGEx8v+hoXj9qq+hZpZheidVtZq00KvUNQKcbt2WAF TUNX3h2PlZOhtRWL7zAEwWm8D5H2VOXLmQcN/lqEwcKBTdiXMVAqH+3e72f07Jlv fdvtPryaQAwJPysUMtv9ktnj1UH3ZHhsDJ+NSVgJsVTxdIynYAiWMOMSgA01Pre1 ibaSaTJmXOsYvkoe0061OWCRj3qWFpsfAXbs0P99KE1mK96tqfId9PWwgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIKJm0b0/8yXWWBm5QlRaV2NvU6mMB8GA1UdIwQY MBaAFBX4if7QCF/CGwj8u7JSwxBt+ZqoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmZpSl90QUlYOEliQ1B5N3NsTERFRzM1bXFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9mOTUyZmItOTMxOC00OWI2LWI5NDYt MWUzYTE5NTQ3OGUwLzEvRmZpSl90QUlYOEliQ1B5N3NsTERFRzM1bXFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9mOTUyZmItOTMxOC00OWI2LWI5NDYtMWUzYTE5NTQ3OGUw LzEvRmZpSl90QUlYOEliQ1B5N3NsTERFRzM1bXFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmBUW6AaD Hc58ADetrdg8kTbTOa8bBbLUZoJnew0m71I7//VO8KKwx4AUlRYobpp2UPa2ljpP GcBiZt+VEl+Pw/PwaJC+nj1OlSax35LTLM4WemRw+s6CwV6XvErlAhIwl2RabDSA v+GFn6aAcBiHDqdt3zjfakunZRApYW96BokG+5w7naS+TuNoKkzkmRVrwdxY1+bq aAvibssGPs0WT5aQ9HxBbqJXY+oeDXWWAq+ulUD7YxGA7Y7CXEHWCRvBqYcQT1K4 26IL21I2Frk1b+DkvahJHuQz30/4Qy7icy4v085xwGDKgWX8rUuln/vGkHiW1wGe w6lLkKPG44J4sA== -----END CERTIFICATE-----Generated at Mon Jan 26 11:47:29 2026 by rpki-client