This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft File: fKZDuzmcbYetxMfLpdK3L70A0EY.mft (raw, json) Hash identifier: S41x/cOj7fMLr15eK07SogGsLGpXLBoKt6xmEnXw7gI= Subject key identifier: 56:FA:0C:D2:40:EE:E8:9D:68:48:FE:26:41:82:5A:C1:23:C0:A1:E7 Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46 Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046 Certificate serial: 019BF4D0FE05CE17EB8696CC3A5BB1FF06B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft Manifest number: 11BA Signing time: Sun 25 Jan 2026 11:01:35 +0000 Manifest this update: Sun 25 Jan 2026 11:01:35 +0000 Manifest next update: Mon 26 Jan 2026 11:01:35 +0000 Files and hashes: 1: 2JOxayZ4kxrtihpkJSNfTVv34wU.roa (hash: zOn78CRIowaCVixyqjErS7L368UV3aEuLomuXw4ifTk=) 2: 8JmGNshMSYZovGEGptxvSVmLazw.roa (hash: cBtmgXslMy9oeFHfquJAM4IBewoqUtnRBO1wAOTF0Qk=) 3: 9VFCcM5TkSFj-DtH7qLQwgSN5IM.roa (hash: wrh+UMairP6Hp+q2S/1S737Q0ISs8AkPKt06IH0nojo=) 4: EaUMOU4n5eMN9_93bWF9KbfM0Js.roa (hash: Qat9O3DT5PJNAgSB1rpNeEeKlT31JeYDByOxfigK1Mc=) 5: Hp0vnK6LsH978scPrAVFBl2kfG4.roa (hash: MiTGwbJzWQLF/5BUrcBlVLuqzCKJBbep6wp6tPRmCrg=) 6: JGgBlVIY2oUSh_HFDVRqyLKytmE.roa (hash: RKsfB4gNYffazBWvIDvr2El30bylWlzUFL7S8HQbwRU=) 7: X1LVS0a4yLVV-n31U0OmgdyXH_Q.roa (hash: HB5LPZBvI9YtdaaDN25t7bfdVncLanwsoppFOKXdT7I=) 8: arDSEArnZyqLs7jmsgT1tnPs8rc.roa (hash: /Km/RAgR6E8ZdX77lmgH7Nk0dxMhyfy0FGDCtSzOc/w=) 9: bwOIwRe-t7R54b9v9np6_kJQ_dE.roa (hash: Q1d3WN659RXAKPuHuKTKUTC5odQwSZ9Vh4CW0Um2Opc=) 10: fKZDuzmcbYetxMfLpdK3L70A0EY.crl (hash: 23G4QBxxz7norpPGhTh+13DlFcW3kfYOQfIyBdjTrCQ=) 11: gVoDkYx52kg2ObqLQQiu3dVABJ4.roa (hash: Q8A5Ai5FoLvBhe3BwpyHiBUhPSy+KXj0LhOWSA21Wgw=) 12: iyrSz_wsF9CBGgcuXGLfggTWLUc.roa (hash: hTAJ5z1uKngFKR3nayC40cEb7tmnFdoOcWdYxUuDRsQ=) 13: mfX6n982kHfEGonK72FOllXPKLM.roa (hash: mQgbn3Sty6H0kID4K5HG3Lec+s4hrDOIUIKg6j/AGRo=) 14: oSJ76RTJAM4Rkm0VytsagsICSMI.roa (hash: 5KF6cvuY3cWzSG6wpKOaFIJmUmHSua9Uf0BUoXvpF6w=) 15: w56M8w2Q_qfZu41_qHQO5zW4jwk.roa (hash: RAJ8brQ6bDHIdv8dDAPBh54oGKG2dIlrIsob6HcQ27I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:fe:05:ce:17:eb:86:96:cc:3a:5b:b1:ff:06:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046 Validity Not Before: Jan 25 11:01:35 2026 GMT Not After : Jan 26 11:01:35 2026 GMT Subject: CN=56fa0cd240eee89d6848fe2641825ac123c0a1e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:22:a5:60:f4:9f:46:3c:47:b7:a9:49:e5:48: 87:3e:07:33:a3:2a:3f:f8:16:5d:1a:6f:61:b6:ac: 66:27:40:d3:15:a9:97:1d:9a:84:cc:15:7d:0f:d7: d2:89:ca:c7:72:49:eb:a9:9d:80:8c:5d:b4:79:3b: 23:62:de:08:b5:09:b7:87:a6:c8:87:eb:22:fc:4b: dd:6a:9d:fb:0a:fa:52:bd:e8:d4:4e:26:01:2c:ad: 60:b1:4f:6a:ef:ae:f1:ca:c0:9a:19:2d:78:7b:0c: 18:f9:17:f6:0c:42:77:b7:1d:6a:e5:31:45:2a:b1: 9b:05:a1:4f:f8:02:40:a2:15:a0:a8:1f:eb:25:9e: 5a:fe:15:7e:5e:ec:4f:ad:9a:45:8d:aa:a0:94:88: 04:68:07:26:8c:35:ee:95:82:e9:77:13:1a:14:ff: 2a:69:47:76:db:1c:02:23:16:cc:d3:d6:25:4b:ff: 43:07:9e:72:ce:74:87:fb:6b:11:b4:0b:e6:4e:88: 83:cd:36:cc:42:ea:e9:0b:30:fd:60:8c:04:c1:c0: eb:b5:52:e8:69:dd:6d:a8:dc:49:4c:03:ee:bc:ce: a6:81:4e:28:29:b0:7f:19:af:d6:db:6b:0f:19:38: 69:e9:43:4b:e7:fe:6d:fe:e6:b2:89:80:80:97:ed: d3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:FA:0C:D2:40:EE:E8:9D:68:48:FE:26:41:82:5A:C1:23:C0:A1:E7 X509v3 Authority Key Identifier: keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:f2:d7:6c:a5:33:5c:1e:92:6d:e4:1e:e4:e1:3b:e1:5b:2d: bd:36:7c:ff:6b:04:91:98:26:89:55:23:8f:52:0a:5c:7f:8f: c3:7f:14:3c:74:d3:7a:53:7a:18:af:5e:76:6e:a1:57:c7:74: 26:16:14:9c:9b:08:ff:2f:10:4a:9b:d9:b6:fe:33:ff:ad:08: 2d:b1:52:24:98:45:6d:eb:59:32:66:67:9f:27:04:b6:fe:3a: 05:6c:20:02:a3:dc:ba:0b:ef:a2:fd:a3:a0:6b:30:8c:d7:88: cc:b8:98:f1:9a:c1:39:ad:04:57:0f:d7:1a:38:2d:65:35:a5: d1:3e:e0:98:65:f5:9e:6a:4c:32:74:25:c7:5e:2b:a4:11:fe: 42:db:39:66:89:71:0d:2b:9e:2d:a5:58:ee:1a:b5:5d:14:90: d7:10:d6:11:91:c0:e6:f3:b0:71:9a:ef:00:18:3c:57:40:5e: 56:7e:d7:e3:3f:ad:61:ad:0d:a0:a9:92:0b:f1:18:7a:d6:a3: 7c:41:a8:0f:d3:a0:ce:9f:4d:02:48:fc:75:e5:f5:8c:d1:a8: 61:ef:33:d6:8f:23:47:a9:c5:72:a4:69:27:12:83:d9:f8:b1: f6:33:e8:d2:87:6e:c6:db:ff:ff:6b:5b:6d:89:be:6f:e0:fe: 88:56:21:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00P4FzhfrhpbMOlux/wa0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYTY0M2JiMzk5YzZkODdhZGM0YzdjYmE1ZDJiNzJmYmQw MGQwNDYwHhcNMjYwMTI1MTEwMTM1WhcNMjYwMTI2MTEwMTM1WjAzMTEwLwYDVQQD Eyg1NmZhMGNkMjQwZWVlODlkNjg0OGZlMjY0MTgyNWFjMTIzYzBhMWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSKlYPSfRjxHt6lJ5UiHPgczoyo/ +BZdGm9htqxmJ0DTFamXHZqEzBV9D9fSicrHcknrqZ2AjF20eTsjYt4ItQm3h6bI h+si/Evdap37CvpSvejUTiYBLK1gsU9q767xysCaGS14ewwY+Rf2DEJ3tx1q5TFF KrGbBaFP+AJAohWgqB/rJZ5a/hV+XuxPrZpFjaqglIgEaAcmjDXulYLpdxMaFP8q aUd22xwCIxbM09YlS/9DB55yznSH+2sRtAvmToiDzTbMQurpCzD9YIwEwcDrtVLo ad1tqNxJTAPuvM6mgU4oKbB/Ga/W22sPGThp6UNL5/5t/uayiYCAl+3TZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFb6DNJA7uidaEj+JkGCWsEjwKHnMB8GA1UdIwQY MBaAFHymQ7s5nG2HrcTHy6XSty+9ANBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMt NDRlYTY0NzIxYzllLzEvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMtNDRlYTY0NzIxYzll LzEvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM/LXbKUz XB6SbeQe5OE74VstvTZ8/2sEkZgmiVUjj1IKXH+Pw38UPHTTelN6GK9edm6hV8d0 JhYUnJsI/y8QSpvZtv4z/60ILbFSJJhFbetZMmZnnycEtv46BWwgAqPcugvvov2j oGswjNeIzLiY8ZrBOa0EVw/XGjgtZTWl0T7gmGX1nmpMMnQlx14rpBH+Qts5Zolx DSueLaVY7hq1XRSQ1xDWEZHA5vOwcZrvABg8V0BeVn7X4z+tYa0NoKmSC/EYetaj fEGoD9Ogzp9NAkj8deX1jNGoYe8z1o8jR6nFcqRpJxKD2fix9jPo0oduxtv//2tb bYm+b+D+iFYhhg== -----END CERTIFICATE-----Generated at Sun Jan 25 17:51:41 2026 by rpki-client