This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft File: fM1t7GewiC0V4yglJpgKFntCCLc.mft (raw, json) Hash identifier: jTit05EK4H12ChpefczQo7dfjowKUSm0ZX1Z2g3fK1A= Subject key identifier: 12:C7:63:73:77:3E:EF:80:2D:1B:3F:D1:76:D2:91:AF:C1:A9:76:98 Authority key identifier: 7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7 Certificate issuer: /CN=7ccd6dec67b0882d15e3282526980a167b4208b7 Certificate serial: 019BF5756D4F586180F3AEC9F620A266645A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft Manifest number: 1493 Signing time: Sun 25 Jan 2026 14:01:12 +0000 Manifest this update: Sun 25 Jan 2026 14:01:12 +0000 Manifest next update: Mon 26 Jan 2026 14:01:12 +0000 Files and hashes: 1: M81Qxbtts07Ib9z19i7shUVMtA8.roa (hash: 5AYY2qI7GMcPmUPABkZnqwFbbIzTbjv6m+OqVwWCrM8=) 2: fM1t7GewiC0V4yglJpgKFntCCLc.crl (hash: GAMtl1BPjoROnArQieZEzKdQIWTBMptxRys5QoH4QZE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:6d:4f:58:61:80:f3:ae:c9:f6:20:a2:66:64:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ccd6dec67b0882d15e3282526980a167b4208b7 Validity Not Before: Jan 25 14:01:12 2026 GMT Not After : Jan 26 14:01:12 2026 GMT Subject: CN=12c76373773eef802d1b3fd176d291afc1a97698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:35:b7:cd:e2:e7:94:9d:8e:9c:86:80:48:eb: e6:98:53:13:3b:95:59:74:95:f8:e2:ac:1b:b9:42: bb:b6:d2:2b:6f:31:1a:be:60:31:28:37:95:18:8c: eb:12:ca:2c:49:bb:d1:1b:b6:1a:7e:6b:89:df:df: fa:f6:ba:17:a1:05:e9:01:d7:4b:d1:06:a3:96:07: 1e:a7:03:f7:f6:4d:1c:ff:71:57:aa:98:da:40:96: 47:7c:6b:22:fa:75:43:e9:2e:ea:ce:5f:65:44:de: 8a:3b:a0:04:37:36:19:29:5c:3b:9b:da:80:76:9e: b7:fe:e9:df:30:c4:0f:4f:b3:b8:b7:39:f7:74:64: 9d:ff:81:2b:86:30:39:d9:e3:9a:f7:1b:ea:f2:2a: 5f:46:9c:61:a4:90:ea:f2:6d:41:03:b8:dd:80:0f: dd:12:eb:58:4a:c2:8f:f9:13:4b:38:25:6b:0e:fe: 91:8e:54:f9:40:8c:c3:46:6b:43:c4:15:83:ef:9d: 2f:c3:9c:5a:95:30:ec:3a:f1:f1:34:57:35:d3:98: 2d:7a:b4:dc:0e:0b:8b:d1:de:9d:07:8d:f0:29:f0: e4:38:ec:0c:1b:ae:eb:9c:ee:10:95:73:1f:ee:00: 47:d1:94:ce:4c:f7:0e:e9:48:c3:8a:c1:cd:59:ce: bc:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:C7:63:73:77:3E:EF:80:2D:1B:3F:D1:76:D2:91:AF:C1:A9:76:98 X509v3 Authority Key Identifier: keyid:7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:15:b2:69:5a:49:10:e7:36:ee:4d:db:67:05:e6:f4:b6:4a: 1f:37:ba:9a:e7:5a:5c:96:84:55:99:8c:84:21:04:9d:9e:f1: 39:14:f9:b9:49:9f:5a:b8:93:70:b7:ca:ac:61:1b:a7:87:a6: 01:c6:a1:8b:c7:21:fc:2b:1a:4d:8a:c0:57:9e:ab:16:91:dd: 0f:b0:20:3c:86:a2:7a:25:f2:97:09:dd:a0:8d:ad:02:50:94: ce:fb:84:7c:7c:25:66:c8:52:39:bd:ee:43:62:3d:26:ea:83: af:83:9e:da:75:7c:3d:b5:99:3f:96:4b:48:02:3f:33:fa:f9: 89:ea:77:3c:eb:07:a7:f1:cc:f8:4b:7e:cb:84:50:42:a8:e4: c9:24:b8:03:ca:64:e2:40:87:fe:f6:e5:86:8d:6a:7c:d3:c7: d4:40:64:bb:64:8d:7e:91:37:83:d1:38:27:d9:25:20:17:66: 74:dc:bf:1b:e5:ab:aa:f0:d6:73:55:41:08:a0:c6:79:86:a4: 96:d2:90:e8:4e:f7:f8:bb:6a:e8:64:15:a3:cb:ad:df:0c:e3: 50:13:16:fb:55:79:a3:81:d5:1c:8b:7e:19:2f:72:03:71:ee: bb:a4:2a:b0:78:b2:b7:65:49:bb:e8:99:be:3f:7c:9b:df:25: 8a:16:a9:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dW1PWGGA867J9iCiZmRaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjY2Q2ZGVjNjdiMDg4MmQxNWUzMjgyNTI2OTgwYTE2N2I0 MjA4YjcwHhcNMjYwMTI1MTQwMTEyWhcNMjYwMTI2MTQwMTEyWjAzMTEwLwYDVQQD EygxMmM3NjM3Mzc3M2VlZjgwMmQxYjNmZDE3NmQyOTFhZmMxYTk3Njk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTW3zeLnlJ2OnIaASOvmmFMTO5VZ dJX44qwbuUK7ttIrbzEavmAxKDeVGIzrEsosSbvRG7YafmuJ39/69roXoQXpAddL 0QajlgcepwP39k0c/3FXqpjaQJZHfGsi+nVD6S7qzl9lRN6KO6AENzYZKVw7m9qA dp63/unfMMQPT7O4tzn3dGSd/4ErhjA52eOa9xvq8ipfRpxhpJDq8m1BA7jdgA/d EutYSsKP+RNLOCVrDv6RjlT5QIzDRmtDxBWD750vw5xalTDsOvHxNFc105gterTc DguL0d6dB43wKfDkOOwMG67rnO4QlXMf7gBH0ZTOTPcO6UjDisHNWc68JQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBLHY3N3Pu+ALRs/0XbSka/BqXaYMB8GA1UdIwQY MBaAFHzNbexnsIgtFeMoJSaYChZ7Qgi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZk0xdDdHZXdpQzBWNHlnbEpwZ0tGbnRDQ0xjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9iNGNlOWEtNDg3Ny00MTU5LWJkODAt YmVhY2IwOTRmODBjLzEvZk0xdDdHZXdpQzBWNHlnbEpwZ0tGbnRDQ0xjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9iNGNlOWEtNDg3Ny00MTU5LWJkODAtYmVhY2IwOTRmODBj LzEvZk0xdDdHZXdpQzBWNHlnbEpwZ0tGbnRDQ0xjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcxWyaVpJ EOc27k3bZwXm9LZKHze6mudaXJaEVZmMhCEEnZ7xORT5uUmfWriTcLfKrGEbp4em Acahi8ch/CsaTYrAV56rFpHdD7AgPIaieiXylwndoI2tAlCUzvuEfHwlZshSOb3u Q2I9JuqDr4Oe2nV8PbWZP5ZLSAI/M/r5iep3POsHp/HM+Et+y4RQQqjkySS4A8pk 4kCH/vblho1qfNPH1EBku2SNfpE3g9E4J9klIBdmdNy/G+WrqvDWc1VBCKDGeYak ltKQ6E73+Ltq6GQVo8ut3wzjUBMW+1V5o4HVHIt+GS9yA3Huu6QqsHiyt2VJu+iZ vj98m98lihapeg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:52:54 2026 by rpki-client