This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft File: f0LSfCHahsfp-_RK4OVsmPPS-As.mft (raw, json) Hash identifier: qjCcgb3DKBCUokMEjANua9GT6ehb17eS8MZACBxPr9w= Subject key identifier: 98:56:84:80:4B:AD:F9:81:4E:3B:F7:A9:54:A3:15:93:A6:E4:1D:49 Authority key identifier: 7F:42:D2:7C:21:DA:86:C7:E9:FB:F4:4A:E0:E5:6C:98:F3:D2:F8:0B Certificate issuer: /CN=7f42d27c21da86c7e9fbf44ae0e56c98f3d2f80b Certificate serial: 019BF72DA3D4B1825F49D80B2E37EF0015DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft Manifest number: 0F86 Signing time: Sun 25 Jan 2026 22:02:01 +0000 Manifest this update: Sun 25 Jan 2026 22:02:01 +0000 Manifest next update: Mon 26 Jan 2026 22:02:01 +0000 Files and hashes: 1: f0LSfCHahsfp-_RK4OVsmPPS-As.crl (hash: ErcNUubV4brGahR178EL0jtedew5bswEkQH7HlzQCgM=) 2: tauHtMalszupNYYuBs8Guj0KLFg.roa (hash: gc2v8u+MqnwJxcknut+JafkulUVpld8Kb67/cVdhhLw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:a3:d4:b1:82:5f:49:d8:0b:2e:37:ef:00:15:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f42d27c21da86c7e9fbf44ae0e56c98f3d2f80b Validity Not Before: Jan 25 22:02:01 2026 GMT Not After : Jan 26 22:02:01 2026 GMT Subject: CN=985684804badf9814e3bf7a954a31593a6e41d49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:e0:18:35:4a:22:05:85:3c:ce:0b:e5:bf:bf: e4:8e:84:91:80:d5:e7:dc:06:04:53:e5:86:09:1a: a5:1e:a8:b1:5f:7b:80:c7:1d:46:1d:8d:72:40:87: 4e:b0:04:5b:66:ae:1c:e5:48:13:57:99:32:8a:6d: d8:1b:77:68:6d:0c:d7:93:7f:cc:95:68:4a:5d:15: f7:3e:da:46:92:2c:a1:88:1c:96:aa:c2:bc:1c:41: 55:49:b0:c1:f7:53:2c:1d:6a:a8:6c:a9:ed:ad:36: 93:20:60:8e:aa:4e:44:65:cd:55:fb:5a:18:fd:9e: 4a:7b:45:f9:5f:1e:f7:fb:51:6c:8a:82:75:a1:7e: cf:9a:7d:ca:ba:77:53:4e:69:05:8a:9c:54:71:30: f8:a0:f3:d1:df:3f:38:91:45:c7:33:df:4f:9c:a0: c8:86:22:0c:66:91:6f:4a:69:ef:92:77:cb:ae:51: b6:c1:e3:42:83:06:eb:76:6a:47:95:79:dc:93:6c: ef:bf:66:23:f1:d3:94:21:af:c4:8f:a5:72:5e:e7: 72:1d:6a:6c:a4:af:ce:6d:94:77:59:52:39:43:d8: 30:fb:d1:6e:6f:8b:5c:a6:a2:94:29:98:2c:bd:70: 88:2d:dd:92:d3:46:31:92:3e:05:b3:6e:26:1e:2b: 84:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:56:84:80:4B:AD:F9:81:4E:3B:F7:A9:54:A3:15:93:A6:E4:1D:49 X509v3 Authority Key Identifier: keyid:7F:42:D2:7C:21:DA:86:C7:E9:FB:F4:4A:E0:E5:6C:98:F3:D2:F8:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:96:a4:9f:3e:07:de:87:0c:29:5f:1f:af:6e:9a:b6:04:c9: 2b:01:11:70:ca:dd:10:32:85:7b:67:4b:54:0d:88:90:dd:ec: 7b:72:d7:de:04:d7:0f:f6:0f:6d:3a:a1:f4:b9:8e:ca:fe:77: bc:90:1a:e8:af:91:17:c8:2c:48:f9:23:0b:06:08:49:aa:6f: ed:34:4d:ec:45:d3:e2:4f:d0:d4:ac:ff:be:fa:e2:1b:01:eb: a8:47:33:21:2a:11:36:b8:fd:fc:e8:eb:c2:a4:15:a1:db:d5: ac:69:f0:10:94:25:07:37:2b:05:e4:8c:ac:a8:e6:42:63:f2: a6:69:fa:ec:2b:0f:42:f7:5c:82:b3:9e:55:14:58:6b:69:c2: a4:a9:8b:af:ae:28:65:5a:aa:bc:0a:a4:53:3d:7b:a6:61:84: cc:78:02:7e:74:49:6b:7d:13:a1:11:c0:75:8b:35:3c:1f:ed: 1b:21:72:a9:32:d0:20:cd:28:8d:2b:09:1d:aa:e1:e6:1b:9f: e9:55:0c:f6:78:f9:b0:92:25:01:54:fa:28:34:1a:8c:8c:42: c2:c7:e8:e1:1a:4f:f2:03:df:c2:3e:77:6f:fc:f5:96:8d:ca: 6d:7e:06:b3:35:d6:46:fc:7b:95:71:06:f4:1c:db:45:fd:b9: ae:2c:99:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LaPUsYJfSdgLLjfvABXaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNDJkMjdjMjFkYTg2YzdlOWZiZjQ0YWUwZTU2Yzk4ZjNk MmY4MGIwHhcNMjYwMTI1MjIwMjAxWhcNMjYwMTI2MjIwMjAxWjAzMTEwLwYDVQQD Eyg5ODU2ODQ4MDRiYWRmOTgxNGUzYmY3YTk1NGEzMTU5M2E2ZTQxZDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+eAYNUoiBYU8zgvlv7/kjoSRgNXn 3AYEU+WGCRqlHqixX3uAxx1GHY1yQIdOsARbZq4c5UgTV5kyim3YG3dobQzXk3/M lWhKXRX3PtpGkiyhiByWqsK8HEFVSbDB91MsHWqobKntrTaTIGCOqk5EZc1V+1oY /Z5Ke0X5Xx73+1FsioJ1oX7Pmn3KundTTmkFipxUcTD4oPPR3z84kUXHM99PnKDI hiIMZpFvSmnvknfLrlG2weNCgwbrdmpHlXnck2zvv2Yj8dOUIa/Ej6VyXudyHWps pK/ObZR3WVI5Q9gw+9Fub4tcpqKUKZgsvXCILd2S00Yxkj4Fs24mHiuEBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJhWhIBLrfmBTjv3qVSjFZOm5B1JMB8GA1UdIwQY MBaAFH9C0nwh2obH6fv0SuDlbJjz0vgLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjBMU2ZDSGFoc2ZwLV9SSzRPVnNtUFBTLUFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS85OGIwMjQtOWQ4Zi00ODY5LWEyYTkt MGFmYjdjM2ZiZjMwLzEvZjBMU2ZDSGFoc2ZwLV9SSzRPVnNtUFBTLUFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS85OGIwMjQtOWQ4Zi00ODY5LWEyYTktMGFmYjdjM2ZiZjMw LzEvZjBMU2ZDSGFoc2ZwLV9SSzRPVnNtUFBTLUFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWpaknz4H 3ocMKV8fr26atgTJKwERcMrdEDKFe2dLVA2IkN3se3LX3gTXD/YPbTqh9LmOyv53 vJAa6K+RF8gsSPkjCwYISapv7TRN7EXT4k/Q1Kz/vvriGwHrqEczISoRNrj9/Ojr wqQVodvVrGnwEJQlBzcrBeSMrKjmQmPypmn67CsPQvdcgrOeVRRYa2nCpKmLr64o ZVqqvAqkUz17pmGEzHgCfnRJa30ToRHAdYs1PB/tGyFyqTLQIM0ojSsJHarh5huf 6VUM9nj5sJIlAVT6KDQajIxCwsfo4RpP8gPfwj53b/z1lo3KbX4GszXWRvx7lXEG 9BzbRf25riyZFg== -----END CERTIFICATE-----Generated at Mon Jan 26 00:18:58 2026 by rpki-client