This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft File: fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft (raw, json) Hash identifier: sB8RgEkwDL3a34rbps2zPJbqmQBEJHvm/5Flm2bO4jE= Subject key identifier: 84:FE:6B:87:93:0A:1F:C0:23:BD:CE:03:FA:A9:E5:30:38:BE:87:2A Authority key identifier: 7E:13:41:4B:DC:23:12:40:0D:FA:9F:50:65:0D:51:EE:04:43:DF:16 Certificate issuer: /CN=7e13414bdc2312400dfa9f50650d51ee0443df16 Certificate serial: 019BF8AD78CB77C3BD219245C256D1BC5666 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft Manifest number: 17EB Signing time: Mon 26 Jan 2026 05:01:16 +0000 Manifest this update: Mon 26 Jan 2026 05:01:16 +0000 Manifest next update: Tue 27 Jan 2026 05:01:16 +0000 Files and hashes: 1: anOK_t3CyTqq8NlqFB7A075gooA.roa (hash: UdYKN437GE/t4do7Cb6fa4jEkY53zklvjYRy+PQ0Xrg=) 2: fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl (hash: aSzv0DvV/pIN5TWZ0d5uVRT4QHaNWWGlvwt6/j2ZnKE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:78:cb:77:c3:bd:21:92:45:c2:56:d1:bc:56:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e13414bdc2312400dfa9f50650d51ee0443df16 Validity Not Before: Jan 26 05:01:16 2026 GMT Not After : Jan 27 05:01:16 2026 GMT Subject: CN=84fe6b87930a1fc023bdce03faa9e53038be872a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:94:1a:e9:bc:9e:f4:10:a4:81:83:0d:1e:23: e8:22:e5:62:a5:97:b6:69:90:52:87:04:52:68:d6: a9:9d:db:0b:a4:b2:48:2b:63:42:57:1e:97:cd:83: 2f:c3:29:ef:9a:b3:6e:4a:05:7c:e4:8f:3a:39:b4: bf:bc:a5:d0:7c:44:bc:20:4c:45:44:7d:0e:56:29: b0:b5:a9:ee:07:ea:77:6c:0c:fa:02:c7:98:45:29: fe:e1:bf:8d:15:db:34:e7:c0:7a:5c:79:bc:0a:8a: 66:7d:1a:e0:91:53:d1:9d:b3:fd:69:a6:41:a6:ef: bd:74:b8:fb:6b:97:27:48:23:f2:68:c5:c0:e9:ca: 96:52:e1:e5:2e:de:68:f6:ec:c1:df:11:d0:22:6f: 72:4e:1d:1d:9e:79:8e:2e:1b:c6:a9:2c:ae:0c:05: fa:03:1a:42:cf:c2:0f:08:57:fa:05:d0:a1:2a:84: b2:5c:8a:a3:09:42:1c:b8:f1:90:8a:23:e4:03:6e: 2b:16:84:2e:dd:77:c0:a3:b0:59:b2:e4:c7:5a:5f: 7c:b6:71:46:7d:c6:9a:c9:ac:e2:1f:98:6c:d4:c4: df:7c:3e:22:b7:c2:59:5d:23:a5:da:20:f4:ed:1a: c5:5d:98:46:d7:c2:46:86:93:87:6a:11:fc:22:ee: be:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:FE:6B:87:93:0A:1F:C0:23:BD:CE:03:FA:A9:E5:30:38:BE:87:2A X509v3 Authority Key Identifier: keyid:7E:13:41:4B:DC:23:12:40:0D:FA:9F:50:65:0D:51:EE:04:43:DF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:2a:3b:95:19:e3:a3:82:ab:17:7b:c5:d1:8c:a1:c8:41:86: 6a:f8:4f:0e:32:8a:a2:c4:5c:04:7d:cc:ee:6f:7a:e5:97:10: 68:67:cf:46:2c:3f:0e:44:e2:0d:4c:3e:34:66:20:53:a0:a4: ac:b0:34:06:87:66:37:a1:e1:96:11:5b:bd:85:a8:b1:fb:4a: 0d:9c:41:d6:69:b4:6f:2f:2f:62:33:b1:04:7c:30:f7:89:65: 61:be:cf:f2:78:78:2f:4a:8c:85:78:19:1a:cd:5d:cd:0a:f4: f4:2a:d8:e7:11:4b:f8:f5:db:8a:d0:99:64:fb:16:4b:74:35: 16:01:64:e2:71:71:b3:d5:41:04:f0:e0:a3:06:81:84:a0:d6: af:23:c0:82:60:81:3a:e5:61:4e:b3:27:83:ce:48:48:70:ea: 2e:1e:65:37:7d:1f:9d:42:38:97:af:bb:00:d4:95:d5:6b:62: 89:29:12:a0:57:26:a2:89:2f:a9:30:94:57:30:1b:a5:f4:c2: f0:1c:60:f8:fb:7a:75:51:38:ad:5a:ae:ae:6c:c7:b8:72:d6: e8:cf:ce:72:1f:f1:80:38:40:cb:b7:51:ea:d8:f3:76:7c:8f: 5e:ad:6b:1d:28:a6:be:c7:96:21:68:24:77:59:94:0a:0f:a5: 02:ea:2c:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rXjLd8O9IZJFwlbRvFZmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMTM0MTRiZGMyMzEyNDAwZGZhOWY1MDY1MGQ1MWVlMDQ0 M2RmMTYwHhcNMjYwMTI2MDUwMTE2WhcNMjYwMTI3MDUwMTE2WjAzMTEwLwYDVQQD Eyg4NGZlNmI4NzkzMGExZmMwMjNiZGNlMDNmYWE5ZTUzMDM4YmU4NzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpQa6bye9BCkgYMNHiPoIuVipZe2 aZBShwRSaNapndsLpLJIK2NCVx6XzYMvwynvmrNuSgV85I86ObS/vKXQfES8IExF RH0OVimwtanuB+p3bAz6AseYRSn+4b+NFds058B6XHm8CopmfRrgkVPRnbP9aaZB pu+9dLj7a5cnSCPyaMXA6cqWUuHlLt5o9uzB3xHQIm9yTh0dnnmOLhvGqSyuDAX6 AxpCz8IPCFf6BdChKoSyXIqjCUIcuPGQiiPkA24rFoQu3XfAo7BZsuTHWl98tnFG fcaayaziH5hs1MTffD4it8JZXSOl2iD07RrFXZhG18JGhpOHahH8Iu6+lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIT+a4eTCh/AI73OA/qp5TA4vocqMB8GA1UdIwQY MBaAFH4TQUvcIxJADfqfUGUNUe4EQ98WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmhOQlM5d2pFa0FOLXA5UVpRMVI3Z1JEM3hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi80NGMzNjUtNmNlZC00NWQ5LTg2NWQt MDRmY2VjYWQ3MGVjLzEvZmhOQlM5d2pFa0FOLXA5UVpRMVI3Z1JEM3hZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi80NGMzNjUtNmNlZC00NWQ5LTg2NWQtMDRmY2VjYWQ3MGVj LzEvZmhOQlM5d2pFa0FOLXA5UVpRMVI3Z1JEM3hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwio7lRnj o4KrF3vF0YyhyEGGavhPDjKKosRcBH3M7m965ZcQaGfPRiw/DkTiDUw+NGYgU6Ck rLA0BodmN6HhlhFbvYWosftKDZxB1mm0by8vYjOxBHww94llYb7P8nh4L0qMhXgZ Gs1dzQr09CrY5xFL+PXbitCZZPsWS3Q1FgFk4nFxs9VBBPDgowaBhKDWryPAgmCB OuVhTrMng85ISHDqLh5lN30fnUI4l6+7ANSV1WtiiSkSoFcmookvqTCUVzAbpfTC 8Bxg+Pt6dVE4rVqurmzHuHLW6M/Och/xgDhAy7dR6tjzdnyPXq1rHSimvseWIWgk d1mUCg+lAuosFA== -----END CERTIFICATE-----Generated at Mon Jan 26 15:05:23 2026 by rpki-client