This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.mft File: fNG8cAkF0axtdzOuvDJj5q52-pc.mft (raw, json) Hash identifier: PfqWxeh/1052XbxJ/hoLBuMMconzxz8nuzWU03IoLes= Subject key identifier: 8D:03:70:87:A0:78:E1:63:EF:97:3C:F9:1A:4F:79:72:F8:14:B8:4B Authority key identifier: 7C:D1:BC:70:09:05:D1:AC:6D:77:33:AE:BC:32:63:E6:AE:76:FA:97 Certificate issuer: /CN=7cd1bc700905d1ac6d7733aebc3263e6ae76fa97 Certificate serial: 019BF5E330A08E79C0ED90168AC1485A105D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNG8cAkF0axtdzOuvDJj5q52-pc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.mft Manifest number: 01D1 Signing time: Sun 25 Jan 2026 16:01:05 +0000 Manifest this update: Sun 25 Jan 2026 16:01:05 +0000 Manifest next update: Mon 26 Jan 2026 16:01:05 +0000 Files and hashes: 1: fNG8cAkF0axtdzOuvDJj5q52-pc.crl (hash: YGO74mGjrEmA7RrOdPD+wMlGHQTsjQ4GngGPvniAeMY=) 2: hhYndYmrtj6UVK4MXLjISC5kjY8.roa (hash: Hp6kG7ylNYSrFI+JCOb5ieLSxf03lMDks7YDXEs5v7Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.mft rsync://rpki.ripe.net/repository/DEFAULT/fNG8cAkF0axtdzOuvDJj5q52-pc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:30:a0:8e:79:c0:ed:90:16:8a:c1:48:5a:10:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7cd1bc700905d1ac6d7733aebc3263e6ae76fa97 Validity Not Before: Jan 25 16:01:05 2026 GMT Not After : Jan 26 16:01:05 2026 GMT Subject: CN=8d037087a078e163ef973cf91a4f7972f814b84b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7f:ca:f4:4c:fa:12:ff:b8:57:38:9b:5c:32: 50:c3:61:c9:2a:ac:2f:1f:2c:41:74:14:b4:a6:c3: 85:9f:bc:5f:00:67:6f:c6:ba:34:29:7d:a2:1b:d6: 2c:8e:81:a4:31:9c:97:1e:72:d0:de:69:08:31:51: c4:7b:46:f2:d4:d3:dd:9f:c1:1f:d2:7d:38:88:cd: 87:23:13:8b:b0:53:dd:c8:75:33:5b:ce:fc:2c:d1: 26:58:17:8f:7e:8f:25:d3:40:88:20:86:d7:3f:19: e9:1e:12:dc:86:f3:88:5c:86:70:6b:04:d0:9f:31: e8:d0:73:fa:62:06:12:26:45:80:2f:27:14:ed:71: ab:4d:0a:1f:da:25:a5:af:23:dd:93:53:09:ed:35: bc:31:10:51:5f:9e:a2:f7:c5:a8:b0:76:59:2c:22: 02:a1:d6:67:7f:cf:07:1e:9d:42:40:67:b1:cd:7a: cc:20:4a:d1:18:06:f3:92:45:fa:0d:0d:a8:3f:f5: 5a:b0:af:fa:9d:fb:d1:7a:00:ab:87:cc:06:4e:ab: 9f:e3:90:dd:a4:84:41:08:40:28:89:e4:fa:c2:b2: 5f:d9:41:cc:26:26:7f:bf:54:ef:5a:f9:03:f3:c6: 59:e1:2b:e0:ce:fb:0f:be:af:d5:49:09:4a:e8:34: db:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:03:70:87:A0:78:E1:63:EF:97:3C:F9:1A:4F:79:72:F8:14:B8:4B X509v3 Authority Key Identifier: keyid:7C:D1:BC:70:09:05:D1:AC:6D:77:33:AE:BC:32:63:E6:AE:76:FA:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNG8cAkF0axtdzOuvDJj5q52-pc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:c2:27:30:ce:5b:f3:91:45:7c:a4:e1:64:a5:f1:5d:71:d5: ce:f7:dd:29:13:fb:20:9f:41:a6:b6:7e:87:a5:ec:a5:5e:7f: 3c:c1:3c:c2:40:61:4e:74:65:e7:81:55:88:33:8e:4e:50:eb: 68:a6:a6:5d:29:a9:fa:0d:95:52:47:64:74:71:12:70:8c:c7: f3:82:21:a5:ec:16:08:b5:00:b0:3c:89:f6:a6:3a:c0:d1:f6: 86:8b:c2:4d:8a:09:c2:cd:d6:52:4f:1e:4b:6f:5b:f5:56:ae: c4:6a:b9:dd:c5:ca:a4:29:a0:31:60:ec:38:a7:f0:3e:93:ca: e8:03:4d:5c:96:12:0c:86:5f:2a:27:21:54:f7:ed:9a:ac:d1: 31:4d:e0:ee:f5:90:72:e8:11:1c:05:ea:5f:e9:d1:c8:3c:d4: 48:09:f2:6b:38:63:0f:3a:35:47:84:c0:0f:b0:db:52:c8:be: 8d:96:f5:5e:b5:c3:1a:0e:ca:98:a3:9b:e1:f3:55:c0:73:3c: 74:a0:bc:a8:72:f2:b9:44:e7:f9:1a:1a:02:52:b7:91:62:a5: d4:5e:01:95:d8:2a:e9:96:b0:ea:ec:b2:33:a1:54:92:c9:ee: 56:a8:9c:80:55:d8:76:d0:cc:54:98:6b:c1:4d:c4:a9:fe:28: dd:72:16:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv14zCgjnnA7ZAWisFIWhBdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjZDFiYzcwMDkwNWQxYWM2ZDc3MzNhZWJjMzI2M2U2YWU3 NmZhOTcwHhcNMjYwMTI1MTYwMTA1WhcNMjYwMTI2MTYwMTA1WjAzMTEwLwYDVQQD Eyg4ZDAzNzA4N2EwNzhlMTYzZWY5NzNjZjkxYTRmNzk3MmY4MTRiODRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyX/K9Ez6Ev+4VzibXDJQw2HJKqwv HyxBdBS0psOFn7xfAGdvxro0KX2iG9YsjoGkMZyXHnLQ3mkIMVHEe0by1NPdn8Ef 0n04iM2HIxOLsFPdyHUzW878LNEmWBePfo8l00CIIIbXPxnpHhLchvOIXIZwawTQ nzHo0HP6YgYSJkWALycU7XGrTQof2iWlryPdk1MJ7TW8MRBRX56i98WosHZZLCIC odZnf88HHp1CQGexzXrMIErRGAbzkkX6DQ2oP/VasK/6nfvRegCrh8wGTquf45Dd pIRBCEAoieT6wrJf2UHMJiZ/v1TvWvkD88ZZ4SvgzvsPvq/VSQlK6DTbsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI0DcIegeOFj75c8+RpPeXL4FLhLMB8GA1UdIwQY MBaAFHzRvHAJBdGsbXczrrwyY+audvqXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZk5HOGNBa0YwYXh0ZHpPdXZESmo1cTUyLXBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9iYWRlODMtN2E4NC00YzQyLTlkMjYt ZmNlOWUyYmY0ZWY5LzEvZk5HOGNBa0YwYXh0ZHpPdXZESmo1cTUyLXBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9iYWRlODMtN2E4NC00YzQyLTlkMjYtZmNlOWUyYmY0ZWY5 LzEvZk5HOGNBa0YwYXh0ZHpPdXZESmo1cTUyLXBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdsInMM5b 85FFfKThZKXxXXHVzvfdKRP7IJ9BprZ+h6XspV5/PME8wkBhTnRl54FViDOOTlDr aKamXSmp+g2VUkdkdHEScIzH84IhpewWCLUAsDyJ9qY6wNH2hovCTYoJws3WUk8e S29b9VauxGq53cXKpCmgMWDsOKfwPpPK6ANNXJYSDIZfKichVPftmqzRMU3g7vWQ cugRHAXqX+nRyDzUSAnyazhjDzo1R4TAD7DbUsi+jZb1XrXDGg7KmKOb4fNVwHM8 dKC8qHLyuUTn+RoaAlK3kWKl1F4Bldgq6Zaw6uyyM6FUksnuVqicgFXYdtDMVJhr wU3Eqf4o3XIW3Q== -----END CERTIFICATE-----Generated at Sun Jan 25 22:35:28 2026 by rpki-client