This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft File: fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft (raw, json) Hash identifier: 3dPXSmvIHPc25eQfre7z19Yt2BiSlRiOHN/HaQ/CwJI= Subject key identifier: 63:84:D0:06:41:C1:52:FB:0C:56:DA:33:FD:A0:E3:1B:A4:5C:2A:4B Authority key identifier: 7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34 Certificate issuer: /CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34 Certificate serial: 019BF35050A2481E112F290EE542CBEFA529 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft Manifest number: 06AF Signing time: Sun 25 Jan 2026 04:01:25 +0000 Manifest this update: Sun 25 Jan 2026 04:01:25 +0000 Manifest next update: Mon 26 Jan 2026 04:01:25 +0000 Files and hashes: 1: 1WqxY3Ru6wUA1bBSLRXUbGPnrGs.roa (hash: 1Isp4qEhUMW8RbXIHRvEykaShiBFWYANN4lo8FswOgU=) 2: OF8_FWobXxZIravQspxAerLsQCQ.roa (hash: Y7S5oVSgN9LGWqLS5miIXFy0ldxtoJVgFrZlsFrthM8=) 3: fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl (hash: VyqQSJVi7iQ02JTAGrfjMHP+MhT1RhhyinZhDV+oHZU=) 4: iYC8lbhytTD32pOwIBpaKnVh070.roa (hash: YM6e3l9qg3NAPYfHxGGt9x27m8gykxKp/xuSfybtvWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:50:50:a2:48:1e:11:2f:29:0e:e5:42:cb:ef:a5:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34 Validity Not Before: Jan 25 04:01:25 2026 GMT Not After : Jan 26 04:01:25 2026 GMT Subject: CN=6384d00641c152fb0c56da33fda0e31ba45c2a4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c2:ad:8e:e6:88:73:65:12:36:03:75:b7:f5: 85:2b:14:a0:93:d7:a1:fd:23:5e:46:e5:ca:f9:bd: 19:1c:c0:c8:58:38:9e:5b:9d:81:ac:da:47:ec:69: 6a:43:9c:66:d2:d9:8b:3a:73:5e:27:12:1a:89:11: 71:d9:df:cf:a3:de:35:d3:b7:4a:ec:67:62:8e:02: e1:ec:b2:70:cf:57:9d:08:f0:17:e4:11:8d:26:9b: b5:fa:89:e9:df:48:96:82:b9:c7:a4:3b:9e:fd:e4: 01:b3:66:cd:99:73:da:41:27:bc:89:59:f5:c0:29: 78:09:72:01:bf:70:ae:4a:33:41:63:c4:a7:e0:02: 6b:59:65:84:56:dc:c7:55:50:01:3b:5b:fb:b6:0d: a2:1f:43:90:30:a2:b6:e9:0f:ca:e5:06:cf:19:a7: ac:6e:75:4e:32:4b:58:89:ce:e1:c7:29:55:9a:96: 2d:ab:eb:1b:9b:e9:cc:b1:56:2c:53:b7:9b:39:7e: d4:16:11:bb:6e:4f:f6:53:11:3f:76:57:d3:28:50: d5:e8:9d:56:85:85:c1:ac:77:20:b8:50:6c:00:d9: ef:bf:c7:91:e1:4f:51:36:67:2d:ed:81:bd:83:a3: b3:8d:46:a6:9f:aa:5a:b8:6b:05:70:4c:31:98:89: 2e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:84:D0:06:41:C1:52:FB:0C:56:DA:33:FD:A0:E3:1B:A4:5C:2A:4B X509v3 Authority Key Identifier: keyid:7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:31:73:7c:8e:dd:4b:e6:9b:a4:96:15:e5:d5:97:73:9e:f0: b2:79:98:fd:a3:de:ae:c2:dd:c3:6b:b5:2e:38:33:25:21:d4: 4d:d4:fd:99:b4:9d:25:34:56:20:ab:9b:d1:94:7c:cd:db:bb: 78:e1:1c:24:c7:e8:21:64:9c:41:c6:07:e5:be:bc:6d:89:18: 15:74:38:ca:ce:5b:ee:27:d3:3c:18:44:82:ef:19:01:e0:5c: 3d:96:c2:5d:ed:5e:f5:7b:99:bb:d0:25:3f:52:ec:3e:fe:88: b1:1c:e3:d7:59:71:f1:2a:9c:de:9e:6a:66:1a:5a:cc:85:1c: 3e:e5:84:d6:0d:1c:dc:ed:38:81:e5:6a:8b:c4:d2:ea:f2:d0: 78:9e:fe:fe:61:d1:ee:a0:42:5b:b6:e1:35:39:58:ce:dd:77: 39:be:51:a2:a1:16:fb:63:08:c5:df:37:c5:73:b9:66:36:cc: aa:04:0d:fe:c6:d0:c0:ed:5d:e9:af:fb:01:af:bb:96:68:e2: 13:b7:75:49:cd:6c:f9:d2:63:40:64:97:a3:d6:87:c5:eb:ee: fd:01:54:cf:7f:50:bf:73:cd:0f:8c:f8:8a:f4:6e:36:dc:50: 05:3a:2f:64:39:91:1b:8e:b5:78:04:d1:1c:46:0f:9d:ce:b2: b4:d7:6c:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzUFCiSB4RLykO5ULL76UpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjN2M3ZDQ4ODg3ZTJmMDg2NWQ3MDFjZGM2ZTBiYjdkZWVk NWRiMzQwHhcNMjYwMTI1MDQwMTI1WhcNMjYwMTI2MDQwMTI1WjAzMTEwLwYDVQQD Eyg2Mzg0ZDAwNjQxYzE1MmZiMGM1NmRhMzNmZGEwZTMxYmE0NWMyYTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsKtjuaIc2USNgN1t/WFKxSgk9eh /SNeRuXK+b0ZHMDIWDieW52BrNpH7GlqQ5xm0tmLOnNeJxIaiRFx2d/Po94107dK 7GdijgLh7LJwz1edCPAX5BGNJpu1+onp30iWgrnHpDue/eQBs2bNmXPaQSe8iVn1 wCl4CXIBv3CuSjNBY8Sn4AJrWWWEVtzHVVABO1v7tg2iH0OQMKK26Q/K5QbPGaes bnVOMktYic7hxylVmpYtq+sbm+nMsVYsU7ebOX7UFhG7bk/2UxE/dlfTKFDV6J1W hYXBrHcguFBsANnvv8eR4U9RNmct7YG9g6OzjUamn6pauGsFcEwxmIku0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGOE0AZBwVL7DFbaM/2g4xukXCpLMB8GA1UdIwQY MBaAFHx8fUiIfi8IZdcBzcbgu33u1ds0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkh4OVNJaC1Md2hsMXdITnh1QzdmZTdWMnpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9hYzExY2EtNzgxNy00ZTc1LThlZmYt ZjdhYmVmM2M4YTJiLzEvZkh4OVNJaC1Md2hsMXdITnh1QzdmZTdWMnpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9hYzExY2EtNzgxNy00ZTc1LThlZmYtZjdhYmVmM2M4YTJi LzEvZkh4OVNJaC1Md2hsMXdITnh1QzdmZTdWMnpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARzFzfI7d S+abpJYV5dWXc57wsnmY/aPersLdw2u1LjgzJSHUTdT9mbSdJTRWIKub0ZR8zdu7 eOEcJMfoIWScQcYH5b68bYkYFXQ4ys5b7ifTPBhEgu8ZAeBcPZbCXe1e9XuZu9Al P1LsPv6IsRzj11lx8Sqc3p5qZhpazIUcPuWE1g0c3O04geVqi8TS6vLQeJ7+/mHR 7qBCW7bhNTlYzt13Ob5RoqEW+2MIxd83xXO5ZjbMqgQN/sbQwO1d6a/7Aa+7lmji E7d1Sc1s+dJjQGSXo9aHxevu/QFUz39Qv3PND4z4ivRuNtxQBTovZDmRG461eATR HEYPnc6ytNdsGw== -----END CERTIFICATE-----Generated at Sun Jan 25 09:09:06 2026 by rpki-client