This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft File: Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft (raw, json) Hash identifier: 0YveaW/gLCjyY3BFz2dwqC8cI70NRfJcP1vDlbqBAuQ= Subject key identifier: 11:7C:D9:77:B8:71:0D:8A:14:0E:86:91:74:5A:27:E5:BD:21:6F:C4 Authority key identifier: 17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1 Certificate issuer: /CN=171da75128da7582e10f6a4bf22b9391349ba9f1 Certificate serial: 019BF4D0779BDB574C56014185B8EB119251 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft Manifest number: 0728 Signing time: Sun 25 Jan 2026 11:01:01 +0000 Manifest this update: Sun 25 Jan 2026 11:01:01 +0000 Manifest next update: Mon 26 Jan 2026 11:01:01 +0000 Files and hashes: 1: Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl (hash: oPMYUGb+EqJ3U/EdUOK5D7Mbn0CVD0Dqn9hNnXKcDJ8=) 2: Qjw5IzowUZzLtbf0lhiIbzGOObU.roa (hash: q/OL57QOoSpVCQTaWDYehgDv/Wd/sKn7NeJmKiof6Xw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:77:9b:db:57:4c:56:01:41:85:b8:eb:11:92:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=171da75128da7582e10f6a4bf22b9391349ba9f1 Validity Not Before: Jan 25 11:01:01 2026 GMT Not After : Jan 26 11:01:01 2026 GMT Subject: CN=117cd977b8710d8a140e8691745a27e5bd216fc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:02:a6:06:c8:43:c3:ea:48:d3:2f:f3:25:91: f5:79:9d:2f:ba:41:a0:29:cf:03:a3:d2:52:67:ef: de:a2:df:25:a3:51:ff:23:2c:89:cb:53:85:3e:75: 42:2d:2c:12:e0:c8:2c:a0:37:18:58:c6:82:fc:1d: 87:12:c2:d2:81:33:2a:93:d3:9e:32:1f:cf:7b:8f: 0a:ef:62:ab:38:10:71:88:7b:f7:19:ba:5d:eb:cf: 11:23:fd:48:3e:89:a7:3e:bb:98:3f:43:24:af:c3: b7:00:01:47:a8:13:64:0c:03:f2:86:b8:05:94:bb: 0c:a0:40:26:6d:4b:4e:0f:c0:fc:22:a2:69:26:f3: f6:02:e8:68:82:8b:e5:09:60:da:cb:e0:be:12:82: 10:60:86:f6:16:45:7e:82:47:57:96:1b:66:87:73: b3:6a:29:3e:89:58:c9:50:0b:a9:6e:a9:6f:f3:15: ce:78:0e:b0:b3:4a:45:8b:49:56:2c:3e:c9:cc:e8: c1:15:21:96:f8:1c:85:65:c6:37:56:26:52:5a:e1: 75:4f:d7:29:d8:55:a7:be:40:fd:48:38:61:d0:d7: 71:cc:28:7c:26:55:4a:e3:82:4e:c4:eb:83:44:52: 0b:9a:76:da:66:9b:55:f8:f8:c1:7b:7b:67:69:e1: 43:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:7C:D9:77:B8:71:0D:8A:14:0E:86:91:74:5A:27:E5:BD:21:6F:C4 X509v3 Authority Key Identifier: keyid:17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:28:6b:d5:fb:d3:2f:9c:a0:b7:b7:b6:be:aa:c3:4e:d3:f5: 97:fd:af:98:39:06:9c:d6:d0:68:39:bd:4e:e0:86:a8:b9:e5: 5c:b8:fe:36:ac:74:7e:cb:d2:54:48:02:07:aa:31:ca:2b:74: a4:02:06:8f:fe:d6:91:92:41:c4:07:45:95:59:52:be:ef:04: 73:23:86:f7:9b:04:f6:0a:7b:7e:c9:6e:64:55:74:2d:ec:a4: 9d:cc:41:e8:64:bf:f9:e0:c1:46:8f:d6:71:d5:5e:60:79:29: f4:bd:9d:26:1c:64:25:bd:8f:de:43:e6:21:19:1a:03:3a:ac: 3c:78:09:42:65:53:9d:4e:a9:bc:9e:8e:6c:b6:d5:1f:ce:5d: ff:d3:f8:7e:e0:73:44:bf:e3:78:d2:99:c8:d9:15:66:dc:55: da:32:c2:1c:ac:7a:bc:b0:3c:c6:82:a6:39:16:19:f4:e1:77: bc:cc:97:46:f6:cd:d6:eb:a8:a2:ff:61:9e:2c:e9:07:35:c1: 40:2d:b1:d2:11:c0:c8:8c:65:5f:5e:6c:32:34:60:a0:bf:fc: 3c:22:f1:8f:4e:42:2d:26:28:e2:9b:bb:02:65:6f:76:32:80: fa:10:5b:19:7b:8c:6a:bd:20:dd:46:e7:7c:d0:a4:73:df:c8: 21:a1:65:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00Heb21dMVgFBhbjrEZJRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MWRhNzUxMjhkYTc1ODJlMTBmNmE0YmYyMmI5MzkxMzQ5 YmE5ZjEwHhcNMjYwMTI1MTEwMTAxWhcNMjYwMTI2MTEwMTAxWjAzMTEwLwYDVQQD EygxMTdjZDk3N2I4NzEwZDhhMTQwZTg2OTE3NDVhMjdlNWJkMjE2ZmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgKmBshDw+pI0y/zJZH1eZ0vukGg Kc8Do9JSZ+/eot8lo1H/IyyJy1OFPnVCLSwS4MgsoDcYWMaC/B2HEsLSgTMqk9Oe Mh/Pe48K72KrOBBxiHv3Gbpd688RI/1IPomnPruYP0Mkr8O3AAFHqBNkDAPyhrgF lLsMoEAmbUtOD8D8IqJpJvP2AuhogovlCWDay+C+EoIQYIb2FkV+gkdXlhtmh3Oz aik+iVjJUAupbqlv8xXOeA6ws0pFi0lWLD7JzOjBFSGW+ByFZcY3ViZSWuF1T9cp 2FWnvkD9SDhh0NdxzCh8JlVK44JOxOuDRFILmnbaZptV+PjBe3tnaeFDAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBF82Xe4cQ2KFA6GkXRaJ+W9IW/EMB8GA1UdIwQY MBaAFBcdp1Eo2nWC4Q9qS/Irk5E0m6nxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRngyblVTamFkWUxoRDJwTDhpdVRrVFNicWZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC81OWY3NDMtZjFjNS00MmY4LTg2N2Mt NjFkZWFhNTYzMWIyLzEvRngyblVTamFkWUxoRDJwTDhpdVRrVFNicWZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC81OWY3NDMtZjFjNS00MmY4LTg2N2MtNjFkZWFhNTYzMWIy LzEvRngyblVTamFkWUxoRDJwTDhpdVRrVFNicWZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFChr1fvT L5ygt7e2vqrDTtP1l/2vmDkGnNbQaDm9TuCGqLnlXLj+Nqx0fsvSVEgCB6oxyit0 pAIGj/7WkZJBxAdFlVlSvu8EcyOG95sE9gp7fsluZFV0LeykncxB6GS/+eDBRo/W cdVeYHkp9L2dJhxkJb2P3kPmIRkaAzqsPHgJQmVTnU6pvJ6ObLbVH85d/9P4fuBz RL/jeNKZyNkVZtxV2jLCHKx6vLA8xoKmORYZ9OF3vMyXRvbN1uuoov9hnizpBzXB QC2x0hHAyIxlX15sMjRgoL/8PCLxj05CLSYo4pu7AmVvdjKA+hBbGXuMar0g3Ubn fNCkc9/IIaFlRw== -----END CERTIFICATE-----Generated at Sun Jan 25 20:12:28 2026 by rpki-client