This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft File: FDI5ZR22qrG8tnMl94W17h9AJcs.mft (raw, json) Hash identifier: jomFWfQiPjo1fMN3CybBOMgGQ5tG1r+LsjCuLeGSbl8= Subject key identifier: 7C:A6:F0:38:CD:60:34:5B:65:D9:34:6D:49:BF:33:17:58:63:E2:E6 Authority key identifier: 14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB Certificate issuer: /CN=143239651db6aab1bcb67325f785b5ee1f4025cb Certificate serial: 019BF2E1DD149B937A1B83A0B310D59B5904 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft Manifest number: 0843 Signing time: Sun 25 Jan 2026 02:00:46 +0000 Manifest this update: Sun 25 Jan 2026 02:00:46 +0000 Manifest next update: Mon 26 Jan 2026 02:00:46 +0000 Files and hashes: 1: FDI5ZR22qrG8tnMl94W17h9AJcs.crl (hash: oQfR0Me2hVkqKWucagbfs8V9KUzKmnDkU+E58Wwfvxc=) 2: H89M_EzTc8StQKIth4lnEHjKKN0.roa (hash: IDhPLp9HDBcx8Hw7u+pzfwTPs8upVVlGQyX+6R34mN0=) 3: Kk4HsfGd30im4loLCXTsCFiytPU.roa (hash: oKLzpVpeAoy3QzeCxsxeoWZkV7KJYmzZC8B43Ea48cY=) 4: ekGCZNDc9ZOt8-ot2-lgD0_VB3o.roa (hash: FwlalKxI5Tx7qsPfQIKwmFy4fzG691p8g1JAVi3TkPw=) 5: mNfJbT_LAkQ7oHjPzi5gOUmJf2k.roa (hash: crQWmizM31tyk+JqRaLmmMrPZUf827PwrlcRDlFZANc=) 6: semdbfvd3TfnGahfQ-_MnPsyXVY.roa (hash: K9glb2D2qochPPxOstvTUytekMPlr9ObTuDnHNr8nXk=) 7: tDI9go-g4CqghW05S71dg1-pcIU.roa (hash: ziudTSLoj2qHvEkRBq06kMjV08QbQZjdB8rDgu7yyDk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:e1:dd:14:9b:93:7a:1b:83:a0:b3:10:d5:9b:59:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143239651db6aab1bcb67325f785b5ee1f4025cb Validity Not Before: Jan 25 02:00:46 2026 GMT Not After : Jan 26 02:00:46 2026 GMT Subject: CN=7ca6f038cd60345b65d9346d49bf33175863e2e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:57:ba:c3:fc:33:0b:8d:aa:a4:6a:b6:6d:c9: 8d:7f:ed:da:4e:19:d2:0d:b8:53:87:d4:18:1d:5f: 5b:44:a6:99:49:7a:d8:46:ef:93:4e:61:d4:d3:62: 4f:c3:08:9b:8a:36:9a:ea:70:38:8a:3a:c2:50:98: 3a:a3:99:c9:e3:bb:be:93:0c:e6:04:39:89:e3:22: 32:80:6c:1e:98:45:86:98:e0:c5:cf:dd:02:c5:63: a2:ea:4d:11:49:08:e8:e1:0b:f6:a1:62:37:2a:79: 14:6f:a6:2b:07:3d:2f:3d:a8:e7:66:be:3d:cb:7a: fd:f4:a6:34:ee:c9:65:15:43:a4:65:d6:00:10:f3: 84:a7:a5:c4:40:4f:b6:31:2d:3c:f8:79:fd:d6:4b: 1f:2f:15:6d:e3:bc:ac:89:05:29:13:c1:4f:d6:09: 7b:cc:43:52:0c:c5:ef:1c:1a:c2:37:ed:ad:b8:c9: f4:62:10:5b:00:96:d4:16:d5:e6:c6:c8:72:a2:54: 41:d9:3f:d2:42:c0:fa:54:a3:b1:37:87:28:e1:f6: bf:71:84:a3:9c:db:27:4f:16:7e:96:b4:1e:d5:bb: 27:94:96:4d:9f:28:38:f8:79:92:6f:97:bb:ae:fd: e2:1c:25:28:0d:d1:23:1d:6b:96:84:b7:32:b1:51: dc:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:A6:F0:38:CD:60:34:5B:65:D9:34:6D:49:BF:33:17:58:63:E2:E6 X509v3 Authority Key Identifier: keyid:14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:9c:0b:a0:34:7a:71:35:77:79:28:ad:c7:e5:bd:d9:0f:88: df:79:0d:1a:b6:59:93:12:d1:32:b8:2f:9d:47:49:64:c1:f0: d2:0f:10:d2:2f:6f:f6:d5:45:c8:ec:27:50:dc:54:bb:35:0d: d6:7f:d2:0a:1f:89:37:61:9a:d3:33:0a:d0:f0:11:32:85:b9: 69:a3:95:0c:c2:8b:b5:ef:02:96:be:33:60:0d:1c:6a:6c:71: 75:0c:ce:1e:8f:2f:ce:be:ca:90:71:ac:43:dc:97:8b:5f:61: 3a:db:f1:1f:72:f3:94:70:92:2f:22:94:cc:2a:19:f0:af:3b: b4:b8:6b:13:f0:9d:db:3b:78:20:19:61:90:ce:48:55:13:1c: 6c:c6:f2:ae:cb:cf:13:f2:9b:ec:96:d1:1c:bb:b3:c7:e6:62: 45:04:70:12:6d:0c:29:67:04:fe:c3:17:98:4e:8e:1a:8c:56: c5:4e:d4:cb:9a:22:3d:5b:7f:95:57:3e:5c:b6:bd:8d:57:7d: 42:1b:8d:92:6e:f7:48:a8:5c:4c:73:69:6e:2f:e5:6f:9b:96: 11:20:f1:dd:83:4e:00:28:ce:4a:60:ed:57:b4:b6:f0:f4:cb: 58:d6:dd:d8:b1:ea:d1:21:02:2f:0c:2b:d1:eb:d4:d2:c9:3f: ee:87:d6:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvy4d0Um5N6G4OgsxDVm1kEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0MzIzOTY1MWRiNmFhYjFiY2I2NzMyNWY3ODViNWVlMWY0 MDI1Y2IwHhcNMjYwMTI1MDIwMDQ2WhcNMjYwMTI2MDIwMDQ2WjAzMTEwLwYDVQQD Eyg3Y2E2ZjAzOGNkNjAzNDViNjVkOTM0NmQ0OWJmMzMxNzU4NjNlMmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwle6w/wzC42qpGq2bcmNf+3aThnS DbhTh9QYHV9bRKaZSXrYRu+TTmHU02JPwwibijaa6nA4ijrCUJg6o5nJ47u+kwzm BDmJ4yIygGwemEWGmODFz90CxWOi6k0RSQjo4Qv2oWI3KnkUb6YrBz0vPajnZr49 y3r99KY07sllFUOkZdYAEPOEp6XEQE+2MS08+Hn91ksfLxVt47ysiQUpE8FP1gl7 zENSDMXvHBrCN+2tuMn0YhBbAJbUFtXmxshyolRB2T/SQsD6VKOxN4co4fa/cYSj nNsnTxZ+lrQe1bsnlJZNnyg4+HmSb5e7rv3iHCUoDdEjHWuWhLcysVHc1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHym8DjNYDRbZdk0bUm/MxdYY+LmMB8GA1UdIwQY MBaAFBQyOWUdtqqxvLZzJfeFte4fQCXLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkRJNVpSMjJxckc4dG5NbDk0VzE3aDlBSmNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC82ZjQ2ZDktM2FmMC00MmFhLWIzMzQt NmVlYzc3ZDliOTg1LzEvRkRJNVpSMjJxckc4dG5NbDk0VzE3aDlBSmNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC82ZjQ2ZDktM2FmMC00MmFhLWIzMzQtNmVlYzc3ZDliOTg1 LzEvRkRJNVpSMjJxckc4dG5NbDk0VzE3aDlBSmNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMZwLoDR6 cTV3eSitx+W92Q+I33kNGrZZkxLRMrgvnUdJZMHw0g8Q0i9v9tVFyOwnUNxUuzUN 1n/SCh+JN2Ga0zMK0PARMoW5aaOVDMKLte8Clr4zYA0camxxdQzOHo8vzr7KkHGs Q9yXi19hOtvxH3LzlHCSLyKUzCoZ8K87tLhrE/Cd2zt4IBlhkM5IVRMcbMbyrsvP E/Kb7JbRHLuzx+ZiRQRwEm0MKWcE/sMXmE6OGoxWxU7Uy5oiPVt/lVc+XLa9jVd9 QhuNkm73SKhcTHNpbi/lb5uWESDx3YNOACjOSmDtV7S28PTLWNbd2LHq0SECLwwr 0evU0sk/7ofWqQ== -----END CERTIFICATE-----Generated at Sun Jan 25 11:46:21 2026 by rpki-client