This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft File: ifnCFo0tgt39inBjfUQBivMLH5c.mft (raw, json) Hash identifier: fVLqcxaLRLOIrhVZQfLy/nqKVO8889tgokw8Ta25E/k= Subject key identifier: FB:CC:4B:32:AE:78:EB:0D:9E:D4:7B:38:E8:0E:51:55:72:7F:11:63 Authority key identifier: 89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97 Certificate issuer: /CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97 Certificate serial: 019BF687B64E28351DA6763B5E8FA6A7EE8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft Manifest number: 0321 Signing time: Sun 25 Jan 2026 19:00:47 +0000 Manifest this update: Sun 25 Jan 2026 19:00:47 +0000 Manifest next update: Mon 26 Jan 2026 19:00:47 +0000 Files and hashes: 1: gBJFcoYbkBHMY5TM8IY4zHwd7l8.roa (hash: N41NaFkXMzlFGahMYjKRbrB7l7KmQbIsQ/36YmVvgpQ=) 2: ifnCFo0tgt39inBjfUQBivMLH5c.crl (hash: /Z8xHsEvaXNckBRiPmWaAdTBx5mnO0l+zTPOHgT9KHw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:b6:4e:28:35:1d:a6:76:3b:5e:8f:a6:a7:ee:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97 Validity Not Before: Jan 25 19:00:47 2026 GMT Not After : Jan 26 19:00:47 2026 GMT Subject: CN=fbcc4b32ae78eb0d9ed47b38e80e5155727f1163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:69:1e:d7:e8:b6:62:ae:c7:2d:16:be:0a:ae: 30:64:2d:f0:e3:89:57:cd:6c:80:bf:ec:f9:d3:d9: db:4d:e7:2f:5c:71:8d:ea:69:5e:55:ca:54:fa:57: 34:08:1e:3c:b6:cc:db:93:6b:81:3e:b5:f1:b0:77: 9c:1d:05:a4:06:64:d6:0c:a2:bd:f5:2e:b4:54:26: c8:4f:b3:9d:43:50:4a:07:82:96:7c:5e:b4:c2:9a: 4e:6f:89:b1:e5:b0:dc:cc:cc:f4:6b:03:09:ad:23: d2:21:e6:ba:b7:af:fb:2f:aa:c7:28:7e:7f:d3:c0: 56:53:dd:bd:10:1a:9c:7a:35:60:c0:55:69:a7:b8: 26:9c:7d:42:91:3b:0e:ed:27:79:79:98:fd:05:94: 1c:fb:a5:c3:a5:d3:89:5b:05:a3:72:19:2e:8d:29: 6d:18:a1:9c:ae:24:bd:64:f4:97:da:42:8d:ca:9d: d6:d3:81:6a:d6:4e:23:a2:7e:5c:65:a7:08:40:91: df:6b:c2:fc:63:25:34:7c:59:5f:ad:05:21:2d:1e: eb:e6:39:83:1a:50:48:ca:0c:d9:88:ca:e1:37:db: 88:b2:9f:87:f6:ce:89:ab:73:82:9c:66:29:38:16: ba:80:40:25:95:4a:64:22:ce:f5:77:9b:35:5e:c4: 69:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:CC:4B:32:AE:78:EB:0D:9E:D4:7B:38:E8:0E:51:55:72:7F:11:63 X509v3 Authority Key Identifier: keyid:89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:0b:81:10:c3:63:57:54:49:92:1f:d7:94:1b:dd:f0:f9:96: e7:48:b3:2b:2c:03:56:b2:b5:ef:34:b2:f7:c5:9b:df:5f:03: 2c:fe:be:e9:cc:22:54:37:35:84:13:29:96:cf:ef:c7:f7:94: 3e:68:ab:3f:08:d1:d8:4b:35:a1:0a:6e:17:8a:59:75:38:6e: 0d:f8:a5:ec:b0:59:ae:13:32:a2:4c:f7:a3:7b:8b:e0:19:5f: 9a:b3:d6:1c:4a:25:53:c3:c1:2f:d9:3d:eb:a3:81:ee:c4:28: 08:d8:d8:37:bd:af:4c:ea:2a:ca:b5:90:c9:cc:72:cd:16:46: 78:3a:96:be:b7:21:de:00:aa:0c:e4:93:b9:04:8b:57:0c:bd: 9d:fb:55:31:b2:01:94:53:ee:49:53:a7:48:a0:51:0e:18:8d: a9:e1:44:8d:20:ae:02:fe:06:58:0e:2a:80:c8:4e:82:35:b3: 8e:27:95:ca:d2:20:70:73:85:29:0b:87:f6:1e:87:df:7d:87: ca:db:66:f7:ea:a4:3c:29:00:a9:b6:b4:37:70:fd:59:1b:e8: 60:6b:67:8f:07:e1:c1:4a:34:66:e5:7e:8b:fe:25:cf:8e:5b: 4b:77:0d:2f:04:9d:c2:18:60:31:f9:24:cb:53:7d:46:09:7e: 58:25:95:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h7ZOKDUdpnY7Xo+mp+6KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ZjljMjE2OGQyZDgyZGRmZDhhNzA2MzdkNDQwMThhZjMw YjFmOTcwHhcNMjYwMTI1MTkwMDQ3WhcNMjYwMTI2MTkwMDQ3WjAzMTEwLwYDVQQD EyhmYmNjNGIzMmFlNzhlYjBkOWVkNDdiMzhlODBlNTE1NTcyN2YxMTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGke1+i2Yq7HLRa+Cq4wZC3w44lX zWyAv+z509nbTecvXHGN6mleVcpU+lc0CB48tszbk2uBPrXxsHecHQWkBmTWDKK9 9S60VCbIT7OdQ1BKB4KWfF60wppOb4mx5bDczMz0awMJrSPSIea6t6/7L6rHKH5/ 08BWU929EBqcejVgwFVpp7gmnH1CkTsO7Sd5eZj9BZQc+6XDpdOJWwWjchkujSlt GKGcriS9ZPSX2kKNyp3W04Fq1k4jon5cZacIQJHfa8L8YyU0fFlfrQUhLR7r5jmD GlBIygzZiMrhN9uIsp+H9s6Jq3OCnGYpOBa6gEAllUpkIs71d5s1XsRpwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPvMSzKueOsNntR7OOgOUVVyfxFjMB8GA1UdIwQY MBaAFIn5whaNLYLd/YpwY31EAYrzCx+XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWZuQ0ZvMHRndDM5aW5CamZVUUJpdk1MSDVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lMWVhOWItZDUyOS00OGJhLThiYTIt YmFjYWUwMzBlMzc0LzEvaWZuQ0ZvMHRndDM5aW5CamZVUUJpdk1MSDVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9lMWVhOWItZDUyOS00OGJhLThiYTItYmFjYWUwMzBlMzc0 LzEvaWZuQ0ZvMHRndDM5aW5CamZVUUJpdk1MSDVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAewuBEMNj V1RJkh/XlBvd8PmW50izKywDVrK17zSy98Wb318DLP6+6cwiVDc1hBMpls/vx/eU PmirPwjR2Es1oQpuF4pZdThuDfil7LBZrhMyokz3o3uL4BlfmrPWHEolU8PBL9k9 66OB7sQoCNjYN72vTOoqyrWQycxyzRZGeDqWvrch3gCqDOSTuQSLVwy9nftVMbIB lFPuSVOnSKBRDhiNqeFEjSCuAv4GWA4qgMhOgjWzjieVytIgcHOFKQuH9h6H332H yttm9+qkPCkAqba0N3D9WRvoYGtnjwfhwUo0ZuV+i/4lz45bS3cNLwSdwhhgMfkk y1N9Rgl+WCWVbg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:48:26 2026 by rpki-client