This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft File: fexyg377vE6m3dS-lDYZFrTDYto.mft (raw, json) Hash identifier: G3dZ/9C0CoJwi0h2c+JXsl1jTwZq0qY1ZzPyMheCbf8= Subject key identifier: B6:33:55:AB:8C:D7:E4:49:BC:B3:96:71:78:D7:B0:32:C2:25:E0:D3 Authority key identifier: 7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA Certificate issuer: /CN=7dec72837efbbc4ea6ddd4be94361916b4c362da Certificate serial: 019BF5753177A8DF48577025FFBE8EDA3338 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft Manifest number: 0ED0 Signing time: Sun 25 Jan 2026 14:00:56 +0000 Manifest this update: Sun 25 Jan 2026 14:00:56 +0000 Manifest next update: Mon 26 Jan 2026 14:00:56 +0000 Files and hashes: 1: 3g6ILoE9ejngNxt1ax6rYM1LQ60.roa (hash: LEUisAJ5IBxkUseMOfjHAnJQfW3VdAcMs8IPdC6dNso=) 2: fexyg377vE6m3dS-lDYZFrTDYto.crl (hash: b19fOejav6ee/k8gRgIVWjgQTm740MGUvtqyDWsWcuA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:31:77:a8:df:48:57:70:25:ff:be:8e:da:33:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7dec72837efbbc4ea6ddd4be94361916b4c362da Validity Not Before: Jan 25 14:00:56 2026 GMT Not After : Jan 26 14:00:56 2026 GMT Subject: CN=b63355ab8cd7e449bcb3967178d7b032c225e0d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b5:24:31:38:13:e6:03:68:0b:c9:1a:0c:f3: 6e:0a:eb:8d:c8:b1:85:4f:d4:46:34:8b:30:46:21: 2f:ad:16:d9:78:14:40:37:86:36:2d:8a:a5:54:de: 1c:21:53:3c:12:bf:46:32:3f:1f:87:93:23:de:fe: 3e:46:73:40:43:d6:ca:2f:89:be:14:7e:5d:7f:7c: 67:49:78:cf:c7:8f:fa:78:6c:c8:75:cf:90:38:68: c1:8a:3a:5b:8c:15:16:59:7c:2f:0e:c7:56:1e:1f: 8c:a4:a5:6a:0c:37:69:a3:a9:19:fa:54:d9:e2:fd: 0c:95:72:20:1b:c9:17:d9:41:7e:2f:0b:ff:d5:5e: 81:be:f9:cd:15:32:b7:58:fb:8a:f3:42:be:68:59: a7:30:18:53:90:4f:40:fd:98:b0:01:bd:3a:c0:8a: 68:18:3d:16:65:52:01:43:04:15:a4:c4:f7:f3:83: 44:e3:0c:bb:3a:5a:2b:5e:4d:83:b7:64:c2:57:19: c7:7e:40:f6:ca:6d:77:bd:ca:15:12:ea:b6:2b:33: 28:cf:b0:a9:b2:0b:cb:45:60:0e:22:33:ba:1a:8e: dc:fc:72:c2:b4:f7:6a:95:76:f8:8d:89:84:ce:ea: 0b:cd:75:fc:e4:d8:eb:bb:fe:7c:e3:95:94:61:cc: 52:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:33:55:AB:8C:D7:E4:49:BC:B3:96:71:78:D7:B0:32:C2:25:E0:D3 X509v3 Authority Key Identifier: keyid:7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:e5:6e:8b:7d:ab:a1:63:70:db:03:41:81:f1:16:aa:c0:63: db:39:85:a0:15:de:b2:ba:a6:b5:ad:20:47:3c:bb:62:11:fa: 5c:ca:ed:d3:7d:eb:23:9c:52:57:2b:c9:8e:a0:ed:4a:4d:b4: d0:25:8a:29:08:b2:ce:ad:25:b1:8c:5d:bc:e0:86:ec:7f:11: 13:25:54:81:10:e2:3e:b0:3a:cb:75:b7:0a:8c:55:32:b6:f5: b6:5b:49:6e:ff:e5:60:96:66:79:63:25:ad:71:15:5c:ef:1b: 7a:04:a0:06:b8:f0:e8:e2:08:d8:94:56:7f:1a:94:66:7f:68: 84:46:99:49:6f:6e:a9:11:32:d8:51:4e:a8:5c:06:c9:a7:9a: fc:10:a7:34:8d:83:46:1f:5a:3d:bb:aa:bd:7e:f3:2a:82:3b: 32:02:69:da:c4:7c:3e:ef:f0:af:e8:96:d8:79:19:18:b6:d9: ca:be:60:1e:08:a9:99:68:bc:75:ae:d4:49:a1:92:71:26:86: fb:82:05:d0:2a:7b:ed:c5:85:39:91:81:43:53:3b:ee:b8:4c: 0f:06:04:3e:e7:ed:46:e2:8b:d4:13:fd:4a:b1:89:d7:80:f3: c5:cc:57:cc:94:03:be:56:71:ea:7d:5a:de:f5:b7:f4:98:42: fa:4e:a2:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dTF3qN9IV3Al/76O2jM4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZWM3MjgzN2VmYmJjNGVhNmRkZDRiZTk0MzYxOTE2YjRj MzYyZGEwHhcNMjYwMTI1MTQwMDU2WhcNMjYwMTI2MTQwMDU2WjAzMTEwLwYDVQQD EyhiNjMzNTVhYjhjZDdlNDQ5YmNiMzk2NzE3OGQ3YjAzMmMyMjVlMGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrUkMTgT5gNoC8kaDPNuCuuNyLGF T9RGNIswRiEvrRbZeBRAN4Y2LYqlVN4cIVM8Er9GMj8fh5Mj3v4+RnNAQ9bKL4m+ FH5df3xnSXjPx4/6eGzIdc+QOGjBijpbjBUWWXwvDsdWHh+MpKVqDDdpo6kZ+lTZ 4v0MlXIgG8kX2UF+Lwv/1V6BvvnNFTK3WPuK80K+aFmnMBhTkE9A/ZiwAb06wIpo GD0WZVIBQwQVpMT384NE4wy7OlorXk2Dt2TCVxnHfkD2ym13vcoVEuq2KzMoz7Cp sgvLRWAOIjO6Go7c/HLCtPdqlXb4jYmEzuoLzXX85Njru/5845WUYcxSlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLYzVauM1+RJvLOWcXjXsDLCJeDTMB8GA1UdIwQY MBaAFH3scoN++7xOpt3UvpQ2GRa0w2LaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmV4eWczNzd2RTZtM2RTLWxEWVpGclREWXRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy80NDQ3OGYtZTk4MC00ZTYwLTlkNmUt Mzg2NjE3YTY2NGZlLzEvZmV4eWczNzd2RTZtM2RTLWxEWVpGclREWXRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy80NDQ3OGYtZTk4MC00ZTYwLTlkNmUtMzg2NjE3YTY2NGZl LzEvZmV4eWczNzd2RTZtM2RTLWxEWVpGclREWXRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt+Vui32r oWNw2wNBgfEWqsBj2zmFoBXesrqmta0gRzy7YhH6XMrt033rI5xSVyvJjqDtSk20 0CWKKQiyzq0lsYxdvOCG7H8REyVUgRDiPrA6y3W3CoxVMrb1tltJbv/lYJZmeWMl rXEVXO8begSgBrjw6OII2JRWfxqUZn9ohEaZSW9uqREy2FFOqFwGyaea/BCnNI2D Rh9aPbuqvX7zKoI7MgJp2sR8Pu/wr+iW2HkZGLbZyr5gHgipmWi8da7USaGScSaG +4IF0Cp77cWFOZGBQ1M77rhMDwYEPuftRuKL1BP9SrGJ14DzxcxXzJQDvlZx6n1a 3vW39JhC+k6i3Q== -----END CERTIFICATE-----Generated at Sun Jan 25 23:54:30 2026 by rpki-client