This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft File: FxXHzHtUJNpaIRFv73LOXNVkwPE.mft (raw, json) Hash identifier: 5ZoDFtBi+ct80cA+wplcT7r2Yz0vadXP3Y5FGxf0pJ0= Subject key identifier: 25:D6:1E:E4:E6:64:94:43:8D:EF:C8:2B:0E:86:D3:1D:43:56:20:2D Authority key identifier: 17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1 Certificate issuer: /CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1 Certificate serial: 019BF6BF0F1C6C0CF9D6867B84B13BBDBA0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft Manifest number: 04F0 Signing time: Sun 25 Jan 2026 20:01:14 +0000 Manifest this update: Sun 25 Jan 2026 20:01:14 +0000 Manifest next update: Mon 26 Jan 2026 20:01:14 +0000 Files and hashes: 1: FxXHzHtUJNpaIRFv73LOXNVkwPE.crl (hash: h6R+UpxW07Abztzd/VGO3iUVhEGKjxmdcAC8edXuQ60=) 2: Zrn84WYyrZEtX6PAfEnPVWtayZU.roa (hash: jSh/SHE78mPArHOipqPD4fmSLw8Ki+Bi/6/NXvqBAjM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:0f:1c:6c:0c:f9:d6:86:7b:84:b1:3b:bd:ba:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1 Validity Not Before: Jan 25 20:01:14 2026 GMT Not After : Jan 26 20:01:14 2026 GMT Subject: CN=25d61ee4e66494438defc82b0e86d31d4356202d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:aa:9b:46:7b:12:19:23:8f:e0:07:04:41:da: 26:b2:39:2f:9f:b1:f4:ce:6a:cf:6f:8a:3e:a1:14: b7:17:ec:2c:23:f2:1d:39:77:63:47:e7:4c:ef:fc: 5f:01:45:a6:03:d1:c9:66:8c:6d:e7:91:1d:4a:c1: 0b:73:a3:92:3a:55:b2:52:ff:e6:07:af:33:ce:94: 28:02:b1:98:dc:c9:e2:1b:28:5d:22:e9:87:24:e0: 6c:44:ae:41:f1:7d:e1:cb:72:42:b0:76:78:d8:b3: 6e:fd:73:65:72:eb:08:e6:c5:4c:85:88:24:dd:e2: e8:46:00:45:8d:84:b1:1d:ff:dc:a3:d8:b2:e5:d4: f6:22:07:3c:73:90:05:93:12:64:76:8e:21:41:73: 25:95:1b:f3:d0:28:4b:a5:65:a8:4f:7c:b8:79:49: 2e:54:fc:ae:66:a4:d2:bd:92:83:ef:2c:c8:84:4d: 95:ad:1a:21:13:91:30:6e:bc:78:56:c9:b9:22:ca: e6:f4:fb:d6:2f:a0:43:5b:a7:71:88:bd:9b:32:30: e0:04:fb:74:0c:d7:c1:87:d0:81:9e:f8:99:67:f0: ea:d8:2d:87:73:c8:0a:77:3e:2a:82:98:76:d8:24: 1c:ae:19:76:2a:04:ac:df:af:04:ea:19:ea:15:90: c9:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D6:1E:E4:E6:64:94:43:8D:EF:C8:2B:0E:86:D3:1D:43:56:20:2D X509v3 Authority Key Identifier: keyid:17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:bf:aa:93:e1:1f:7c:a4:26:df:51:d9:60:22:a6:28:f2:c1: 5b:ce:c1:b7:c1:d3:ec:f6:4f:4a:9e:45:db:75:45:c2:7a:db: f6:41:76:4c:42:24:3f:c4:c2:8b:7f:3c:25:51:74:34:a2:d3: c4:3a:20:01:e5:c5:b9:77:b9:2d:87:54:10:4a:9f:ab:ba:74: f2:18:69:89:08:ad:fc:fd:6d:84:75:fb:dc:92:e8:3b:af:1c: 66:99:f8:2f:da:8b:39:45:22:51:9a:1d:b7:da:00:40:4d:d0: 61:e2:00:30:5f:05:5d:92:c3:61:c6:4a:5f:b5:02:14:50:d3: d8:49:85:d4:24:99:50:d9:17:b9:cc:1a:92:5d:db:24:29:4a: af:c3:d4:15:b3:e0:03:b6:75:3a:61:a0:72:1c:0b:02:cc:1c: ed:04:00:f1:9e:d9:eb:1b:b0:68:7c:d4:b8:28:84:66:a7:53: df:01:41:5f:3c:d2:18:0c:3d:81:f0:56:c8:4e:68:a5:e7:fc: 4d:71:65:32:e7:ed:c1:06:e1:b8:4e:92:0a:29:24:c2:9c:4f: 30:d4:68:84:99:f0:a7:cb:05:13:70:43:2f:e7:c1:03:f2:79: f7:9b:3e:3c:fc:09:6f:73:e7:9e:9b:44:b3:9f:2f:f6:ec:c1: 0b:a1:17:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vw8cbAz51oZ7hLE7vboMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MTVjN2NjN2I1NDI0ZGE1YTIxMTE2ZmVmNzJjZTVjZDU2 NGMwZjEwHhcNMjYwMTI1MjAwMTE0WhcNMjYwMTI2MjAwMTE0WjAzMTEwLwYDVQQD EygyNWQ2MWVlNGU2NjQ5NDQzOGRlZmM4MmIwZTg2ZDMxZDQzNTYyMDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKqbRnsSGSOP4AcEQdomsjkvn7H0 zmrPb4o+oRS3F+wsI/IdOXdjR+dM7/xfAUWmA9HJZoxt55EdSsELc6OSOlWyUv/m B68zzpQoArGY3MniGyhdIumHJOBsRK5B8X3hy3JCsHZ42LNu/XNlcusI5sVMhYgk 3eLoRgBFjYSxHf/co9iy5dT2Igc8c5AFkxJkdo4hQXMllRvz0ChLpWWoT3y4eUku VPyuZqTSvZKD7yzIhE2VrRohE5Ewbrx4Vsm5Isrm9PvWL6BDW6dxiL2bMjDgBPt0 DNfBh9CBnviZZ/Dq2C2Hc8gKdz4qgph22CQcrhl2KgSs368E6hnqFZDJiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCXWHuTmZJRDje/IKw6G0x1DViAtMB8GA1UdIwQY MBaAFBcVx8x7VCTaWiERb+9yzlzVZMDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnhYSHpIdFVKTnBhSVJGdjczTE9YTlZrd1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC83NjAxY2EtZGUwMC00ZWUzLTk5ZmYt YzUzNmJmNzM5ODY5LzEvRnhYSHpIdFVKTnBhSVJGdjczTE9YTlZrd1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC83NjAxY2EtZGUwMC00ZWUzLTk5ZmYtYzUzNmJmNzM5ODY5 LzEvRnhYSHpIdFVKTnBhSVJGdjczTE9YTlZrd1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe7+qk+Ef fKQm31HZYCKmKPLBW87Bt8HT7PZPSp5F23VFwnrb9kF2TEIkP8TCi388JVF0NKLT xDogAeXFuXe5LYdUEEqfq7p08hhpiQit/P1thHX73JLoO68cZpn4L9qLOUUiUZod t9oAQE3QYeIAMF8FXZLDYcZKX7UCFFDT2EmF1CSZUNkXucwakl3bJClKr8PUFbPg A7Z1OmGgchwLAswc7QQA8Z7Z6xuwaHzUuCiEZqdT3wFBXzzSGAw9gfBWyE5opef8 TXFlMuftwQbhuE6SCikkwpxPMNRohJnwp8sFE3BDL+fBA/J595s+PPwJb3PnnptE s58v9uzBC6EXJg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:47:55 2026 by rpki-client