This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft File: 03fcZqVjo68h7gerM-i__nr5KI4.mft (raw, json) Hash identifier: ZKdJK6VdeUppLfjQJxsk1YCnlLdGICKOqT9B5LVSdjY= Subject key identifier: 09:26:63:F9:DD:10:EF:2D:DD:31:75:9A:D9:37:00:F1:FB:91:9B:A5 Authority key identifier: D3:77:DC:66:A5:63:A3:AF:21:EE:07:AB:33:E8:BF:FE:7A:F9:28:8E Certificate issuer: /CN=d377dc66a563a3af21ee07ab33e8bffe7af9288e Certificate serial: 019BF989050A1B73426346586E9B098E4BAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/03fcZqVjo68h7gerM-i__nr5KI4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft Manifest number: 0635 Signing time: Mon 26 Jan 2026 09:01:04 +0000 Manifest this update: Mon 26 Jan 2026 09:01:04 +0000 Manifest next update: Tue 27 Jan 2026 09:01:04 +0000 Files and hashes: 1: 03fcZqVjo68h7gerM-i__nr5KI4.crl (hash: 99jCWB4WB1sfSarmJ4zCvfru4DCcg9fc0cSY17M9neA=) 2: H20JQocMFrDfWdVutaPCrCC7li4.roa (hash: gZcsKxQMJ6dZalTlYBUSf2/QY+Hj8zaB/GmOyCIp1vw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft rsync://rpki.ripe.net/repository/DEFAULT/03fcZqVjo68h7gerM-i__nr5KI4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:89:05:0a:1b:73:42:63:46:58:6e:9b:09:8e:4b:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d377dc66a563a3af21ee07ab33e8bffe7af9288e Validity Not Before: Jan 26 09:01:04 2026 GMT Not After : Jan 27 09:01:04 2026 GMT Subject: CN=092663f9dd10ef2ddd31759ad93700f1fb919ba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5f:ef:a3:05:e4:4b:b2:9f:b7:30:8c:2f:ac: f9:c2:3a:cf:bd:16:7a:d9:1d:84:70:ff:ef:67:03: 17:54:96:58:13:17:c9:60:b4:8a:11:3a:e5:ae:95: 41:b8:3c:d8:82:33:fe:fa:07:b8:60:14:fe:0c:97: a4:cb:8b:e2:82:67:fe:3f:6e:ea:ad:26:d1:a9:f4: 32:f3:71:cc:b8:5e:f6:17:ed:7b:06:9b:04:20:33: b5:d1:82:d4:96:2f:70:0e:3d:44:b7:08:14:41:e1: f1:49:13:b3:09:92:35:d1:e4:4c:89:23:b4:c9:c9: 60:7b:28:2d:d8:df:2c:21:04:e3:12:cb:13:78:48: 5f:82:94:df:bc:24:f4:f0:8d:dc:5e:0e:81:1b:5f: 9b:e2:fc:07:07:5d:ca:61:a9:fa:12:aa:d3:27:cb: 2a:f8:de:8a:9a:3f:43:48:d6:6c:02:dc:df:71:50: 4a:49:a2:0e:53:64:c5:28:1e:a8:ce:53:da:22:9d: 5b:76:75:f6:b2:af:a4:3f:a9:21:0d:f0:d1:5d:fb: 2a:4e:5f:6d:b3:dd:2f:5b:ab:87:e9:bf:25:84:f1: 2b:50:2b:bd:dd:74:d5:fa:f0:be:0e:d0:5f:1b:c4: 0a:49:28:52:63:60:0f:c4:32:51:31:70:b4:13:25: e2:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:26:63:F9:DD:10:EF:2D:DD:31:75:9A:D9:37:00:F1:FB:91:9B:A5 X509v3 Authority Key Identifier: keyid:D3:77:DC:66:A5:63:A3:AF:21:EE:07:AB:33:E8:BF:FE:7A:F9:28:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/03fcZqVjo68h7gerM-i__nr5KI4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:1e:78:ac:70:c1:73:84:7f:db:16:15:dc:42:0f:8e:f9:ed: 96:8d:0d:a2:3e:4c:1d:ba:5d:3c:4e:a6:76:fc:e1:28:49:0d: 18:88:2b:ca:ab:e8:db:2a:95:fc:6f:42:8c:e7:a5:89:46:5e: c8:f4:d6:49:f6:5e:28:43:ec:a9:0b:4a:b0:e3:41:53:29:87: d5:dd:1d:19:c6:fb:d3:e2:93:b6:9d:43:96:39:8c:e4:25:a6: 17:6e:a9:a6:8f:fd:c1:a2:b4:d4:7c:3c:db:2a:9d:73:43:a7: ec:1f:42:d6:37:97:b9:14:8c:d2:7b:b3:d7:89:f0:e4:02:30: ab:00:f1:10:77:87:dd:68:6f:b1:99:0a:1b:31:d4:da:46:04: 92:7e:47:6a:99:76:29:1b:3c:5f:a8:a4:7b:d9:cd:ef:d0:79: 12:50:30:2d:42:e5:b8:99:b9:25:7a:68:bc:63:3b:64:33:98: 07:4b:04:e6:74:cb:8e:c4:ad:d7:c1:da:bc:b7:10:d7:dc:b5: bb:b9:f8:df:12:57:89:11:d1:fb:94:be:06:c7:30:d5:99:9c: d7:3c:49:3f:1b:05:42:78:33:29:33:a4:e5:83:0c:57:03:f4: 47:de:1c:19:c9:19:ae:ef:b6:bc:2f:e8:8f:76:4e:cc:50:74: 58:2d:21:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5iQUKG3NCY0ZYbpsJjkuuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNzdkYzY2YTU2M2EzYWYyMWVlMDdhYjMzZThiZmZlN2Fm OTI4OGUwHhcNMjYwMTI2MDkwMTA0WhcNMjYwMTI3MDkwMTA0WjAzMTEwLwYDVQQD EygwOTI2NjNmOWRkMTBlZjJkZGQzMTc1OWFkOTM3MDBmMWZiOTE5YmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyF/vowXkS7KftzCML6z5wjrPvRZ6 2R2EcP/vZwMXVJZYExfJYLSKETrlrpVBuDzYgjP++ge4YBT+DJeky4vigmf+P27q rSbRqfQy83HMuF72F+17BpsEIDO10YLUli9wDj1EtwgUQeHxSROzCZI10eRMiSO0 yclgeygt2N8sIQTjEssTeEhfgpTfvCT08I3cXg6BG1+b4vwHB13KYan6EqrTJ8sq +N6Kmj9DSNZsAtzfcVBKSaIOU2TFKB6ozlPaIp1bdnX2sq+kP6khDfDRXfsqTl9t s90vW6uH6b8lhPErUCu93XTV+vC+DtBfG8QKSShSY2APxDJRMXC0EyXiCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAkmY/ndEO8t3TF1mtk3APH7kZulMB8GA1UdIwQY MBaAFNN33GalY6OvIe4HqzPov/56+SiOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDNmY1pxVmpvNjhoN2dlck0taV9fbnI1S0k0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xZDUwODEtZTRkMi00MGRiLWE1ZTkt YWYyNDA0YzI1YWNmLzEvMDNmY1pxVmpvNjhoN2dlck0taV9fbnI1S0k0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS8xZDUwODEtZTRkMi00MGRiLWE1ZTktYWYyNDA0YzI1YWNm LzEvMDNmY1pxVmpvNjhoN2dlck0taV9fbnI1S0k0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALB54rHDB c4R/2xYV3EIPjvntlo0Noj5MHbpdPE6mdvzhKEkNGIgryqvo2yqV/G9CjOeliUZe yPTWSfZeKEPsqQtKsONBUymH1d0dGcb70+KTtp1DljmM5CWmF26ppo/9waK01Hw8 2yqdc0On7B9C1jeXuRSM0nuz14nw5AIwqwDxEHeH3WhvsZkKGzHU2kYEkn5Hapl2 KRs8X6ike9nN79B5ElAwLULluJm5JXpovGM7ZDOYB0sE5nTLjsSt18HavLcQ19y1 u7n43xJXiRHR+5S+Bscw1Zmc1zxJPxsFQngzKTOk5YMMVwP0R94cGckZru+2vC/o j3ZOzFB0WC0h2Q== -----END CERTIFICATE-----Generated at Mon Jan 26 12:35:57 2026 by rpki-client