This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft File: fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft (raw, json) Hash identifier: wPjVRlcl1nH3mU0zvWp0YnTPhbU4PyKl4rAfAmcTHMc= Subject key identifier: 3B:D3:4D:68:DD:51:56:A9:36:F5:8C:BE:6B:C8:5C:AB:B4:EA:18:7E Authority key identifier: 7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6 Certificate issuer: /CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6 Certificate serial: 019BF79A2F84A7D08CD07F16B6A1D9722E59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft Manifest number: 17FB Signing time: Mon 26 Jan 2026 00:00:35 +0000 Manifest this update: Mon 26 Jan 2026 00:00:35 +0000 Manifest next update: Tue 27 Jan 2026 00:00:35 +0000 Files and hashes: 1: G0kBNcjhGFcxChx46aWWaNpRXhY.roa (hash: VJoqFME0N6dK/qBA61hfvkkTq2MVQMZWW93hxUvsK8Q=) 2: IhUUSRuZPQ93qmBEuCsX-VJJ8_Y.roa (hash: wQMNMlSi7ML40phwxmQnjfrhkgmt/fkZEJZEruvJetM=) 3: J7oFZC1CJk2GtQuj_-ICPxLHOsQ.roa (hash: oGKjzDdrrCM7vTukMw0Fba8efuuuaYKCVfCXlBR+Jpc=) 4: O_CD_5ALmuh68TK-xyESGxnHW24.roa (hash: A4M+FCTh23fTzIJAI9lDd9sc/Yc7QQultOVy81PYaSo=) 5: Y05YWTld1eID__luRs7pp8ewZwY.roa (hash: 02lMUa1OHr9cMSAHSJuLTXNV5rSyX1jxkq8ORZ0rugw=) 6: fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl (hash: oliEGkyExajX9Il5DKz3drcXtgLCoEfNx38oqTkGezI=) 7: oFmVPpAqArTolT86zoYzDNps-ck.roa (hash: vxR9GCqj5WIpQWRTxrTVSqLQRxXTFqzFObqIUCYCQMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:2f:84:a7:d0:8c:d0:7f:16:b6:a1:d9:72:2e:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6 Validity Not Before: Jan 26 00:00:35 2026 GMT Not After : Jan 27 00:00:35 2026 GMT Subject: CN=3bd34d68dd5156a936f58cbe6bc85cabb4ea187e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cb:67:4a:7c:1f:2b:75:7c:e0:16:a1:6a:c7: f8:d7:47:b0:37:d3:2f:a6:ab:89:0d:a9:9c:b5:85: 0a:73:42:48:9b:c4:e5:4e:ee:a8:e2:36:e4:15:da: e6:d3:ce:70:f7:00:1a:29:bc:3a:7d:ca:9b:8a:ba: 24:4f:f9:27:56:ed:94:df:2a:52:e7:0b:a2:d9:81: 66:9f:39:11:5b:dc:cd:df:0a:59:df:90:f5:af:f4: c5:ce:46:10:11:8b:95:6f:30:0c:1f:02:f9:e8:20: f2:d9:58:a6:63:67:57:db:c0:d6:66:1a:a2:17:0f: 63:23:79:cb:6c:60:52:74:d2:27:03:7b:3e:f8:ca: 0e:b5:42:89:5a:35:34:a7:55:f5:e8:28:ea:63:10: d9:54:43:f7:8b:ef:bc:ab:29:c1:07:99:50:5e:4e: 58:ac:1d:99:3f:50:c2:43:0e:a2:5f:de:36:b0:d3: 70:2f:6f:3d:ee:a8:02:d6:f9:24:e6:59:ac:2a:e2: 8c:3d:ed:6a:3d:89:1c:9f:d3:9e:c8:c8:ab:0c:33: f4:6c:89:f7:38:b1:90:96:c8:24:40:25:ad:f8:f8: 18:60:30:b2:e9:0c:e0:e6:af:2a:73:60:09:d2:66: f6:fa:65:8d:3f:01:cb:b9:53:36:de:fc:d0:95:44: f0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:D3:4D:68:DD:51:56:A9:36:F5:8C:BE:6B:C8:5C:AB:B4:EA:18:7E X509v3 Authority Key Identifier: keyid:7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:1e:2e:81:b5:2d:da:a3:c5:ea:40:00:f8:a7:e0:07:2c:6c: 7e:ae:9d:82:60:eb:7a:b9:a1:ab:8c:99:0d:3c:78:55:67:01: 64:8b:af:3c:63:26:17:43:01:86:ea:20:f9:30:8f:d8:44:90: 3f:28:31:48:92:92:e7:71:c5:32:e1:a6:4f:59:8d:ce:0b:6a: 3d:4d:24:68:9d:88:00:18:cd:7d:89:79:5b:52:04:bf:ea:71: f4:41:58:dd:94:2c:9e:ae:79:79:d4:90:ea:1d:50:46:7b:bb: bb:f0:27:ee:e2:25:d7:0e:76:9c:1f:a6:a3:65:d6:d4:2e:e4: 93:36:6a:34:02:74:df:27:88:a5:e8:dc:3d:0c:d6:01:7b:95: e4:a1:b4:80:93:02:3a:09:5a:3b:8a:20:7d:32:38:a4:4c:99: fa:c7:fd:75:18:81:b6:4c:06:79:25:98:7d:dd:a7:b0:b5:77: 19:17:2c:e6:7c:b2:fe:c7:d2:0b:b7:0a:1a:5c:18:8a:29:04: ee:44:53:94:1d:44:e2:8b:c8:3d:01:c7:5e:62:f2:12:21:82: f2:04:07:ff:7a:3e:c1:04:dc:55:ea:be:23:15:f8:a5:b2:4f: e0:4b:a9:d2:43:5e:2f:89:d7:68:3d:3a:64:be:12:22:d5:21: 4c:9f:57:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mi+Ep9CM0H8WtqHZci5ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2I4ODc3ZTFhMTMwZmU1MDM4NmM2MTBkNmVhZDU2NDFi OTdiYTYwHhcNMjYwMTI2MDAwMDM1WhcNMjYwMTI3MDAwMDM1WjAzMTEwLwYDVQQD EygzYmQzNGQ2OGRkNTE1NmE5MzZmNThjYmU2YmM4NWNhYmI0ZWExODdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwstnSnwfK3V84Bahasf410ewN9Mv pquJDamctYUKc0JIm8TlTu6o4jbkFdrm085w9wAaKbw6fcqbirokT/knVu2U3ypS 5wui2YFmnzkRW9zN3wpZ35D1r/TFzkYQEYuVbzAMHwL56CDy2VimY2dX28DWZhqi Fw9jI3nLbGBSdNInA3s++MoOtUKJWjU0p1X16CjqYxDZVEP3i++8qynBB5lQXk5Y rB2ZP1DCQw6iX942sNNwL2897qgC1vkk5lmsKuKMPe1qPYkcn9OeyMirDDP0bIn3 OLGQlsgkQCWt+PgYYDCy6Qzg5q8qc2AJ0mb2+mWNPwHLuVM23vzQlUTwBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDvTTWjdUVapNvWMvmvIXKu06hh+MB8GA1UdIwQY MBaAFHw7iHfhoTD+UDhsYQ1urVZBuXumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkR1SWQtR2hNUDVRT0d4aERXNnRWa0c1ZTZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8xN2E3MTItNGU1YS00MGM1LWEzYTIt MTIwMjVjNTRmNDg0LzEvZkR1SWQtR2hNUDVRT0d4aERXNnRWa0c1ZTZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8xN2E3MTItNGU1YS00MGM1LWEzYTItMTIwMjVjNTRmNDg0 LzEvZkR1SWQtR2hNUDVRT0d4aERXNnRWa0c1ZTZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARR4ugbUt 2qPF6kAA+KfgByxsfq6dgmDrermhq4yZDTx4VWcBZIuvPGMmF0MBhuog+TCP2ESQ PygxSJKS53HFMuGmT1mNzgtqPU0kaJ2IABjNfYl5W1IEv+px9EFY3ZQsnq55edSQ 6h1QRnu7u/An7uIl1w52nB+mo2XW1C7kkzZqNAJ03yeIpejcPQzWAXuV5KG0gJMC OglaO4ogfTI4pEyZ+sf9dRiBtkwGeSWYfd2nsLV3GRcs5nyy/sfSC7cKGlwYiikE 7kRTlB1E4ovIPQHHXmLyEiGC8gQH/3o+wQTcVeq+IxX4pbJP4Eup0kNeL4nXaD06 ZL4SItUhTJ9X9g== -----END CERTIFICATE-----Generated at Mon Jan 26 07:11:29 2026 by rpki-client