This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.mft File: fEVnL8Qr3TPlRTOKdBfoFxoE7j8.mft (raw, json) Hash identifier: C1MKH6Dp1MpgYT+uDm+WGHt1P0rZ7n/ZHD42OlWGusY= Subject key identifier: 5C:02:21:A7:B3:9B:C1:64:BF:DE:9E:61:FC:07:F6:A3:F8:C7:49:9F Authority key identifier: 7C:45:67:2F:C4:2B:DD:33:E5:45:33:8A:74:17:E8:17:1A:04:EE:3F Certificate issuer: /CN=7c45672fc42bdd33e545338a7417e8171a04ee3f Certificate serial: 019BF619FAFA9D0EFC8D9C8B19A660436466 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.mft Manifest number: 0CF6 Signing time: Sun 25 Jan 2026 17:00:56 +0000 Manifest this update: Sun 25 Jan 2026 17:00:56 +0000 Manifest next update: Mon 26 Jan 2026 17:00:56 +0000 Files and hashes: 1: fEVnL8Qr3TPlRTOKdBfoFxoE7j8.crl (hash: VqgdfwyUZnk3DGoZahDies4gSvij0pkNX8VoQ5rAs7s=) 2: oQqfeDIpQqTY2qXddv-RmkOsSBw.roa (hash: hZoJxnHQE17dg7NNgeLOUvJ0Ph/Ff3w++3G8l+eeaLU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.mft rsync://rpki.ripe.net/repository/DEFAULT/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:fa:fa:9d:0e:fc:8d:9c:8b:19:a6:60:43:64:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c45672fc42bdd33e545338a7417e8171a04ee3f Validity Not Before: Jan 25 17:00:56 2026 GMT Not After : Jan 26 17:00:56 2026 GMT Subject: CN=5c0221a7b39bc164bfde9e61fc07f6a3f8c7499f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:43:06:13:2a:4a:f3:50:e4:3a:ab:dc:dc:df: 23:e9:1f:be:31:63:82:fb:51:da:1d:c4:38:98:67: 6e:c6:37:9c:76:4d:4d:4e:64:9d:bb:14:61:2d:ff: a3:e4:1a:70:88:1c:32:41:1c:9d:19:41:81:7d:72: 9a:2a:39:89:8e:9c:92:14:be:1c:5c:55:96:dd:a7: 11:20:90:57:eb:81:5f:2c:da:24:08:84:0a:8a:c7: e7:a5:58:7a:22:0d:bf:df:c9:76:43:cc:7b:0c:0c: 5a:0b:7e:a9:cd:4b:87:2b:a2:10:c7:7d:93:34:fb: 9c:20:66:29:73:64:b6:84:25:79:bd:88:b8:ff:ed: 30:85:1a:db:44:24:9f:35:36:42:70:6c:41:dd:36: 2a:6c:c9:ad:89:71:35:17:5f:6c:2b:1a:fd:7e:af: a0:8d:1d:af:5f:f1:51:ed:bc:cb:18:92:94:3f:95: a9:08:0c:ac:c6:a5:d9:db:ea:28:73:e4:ad:ae:9f: 0e:ef:0d:8f:0f:cb:e8:9e:9f:48:bb:b1:1d:21:72: 95:54:64:91:16:ed:d6:fe:87:04:3a:c2:f6:ab:b9: 92:6f:05:8a:b2:79:86:3f:ee:ae:d6:9a:ec:d4:e1: 37:d8:42:e1:7e:b0:01:e7:9f:c1:4e:74:cd:06:53: 9f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:02:21:A7:B3:9B:C1:64:BF:DE:9E:61:FC:07:F6:A3:F8:C7:49:9F X509v3 Authority Key Identifier: keyid:7C:45:67:2F:C4:2B:DD:33:E5:45:33:8A:74:17:E8:17:1A:04:EE:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:90:1f:ad:f7:b4:f2:d6:84:8b:45:9e:c6:8c:ea:00:18:f7: 34:26:0c:38:16:10:d4:3a:1f:d6:0c:87:84:59:5c:b7:ce:72: f8:b6:42:0c:6c:6e:fc:93:88:f2:60:98:ec:1c:4c:9f:90:b2: 90:3f:b8:4e:19:87:0c:d5:ef:8a:9b:6d:8d:cc:8f:45:9c:51: e1:a4:f0:68:23:59:13:bc:68:54:9c:db:02:0b:41:7d:2b:e4: f8:51:40:93:2e:7f:c7:fd:2b:10:91:8c:72:bd:50:3f:5b:c1: 9f:b9:64:b4:e4:40:2f:d6:7b:38:26:f4:90:fc:2f:aa:e7:32: 4c:11:08:6c:e0:0b:c2:ec:06:b0:fb:90:17:1d:44:ea:9e:af: 4d:47:1f:89:0b:5c:d4:6b:83:10:0b:32:17:85:87:e2:e0:e0: 5d:de:ab:52:80:a2:d9:22:c9:28:f3:07:e1:46:fc:8a:2f:ac: 02:4b:d2:d0:97:02:9e:ea:28:c8:05:5c:ec:cc:86:2c:d7:d1: df:fb:7c:74:8f:53:6a:fd:0c:d1:7b:e1:bc:d5:50:58:6b:c1: 81:a8:00:b4:24:f8:fa:6f:18:9d:b8:5b:b8:08:6d:0f:88:9c: 9c:62:98:e6:45:c2:85:e8:73:5b:91:c5:3f:ec:05:56:e9:df: cb:16:0e:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2Gfr6nQ78jZyLGaZgQ2RmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjNDU2NzJmYzQyYmRkMzNlNTQ1MzM4YTc0MTdlODE3MWEw NGVlM2YwHhcNMjYwMTI1MTcwMDU2WhcNMjYwMTI2MTcwMDU2WjAzMTEwLwYDVQQD Eyg1YzAyMjFhN2IzOWJjMTY0YmZkZTllNjFmYzA3ZjZhM2Y4Yzc0OTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkMGEypK81DkOqvc3N8j6R++MWOC +1HaHcQ4mGduxjecdk1NTmSduxRhLf+j5BpwiBwyQRydGUGBfXKaKjmJjpySFL4c XFWW3acRIJBX64FfLNokCIQKisfnpVh6Ig2/38l2Q8x7DAxaC36pzUuHK6IQx32T NPucIGYpc2S2hCV5vYi4/+0whRrbRCSfNTZCcGxB3TYqbMmtiXE1F19sKxr9fq+g jR2vX/FR7bzLGJKUP5WpCAysxqXZ2+ooc+Strp8O7w2PD8vonp9Iu7EdIXKVVGSR Fu3W/ocEOsL2q7mSbwWKsnmGP+6u1prs1OE32ELhfrAB55/BTnTNBlOfJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFwCIaezm8Fkv96eYfwH9qP4x0mfMB8GA1UdIwQY MBaAFHxFZy/EK90z5UUzinQX6BcaBO4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkVWbkw4UXIzVFBsUlRPS2RCZm9GeG9FN2o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8wOGFmMjItZmZjOS00YzFiLWE5ZDct OTRiZWRiNWQwMzM0LzEvZkVWbkw4UXIzVFBsUlRPS2RCZm9GeG9FN2o4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC8wOGFmMjItZmZjOS00YzFiLWE5ZDctOTRiZWRiNWQwMzM0 LzEvZkVWbkw4UXIzVFBsUlRPS2RCZm9GeG9FN2o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc5Afrfe0 8taEi0WexozqABj3NCYMOBYQ1Dof1gyHhFlct85y+LZCDGxu/JOI8mCY7BxMn5Cy kD+4ThmHDNXvipttjcyPRZxR4aTwaCNZE7xoVJzbAgtBfSvk+FFAky5/x/0rEJGM cr1QP1vBn7lktORAL9Z7OCb0kPwvqucyTBEIbOALwuwGsPuQFx1E6p6vTUcfiQtc 1GuDEAsyF4WH4uDgXd6rUoCi2SLJKPMH4Ub8ii+sAkvS0JcCnuooyAVc7MyGLNfR 3/t8dI9Tav0M0XvhvNVQWGvBgagAtCT4+m8YnbhbuAhtD4icnGKY5kXChehzW5HF P+wFVunfyxYOcA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:48:17 2026 by rpki-client