This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft File: _KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft (raw, json) Hash identifier: wSNQkzZeenhv54URw0bKjqUnByASIlHyaqqnmRWzyS4= Subject key identifier: A9:7D:17:50:8C:A1:BA:1A:90:D2:4B:3E:48:E5:81:80:25:5C:95:29 Authority key identifier: FC:A3:96:F1:C3:44:B0:79:C5:D2:F2:7B:FB:31:33:77:FE:BB:2E:C7 Certificate issuer: /CN=fca396f1c344b079c5d2f27bfb313377febb2ec7 Certificate serial: 019BF4D0934E90ED6A6FBCD20BB439A4DD15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft Manifest number: 0554 Signing time: Sun 25 Jan 2026 11:01:08 +0000 Manifest this update: Sun 25 Jan 2026 11:01:08 +0000 Manifest next update: Mon 26 Jan 2026 11:01:08 +0000 Files and hashes: 1: 6_lDwO9S-PZTwYR6rqeMkPI69T0.roa (hash: neEGA+hYnP8CjWfiQmsokGNa6auT6dI2/F1+F88xPUc=) 2: HgKic6ekM35QFsoMboEVFjIB9NE.roa (hash: He9li/VbBorSL9OR08x2iT60v6rUZMCHaohd8CS+JJE=) 3: IVH2Tg1CY4ZRK6T_OFtKHr5Tg4w.roa (hash: paS2HrmO9LI/c37GN0LFXIStqUHvKAKZhc4SNlkMN68=) 4: L2JBwXn0_M5VePo6q3NCFb8xLnM.roa (hash: UZ+pSOfmFCdt9QWA2qepdtq6OMmO8+hZ5Y2AO5lO+NE=) 5: _KOW8cNEsHnF0vJ7-zEzd_67Lsc.crl (hash: aVJm19chviMEc6MvPdYef+pVF6GQ+V1BIfW3/AMsmtQ=) 6: r93BFIAx7lK03ClWMKEgnNMRy3k.roa (hash: 4jsVxNS7oJ5jGPb+Oqg5cVDnCqMG9rPwVMnyLP528N4=) 7: tII-kyxxSugYobEeIbAgNDo451s.roa (hash: Lv7S4x6BZW4ZHs5wH+NnqBYKST4za7yZuPdbD8t6zpk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:93:4e:90:ed:6a:6f:bc:d2:0b:b4:39:a4:dd:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fca396f1c344b079c5d2f27bfb313377febb2ec7 Validity Not Before: Jan 25 11:01:08 2026 GMT Not After : Jan 26 11:01:08 2026 GMT Subject: CN=a97d17508ca1ba1a90d24b3e48e58180255c9529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:90:e1:04:b6:f4:c9:3b:ce:cd:d2:5e:15:38: 80:ba:4a:8e:79:6b:6a:27:73:c0:49:4a:37:3f:39: 8b:3c:bf:32:4b:e4:bf:72:70:ee:b2:e5:17:bf:ec: 41:22:6b:3d:ff:7b:f9:ca:08:41:cc:97:70:91:28: 46:1b:8e:49:b3:cd:5e:46:c6:41:ae:8c:37:8b:bf: b5:c5:18:1d:e9:2d:9c:70:2c:71:c8:1f:98:fe:6b: 09:e7:3e:ca:b1:a1:65:00:f5:9e:87:e2:d2:81:bd: b7:af:27:d8:f8:b2:44:72:1c:5f:c8:54:99:09:c4: 99:e5:43:f7:10:5c:e6:9d:6b:d7:de:18:3c:56:03: cf:3e:a5:ec:f0:1a:75:ea:2c:bc:81:33:f6:99:bd: 38:3d:6b:4c:e1:cd:ea:85:34:f8:d3:db:30:57:95: 23:64:ad:49:63:c7:8d:59:e9:2a:d2:c0:cf:f4:5b: 12:5a:4d:fc:57:96:eb:e9:12:17:78:e5:34:28:44: d3:20:b7:b1:d6:4a:20:80:44:57:c4:b2:cc:59:2e: 67:08:20:94:e0:75:8f:41:ca:65:73:33:ea:a6:63: 8c:b9:f7:84:6e:7f:f3:6f:ec:dc:63:09:44:be:1a: 1f:f3:a6:67:03:dc:6f:f1:08:ed:79:2f:22:ea:26: 31:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:7D:17:50:8C:A1:BA:1A:90:D2:4B:3E:48:E5:81:80:25:5C:95:29 X509v3 Authority Key Identifier: keyid:FC:A3:96:F1:C3:44:B0:79:C5:D2:F2:7B:FB:31:33:77:FE:BB:2E:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:0f:e3:c2:cf:46:6e:6e:50:2d:77:d4:17:27:67:14:91:78: c5:f5:17:9b:eb:f7:7b:31:a6:7d:33:d5:59:74:2d:65:2a:61: 7b:d7:f4:fb:a9:57:78:12:95:96:7c:42:38:ca:8b:fe:db:09: fe:93:51:76:e0:ef:fc:64:24:b9:ac:e5:09:27:87:e9:11:be: bb:ec:24:e2:07:89:7e:7c:c8:98:1b:54:b8:8d:30:1b:9b:65: 5b:90:4f:1a:41:8d:6c:f0:ca:8a:f3:8c:fa:ea:3e:d2:fc:57: c3:dc:3a:98:88:4d:4b:85:84:89:1a:65:48:c6:d7:68:c7:db: 60:95:d2:9d:2e:8d:e5:bd:04:a4:2a:a1:02:84:a5:07:2a:bb: b2:7b:94:ec:2f:af:a6:55:d7:ce:fa:8f:c6:4e:23:13:52:c2: 31:65:da:c7:1d:af:00:69:23:f9:97:83:a9:e9:1c:22:58:32: ad:a2:6b:ef:f2:5a:64:34:00:c9:0e:50:40:cb:91:af:a5:f2: de:0e:c2:41:7d:be:ed:9a:4b:29:45:ab:96:3d:b7:4f:5f:c9: 39:a5:df:2e:4e:7c:97:da:fd:99:cc:6e:6d:c6:4c:91:ec:da: 6c:fa:c7:b4:51:74:22:dc:e2:1f:44:d9:54:9c:3c:12:48:95: f1:25:dc:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00JNOkO1qb7zSC7Q5pN0VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjYTM5NmYxYzM0NGIwNzljNWQyZjI3YmZiMzEzMzc3ZmVi YjJlYzcwHhcNMjYwMTI1MTEwMTA4WhcNMjYwMTI2MTEwMTA4WjAzMTEwLwYDVQQD EyhhOTdkMTc1MDhjYTFiYTFhOTBkMjRiM2U0OGU1ODE4MDI1NWM5NTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJDhBLb0yTvOzdJeFTiAukqOeWtq J3PASUo3PzmLPL8yS+S/cnDusuUXv+xBIms9/3v5yghBzJdwkShGG45Js81eRsZB row3i7+1xRgd6S2ccCxxyB+Y/msJ5z7KsaFlAPWeh+LSgb23ryfY+LJEchxfyFSZ CcSZ5UP3EFzmnWvX3hg8VgPPPqXs8Bp16iy8gTP2mb04PWtM4c3qhTT409swV5Uj ZK1JY8eNWekq0sDP9FsSWk38V5br6RIXeOU0KETTILex1koggERXxLLMWS5nCCCU 4HWPQcplczPqpmOMufeEbn/zb+zcYwlEvhof86ZnA9xv8QjteS8i6iYxswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKl9F1CMoboakNJLPkjlgYAlXJUpMB8GA1UdIwQY MBaAFPyjlvHDRLB5xdLye/sxM3f+uy7HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0tPVzhjTkVzSG5GMHZKNy16RXpkXzY3THNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xNGUxNDEtY2FhNS00MWZiLTk0NWIt ZmZiMTZlYmQxMTFmLzEvX0tPVzhjTkVzSG5GMHZKNy16RXpkXzY3THNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xNGUxNDEtY2FhNS00MWZiLTk0NWItZmZiMTZlYmQxMTFm LzEvX0tPVzhjTkVzSG5GMHZKNy16RXpkXzY3THNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIg/jws9G bm5QLXfUFydnFJF4xfUXm+v3ezGmfTPVWXQtZSphe9f0+6lXeBKVlnxCOMqL/tsJ /pNRduDv/GQkuazlCSeH6RG+u+wk4geJfnzImBtUuI0wG5tlW5BPGkGNbPDKivOM +uo+0vxXw9w6mIhNS4WEiRplSMbXaMfbYJXSnS6N5b0EpCqhAoSlByq7snuU7C+v plXXzvqPxk4jE1LCMWXaxx2vAGkj+ZeDqekcIlgyraJr7/JaZDQAyQ5QQMuRr6Xy 3g7CQX2+7ZpLKUWrlj23T1/JOaXfLk58l9r9mcxubcZMkezabPrHtFF0ItziH0TZ VJw8EkiV8SXcNA== -----END CERTIFICATE-----Generated at Sun Jan 25 17:51:43 2026 by rpki-client