This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft File: fhVA_dWt1rd1SYwePyXJDiE6YS8.mft (raw, json) Hash identifier: HWw4CTX4jsjTgEariP3nRm+r2hbBuRknurZ3VcsR4j8= Subject key identifier: 78:59:76:CA:83:1E:F3:0C:A9:D1:BC:12:E3:23:97:1D:1A:5C:C8:5A Authority key identifier: 7E:15:40:FD:D5:AD:D6:B7:75:49:8C:1E:3F:25:C9:0E:21:3A:61:2F Certificate issuer: /CN=7e1540fdd5add6b775498c1e3f25c90e213a612f Certificate serial: 019BF91BB0A5F029504751F4E13F9E7C0EE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft Manifest number: 17EB Signing time: Mon 26 Jan 2026 07:01:39 +0000 Manifest this update: Mon 26 Jan 2026 07:01:39 +0000 Manifest next update: Tue 27 Jan 2026 07:01:39 +0000 Files and hashes: 1: fhVA_dWt1rd1SYwePyXJDiE6YS8.crl (hash: eHhZUJY8ZFIAD56ZZ/CVCDzE5B7o4m1/GI28INNUF+4=) 2: vypF4u6T8pornEd354CldlnvJ5Q.roa (hash: X/qPs2fMpklVg8cmNTWhzWpJY0nHbNqBSCIvT5rmL0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:b0:a5:f0:29:50:47:51:f4:e1:3f:9e:7c:0e:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e1540fdd5add6b775498c1e3f25c90e213a612f Validity Not Before: Jan 26 07:01:39 2026 GMT Not After : Jan 27 07:01:39 2026 GMT Subject: CN=785976ca831ef30ca9d1bc12e323971d1a5cc85a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:06:58:2c:72:47:0d:b3:45:cd:4a:ec:c0:76: 78:6c:67:bf:86:f1:65:45:43:68:a3:b7:8d:45:7f: 58:0a:7e:09:4f:5d:27:08:1f:e0:aa:ca:43:e7:b2: f5:d0:96:f0:10:5b:d9:82:e7:cb:b1:b6:f5:5f:57: c6:68:3a:c2:44:91:9d:c8:ac:c9:5b:8b:9d:57:49: 5a:ef:24:9a:be:fa:ed:95:60:ae:c9:68:7c:66:6e: f5:e9:62:e4:de:64:c9:ee:90:a5:3c:06:ba:81:02: a9:80:0d:3a:e6:67:15:e9:cb:3e:a0:13:6c:9a:c1: 18:61:b7:9e:3f:e4:37:24:ec:9e:d1:f3:6d:15:c4: c3:41:19:c2:64:a7:43:af:35:7f:88:06:e5:19:63: e7:d4:dd:c4:77:44:58:4f:6d:5d:df:bc:04:21:cb: b0:b4:66:57:23:b0:62:8a:23:f7:08:5e:fc:96:5f: d9:e0:72:e3:47:f8:3a:ae:98:ca:09:29:45:9a:b6: 35:12:73:31:d6:3b:13:c9:af:15:27:7e:25:95:5c: 0b:6a:79:cc:0e:dd:0e:ba:6c:9f:ad:c3:98:aa:ac: 46:43:73:9d:84:c9:f1:13:b6:52:02:b9:1e:5d:a0: e7:02:14:ba:50:61:a0:e9:5e:ec:3a:9c:a5:6b:c5: ba:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:59:76:CA:83:1E:F3:0C:A9:D1:BC:12:E3:23:97:1D:1A:5C:C8:5A X509v3 Authority Key Identifier: keyid:7E:15:40:FD:D5:AD:D6:B7:75:49:8C:1E:3F:25:C9:0E:21:3A:61:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:0c:e4:88:d5:93:65:0a:8c:5b:41:26:59:56:5e:63:3c:bc: 2b:10:aa:e6:35:98:04:31:e5:78:a2:e9:42:b4:73:e0:f2:8c: a2:10:11:df:5a:ef:f7:74:cd:a0:a9:0b:b6:e2:41:5b:09:f9: 7d:6d:a2:d4:ff:2a:51:f9:0c:d3:21:bc:d5:c6:48:22:98:00: 3b:38:d0:f7:e4:8d:ea:30:85:35:f3:c1:48:cb:32:13:4f:9f: a4:55:48:f0:d3:72:b0:44:c3:d2:8e:a0:44:ac:a5:e0:06:85: f0:50:24:86:a1:fd:42:3d:6a:db:66:a0:41:58:37:d6:cd:ac: ce:10:f0:15:8e:9d:4f:25:21:58:29:98:de:16:aa:44:7e:30: c3:c8:eb:f3:36:56:4b:2b:10:58:70:1e:11:e9:bc:a6:78:62: c4:8e:da:1b:b8:8f:f1:91:96:fd:62:93:f7:16:42:81:7f:dc: 69:32:49:20:0e:74:3f:20:b4:b6:21:63:a3:64:56:56:ef:9e: 51:fc:04:ab:82:eb:60:ca:fb:1f:25:13:85:04:52:76:1b:14: f0:35:8c:40:09:25:5a:7e:3f:d7:63:96:07:26:ad:d8:2c:42: c9:c7:91:38:d1:b5:9d:5c:4e:62:01:8d:79:b1:97:46:0b:12: d8:01:d5:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5G7Cl8ClQR1H04T+efA7kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMTU0MGZkZDVhZGQ2Yjc3NTQ5OGMxZTNmMjVjOTBlMjEz YTYxMmYwHhcNMjYwMTI2MDcwMTM5WhcNMjYwMTI3MDcwMTM5WjAzMTEwLwYDVQQD Eyg3ODU5NzZjYTgzMWVmMzBjYTlkMWJjMTJlMzIzOTcxZDFhNWNjODVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAZYLHJHDbNFzUrswHZ4bGe/hvFl RUNoo7eNRX9YCn4JT10nCB/gqspD57L10JbwEFvZgufLsbb1X1fGaDrCRJGdyKzJ W4udV0la7ySavvrtlWCuyWh8Zm716WLk3mTJ7pClPAa6gQKpgA065mcV6cs+oBNs msEYYbeeP+Q3JOye0fNtFcTDQRnCZKdDrzV/iAblGWPn1N3Ed0RYT21d37wEIcuw tGZXI7BiiiP3CF78ll/Z4HLjR/g6rpjKCSlFmrY1EnMx1jsTya8VJ34llVwLannM Dt0OumyfrcOYqqxGQ3OdhMnxE7ZSArkeXaDnAhS6UGGg6V7sOpyla8W6JQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHhZdsqDHvMMqdG8EuMjlx0aXMhaMB8GA1UdIwQY MBaAFH4VQP3Vrda3dUmMHj8lyQ4hOmEvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmhWQV9kV3QxcmQxU1l3ZVB5WEpEaUU2WVM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9hNGRlYmItMjdiNy00MTQwLWIyN2Ut ZWE2NTM4MjRiMWYyLzEvZmhWQV9kV3QxcmQxU1l3ZVB5WEpEaUU2WVM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9hNGRlYmItMjdiNy00MTQwLWIyN2UtZWE2NTM4MjRiMWYy LzEvZmhWQV9kV3QxcmQxU1l3ZVB5WEpEaUU2WVM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVAzkiNWT ZQqMW0EmWVZeYzy8KxCq5jWYBDHleKLpQrRz4PKMohAR31rv93TNoKkLtuJBWwn5 fW2i1P8qUfkM0yG81cZIIpgAOzjQ9+SN6jCFNfPBSMsyE0+fpFVI8NNysETD0o6g RKyl4AaF8FAkhqH9Qj1q22agQVg31s2szhDwFY6dTyUhWCmY3haqRH4ww8jr8zZW SysQWHAeEem8pnhixI7aG7iP8ZGW/WKT9xZCgX/caTJJIA50PyC0tiFjo2RWVu+e UfwEq4LrYMr7HyUThQRSdhsU8DWMQAklWn4/12OWByat2CxCyceRONG1nVxOYgGN ebGXRgsS2AHVYg== -----END CERTIFICATE-----Generated at Mon Jan 26 10:17:48 2026 by rpki-client