This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft File: FQHIRfE91K1una5HDV_2nFzKN3E.mft (raw, json) Hash identifier: 4yOhhrivFak8iHPcGbUgaih3GVl2iZO4OOuMWM4JJLg= Subject key identifier: 2F:0B:E2:0A:77:F0:18:AC:B4:C7:B7:DC:CC:B6:E8:02:1B:DA:26:45 Authority key identifier: 15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71 Certificate issuer: /CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771 Certificate serial: 019BF95245A3605F8D4D7360AEBC74D47597 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft Manifest number: 17ED Signing time: Mon 26 Jan 2026 08:01:17 +0000 Manifest this update: Mon 26 Jan 2026 08:01:17 +0000 Manifest next update: Tue 27 Jan 2026 08:01:17 +0000 Files and hashes: 1: 1RanCO1mu-OiQ0iZEtdw-yAjkTI.roa (hash: yloj+KSnzpOLHXmmnW6y/9LvQrZ1HgM73eQl1+fYOuI=) 2: FQHIRfE91K1una5HDV_2nFzKN3E.crl (hash: n9vIk6x/Sf88ZZ4CLhxjct+XaRDSEvp7k18Gjqyh8rw=) 3: G83x6tFUMdJXFpkh7ob8iQJOyWk.roa (hash: fqKR1JBeUu0DbH/b90tqdDXbcTIQ5RZlC7Ezhyu15AQ=) 4: IwnuHUcrSyqTDj2R1SrfqJthDz0.roa (hash: SAYzINhAcM78pjeHDBOp09qDlTIFRrqRQDRqGfJbZ6g=) 5: QguY6sNw_4yrqydTBsOIYz60GsQ.roa (hash: MwsRxWqp1y4l7li+nXNmzcRZf3idKS20ILN1jbY4EjI=) 6: YGxOWC67xnFdZpqiT6jQNZ3x7F8.roa (hash: IBA2eWmYoe53rLsRx6eyDDNbF8a4NYDcbQ80+DftLrA=) 7: bqonASN6m8_X-0PLTWyL1k78XVc.roa (hash: BHHdw7qa2kmdkeh9BUPFPvgX9iTcx117t99txuo1M88=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:52:45:a3:60:5f:8d:4d:73:60:ae:bc:74:d4:75:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771 Validity Not Before: Jan 26 08:01:17 2026 GMT Not After : Jan 27 08:01:17 2026 GMT Subject: CN=2f0be20a77f018acb4c7b7dcccb6e8021bda2645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6b:ea:96:a0:b5:fd:f6:5e:bf:dc:18:79:0f: c7:b0:54:3e:0b:c5:13:b8:8b:00:a8:80:51:2c:f8: bc:ca:30:ef:35:18:c2:e0:9a:7f:07:bb:98:6d:3d: 25:dd:08:8f:2c:c9:23:70:72:13:fc:63:a8:4e:19: 0d:35:b9:2c:cf:47:9a:30:29:46:8d:da:c3:e8:b3: f7:b6:6a:a8:a3:3e:12:24:cc:11:38:00:e6:cc:32: 67:8c:7a:ed:8b:4f:5b:7e:fc:4e:b9:24:cd:d8:05: 88:2a:5f:55:b3:75:a8:5b:0a:dd:8f:9e:01:60:f6: 89:60:cb:3b:69:18:2b:41:f3:43:17:0f:39:9c:b6: 52:74:47:37:51:70:df:34:81:5a:f8:95:c0:75:ba: 51:0f:d0:16:60:0a:17:23:6c:4f:1f:2d:f7:86:48: 6a:10:bd:02:93:ef:61:89:65:bf:91:12:84:72:9e: 06:7f:05:2c:f1:24:88:42:96:87:c3:91:ca:84:60: 01:cc:97:d6:bd:fc:1f:76:d2:db:a7:8a:06:d0:ef: de:96:18:86:24:db:50:d1:53:4e:17:1a:43:1d:5e: ad:44:e5:20:83:67:34:54:71:6d:53:73:71:3d:15: 36:35:ac:84:91:b6:5d:88:40:61:19:cd:11:2c:61: 84:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:0B:E2:0A:77:F0:18:AC:B4:C7:B7:DC:CC:B6:E8:02:1B:DA:26:45 X509v3 Authority Key Identifier: keyid:15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:ab:d2:09:0c:3d:0f:4c:12:a3:a8:0c:b8:2a:3d:f5:67:db: e5:9b:18:5a:ca:93:b6:86:31:1f:00:3e:f1:f0:a7:85:4c:0a: fe:85:a0:62:72:1c:62:42:99:28:23:6d:48:10:e6:22:58:bf: 3c:f7:7b:b7:49:7e:e6:71:24:0a:ea:27:5b:43:1e:e0:e9:ae: ac:95:11:29:f7:55:59:93:21:e0:3f:b0:da:4c:d7:ec:90:ce: ef:ca:ae:02:f6:85:a0:65:af:52:d9:d5:cf:e0:84:18:73:40: cb:fa:90:18:ff:4f:2b:d6:6c:67:44:da:25:ec:98:52:e4:8c: 4e:66:e2:62:8a:39:46:3a:b0:cb:0f:3c:c5:59:28:0d:ed:78: e5:39:28:4b:b4:07:f3:ea:05:a1:72:de:d3:e5:68:b9:02:4d: 7d:4e:f0:30:31:66:05:66:cf:38:be:83:40:51:fc:8a:3d:42: bd:cc:2e:f9:d0:79:22:15:5a:52:ef:1e:07:a9:82:f7:15:e7: 44:dd:bf:e1:f6:82:0b:46:13:f5:ff:cb:ca:d8:b1:c6:84:d8: 1a:30:34:ce:0e:6d:38:4f:ae:2c:a0:1f:88:bc:84:96:1a:f3: db:2d:5b:83:53:e1:7e:a0:f6:b7:b8:fd:34:44:c5:02:e0:7f: ab:03:03:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5UkWjYF+NTXNgrrx01HWXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1MDFjODQ1ZjEzZGQ0YWQ2ZTlkYWU0NzBkNWZmNjljNWNj YTM3NzEwHhcNMjYwMTI2MDgwMTE3WhcNMjYwMTI3MDgwMTE3WjAzMTEwLwYDVQQD EygyZjBiZTIwYTc3ZjAxOGFjYjRjN2I3ZGNjY2I2ZTgwMjFiZGEyNjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWvqlqC1/fZev9wYeQ/HsFQ+C8UT uIsAqIBRLPi8yjDvNRjC4Jp/B7uYbT0l3QiPLMkjcHIT/GOoThkNNbksz0eaMClG jdrD6LP3tmqooz4SJMwROADmzDJnjHrti09bfvxOuSTN2AWIKl9Vs3WoWwrdj54B YPaJYMs7aRgrQfNDFw85nLZSdEc3UXDfNIFa+JXAdbpRD9AWYAoXI2xPHy33hkhq EL0Ck+9hiWW/kRKEcp4GfwUs8SSIQpaHw5HKhGABzJfWvfwfdtLbp4oG0O/elhiG JNtQ0VNOFxpDHV6tROUgg2c0VHFtU3NxPRU2NayEkbZdiEBhGc0RLGGEgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC8L4gp38BistMe33My26AIb2iZFMB8GA1UdIwQY MBaAFBUByEXxPdStbp2uRw1f9pxcyjdxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlFISVJmRTkxSzF1bmE1SERWXzJuRnpLTjNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8wMzc2YTEtNDlkNi00YTRkLThjMmEt ZWQ3OTE1NDM2YjI3LzEvRlFISVJmRTkxSzF1bmE1SERWXzJuRnpLTjNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8wMzc2YTEtNDlkNi00YTRkLThjMmEtZWQ3OTE1NDM2YjI3 LzEvRlFISVJmRTkxSzF1bmE1SERWXzJuRnpLTjNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKKvSCQw9 D0wSo6gMuCo99Wfb5ZsYWsqTtoYxHwA+8fCnhUwK/oWgYnIcYkKZKCNtSBDmIli/ PPd7t0l+5nEkCuonW0Me4OmurJURKfdVWZMh4D+w2kzX7JDO78quAvaFoGWvUtnV z+CEGHNAy/qQGP9PK9ZsZ0TaJeyYUuSMTmbiYoo5Rjqwyw88xVkoDe145TkoS7QH 8+oFoXLe0+VouQJNfU7wMDFmBWbPOL6DQFH8ij1Cvcwu+dB5IhVaUu8eB6mC9xXn RN2/4faCC0YT9f/LytixxoTYGjA0zg5tOE+uLKAfiLyElhrz2y1bg1PhfqD2t7j9 NETFAuB/qwMDqQ== -----END CERTIFICATE-----Generated at Mon Jan 26 13:06:17 2026 by rpki-client