This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft File: fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft (raw, json) Hash identifier: K2gZgUkDHmKRzEnAp/vOpAFkYz2mKzSTcpM2AazG0U4= Subject key identifier: 1F:58:62:23:9F:7D:9D:BC:1F:1E:BF:42:88:23:68:D5:3D:CC:F2:A4 Authority key identifier: 7D:34:6A:CE:4E:65:28:70:F1:68:74:50:D5:C3:4E:14:CB:00:94:B5 Certificate issuer: /CN=7d346ace4e652870f1687450d5c34e14cb0094b5 Certificate serial: 019BF6BE716A8E7DF1448971D252EA52CFE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft Manifest number: 014F Signing time: Sun 25 Jan 2026 20:00:34 +0000 Manifest this update: Sun 25 Jan 2026 20:00:34 +0000 Manifest next update: Mon 26 Jan 2026 20:00:34 +0000 Files and hashes: 1: 5pQj7qkmBcSMfaLVfZDv-7kT9DI.roa (hash: Rd6vx0quono9MPD1F0vpd55eYapHMtF51xcO/Hw6eew=) 2: fTRqzk5lKHDxaHRQ1cNOFMsAlLU.crl (hash: IU3HpatDNSUAXom4gsVKFv1cMQaLTS2ObwRE4nL4u64=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft rsync://rpki.ripe.net/repository/DEFAULT/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:71:6a:8e:7d:f1:44:89:71:d2:52:ea:52:cf:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d346ace4e652870f1687450d5c34e14cb0094b5 Validity Not Before: Jan 25 20:00:34 2026 GMT Not After : Jan 26 20:00:34 2026 GMT Subject: CN=1f5862239f7d9dbc1f1ebf42882368d53dccf2a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:db:ef:83:e0:ab:1e:dc:02:a2:d7:5f:18:2e: 2a:52:f8:19:47:43:57:bf:11:d3:98:9d:bb:5a:e4: c6:46:6b:bd:98:f4:b8:10:22:7c:19:06:8e:9b:19: 3b:04:6f:78:db:a9:f1:f5:16:58:fa:20:51:4f:9c: f3:6d:05:c7:4a:04:51:5a:85:ce:cd:0b:aa:4e:52: 31:ee:f2:29:e5:b8:2b:9e:35:85:8f:4a:8f:cb:ef: 86:9f:df:4e:1b:c2:bf:ba:e3:98:e1:16:60:d5:ac: 23:74:56:d1:33:5e:b8:24:b3:83:ad:22:d7:29:f9: 77:a7:b1:5a:14:05:21:64:5b:cc:2b:b1:fc:b5:2b: 9d:7a:33:15:ea:6a:1d:83:0b:02:e4:25:14:6b:e4: f7:51:12:14:e3:ea:b2:cf:39:25:75:e7:fd:c4:86: e6:2f:0a:65:d2:fa:a7:58:c1:47:0d:bd:5d:64:d3: f1:bc:e6:87:08:dc:94:57:e3:cf:64:a8:a9:54:00: 20:e7:18:84:53:99:2c:4c:bb:22:47:c1:52:b0:2e: bd:aa:20:a0:65:e9:c5:74:58:61:99:68:7d:81:0c: 44:33:a9:70:ae:27:e8:e8:31:e7:20:7d:e1:64:66: ff:92:07:ca:d5:c9:0b:9b:5c:ad:0d:a9:a3:b6:11: 05:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:58:62:23:9F:7D:9D:BC:1F:1E:BF:42:88:23:68:D5:3D:CC:F2:A4 X509v3 Authority Key Identifier: keyid:7D:34:6A:CE:4E:65:28:70:F1:68:74:50:D5:C3:4E:14:CB:00:94:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:8d:2e:8c:9c:c6:36:87:a7:42:8a:ef:dd:0f:16:f7:b0:bf: 16:eb:04:60:06:e4:63:e0:98:68:63:70:02:1c:85:1b:f6:d8: 33:98:4f:ba:c9:cf:e3:9f:11:5e:b7:cd:0c:7a:77:14:33:45: 65:d3:c3:53:a3:36:7f:1b:62:4f:6e:00:e1:9c:eb:73:31:74: f1:60:75:f3:b6:de:5d:97:2b:e2:76:c0:de:ef:8b:39:3e:f9: 26:0e:b2:7f:8a:54:6a:0d:ab:ff:b8:85:c8:4b:26:ce:b8:ea: 78:ab:31:ab:66:12:09:35:e3:bf:79:3c:27:d0:f4:2b:50:c6: 7d:ac:0e:0c:fa:83:35:bb:79:98:a4:ca:cd:a2:cc:a1:0a:72: 0a:5b:43:71:46:21:06:ad:75:2d:19:99:5e:32:4c:b7:a9:43: cb:ec:8f:be:95:64:ec:39:62:1c:f3:ef:d5:70:b5:01:83:e4: ed:d3:c3:ba:35:fb:a1:16:f1:3e:85:f0:e9:0b:a8:60:c2:53: 09:83:87:bb:08:82:0e:6b:9e:e1:d3:67:ef:25:35:b3:3b:b6: 85:40:94:84:35:d2:2f:8b:a2:35:b4:54:df:4f:82:dc:ec:29: be:fa:64:03:08:df:09:c6:ac:34:70:cc:20:b6:8f:48:8a:a8: 09:a0:97:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vnFqjn3xRIlx0lLqUs/hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMzQ2YWNlNGU2NTI4NzBmMTY4NzQ1MGQ1YzM0ZTE0Y2Iw MDk0YjUwHhcNMjYwMTI1MjAwMDM0WhcNMjYwMTI2MjAwMDM0WjAzMTEwLwYDVQQD EygxZjU4NjIyMzlmN2Q5ZGJjMWYxZWJmNDI4ODIzNjhkNTNkY2NmMmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdvvg+CrHtwCotdfGC4qUvgZR0NX vxHTmJ27WuTGRmu9mPS4ECJ8GQaOmxk7BG9426nx9RZY+iBRT5zzbQXHSgRRWoXO zQuqTlIx7vIp5bgrnjWFj0qPy++Gn99OG8K/uuOY4RZg1awjdFbRM164JLODrSLX Kfl3p7FaFAUhZFvMK7H8tSudejMV6modgwsC5CUUa+T3URIU4+qyzzkldef9xIbm Lwpl0vqnWMFHDb1dZNPxvOaHCNyUV+PPZKipVAAg5xiEU5ksTLsiR8FSsC69qiCg ZenFdFhhmWh9gQxEM6lwrifo6DHnIH3hZGb/kgfK1ckLm1ytDamjthEFOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB9YYiOffZ28Hx6/QogjaNU9zPKkMB8GA1UdIwQY MBaAFH00as5OZShw8Wh0UNXDThTLAJS1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlRScXprNWxLSER4YUhSUTFjTk9GTXNBbExVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9jNjc2ZDctZmJmZS00YWU2LWJlNTEt MzI3YWNjMWIxZTU5LzEvZlRScXprNWxLSER4YUhSUTFjTk9GTXNBbExVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9jNjc2ZDctZmJmZS00YWU2LWJlNTEtMzI3YWNjMWIxZTU5 LzEvZlRScXprNWxLSER4YUhSUTFjTk9GTXNBbExVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANY0ujJzG NoenQorv3Q8W97C/FusEYAbkY+CYaGNwAhyFG/bYM5hPusnP458RXrfNDHp3FDNF ZdPDU6M2fxtiT24A4ZzrczF08WB187beXZcr4nbA3u+LOT75Jg6yf4pUag2r/7iF yEsmzrjqeKsxq2YSCTXjv3k8J9D0K1DGfawODPqDNbt5mKTKzaLMoQpyCltDcUYh Bq11LRmZXjJMt6lDy+yPvpVk7DliHPPv1XC1AYPk7dPDujX7oRbxPoXw6QuoYMJT CYOHuwiCDmue4dNn7yU1szu2hUCUhDXSL4uiNbRU30+C3OwpvvpkAwjfCcasNHDM ILaPSIqoCaCXeA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:32:23 2026 by rpki-client