This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft File: rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft (raw, json) Hash identifier: z/+tGsG9hajVgImuRcUiqs2gVOWU/d11sbmX+aQ9bDM= Subject key identifier: 38:0D:FA:07:0F:97:46:E0:39:94:BD:10:76:9A:F8:A0:86:92:5B:1D Authority key identifier: AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23 Certificate issuer: /CN=ac67c93b8225d04c3761c13cefee5f8329358e23 Certificate serial: 019BF9519F0016E9FB5B7CDDCB8463C08E49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft Manifest number: 17FD Signing time: Mon 26 Jan 2026 08:00:34 +0000 Manifest this update: Mon 26 Jan 2026 08:00:34 +0000 Manifest next update: Tue 27 Jan 2026 08:00:34 +0000 Files and hashes: 1: FlvjfSGAcAiu8p7_1QuREIbIllA.roa (hash: aG/iwk8yP2G/cemnXVjrPfkOLNPUfDdnuvQCnOblzHY=) 2: WcITaUECKrRS-00UJB2toA0EWBA.roa (hash: 7Dbd0N6O8xlvKSw9ngaRpgSG6WpLRxBISHsmkzDSkD8=) 3: ldmxJAkKvmlHgUpkQnhFLSPjlKg.roa (hash: f+2m7+QBQ2xNK66onBBuHDLsOd1zJ2s1AavJSLAavCU=) 4: rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl (hash: YaCrlFk6lhp+aLAXUUfwV5HYrJOZXeeHCvtdi0C2pj4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:51:9f:00:16:e9:fb:5b:7c:dd:cb:84:63:c0:8e:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac67c93b8225d04c3761c13cefee5f8329358e23 Validity Not Before: Jan 26 08:00:34 2026 GMT Not After : Jan 27 08:00:34 2026 GMT Subject: CN=380dfa070f9746e03994bd10769af8a086925b1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f9:a5:90:33:12:18:0d:02:5e:7b:a9:9d:8c: 4a:ed:8c:7c:62:82:df:e0:43:79:39:f6:46:d1:75: a6:35:38:e8:27:fb:5d:9b:c0:c4:95:61:06:8e:48: 81:ce:16:22:70:ca:95:74:5f:1a:60:c4:61:22:32: a8:d6:8c:b4:5a:99:60:e0:8c:86:a0:33:05:7d:87: 50:40:9c:10:c2:b6:dd:bb:e8:77:94:0e:81:29:c7: 42:4c:ef:da:c6:0d:ba:06:2f:ab:f9:d3:1e:80:22: 39:ce:71:a4:81:ce:c4:3b:5d:2b:b2:1f:ff:80:6e: a5:08:63:92:72:a3:18:79:e5:0d:7e:4d:d8:70:c0: 95:44:05:c2:99:02:0d:da:02:69:e7:32:1b:ff:22: 69:27:52:28:69:11:07:0f:cb:c6:b6:13:a3:1e:d9: aa:c6:5b:5e:e6:34:12:29:55:81:e1:e1:a4:1e:1f: 7b:25:64:dc:eb:6a:4b:b4:a5:6e:0c:5e:84:42:07: 49:22:72:22:c8:72:49:81:e3:d8:44:05:6a:7e:96: c3:d5:97:e9:41:36:4f:62:23:a3:38:15:24:bf:36: 1b:84:d0:41:ce:93:47:bb:37:76:9a:85:7d:5b:1a: 51:ef:eb:b7:ba:4d:99:e9:4f:75:28:b2:c8:e3:7f: 16:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:0D:FA:07:0F:97:46:E0:39:94:BD:10:76:9A:F8:A0:86:92:5B:1D X509v3 Authority Key Identifier: keyid:AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:fb:20:ee:70:ad:a3:1c:9f:05:e8:11:bd:b7:7c:6b:74:b7: c3:14:fb:2e:ed:48:47:47:c0:f0:ae:4b:c7:0c:58:c3:c8:7d: 85:c9:a7:81:ac:62:37:b1:cf:79:92:7d:1f:1f:7b:81:6f:79: 76:2e:b1:45:18:c4:5e:0a:3f:72:f8:1f:ac:38:b3:75:a6:cb: 7d:37:76:4b:e4:5b:f8:35:fc:bf:cd:25:81:2b:2a:cd:bb:3e: 0c:2b:17:1d:26:b0:25:f3:d4:69:2e:36:09:4b:2c:31:4e:c0: d7:90:77:81:36:1b:c7:fd:71:1b:89:b2:58:3d:8e:6e:0f:37: 87:b8:d8:0f:fd:46:60:83:f6:30:32:68:53:88:57:fd:f1:a6: d6:26:32:68:12:69:48:15:03:d8:60:7e:e2:29:c7:4d:27:cf: a7:f2:6f:70:63:73:d4:76:18:71:67:da:41:6a:30:fe:b7:71: b0:ee:ef:d3:3d:f0:d6:c0:32:1d:aa:44:1e:ff:5a:98:d7:cb: f0:7a:19:90:6e:3a:83:a1:13:fc:85:99:9e:b3:e4:d6:3a:5d: cc:41:8c:29:ed:9f:93:75:3d:75:03:99:dd:9f:3e:1c:0d:f4: b9:18:0f:2b:a4:06:cd:60:46:06:43:bb:77:32:f8:17:8c:3d: f7:34:fa:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5UZ8AFun7W3zdy4RjwI5JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjNjdjOTNiODIyNWQwNGMzNzYxYzEzY2VmZWU1ZjgzMjkz NThlMjMwHhcNMjYwMTI2MDgwMDM0WhcNMjYwMTI3MDgwMDM0WjAzMTEwLwYDVQQD EygzODBkZmEwNzBmOTc0NmUwMzk5NGJkMTA3NjlhZjhhMDg2OTI1YjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfmlkDMSGA0CXnupnYxK7Yx8YoLf 4EN5OfZG0XWmNTjoJ/tdm8DElWEGjkiBzhYicMqVdF8aYMRhIjKo1oy0Wplg4IyG oDMFfYdQQJwQwrbdu+h3lA6BKcdCTO/axg26Bi+r+dMegCI5znGkgc7EO10rsh// gG6lCGOScqMYeeUNfk3YcMCVRAXCmQIN2gJp5zIb/yJpJ1IoaREHD8vGthOjHtmq xlte5jQSKVWB4eGkHh97JWTc62pLtKVuDF6EQgdJInIiyHJJgePYRAVqfpbD1Zfp QTZPYiOjOBUkvzYbhNBBzpNHuzd2moV9WxpR7+u3uk2Z6U91KLLI438WtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDgN+gcPl0bgOZS9EHaa+KCGklsdMB8GA1UdIwQY MBaAFKxnyTuCJdBMN2HBPO/uX4MpNY4jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckdmSk80SWwwRXczWWNFODctNWZneWsxamlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hYzhlNmYtNWY4My00NDliLThjOWQt NzdjMTA0ODQyMmQ4LzEvckdmSk80SWwwRXczWWNFODctNWZneWsxamlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9hYzhlNmYtNWY4My00NDliLThjOWQtNzdjMTA0ODQyMmQ4 LzEvckdmSk80SWwwRXczWWNFODctNWZneWsxamlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkfsg7nCt oxyfBegRvbd8a3S3wxT7Lu1IR0fA8K5LxwxYw8h9hcmngaxiN7HPeZJ9Hx97gW95 di6xRRjEXgo/cvgfrDizdabLfTd2S+Rb+DX8v80lgSsqzbs+DCsXHSawJfPUaS42 CUssMU7A15B3gTYbx/1xG4myWD2Obg83h7jYD/1GYIP2MDJoU4hX/fGm1iYyaBJp SBUD2GB+4inHTSfPp/JvcGNz1HYYcWfaQWow/rdxsO7v0z3w1sAyHapEHv9amNfL 8HoZkG46g6ET/IWZnrPk1jpdzEGMKe2fk3U9dQOZ3Z8+HA30uRgPK6QGzWBGBkO7 dzL4F4w99zT60Q== -----END CERTIFICATE-----Generated at Mon Jan 26 10:51:53 2026 by rpki-client