This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.mft File: flrIG7zPhS8irI7VLS6S2zHY1gY.mft (raw, json) Hash identifier: IhVC9Rl2g4Rl19/pFo3UqvSDJLY5mzP4cgcgH+y4mu4= Subject key identifier: C2:0E:BC:9C:EE:CD:33:F2:5A:EB:D9:D8:97:FE:CE:20:EB:FF:99:7E Authority key identifier: 7E:5A:C8:1B:BC:CF:85:2F:22:AC:8E:D5:2D:2E:92:DB:31:D8:D6:06 Certificate issuer: /CN=7e5ac81bbccf852f22ac8ed52d2e92db31d8d606 Certificate serial: 019BF650DD3524B5A56BEE70AFD3E58668F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flrIG7zPhS8irI7VLS6S2zHY1gY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.mft Manifest number: 05B3 Signing time: Sun 25 Jan 2026 18:00:53 +0000 Manifest this update: Sun 25 Jan 2026 18:00:53 +0000 Manifest next update: Mon 26 Jan 2026 18:00:53 +0000 Files and hashes: 1: 8crzujhFPcFtbV2lWsb3pVCUfzo.roa (hash: eQSvKYDMqkqsiIoj2XOwpx4q3L0IumCSy//x/1LUkR8=) 2: flrIG7zPhS8irI7VLS6S2zHY1gY.crl (hash: xW1RUPPcQ3q++LpxjYTVHt28Hur6p7EarrKr2yjm1Aw=) 3: t__6136takHeUvRHDalHrBzgXQY.roa (hash: WD8+WaJGfN5reVo0Qs2GlcEq7iUcR3GPBrBgQRmS4a8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.mft rsync://rpki.ripe.net/repository/DEFAULT/flrIG7zPhS8irI7VLS6S2zHY1gY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:50:dd:35:24:b5:a5:6b:ee:70:af:d3:e5:86:68:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e5ac81bbccf852f22ac8ed52d2e92db31d8d606 Validity Not Before: Jan 25 18:00:53 2026 GMT Not After : Jan 26 18:00:53 2026 GMT Subject: CN=c20ebc9ceecd33f25aebd9d897fece20ebff997e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:82:cb:6d:54:6c:0f:29:85:16:55:7b:b9:21: a9:4d:8f:1a:0a:4a:db:62:eb:1b:58:a1:e1:6b:2f: 92:5f:8a:25:e2:fe:6e:e9:33:f8:b6:d6:03:b0:ac: b5:2d:15:8c:05:10:8b:34:7a:64:33:41:18:02:c9: 3a:ae:a7:b8:03:86:b4:ca:46:74:6d:8b:24:ae:c1: 00:89:c9:04:98:8d:63:5f:7d:fc:92:a1:b3:a0:48: 2a:32:36:89:5a:ff:46:fe:2d:1f:10:3e:fc:b0:49: 9d:ce:c1:61:98:c1:ca:f7:1a:27:24:87:28:4a:4a: 93:b7:52:28:11:49:93:00:f2:fb:77:73:59:e8:99: 9b:d3:c8:4d:e5:cf:44:be:35:bb:f8:e6:a3:7c:b0: a4:b8:b8:5d:fc:0e:53:17:44:01:2a:10:0d:55:56: 84:03:f2:53:8c:00:17:7a:73:48:f7:2e:47:86:1b: c6:79:d0:a5:3e:31:61:43:2f:4c:6b:0f:e3:7d:ce: 3c:d8:9c:7e:5c:d8:c3:d5:3f:42:a0:e3:32:6c:74: a2:23:bf:2c:33:9c:39:4d:d1:40:16:55:65:46:39: 55:00:91:5b:33:17:a7:19:01:5d:9f:ce:c2:f2:89: cb:68:60:3a:6e:42:f7:56:81:b4:57:96:eb:6a:a7: e2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:0E:BC:9C:EE:CD:33:F2:5A:EB:D9:D8:97:FE:CE:20:EB:FF:99:7E X509v3 Authority Key Identifier: keyid:7E:5A:C8:1B:BC:CF:85:2F:22:AC:8E:D5:2D:2E:92:DB:31:D8:D6:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flrIG7zPhS8irI7VLS6S2zHY1gY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:57:45:7c:21:fd:7a:07:ae:20:c2:07:dc:d1:70:0b:31:d4: f0:1f:6a:f6:a1:97:8f:fa:b2:23:ee:90:53:4f:34:05:9c:af: cc:fd:42:0e:9e:8b:d0:de:a7:28:cd:86:be:3a:26:ae:25:28: 36:01:63:23:2e:cd:3f:21:3a:3e:81:ca:b9:a1:16:ce:2e:51: ca:48:4c:39:22:f6:ee:da:dd:4d:12:e8:65:6c:6c:d7:86:4c: 52:3f:99:97:34:32:5d:ac:23:1b:63:3a:5d:f6:f3:2e:fc:5f: be:82:58:ed:5a:d3:c2:29:85:2d:9f:c8:ec:f1:50:91:17:69: 40:db:9e:6a:6d:7b:23:5d:04:51:87:81:a7:13:78:e0:3f:b8: 20:99:37:a8:69:39:98:00:f1:ce:68:12:e1:2f:20:25:a7:37: 84:2c:4b:6f:b7:bb:b7:44:5c:c2:04:b7:c9:ca:28:24:89:b2: 94:3f:8a:89:d1:f4:97:72:f3:fd:cd:f7:28:de:0a:aa:b2:f9: 81:42:6e:db:b8:4e:ff:0b:c6:68:ed:e0:5b:fc:c7:0a:9a:1a: 33:b4:30:0c:df:85:a2:bb:42:db:58:5f:b9:17:c9:f8:34:39: 59:84:82:83:6b:92:f3:91:23:48:30:b9:7f:df:ac:e2:c6:00: ea:9f:2a:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UN01JLWla+5wr9Plhmj4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlNWFjODFiYmNjZjg1MmYyMmFjOGVkNTJkMmU5MmRiMzFk OGQ2MDYwHhcNMjYwMTI1MTgwMDUzWhcNMjYwMTI2MTgwMDUzWjAzMTEwLwYDVQQD EyhjMjBlYmM5Y2VlY2QzM2YyNWFlYmQ5ZDg5N2ZlY2UyMGViZmY5OTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YLLbVRsDymFFlV7uSGpTY8aCkrb YusbWKHhay+SX4ol4v5u6TP4ttYDsKy1LRWMBRCLNHpkM0EYAsk6rqe4A4a0ykZ0 bYskrsEAickEmI1jX338kqGzoEgqMjaJWv9G/i0fED78sEmdzsFhmMHK9xonJIco SkqTt1IoEUmTAPL7d3NZ6Jmb08hN5c9EvjW7+OajfLCkuLhd/A5TF0QBKhANVVaE A/JTjAAXenNI9y5HhhvGedClPjFhQy9Maw/jfc482Jx+XNjD1T9CoOMybHSiI78s M5w5TdFAFlVlRjlVAJFbMxenGQFdn87C8onLaGA6bkL3VoG0V5braqfi+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMIOvJzuzTPyWuvZ2Jf+ziDr/5l+MB8GA1UdIwQY MBaAFH5ayBu8z4UvIqyO1S0uktsx2NYGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmxySUc3elBoUzhpckk3VkxTNlMyekhZMWdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9kMTNmODQtMTZjZS00ZDUxLWE2MTgt YzJhNWQ5ZDcwMzEzLzEvZmxySUc3elBoUzhpckk3VkxTNlMyekhZMWdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9kMTNmODQtMTZjZS00ZDUxLWE2MTgtYzJhNWQ5ZDcwMzEz LzEvZmxySUc3elBoUzhpckk3VkxTNlMyekhZMWdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjFdFfCH9 egeuIMIH3NFwCzHU8B9q9qGXj/qyI+6QU080BZyvzP1CDp6L0N6nKM2GvjomriUo NgFjIy7NPyE6PoHKuaEWzi5RykhMOSL27trdTRLoZWxs14ZMUj+ZlzQyXawjG2M6 XfbzLvxfvoJY7VrTwimFLZ/I7PFQkRdpQNueam17I10EUYeBpxN44D+4IJk3qGk5 mADxzmgS4S8gJac3hCxLb7e7t0RcwgS3ycooJImylD+KidH0l3Lz/c33KN4KqrL5 gUJu27hO/wvGaO3gW/zHCpoaM7QwDN+FortC21hfuRfJ+DQ5WYSCg2uS85EjSDC5 f9+s4sYA6p8q1Q== -----END CERTIFICATE-----Generated at Mon Jan 26 03:12:07 2026 by rpki-client