This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft File: n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft (raw, json) Hash identifier: npq6+yCsRla+LkqxGHfaNxbVjq9KC2zNXg2dpu9THIs= Subject key identifier: 67:63:9B:17:E4:35:BC:9B:AA:70:AF:4D:B1:CC:44:08:7D:81:A8:D7 Authority key identifier: 9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87 Certificate issuer: /CN=9ff1503210fe06ed35490b0231dbdb5967e12987 Certificate serial: 019BF9522510367F9ED4E867A43C5A5968B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft Manifest number: 12A5 Signing time: Mon 26 Jan 2026 08:01:08 +0000 Manifest this update: Mon 26 Jan 2026 08:01:08 +0000 Manifest next update: Tue 27 Jan 2026 08:01:08 +0000 Files and hashes: 1: BCsvI1mqtMkrqM1Desz65UxbMeU.roa (hash: oNMs5i3Xy1K3iMANMRawDJNBdjBrE5KXc5y/my453cw=) 2: L7838bUvDMxy7ZosaDwIaJHwqGU.roa (hash: SA3K5mwsY8DcrrYYsuf8C827DdRGnbVyCTResbqWs+I=) 3: LI0sVfoUzK1z9YOT5-FCjcJGQ0I.roa (hash: L0O8mT469MCzuE1WS6kEM7aYWqcvleiuYLagt0EiSfA=) 4: eFneRI8NVirY9FXkrSGjf8r8DIg.roa (hash: eg6+J92P4U7OROkq5yxujy7G7w0DLDuwMs/a/0cX+a0=) 5: jKCgpxt1ADjjHAE5Am2jfuifPn8.roa (hash: XeGQ/DX/ECCSWySWuH3BuJMwUzvEFlXF4fBqBfaoS58=) 6: n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl (hash: xzrwZET98+cHemovJ/8UtAsEfH5vySyOajpkPydtbrc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:52:25:10:36:7f:9e:d4:e8:67:a4:3c:5a:59:68:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ff1503210fe06ed35490b0231dbdb5967e12987 Validity Not Before: Jan 26 08:01:08 2026 GMT Not After : Jan 27 08:01:08 2026 GMT Subject: CN=67639b17e435bc9baa70af4db1cc44087d81a8d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a2:50:24:0d:91:41:7c:3a:39:e0:3e:00:30: 34:05:26:20:de:42:2b:a8:12:3d:df:d2:77:40:62: ee:cd:75:7d:4d:da:6a:80:9b:a7:3a:cc:86:eb:63: b9:6b:2f:af:85:06:ad:37:ab:7e:0a:45:da:ba:99: c3:c0:b5:15:2c:03:24:19:39:a1:67:f0:ac:7d:8f: 69:c7:68:91:78:78:e5:c2:a3:8b:1e:d5:aa:96:31: b1:ed:f2:c1:3e:19:47:c5:07:6f:ce:d9:07:47:70: 2d:f2:a8:32:5a:55:db:cf:f0:f0:f0:b0:24:1d:c0: a1:bf:3a:d4:8d:0a:21:f6:66:08:2f:89:f5:2c:ef: 28:a1:b9:a9:d2:65:28:45:72:61:b3:ee:99:52:c2: 9b:7a:20:b0:e4:1f:81:58:41:f6:db:c2:f3:b5:c5: 4b:db:c6:cf:01:ea:01:01:69:11:63:3d:86:43:ac: b5:d1:66:c8:aa:6e:28:48:0b:a7:b9:1d:a8:3a:a1: 7e:a2:6e:97:13:fc:db:30:cf:db:41:c7:b3:ae:98: 5b:5e:c0:c0:0e:0d:0f:7a:60:2d:d1:95:e3:eb:24: 5c:d4:ec:8f:ee:21:39:b7:1b:ae:eb:50:89:ac:07: ae:58:33:ee:3a:1c:7c:9f:e8:8d:45:5b:f5:e3:3c: fd:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:63:9B:17:E4:35:BC:9B:AA:70:AF:4D:B1:CC:44:08:7D:81:A8:D7 X509v3 Authority Key Identifier: keyid:9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:08:4d:e9:6a:40:1a:fb:8d:6d:87:09:96:3a:d4:e5:d4:0f: 38:3e:2f:a7:4d:65:de:fb:3f:94:7e:ad:c0:cd:37:62:44:fe: f2:2d:28:cc:d1:44:91:14:62:df:f5:fb:a6:b8:0c:d7:19:fc: ae:42:5b:d4:67:04:9d:a9:a5:1a:b9:96:34:6c:12:a4:67:43: 77:74:77:7c:18:64:0f:82:fc:09:05:14:7a:2c:4b:8c:e2:56: e0:c8:50:07:f0:45:20:03:1a:c9:55:48:14:e5:5d:8a:32:47: f1:59:98:d3:2a:57:6e:28:01:73:c6:d4:71:d1:3a:8f:c0:25: 86:7b:8c:3b:8f:fa:88:ff:b5:61:a4:ef:bb:7d:06:6c:41:de: c6:a4:f5:d2:f2:4b:62:d7:97:f5:f6:ab:e1:87:67:31:f8:a3: d8:6f:b6:fd:74:c6:b8:97:a7:41:1f:4c:8a:e2:72:28:51:e5: a0:88:fa:2a:74:02:f4:cb:87:90:e7:d9:3e:80:f2:53:cf:6e: 83:a4:d8:f9:28:a6:82:63:16:4d:b1:4b:36:21:ca:dd:a1:e0: 79:18:14:df:75:b8:87:a8:da:09:22:73:9f:de:60:fe:30:31: a8:25:b4:5d:17:28:f5:21:80:0d:25:bd:10:5a:d8:b7:b9:f2: bf:31:59:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5UiUQNn+e1OhnpDxaWWixMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZjE1MDMyMTBmZTA2ZWQzNTQ5MGIwMjMxZGJkYjU5Njdl MTI5ODcwHhcNMjYwMTI2MDgwMTA4WhcNMjYwMTI3MDgwMTA4WjAzMTEwLwYDVQQD Eyg2NzYzOWIxN2U0MzViYzliYWE3MGFmNGRiMWNjNDQwODdkODFhOGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKJQJA2RQXw6OeA+ADA0BSYg3kIr qBI939J3QGLuzXV9TdpqgJunOsyG62O5ay+vhQatN6t+CkXaupnDwLUVLAMkGTmh Z/CsfY9px2iReHjlwqOLHtWqljGx7fLBPhlHxQdvztkHR3At8qgyWlXbz/Dw8LAk HcChvzrUjQoh9mYIL4n1LO8oobmp0mUoRXJhs+6ZUsKbeiCw5B+BWEH228LztcVL 28bPAeoBAWkRYz2GQ6y10WbIqm4oSAunuR2oOqF+om6XE/zbMM/bQcezrphbXsDA Dg0PemAt0ZXj6yRc1OyP7iE5txuu61CJrAeuWDPuOhx8n+iNRVv14zz9ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGdjmxfkNbybqnCvTbHMRAh9gajXMB8GA1UdIwQY MBaAFJ/xUDIQ/gbtNUkLAjHb21ln4SmHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbl9GUU1oRC1CdTAxU1FzQ01kdmJXV2ZoS1ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC84NDIxZDMtNTA2YS00ZjBjLWI5YzAt NDYzMjJlMDJmMDhkLzEvbl9GUU1oRC1CdTAxU1FzQ01kdmJXV2ZoS1ljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC84NDIxZDMtNTA2YS00ZjBjLWI5YzAtNDYzMjJlMDJmMDhk LzEvbl9GUU1oRC1CdTAxU1FzQ01kdmJXV2ZoS1ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHQhN6WpA GvuNbYcJljrU5dQPOD4vp01l3vs/lH6twM03YkT+8i0ozNFEkRRi3/X7prgM1xn8 rkJb1GcEnamlGrmWNGwSpGdDd3R3fBhkD4L8CQUUeixLjOJW4MhQB/BFIAMayVVI FOVdijJH8VmY0ypXbigBc8bUcdE6j8AlhnuMO4/6iP+1YaTvu30GbEHexqT10vJL YteX9far4YdnMfij2G+2/XTGuJenQR9MiuJyKFHloIj6KnQC9MuHkOfZPoDyU89u g6TY+SimgmMWTbFLNiHK3aHgeRgU33W4h6jaCSJzn95g/jAxqCW0XRco9SGADSW9 EFrYt7nyvzFZmA== -----END CERTIFICATE-----Generated at Mon Jan 26 15:05:13 2026 by rpki-client