This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft File: fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft (raw, json) Hash identifier: 2+0fKCRO6d0v303s4Is1hJjv2iI0W5qg7lrZ+1TsxyE= Subject key identifier: 54:01:A2:72:A5:61:61:75:43:94:A4:3B:A4:FF:DE:7D:D8:F8:69:F7 Authority key identifier: 7E:E3:20:8E:81:8D:D7:4C:0D:6B:43:D9:27:EA:0D:18:93:BE:D6:50 Certificate issuer: /CN=7ee3208e818dd74c0d6b43d927ea0d1893bed650 Certificate serial: 019BFC1C25822AD56ACC6545ECAF45CCF63F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft Manifest number: 14BE Signing time: Mon 26 Jan 2026 21:01:01 +0000 Manifest this update: Mon 26 Jan 2026 21:01:01 +0000 Manifest next update: Tue 27 Jan 2026 21:01:01 +0000 Files and hashes: 1: fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl (hash: SVNyYtnQ242E7NsymMEQppl4tcYoZb08q7rD/ldNHk8=) 2: pnSX4g2lmq0K8FTBTKkZmOyOugg.roa (hash: V6XhkHNDk99HDBU8c9gDLWqCQBMIvpkfeeSqTLRceRo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:1c:25:82:2a:d5:6a:cc:65:45:ec:af:45:cc:f6:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ee3208e818dd74c0d6b43d927ea0d1893bed650 Validity Not Before: Jan 26 21:01:01 2026 GMT Not After : Jan 27 21:01:01 2026 GMT Subject: CN=5401a272a56161754394a43ba4ffde7dd8f869f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:69:68:5e:ce:eb:d0:db:37:37:28:72:5c:d2: a5:a5:78:19:33:2f:50:22:22:f1:f5:5e:f3:8f:9f: fb:e8:75:98:fb:85:a1:e5:84:44:e6:91:18:5b:8c: cf:57:45:3b:b7:14:d9:48:75:13:06:0a:ea:81:0b: 09:65:5b:fa:8a:ff:08:d7:2b:18:57:f9:c6:35:8d: 0c:0c:8f:95:d5:e3:0d:74:1d:f2:97:d7:3a:73:b5: 91:9e:e9:64:30:96:68:a3:3c:d1:8d:92:c5:6d:1a: 6e:a0:67:4c:2d:d4:e5:3f:7a:bf:a4:47:1c:75:23: 26:a4:56:69:b8:e2:42:ed:65:28:b5:60:36:93:8e: 84:85:94:5f:50:ed:cc:c6:e4:45:99:26:da:e4:1b: 00:ff:a1:85:71:d2:ac:7d:8b:a4:fa:f1:ee:37:d1: d7:3e:a5:ee:6c:ac:49:a0:1f:32:74:8f:3e:be:a9: 04:78:36:55:1e:56:b1:27:e6:cc:cf:7f:28:3a:36: fd:2c:df:24:6d:ea:b2:37:c9:5f:15:5b:d0:7a:bf: 49:01:a3:29:28:26:7e:94:4d:0d:fb:a7:e9:6a:7c: c7:a5:f4:14:8c:33:da:bc:7a:e2:c0:f3:33:39:a4: ac:ff:59:9e:ab:fc:d2:e0:81:92:7c:c4:3c:97:4f: f5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:01:A2:72:A5:61:61:75:43:94:A4:3B:A4:FF:DE:7D:D8:F8:69:F7 X509v3 Authority Key Identifier: keyid:7E:E3:20:8E:81:8D:D7:4C:0D:6B:43:D9:27:EA:0D:18:93:BE:D6:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:e2:5b:f4:21:4d:65:8e:0b:1c:02:9c:48:54:a5:71:a4:54: ed:59:73:5e:78:81:3a:30:54:5d:18:ea:62:40:da:5d:de:ba: 65:34:84:4e:90:cf:3b:9a:09:86:39:fa:f3:44:39:e6:36:56: 95:95:e4:9a:35:9f:25:d6:42:36:85:28:85:67:90:d5:71:b2: 45:fd:f8:b5:59:27:54:6e:9d:c2:f6:51:47:96:00:df:99:23: 54:18:de:a2:62:19:70:62:41:b1:e8:15:1f:9b:3f:c1:2f:5c: 85:84:da:16:86:f4:d5:ff:5a:28:95:db:ae:4b:3d:c2:49:91: c5:1d:ab:59:98:cc:ca:0f:1e:7a:03:fc:45:48:9f:c4:72:5c: fc:a7:26:f3:ee:41:f0:05:ef:15:90:14:dc:c0:de:56:a9:26: 64:82:23:53:b3:ed:db:58:93:36:33:c9:6d:40:6e:19:f0:e5: 74:20:3e:37:63:2a:55:1b:48:92:6e:11:1c:a8:f2:15:47:20: 03:e5:e2:ca:3f:0d:80:4b:9b:6b:db:0d:a3:d3:1a:ad:73:be: 66:fb:3a:45:6d:6f:19:22:8d:3b:f3:ac:26:50:2d:de:f8:e8: b0:80:9c:5e:35:93:f4:c6:c5:85:df:05:b5:6d:8d:dc:bb:a4: 43:3c:89:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8HCWCKtVqzGVF7K9FzPY/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlZTMyMDhlODE4ZGQ3NGMwZDZiNDNkOTI3ZWEwZDE4OTNi ZWQ2NTAwHhcNMjYwMTI2MjEwMTAxWhcNMjYwMTI3MjEwMTAxWjAzMTEwLwYDVQQD Eyg1NDAxYTI3MmE1NjE2MTc1NDM5NGE0M2JhNGZmZGU3ZGQ4Zjg2OWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2loXs7r0Ns3NyhyXNKlpXgZMy9Q IiLx9V7zj5/76HWY+4Wh5YRE5pEYW4zPV0U7txTZSHUTBgrqgQsJZVv6iv8I1ysY V/nGNY0MDI+V1eMNdB3yl9c6c7WRnulkMJZoozzRjZLFbRpuoGdMLdTlP3q/pEcc dSMmpFZpuOJC7WUotWA2k46EhZRfUO3MxuRFmSba5BsA/6GFcdKsfYuk+vHuN9HX PqXubKxJoB8ydI8+vqkEeDZVHlaxJ+bMz38oOjb9LN8kbeqyN8lfFVvQer9JAaMp KCZ+lE0N+6fpanzHpfQUjDPavHriwPMzOaSs/1meq/zS4IGSfMQ8l0/1HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFQBonKlYWF1Q5SkO6T/3n3Y+Gn3MB8GA1UdIwQY MBaAFH7jII6BjddMDWtD2SfqDRiTvtZQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnVNZ2pvR04xMHdOYTBQWkotb05HSk8tMWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9hNGE4N2EtNGY3ZC00MGJkLWIxZjUt ZmY0YTk5NzgzYWI0LzEvZnVNZ2pvR04xMHdOYTBQWkotb05HSk8tMWxBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9hNGE4N2EtNGY3ZC00MGJkLWIxZjUtZmY0YTk5NzgzYWI0 LzEvZnVNZ2pvR04xMHdOYTBQWkotb05HSk8tMWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXuJb9CFN ZY4LHAKcSFSlcaRU7VlzXniBOjBUXRjqYkDaXd66ZTSETpDPO5oJhjn680Q55jZW lZXkmjWfJdZCNoUohWeQ1XGyRf34tVknVG6dwvZRR5YA35kjVBjeomIZcGJBsegV H5s/wS9chYTaFob01f9aKJXbrks9wkmRxR2rWZjMyg8eegP8RUifxHJc/Kcm8+5B 8AXvFZAU3MDeVqkmZIIjU7Pt21iTNjPJbUBuGfDldCA+N2MqVRtIkm4RHKjyFUcg A+Xiyj8NgEuba9sNo9MarXO+Zvs6RW1vGSKNO/OsJlAt3vjosICcXjWT9MbFhd8F tW2N3LukQzyJTQ== -----END CERTIFICATE-----Generated at Tue Jan 27 01:33:15 2026 by rpki-client