This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft File: F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft (raw, json) Hash identifier: E572gjkioGkkbpttLyqd8mxDlZW/BaUuNognZtu0eJY= Subject key identifier: C2:FE:E5:04:3A:FA:A3:91:51:CC:F1:B3:67:22:99:82:34:95:DB:BE Authority key identifier: 17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC Certificate issuer: /CN=17526ccac4f9064e058549b30172c84439787fbc Certificate serial: 019BE181202719E2D92DED26CCD86B52270B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft Manifest number: 11E1 Signing time: Wed 21 Jan 2026 17:01:34 +0000 Manifest this update: Wed 21 Jan 2026 17:01:34 +0000 Manifest next update: Thu 22 Jan 2026 17:01:34 +0000 Files and hashes: 1: 1-earsS0WLz1IJKO-WJXouPRRDc.roa (hash: 0PMS6Wj9PBe3RqKaVauppM1NP8rM+o6ZHX9nxGiIcug=) 2: BQMAZ1-GEH5r12U7WPk6XQ_xa2o.roa (hash: hON2VcGx2tnVP3W4DtWqeENmyb4FIH7O20nZquH7iUI=) 3: F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl (hash: DZLo9iwO4rmPeiAuV0fkc6ypD00kL4u/jnnB+Ff0qvU=) 4: Nffyfowdb4DCXyl-CUibDbck5aw.roa (hash: +korLpH5t+ySKaX06qHUvdV0iVtoQyoQxEXvg5jMwS0=) 5: zYExE-CWB4WrYD1j1mlYKlry5zU.roa (hash: aQw4vgQl/XUfRZ1hivO701ANJNV8KUYzIDEJLZE7u/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e1:81:20:27:19:e2:d9:2d:ed:26:cc:d8:6b:52:27:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17526ccac4f9064e058549b30172c84439787fbc Validity Not Before: Jan 21 17:01:34 2026 GMT Not After : Jan 22 17:01:34 2026 GMT Subject: CN=c2fee5043afaa39151ccf1b3672299823495dbbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:21:0c:60:57:58:e5:1f:e6:7c:0f:28:a7:55: 06:86:0c:7c:3a:bd:34:da:97:1f:61:91:ba:f0:4f: d0:c8:e7:73:e7:11:aa:8a:dd:ee:38:bd:a0:1f:f8: ee:b4:47:0b:9c:49:83:c7:fd:10:ff:07:76:15:1c: ed:23:a5:fd:f7:32:71:5a:8d:2a:ce:84:cf:4b:e2: d2:9e:7b:5d:7c:c6:91:d8:ba:f9:82:5a:ca:99:ba: a6:c8:75:a7:ee:08:5f:82:e3:cc:9c:7f:03:1f:72: 2b:23:fd:3d:c6:16:c6:3d:82:3a:16:16:6d:d7:d7: a9:71:0d:f0:9c:5c:6a:d9:63:2a:55:05:8b:db:c8: 20:65:95:31:9d:7c:3f:5d:c8:5a:27:06:54:09:cf: fb:f7:6f:e9:d1:85:59:d9:45:d7:31:fd:41:40:fa: bd:75:ec:86:54:e0:9c:be:54:90:bf:49:84:3b:ac: 3d:73:ce:10:b1:c9:81:2c:5d:a2:53:ea:6b:33:bd: 80:4a:09:bd:b6:24:09:ea:1f:14:54:51:22:6d:8e: 0d:1d:05:05:6a:72:e8:41:71:83:8a:6d:d2:23:10: c9:79:96:d4:05:cf:88:9e:f7:47:84:47:32:cd:40: 47:1c:65:4a:3f:82:72:47:9e:a2:d8:95:da:08:e7: 03:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:FE:E5:04:3A:FA:A3:91:51:CC:F1:B3:67:22:99:82:34:95:DB:BE X509v3 Authority Key Identifier: keyid:17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:1c:aa:4c:37:16:26:e6:84:a8:fe:94:e5:77:7b:b5:45:18: f9:8d:7a:8a:e9:2f:39:06:30:d8:8b:ba:b7:cd:b9:0d:c4:c6: 1c:e5:6c:a0:23:14:c8:93:73:b7:32:b0:5d:27:eb:81:80:8b: 78:23:05:b4:de:79:a0:52:45:79:37:53:47:22:b6:15:a3:1d: 01:ec:85:dc:14:0d:7a:61:80:f1:3f:37:13:99:fd:51:f2:77: fa:df:de:fb:a5:d6:9b:e3:15:72:cb:de:1c:ff:e6:14:b2:1f: 75:08:aa:fe:fe:86:fe:b9:cd:91:72:9c:dd:c0:0a:8d:5a:9c: 19:35:33:42:45:d0:52:ed:0d:98:9a:bd:8f:64:44:82:6b:67: f7:3b:66:f6:0d:8b:75:9f:22:0d:80:f3:3e:30:18:5a:08:34: dd:9a:19:ba:5f:3e:5a:cb:cc:15:be:59:d0:2c:a9:06:61:ac: be:ce:6f:f6:1f:03:71:df:3d:db:59:30:36:61:d5:4a:79:16: 53:4e:a0:c3:05:21:c0:c4:f3:5c:37:bf:4b:ab:47:49:80:d4: 55:7b:5f:ee:bb:8c:82:be:44:9a:75:44:7c:c1:d1:66:16:3f: a4:24:bb:f6:c8:b7:c5:e5:ec:e4:b1:16:fa:0c:04:bf:c0:82: f3:53:da:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvhgSAnGeLZLe0mzNhrUicLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NTI2Y2NhYzRmOTA2NGUwNTg1NDliMzAxNzJjODQ0Mzk3 ODdmYmMwHhcNMjYwMTIxMTcwMTM0WhcNMjYwMTIyMTcwMTM0WjAzMTEwLwYDVQQD EyhjMmZlZTUwNDNhZmFhMzkxNTFjY2YxYjM2NzIyOTk4MjM0OTVkYmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSEMYFdY5R/mfA8op1UGhgx8Or00 2pcfYZG68E/QyOdz5xGqit3uOL2gH/jutEcLnEmDx/0Q/wd2FRztI6X99zJxWo0q zoTPS+LSnntdfMaR2Lr5glrKmbqmyHWn7ghfguPMnH8DH3IrI/09xhbGPYI6FhZt 19epcQ3wnFxq2WMqVQWL28ggZZUxnXw/XchaJwZUCc/792/p0YVZ2UXXMf1BQPq9 deyGVOCcvlSQv0mEO6w9c84QscmBLF2iU+prM72ASgm9tiQJ6h8UVFEibY4NHQUF anLoQXGDim3SIxDJeZbUBc+InvdHhEcyzUBHHGVKP4JyR56i2JXaCOcDsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFML+5QQ6+qORUczxs2cimYI0ldu+MB8GA1UdIwQY MBaAFBdSbMrE+QZOBYVJswFyyEQ5eH+8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjFKc3lzVDVCazRGaFVtekFYTElSRGw0Zjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9jOWFhODEtNWJmZC00NTM1LTk2MDYt OTQxY2M2YTdiYWQ5LzEvRjFKc3lzVDVCazRGaFVtekFYTElSRGw0Zjd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9jOWFhODEtNWJmZC00NTM1LTk2MDYtOTQxY2M2YTdiYWQ5 LzEvRjFKc3lzVDVCazRGaFVtekFYTElSRGw0Zjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAexyqTDcW JuaEqP6U5Xd7tUUY+Y16iukvOQYw2Iu6t825DcTGHOVsoCMUyJNztzKwXSfrgYCL eCMFtN55oFJFeTdTRyK2FaMdAeyF3BQNemGA8T83E5n9UfJ3+t/e+6XWm+MVcsve HP/mFLIfdQiq/v6G/rnNkXKc3cAKjVqcGTUzQkXQUu0NmJq9j2REgmtn9ztm9g2L dZ8iDYDzPjAYWgg03ZoZul8+WsvMFb5Z0CypBmGsvs5v9h8Dcd8921kwNmHVSnkW U06gwwUhwMTzXDe/S6tHSYDUVXtf7ruMgr5EmnVEfMHRZhY/pCS79si3xeXs5LEW +gwEv8CC81PaYw== -----END CERTIFICATE-----Generated at Wed Jan 21 21:10:20 2026 by rpki-client