This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft File: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft (raw, json) Hash identifier: hITm2llqrrcjNl5hMXzD8hEgmrhjhT/LXYJPSsFxY88= Subject key identifier: 5F:F5:96:AE:08:3B:95:A0:7F:F9:04:99:DB:2F:D2:42:94:B1:81:3A Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Certificate serial: 019BFC8A1BD53ED94AAA9780A6540ABBC103 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft Manifest number: 17FF Signing time: Mon 26 Jan 2026 23:01:08 +0000 Manifest this update: Mon 26 Jan 2026 23:01:08 +0000 Manifest next update: Tue 27 Jan 2026 23:01:08 +0000 Files and hashes: 1: 5bw3FxzpBWgCUPFGor6BeS_x13E.roa (hash: vbv6Fyo711z5Y6WllYiF1+hQCuBRfjBj2SnqOdmQ/Ko=) 2: KfDSJyzb9f5qb2_ejV8orifPYoQ.roa (hash: ffWRor2kEy0Bm5u6I9vC5lf9Q7mFKeVt0iScOU1aS8U=) 3: OPUmPq2MCSSLajil_N8xjasEED0.roa (hash: 3ErCgLhuftk7qbnRHyFbXfh2aIHoI6pTjwOjuX9ybbI=) 4: PVZJLc9tODZFqXK-cJmdd7K-baM.roa (hash: nv2FNyj3NvI+l9/bwumlpSj6KXBZJHOiEr8IoIDWWBs=) 5: RD2bQy42cJtcLUpPd6bwEgSdC5g.roa (hash: EXR+FPHGsONaMy04ozJgDUBq2GB63B3p6cERU165gBY=) 6: RTtrcIMD_1Pooh2hybtppswd0Cs.roa (hash: gHzBppcBQRTrZFKZdzTeaIz8G3KIuJKhpm0DEQdKM5o=) 7: ZCwACbeLHY5EcAcLa6xI6rDBVJ8.roa (hash: 3HGI+6qeROUPLoU4ORnifqLKfR+6cyux8LhHwuDQCzI=) 8: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl (hash: r36Nt3CV6BG3kp6miPNGQHBgfkH1Bja8hhqphvsM22w=) 9: jwL6ZedQy9jrx6zRLmC34t2VuNI.roa (hash: JjbOSGoIoxnMnWQdAupasyiznFb2Rz/tCe7dz0MfJkM=) 10: taRmnaIWL0Lvnk8-ztV91eCLqRU.roa (hash: Duq2TEYTpeDcixHF5tGgiY61uowG5KKhAb2ieJRR8c4=) 11: wUgkHiQ86rCh1plfV-1fhX-AaMg.roa (hash: 86ia7TUjUS+IoQf3wQbTT6jWw8UWMBIHEfrKwtfOipM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:8a:1b:d5:3e:d9:4a:aa:97:80:a6:54:0a:bb:c1:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Validity Not Before: Jan 26 23:01:08 2026 GMT Not After : Jan 27 23:01:08 2026 GMT Subject: CN=5ff596ae083b95a07ff90499db2fd24294b1813a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a5:a0:a9:c7:12:cb:7c:7c:97:52:61:2f:12: b7:34:f6:da:7c:0c:6b:20:11:61:2d:68:54:ee:c3: 22:4a:bb:44:b1:77:a3:a9:c1:9e:06:cd:12:f1:ae: 6f:0f:e9:10:11:fc:a1:c5:80:13:d0:af:25:17:b3: 9d:e4:3b:27:fa:30:63:2a:ce:6e:6f:f2:e8:fa:fa: e1:a6:ca:69:37:34:d5:ef:89:f8:69:6c:5a:e4:cd: a1:bc:b0:16:b7:c0:a5:76:a2:26:a0:ef:69:e8:df: 33:3a:2b:c5:4d:9b:cc:cb:6b:ac:b4:8d:4a:b1:97: c6:b2:b5:02:79:6b:f1:6c:eb:81:41:0d:df:b5:22: 6c:44:bf:a7:eb:6a:10:5c:62:a9:fc:06:cf:e0:62: ca:65:83:bd:6a:64:56:4e:70:7b:79:a8:3b:90:3e: 3f:8f:85:d9:f4:62:95:d8:3c:6f:1f:fc:60:2e:72: d8:c6:f4:23:99:36:18:c7:94:45:35:65:ba:12:ef: 24:72:c2:e3:87:64:04:53:7d:a3:a8:40:dd:45:43: 4a:4f:2c:8f:3d:c5:34:37:87:4d:4b:d1:d4:41:7f: 71:68:31:51:5e:77:4c:81:a6:38:0d:f7:46:65:d4: 22:6f:53:f4:e1:66:0f:e7:c0:94:de:b2:43:b6:15: ed:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F5:96:AE:08:3B:95:A0:7F:F9:04:99:DB:2F:D2:42:94:B1:81:3A X509v3 Authority Key Identifier: keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:04:4e:d4:ef:f7:5d:ab:4f:73:2f:a4:26:bd:04:71:33:a3: d0:f3:b1:63:c5:7a:ac:d9:f8:e3:61:0d:31:f5:5b:80:df:5c: 38:ff:85:61:f7:5b:3e:8a:81:24:25:3a:c8:a3:b0:b3:fe:a0: 4e:23:8b:a5:7c:30:df:8a:bc:80:16:48:e7:79:05:98:f1:1c: 1d:a0:41:57:96:16:10:84:5f:0a:26:0b:64:53:24:94:79:16: 03:6a:fb:d6:3a:3d:f3:22:54:3c:78:64:c7:30:0d:1a:91:1d: c8:5b:31:6d:92:b1:37:34:57:8c:8c:9e:ab:8e:cd:6b:0f:46: e0:fe:ec:ff:3b:8c:f5:99:dd:2f:73:d0:3f:aa:f6:5d:fe:44: c3:c4:ed:54:d9:dd:38:84:20:a2:0e:fa:1c:26:25:ea:ef:18: 35:47:5f:e5:4a:8b:3d:ec:5c:9d:a2:c3:38:77:27:4c:b1:07: 77:f6:26:5e:e9:9e:32:d4:d5:63:ba:df:3d:d9:54:e5:0e:81: 33:0e:08:ec:7a:70:e2:02:e3:2c:d1:c7:eb:1b:17:75:2e:37: 34:15:18:61:c9:59:90:e5:13:49:87:4b:c9:81:03:11:8b:a2: ca:87:59:f3:6f:56:e3:98:e9:0f:5b:d1:d5:af:71:6a:d1:0f: 3d:eb:eb:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8ihvVPtlKqpeAplQKu8EDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDRjMjVjMmY4YjQ3ZTVkYWY1MmQxYzRjNWE1MDk5OWRk MGEwYTkwHhcNMjYwMTI2MjMwMTA4WhcNMjYwMTI3MjMwMTA4WjAzMTEwLwYDVQQD Eyg1ZmY1OTZhZTA4M2I5NWEwN2ZmOTA0OTlkYjJmZDI0Mjk0YjE4MTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6WgqccSy3x8l1JhLxK3NPbafAxr IBFhLWhU7sMiSrtEsXejqcGeBs0S8a5vD+kQEfyhxYAT0K8lF7Od5Dsn+jBjKs5u b/Lo+vrhpsppNzTV74n4aWxa5M2hvLAWt8CldqImoO9p6N8zOivFTZvMy2ustI1K sZfGsrUCeWvxbOuBQQ3ftSJsRL+n62oQXGKp/AbP4GLKZYO9amRWTnB7eag7kD4/ j4XZ9GKV2DxvH/xgLnLYxvQjmTYYx5RFNWW6Eu8kcsLjh2QEU32jqEDdRUNKTyyP PcU0N4dNS9HUQX9xaDFRXndMgaY4DfdGZdQib1P04WYP58CU3rJDthXtXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF/1lq4IO5Wgf/kEmdsv0kKUsYE6MB8GA1UdIwQY MBaAFH0Ewlwvi0fl2vUtHExaUJmd0KCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMt ZTYzZTk0Y2JhMDlmLzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMtZTYzZTk0Y2JhMDlm LzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOwRO1O/3 XatPcy+kJr0EcTOj0POxY8V6rNn442ENMfVbgN9cOP+FYfdbPoqBJCU6yKOws/6g TiOLpXww34q8gBZI53kFmPEcHaBBV5YWEIRfCiYLZFMklHkWA2r71jo98yJUPHhk xzANGpEdyFsxbZKxNzRXjIyeq47Naw9G4P7s/zuM9ZndL3PQP6r2Xf5Ew8TtVNnd OIQgog76HCYl6u8YNUdf5UqLPexcnaLDOHcnTLEHd/YmXumeMtTVY7rfPdlU5Q6B Mw4I7Hpw4gLjLNHH6xsXdS43NBUYYclZkOUTSYdLyYEDEYuiyodZ829W45jpD1vR 1a9xatEPPevrmg== -----END CERTIFICATE-----Generated at Tue Jan 27 03:55:20 2026 by rpki-client