This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft File: fmXasjlAyzlPmqpmT-pNb49C4xg.mft (raw, json) Hash identifier: r9joK7FJzaNXQ+spWC9R5MIMDRxwXeq8ZFxhZ1RZnhE= Subject key identifier: C2:31:F1:5D:31:20:86:4E:21:14:3E:2A:4B:EC:8E:5C:24:34:4B:40 Authority key identifier: 7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18 Certificate issuer: /CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318 Certificate serial: 019BFB7795600427785807570B44BE91F819 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft Manifest number: 17F7 Signing time: Mon 26 Jan 2026 18:01:16 +0000 Manifest this update: Mon 26 Jan 2026 18:01:16 +0000 Manifest next update: Tue 27 Jan 2026 18:01:16 +0000 Files and hashes: 1: ATx_EPHk5Vz1v-SpkJd7Yp6y99I.roa (hash: wd0rlsu9n+czEzHQALtAg7xmPAM6xOroSrrnXWF3Lfo=) 2: JO3t4wzj5pMO8pakWAwlzqvqqRM.asa (hash: RPS36XqFSQhGe2AwlqqHc/6mflgEGlaBrX53Fqp34Rw=) 3: KVan9Pcjft5JIZrcZQHR4i1sEDc.roa (hash: 7Kj/wx1OYLRBwB8Ljtm8I7zBf7kVbnSHVXIyDdmYFnA=) 4: QajoMPTah5HmQYWazmOhTmEgdy4.roa (hash: vdxOYd3C96luAne3fsVsAc2/Kvs7MPuLrsOoLRiJHqk=) 5: U94b541NpMgAwKP9ouuvvL3DKeY.asa (hash: 3/0upql9LNQyluPXuFCuGStTRhsE9wxGljd6ckKQ/wo=) 6: fX3tPrrAy5l65982bntPZMbTKXM.asa (hash: elpKOW5KwuHELtxjMPO/HnU5rqNl0Ef4AHZpAwWCRy8=) 7: fmXasjlAyzlPmqpmT-pNb49C4xg.crl (hash: BS4dUqT+f4GxtdATvf2PzUZOuZ3f8LJaR1Xyog6ukis=) 8: p1pAyUX-fSx4X5xlNyO_Vq2ry7w.roa (hash: 4qf1lMGx7tWHDVof2zNBnir3ltwLgCwXuL9BwrRJPhU=) 9: wY-Cs55am_CMQf8p1GQXagMI6tE.roa (hash: LKZ2Oa7r49TtzT8prI98TwirtVVWtnVlmoHvBJjp2PI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 18:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:77:95:60:04:27:78:58:07:57:0b:44:be:91:f8:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318 Validity Not Before: Jan 26 18:01:16 2026 GMT Not After : Jan 27 18:01:16 2026 GMT Subject: CN=c231f15d3120864e21143e2a4bec8e5c24344b40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a9:d8:a9:96:01:b9:7a:20:b1:4e:46:20:af: 18:63:ca:b8:70:7c:fa:12:c5:a3:df:f6:7e:83:1e: 81:60:25:db:ed:57:e5:a4:39:5d:f6:43:60:ba:f1: 86:05:26:2d:3a:18:d1:17:8c:e9:e5:10:75:12:1b: 78:ec:1f:ef:0d:88:ed:ac:a5:92:d2:70:88:b1:cf: 9c:5e:6a:48:13:5d:ef:83:8b:e3:cb:e4:fe:2c:42: d0:03:e1:b1:94:bd:f6:27:68:b0:3f:04:24:90:5b: 6c:3d:44:c9:71:85:6f:33:fc:27:cc:99:c3:2c:44: 53:40:06:34:9b:0a:64:9b:8a:02:49:e8:4c:af:03: da:03:06:aa:9e:a2:21:19:54:cb:de:31:01:ef:41: 46:59:1c:33:28:32:5c:f8:0d:f1:37:1b:73:13:ed: ee:30:0c:35:a9:eb:f2:c0:90:83:28:74:79:f4:c7: 2f:f6:d4:ec:07:31:65:20:8d:32:b5:a8:6e:e7:74: e9:9d:13:76:00:59:d3:de:e4:f8:8e:ba:3f:86:22: a3:7f:85:1f:41:a6:a3:b0:9e:b2:eb:1c:56:c3:b1: 4c:5b:00:ec:6f:6a:98:16:5f:a5:85:76:49:bf:09: b0:cc:72:67:44:03:7c:02:f2:af:60:6a:e5:3f:c2: c5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:31:F1:5D:31:20:86:4E:21:14:3E:2A:4B:EC:8E:5C:24:34:4B:40 X509v3 Authority Key Identifier: keyid:7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:76:81:84:51:d4:84:9d:01:fd:5b:ba:62:bf:7c:20:46:f2: 12:fc:a9:16:46:28:51:bd:99:d5:94:d4:17:fc:e9:49:35:cb: a3:67:78:1a:a9:8f:35:6e:26:2f:ca:98:da:9c:e5:91:1e:59: 22:f8:9e:09:0f:f5:83:a6:10:6a:c9:4e:57:fa:31:1e:c1:54: 5d:02:6d:28:a0:91:f5:7a:5f:4d:be:96:bf:d8:40:0d:0e:32: 82:72:6f:6a:43:15:f8:29:e6:36:62:b7:48:82:a1:af:63:30: 00:17:ae:eb:1c:3f:2c:0b:97:7d:7c:ee:96:d3:ee:5b:82:ef: 5e:c9:12:95:31:c3:99:2a:46:1a:11:0b:f8:c7:90:90:ab:a6: be:a1:2c:a4:eb:57:83:3b:d0:f4:31:77:cb:ef:63:af:98:45: f3:19:14:e3:19:18:c0:fa:5c:d8:c0:05:7f:1b:eb:ea:d9:41: 6a:a1:10:22:f2:b9:cb:23:7e:26:f5:26:40:f8:d9:c1:19:9a: 18:92:30:6b:f5:9b:39:20:8f:d0:b0:e3:29:a2:3c:0d:3d:b7: aa:73:68:93:3b:f1:47:df:2a:aa:22:01:ca:d5:e6:b0:18:7b: eb:be:06:08:bc:19:a4:6c:80:2b:7e:e4:d7:9e:2a:df:4b:54: 91:49:64:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7d5VgBCd4WAdXC0S+kfgZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlNjVkYWIyMzk0MGNiMzk0ZjlhYWE2NjRmZWE0ZDZmOGY0 MmUzMTgwHhcNMjYwMTI2MTgwMTE2WhcNMjYwMTI3MTgwMTE2WjAzMTEwLwYDVQQD EyhjMjMxZjE1ZDMxMjA4NjRlMjExNDNlMmE0YmVjOGU1YzI0MzQ0YjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6nYqZYBuXogsU5GIK8YY8q4cHz6 EsWj3/Z+gx6BYCXb7VflpDld9kNguvGGBSYtOhjRF4zp5RB1Eht47B/vDYjtrKWS 0nCIsc+cXmpIE13vg4vjy+T+LELQA+GxlL32J2iwPwQkkFtsPUTJcYVvM/wnzJnD LERTQAY0mwpkm4oCSehMrwPaAwaqnqIhGVTL3jEB70FGWRwzKDJc+A3xNxtzE+3u MAw1qevywJCDKHR59Mcv9tTsBzFlII0ytahu53TpnRN2AFnT3uT4jro/hiKjf4Uf QaajsJ6y6xxWw7FMWwDsb2qYFl+lhXZJvwmwzHJnRAN8AvKvYGrlP8LFtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMIx8V0xIIZOIRQ+KkvsjlwkNEtAMB8GA1UdIwQY MBaAFH5l2rI5QMs5T5qqZk/qTW+PQuMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZm1YYXNqbEF5emxQbXFwbVQtcE5iNDlDNHhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC81OGViYjEtZGJlYy00N2Y5LWJiOTYt ODQ5Y2ZjYWJiNjU3LzEvZm1YYXNqbEF5emxQbXFwbVQtcE5iNDlDNHhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC81OGViYjEtZGJlYy00N2Y5LWJiOTYtODQ5Y2ZjYWJiNjU3 LzEvZm1YYXNqbEF5emxQbXFwbVQtcE5iNDlDNHhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdHaBhFHU hJ0B/Vu6Yr98IEbyEvypFkYoUb2Z1ZTUF/zpSTXLo2d4GqmPNW4mL8qY2pzlkR5Z IvieCQ/1g6YQaslOV/oxHsFUXQJtKKCR9XpfTb6Wv9hADQ4ygnJvakMV+CnmNmK3 SIKhr2MwABeu6xw/LAuXfXzultPuW4LvXskSlTHDmSpGGhEL+MeQkKumvqEspOtX gzvQ9DF3y+9jr5hF8xkU4xkYwPpc2MAFfxvr6tlBaqEQIvK5yyN+JvUmQPjZwRma GJIwa/WbOSCP0LDjKaI8DT23qnNokzvxR98qqiIBytXmsBh7674GCLwZpGyAK37k 154q30tUkUlktQ== -----END CERTIFICATE-----Generated at Tue Jan 27 04:26:16 2026 by rpki-client