This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft File: RfnjL_avPV5dd727mNo30LjkRRk.mft (raw, json) Hash identifier: zBl/cWxCaG77+A5pTdWEQ9xMsAxW9dbKZgSirBeRvYo= Subject key identifier: 36:59:A0:7F:F5:27:AD:E8:09:63:07:B5:FC:F8:D5:09:41:EA:AD:BE Authority key identifier: 45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19 Certificate issuer: /CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519 Certificate serial: 019BFEAF87E74F8B6AD9E19667ED41233639 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft Manifest number: 17FA Signing time: Tue 27 Jan 2026 09:01:14 +0000 Manifest this update: Tue 27 Jan 2026 09:01:14 +0000 Manifest next update: Wed 28 Jan 2026 09:01:14 +0000 Files and hashes: 1: D7Zsy3_mNU8-Rm51FRQcQWy9iSc.roa (hash: kXrPaU3rwx6WqBxRjuiwz4FcrTzXvZxG60BJrqQyazs=) 2: RfnjL_avPV5dd727mNo30LjkRRk.crl (hash: wObjhX54kDi4kD7MSUsJRVChOyGVnkB7IrJoQrKtED8=) 3: kPNoJ23SEMgM36-Kve6SFHJ4YQc.roa (hash: 30xbJhQ1SB3jxREvAyTeR9kTXJRiZHorpyWtjMtAYcI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.crl rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:af:87:e7:4f:8b:6a:d9:e1:96:67:ed:41:23:36:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519 Validity Not Before: Jan 27 09:01:14 2026 GMT Not After : Jan 28 09:01:14 2026 GMT Subject: CN=3659a07ff527ade8096307b5fcf8d50941eaadbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bd:5c:b3:33:86:b6:a5:10:cb:1c:04:61:f9: 96:8c:39:bd:fa:15:f9:de:a4:6f:cf:8b:2d:4e:1e: a8:73:fd:bc:93:4d:01:76:9a:f9:1d:d4:30:52:ed: f3:92:1a:cf:86:a6:80:a5:6a:f4:a4:a6:e7:81:a0: e0:ea:97:56:83:9f:02:3a:01:c8:91:a8:30:ed:ef: 7a:f7:37:5b:14:00:4a:90:8c:31:89:b2:a5:69:9c: 6e:f0:92:45:a1:0f:89:11:96:c9:49:3c:63:16:96: a1:87:5c:48:af:43:78:ce:5e:2b:d1:be:9c:d9:2b: 0d:ea:32:d2:6e:fd:41:08:75:13:8d:f5:d0:d2:af: c8:f3:4d:7f:b5:d1:c9:be:08:1c:65:df:ba:96:9f: a7:64:34:bb:a4:11:17:82:bd:12:bf:94:39:12:69: b2:d4:40:ad:ea:c3:f7:8a:40:5e:27:14:4f:12:f9: ee:1d:d0:fe:b5:66:0a:86:bb:93:2a:f5:34:c1:ab: 7f:7c:e6:32:b1:9b:ce:de:1d:6f:be:df:14:12:5f: ec:a8:ad:6b:b2:9b:c0:29:d5:f4:11:94:00:b7:9b: c9:50:48:37:75:c3:ee:38:7d:95:5f:8c:bb:f0:12: 49:af:9b:5a:4f:2b:72:31:e5:d4:61:ea:0c:42:cd: 16:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:59:A0:7F:F5:27:AD:E8:09:63:07:B5:FC:F8:D5:09:41:EA:AD:BE X509v3 Authority Key Identifier: keyid:45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:8e:5e:07:72:dc:98:1f:52:85:3f:86:f1:4d:a9:67:2e:94: 64:8c:5f:be:2f:f0:b6:d3:9f:01:60:dc:f7:cc:d8:6f:ad:e1: 76:84:5e:95:5b:db:2c:66:ca:f6:04:a4:f2:c0:36:ed:7a:b8: 5a:eb:17:00:67:55:1d:8f:b4:06:85:93:31:82:4a:db:7c:67: 68:b9:6e:8b:d1:00:53:63:bd:9d:8c:c6:ff:65:0f:3d:cd:52: 4a:d6:28:cb:d9:72:4e:fd:0e:33:6b:56:35:31:24:26:99:6d: ae:a4:dc:6a:f7:de:d0:a3:96:71:cc:1e:15:fe:71:51:2a:7e: 0a:a1:55:34:c3:9e:ac:89:1b:10:2e:ae:57:80:4a:e9:7d:78: 6a:cd:94:ec:7d:fc:77:0e:22:14:a7:20:49:46:73:ae:a0:5b: 46:08:ca:a0:fa:78:9b:5d:7d:3f:d9:81:6c:7d:30:d3:6c:3d: d3:c9:78:41:2a:b4:35:3c:01:c9:47:c8:25:3b:12:2a:a9:37: 66:fe:6f:13:c2:7b:c2:45:15:e0:46:f2:14:ba:6e:e6:b7:04: d7:aa:23:64:6b:fa:41:8b:31:74:a4:ab:ec:eb:1d:0f:34:84: bf:3d:a6:57:1f:d8:42:66:74:02:6a:06:b1:a7:58:30:4f:a1: 17:16:b0:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+r4fnT4tq2eGWZ+1BIzY5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1ZjllMzJmZjZhZjNkNWU1ZDc3YmRiYjk4ZGEzN2QwYjhl NDQ1MTkwHhcNMjYwMTI3MDkwMTE0WhcNMjYwMTI4MDkwMTE0WjAzMTEwLwYDVQQD EygzNjU5YTA3ZmY1MjdhZGU4MDk2MzA3YjVmY2Y4ZDUwOTQxZWFhZGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzb1cszOGtqUQyxwEYfmWjDm9+hX5 3qRvz4stTh6oc/28k00Bdpr5HdQwUu3zkhrPhqaApWr0pKbngaDg6pdWg58COgHI kagw7e969zdbFABKkIwxibKlaZxu8JJFoQ+JEZbJSTxjFpahh1xIr0N4zl4r0b6c 2SsN6jLSbv1BCHUTjfXQ0q/I801/tdHJvggcZd+6lp+nZDS7pBEXgr0Sv5Q5Emmy 1ECt6sP3ikBeJxRPEvnuHdD+tWYKhruTKvU0wat/fOYysZvO3h1vvt8UEl/sqK1r spvAKdX0EZQAt5vJUEg3dcPuOH2VX4y78BJJr5taTytyMeXUYeoMQs0WQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDZZoH/1J63oCWMHtfz41QlB6q2+MB8GA1UdIwQY MBaAFEX54y/2rz1eXXe9u5jaN9C45EUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmZuakxfYXZQVjVkZDcyN21ObzMwTGprUlJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC85ZGVmMDgtNzU1Mi00YjVhLTk2NmYt OGVlMGExMmEzNTliLzEvUmZuakxfYXZQVjVkZDcyN21ObzMwTGprUlJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC85ZGVmMDgtNzU1Mi00YjVhLTk2NmYtOGVlMGExMmEzNTli LzEvUmZuakxfYXZQVjVkZDcyN21ObzMwTGprUlJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWY5eB3Lc mB9ShT+G8U2pZy6UZIxfvi/wttOfAWDc98zYb63hdoRelVvbLGbK9gSk8sA27Xq4 WusXAGdVHY+0BoWTMYJK23xnaLlui9EAU2O9nYzG/2UPPc1SStYoy9lyTv0OM2tW NTEkJpltrqTcavfe0KOWccweFf5xUSp+CqFVNMOerIkbEC6uV4BK6X14as2U7H38 dw4iFKcgSUZzrqBbRgjKoPp4m119P9mBbH0w02w908l4QSq0NTwByUfIJTsSKqk3 Zv5vE8J7wkUV4EbyFLpu5rcE16ojZGv6QYsxdKSr7OsdDzSEvz2mVx/YQmZ0AmoG sadYME+hFxawiA== -----END CERTIFICATE-----Generated at Tue Jan 27 16:07:45 2026 by rpki-client