This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft File: _iFRDnSlthGog2amTtL7jmAVQpM.mft (raw, json) Hash identifier: 4F4uZjcSVBkdNSEXHumPalbJHJ/mLwWV5ZSonsCPCMo= Subject key identifier: 06:F6:F4:C7:75:16:F6:CD:F7:8B:78:A5:8B:71:11:62:C7:70:6C:FB Authority key identifier: FE:21:51:0E:74:A5:B6:11:A8:83:66:A6:4E:D2:FB:8E:60:15:42:93 Certificate issuer: /CN=fe21510e74a5b611a88366a64ed2fb8e60154293 Certificate serial: 019BFB774E3CB60E96CCB49C9895675B01A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft Manifest number: 17EA Signing time: Mon 26 Jan 2026 18:00:58 +0000 Manifest this update: Mon 26 Jan 2026 18:00:58 +0000 Manifest next update: Tue 27 Jan 2026 18:00:58 +0000 Files and hashes: 1: VN6UE1yUAoIOdq7FN7_6LWg0xFQ.roa (hash: i1/itHXENkjfqquOuYnqwae8exirw7XvZQTu+xWF/aw=) 2: _iFRDnSlthGog2amTtL7jmAVQpM.crl (hash: c3dsV2gnHwaTyH98mIq0wmbaEMIKcBwd8OOHgfy/lsU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.crl rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:77:4e:3c:b6:0e:96:cc:b4:9c:98:95:67:5b:01:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe21510e74a5b611a88366a64ed2fb8e60154293 Validity Not Before: Jan 26 18:00:58 2026 GMT Not After : Jan 27 18:00:58 2026 GMT Subject: CN=06f6f4c77516f6cdf78b78a58b711162c7706cfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:68:68:14:f2:49:89:d5:77:da:85:2a:d2:c3: 8c:f0:a6:4e:73:36:a8:60:f9:fa:84:dc:08:60:39: 46:ef:f0:a4:be:50:30:6e:aa:eb:09:1e:4c:0e:1a: c7:49:f8:4f:e1:47:1a:b8:3b:16:8b:c9:c2:ce:72: 71:08:a3:aa:f0:93:c4:07:f5:2b:f1:3c:d2:9f:6e: 53:1b:ad:4a:d1:f3:6f:06:c6:b8:8c:95:fd:98:88: f4:b6:2b:74:6e:4d:bc:a3:a2:71:31:2a:d0:ac:19: c9:70:de:ad:73:19:2f:6b:77:ae:e6:f0:d6:bd:51: 09:05:e1:40:64:4a:12:23:70:1a:b8:52:e0:63:3d: b6:b6:a5:47:95:64:b7:08:4b:47:a4:8a:5f:88:78: e4:91:e2:e8:ba:71:7f:f7:98:a6:1b:cd:2e:41:fd: 14:90:84:2a:70:c1:c6:76:a0:59:95:57:7a:69:21: 3d:55:46:28:07:42:82:6f:55:20:d3:9d:1a:b2:b8: 43:fc:42:03:2a:6d:5b:0b:fb:4d:b6:0c:9d:23:6e: 86:c8:c8:33:4a:80:51:68:cf:a4:09:15:86:71:fc: 21:14:3d:64:66:6b:41:23:4b:cd:57:0e:3a:00:d4: c7:71:59:0e:bf:7a:8d:01:2f:12:26:c0:f2:6e:fe: a2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F6:F4:C7:75:16:F6:CD:F7:8B:78:A5:8B:71:11:62:C7:70:6C:FB X509v3 Authority Key Identifier: keyid:FE:21:51:0E:74:A5:B6:11:A8:83:66:A6:4E:D2:FB:8E:60:15:42:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:e9:cc:40:13:a2:20:39:c6:5a:4b:ec:dd:b8:0d:b9:a0:33: 82:2c:22:f0:7b:8b:99:3a:5a:72:aa:49:67:4f:45:f1:7b:56: 4b:49:23:a8:eb:bd:76:15:f4:f1:f7:a4:74:ad:5e:3d:05:d4: 09:81:a3:2a:ca:04:12:77:3a:60:f3:bf:44:1d:61:1a:a9:46: 3b:58:91:96:ba:bd:fa:03:ac:f9:aa:47:38:5e:09:eb:48:4f: ae:df:37:71:b6:00:a9:b4:bd:8d:24:b5:25:26:7a:4c:57:60: 86:f0:a2:dd:2d:eb:ee:06:2c:34:8b:7c:62:ef:2b:4f:8d:05: 8f:f0:3c:51:c0:39:20:68:cc:6d:df:f4:b9:af:82:27:6a:e3: 4a:95:35:b1:c7:90:ca:40:23:04:66:dd:9d:51:76:4e:92:d9: 4d:64:29:0a:aa:1b:e4:bd:59:29:8d:52:ee:ce:f4:a9:54:0d: ea:f2:9b:2c:f7:ed:71:4c:d2:7e:87:5d:ce:cf:e0:96:16:91: 99:b6:db:4c:c1:a6:47:15:1e:3e:5f:b2:ff:6d:e1:dd:34:ec: 61:3e:b4:55:08:1b:68:8b:8c:c2:85:23:82:00:9c:64:77:55: 56:f5:91:30:4f:c6:43:31:f2:ff:3e:2b:1f:5f:ce:37:f7:53: fb:b0:4f:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7d048tg6WzLScmJVnWwGgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlMjE1MTBlNzRhNWI2MTFhODgzNjZhNjRlZDJmYjhlNjAx NTQyOTMwHhcNMjYwMTI2MTgwMDU4WhcNMjYwMTI3MTgwMDU4WjAzMTEwLwYDVQQD EygwNmY2ZjRjNzc1MTZmNmNkZjc4Yjc4YTU4YjcxMTE2MmM3NzA2Y2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGhoFPJJidV32oUq0sOM8KZOczao YPn6hNwIYDlG7/CkvlAwbqrrCR5MDhrHSfhP4UcauDsWi8nCznJxCKOq8JPEB/Ur 8TzSn25TG61K0fNvBsa4jJX9mIj0tit0bk28o6JxMSrQrBnJcN6tcxkva3eu5vDW vVEJBeFAZEoSI3AauFLgYz22tqVHlWS3CEtHpIpfiHjkkeLounF/95imG80uQf0U kIQqcMHGdqBZlVd6aSE9VUYoB0KCb1Ug050asrhD/EIDKm1bC/tNtgydI26GyMgz SoBRaM+kCRWGcfwhFD1kZmtBI0vNVw46ANTHcVkOv3qNAS8SJsDybv6icQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAb29Md1FvbN94t4pYtxEWLHcGz7MB8GA1UdIwQY MBaAFP4hUQ50pbYRqINmpk7S+45gFUKTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2lGUkRuU2x0aEdvZzJhbVR0TDdqbUFWUXBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iM2MxOTMtY2VkMy00MzYyLWJiNmYt NTlkNjQ5YzBkYjVkLzEvX2lGUkRuU2x0aEdvZzJhbVR0TDdqbUFWUXBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9iM2MxOTMtY2VkMy00MzYyLWJiNmYtNTlkNjQ5YzBkYjVk LzEvX2lGUkRuU2x0aEdvZzJhbVR0TDdqbUFWUXBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy+nMQBOi IDnGWkvs3bgNuaAzgiwi8HuLmTpacqpJZ09F8XtWS0kjqOu9dhX08fekdK1ePQXU CYGjKsoEEnc6YPO/RB1hGqlGO1iRlrq9+gOs+apHOF4J60hPrt83cbYAqbS9jSS1 JSZ6TFdghvCi3S3r7gYsNIt8Yu8rT40Fj/A8UcA5IGjMbd/0ua+CJ2rjSpU1sceQ ykAjBGbdnVF2TpLZTWQpCqob5L1ZKY1S7s70qVQN6vKbLPftcUzSfoddzs/glhaR mbbbTMGmRxUePl+y/23h3TTsYT60VQgbaIuMwoUjggCcZHdVVvWRME/GQzHy/z4r H1/ON/dT+7BPWQ== -----END CERTIFICATE-----Generated at Mon Jan 26 22:11:37 2026 by rpki-client