This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft File: _2mO6y5J_LX5xlqZhXrynOBmQdk.mft (raw, json) Hash identifier: RmwuDkCbcj7C8yz2rjcQQdZRruh4VjCjuR5zrDCBGiE= Subject key identifier: B2:6F:84:4B:E9:A0:FE:A2:01:99:CB:81:DD:54:50:65:52:EF:DC:06 Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 Certificate issuer: /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Certificate serial: 019BFE0AE901E2D8E3738EA4FEC0C3979C4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft Manifest number: 17FB Signing time: Tue 27 Jan 2026 06:01:26 +0000 Manifest this update: Tue 27 Jan 2026 06:01:26 +0000 Manifest next update: Wed 28 Jan 2026 06:01:26 +0000 Files and hashes: 1: 1S2b0qfA-tzXPijJ9Qx0uZkaVHY.roa (hash: YEqko0/rX2ob+3AZDq3uooNVJSO5Y7pQBV9N/OfoJ0U=) 2: 8A3g6hd04la3Px2TyuTjfHWXmdY.roa (hash: iwl9hWmxy1BIkyJmP1xReY7WIyqXtDNFiAQ47HDp3qA=) 3: CutVr_X7gS8lDaDuNw9F7uzem1c.roa (hash: A1mIXRTWd/wu1bWANlXDqimnRKUXOgou4evCbpodPm0=) 4: E3TSZxhxz52fsgneQ6hYKE9lnR0.roa (hash: Jo3p0YGshAOZXbJIFqjcNfVnpH22iKmlH4Gttc0OVQE=) 5: NAZAaNdWKeXHuv43xyaeXGZkj24.roa (hash: 7OpOUts+KUACTRn/Jnhi/5hlzxiHmq7rQOZw5wD3ZMs=) 6: VHaZ9xAWUz6t5_O77Zl57zRscxg.roa (hash: 2yv7yBBLi6h8Nduk7IpZ8p6TZNV35NVDX377GsAgTP4=) 7: _2mO6y5J_LX5xlqZhXrynOBmQdk.crl (hash: sDUKDteRQnsZ8M49TE9CQAwY21lB3hf7yp3SaiCXiuc=) 8: cYY9JWownI4dxUC113BsmeB-bPg.asa (hash: mzYcpAgDjivMiDigXGlTibFV5zqA/T/HUHr0MSI0Bk4=) 9: fxCBjLdqX_evkWfiqAm6qjLArlI.roa (hash: tk7gywwYFiYzZLlhE1m73NGnM9inNgbBSNjaCbvZCNY=) 10: hRI7RDa7PGK-ctecQ63wDq0HUqI.roa (hash: tUVamYyn9duDeEqDyKxRIvl+qRN9U3COd67wexVVyLs=) 11: iaTyWoYRTwRbH-8Asj0TijaPuO4.asa (hash: Z8zpBbBj2fntekitrlPrQF77k8Fhh9yLKV2dUy8NxuU=) 12: lPRgjXUJLzaOBHI1Ar3B6SKFErU.asa (hash: fjbHrRsPWcRvcVzpQntP9+B1NmK4Bi2Amk0MUakU4gE=) 13: z8lBi3aAEOzIA4rjFoQW2NBYnGI.roa (hash: WkLdmUjUmDG0OM0nogJaG3cgrVGCp28qMqMnj28ytDQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:0a:e9:01:e2:d8:e3:73:8e:a4:fe:c0:c3:97:9c:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Validity Not Before: Jan 27 06:01:26 2026 GMT Not After : Jan 28 06:01:26 2026 GMT Subject: CN=b26f844be9a0fea20199cb81dd54506552efdc06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d1:12:a1:41:f4:87:be:6e:db:9c:be:e9:25: 6f:37:18:6d:19:15:18:99:83:79:ff:88:a2:97:77: c4:97:4c:05:a0:40:62:55:ac:06:f1:a6:c1:4f:81: 48:71:ee:9f:17:0a:5a:9b:2b:45:53:4f:50:ad:72: e3:97:98:99:68:a9:aa:c8:4c:3c:b4:4d:e4:b0:c0: 99:c9:11:58:0f:dd:d1:d1:dd:f8:f2:93:30:62:9b: c1:4c:f8:6b:e9:92:c1:d3:fc:dc:28:dd:43:30:9f: 47:2c:b4:39:6d:61:bd:14:28:d2:8d:7a:6e:61:19: 0c:dd:1a:41:7d:76:54:28:a7:92:35:6b:b5:82:81: 32:46:04:58:15:eb:38:4f:e6:9e:c3:a3:da:3e:81: ee:d8:4a:89:0c:24:2b:dc:59:b1:86:e5:6a:5d:af: b8:d0:f0:a9:70:3c:6c:54:f6:d1:6c:40:31:09:50: 23:6e:6b:e9:f7:18:fd:4a:cc:58:79:ed:4e:1b:7a: ae:31:92:6a:e0:c2:ed:6c:64:94:08:fa:fa:94:3c: bf:07:63:83:ba:3a:26:6a:31:92:69:80:40:4c:97: d6:c4:e6:e0:f3:ed:b4:ce:3e:46:93:91:23:4c:0d: ac:a8:80:8e:50:48:fe:9e:19:1d:3d:f4:3e:93:a8: a3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:6F:84:4B:E9:A0:FE:A2:01:99:CB:81:DD:54:50:65:52:EF:DC:06 X509v3 Authority Key Identifier: keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:27:49:e5:27:d2:e0:e4:3d:ba:ce:7a:94:19:3a:11:32:02: 5f:f5:86:54:f6:4d:ac:7f:24:4e:16:41:2c:38:fc:d1:96:f2: ef:63:17:f3:73:a2:9a:24:6a:a3:ae:4d:aa:b8:1e:52:0c:d2: 54:1c:6f:ea:ba:00:34:91:42:3c:e6:fe:f1:0a:05:37:58:55: 66:5d:59:76:a9:ee:62:07:71:8c:ba:a3:85:fc:c7:4b:61:bc: 68:58:65:71:e4:12:fb:6b:85:2c:4e:41:e5:36:ce:6a:f1:6e: 73:81:bc:67:c3:32:40:c1:63:3f:30:bf:b7:c3:63:42:7c:52: 15:18:95:ff:a4:79:bd:d4:ad:7f:27:62:c0:df:c2:20:4d:e2: d4:42:38:87:63:7f:7b:c2:4f:13:b7:3c:38:69:fa:19:2d:f8: 5c:0f:d8:40:48:aa:96:9d:a7:6b:53:0c:88:12:6a:d5:09:c3: 4f:af:c9:f5:5e:4c:21:2a:c5:57:c9:c3:7c:81:05:26:f8:fe: 9f:88:c9:a5:58:5c:9e:b5:fd:d0:a4:d8:68:a0:24:94:67:ca: 77:e7:e5:ec:26:7a:8a:62:c4:63:e7:c3:7a:ba:b9:cf:1d:b4: 47:0e:a1:ec:8f:47:af:bb:48:0b:fd:43:e4:d5:bf:e9:12:25: f2:61:24:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+CukB4tjjc46k/sDDl5xNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNjk4ZWViMmU0OWZjYjVmOWM2NWE5OTg1N2FmMjljZTA2 NjQxZDkwHhcNMjYwMTI3MDYwMTI2WhcNMjYwMTI4MDYwMTI2WjAzMTEwLwYDVQQD EyhiMjZmODQ0YmU5YTBmZWEyMDE5OWNiODFkZDU0NTA2NTUyZWZkYzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29ESoUH0h75u25y+6SVvNxhtGRUY mYN5/4iil3fEl0wFoEBiVawG8abBT4FIce6fFwpamytFU09QrXLjl5iZaKmqyEw8 tE3ksMCZyRFYD93R0d348pMwYpvBTPhr6ZLB0/zcKN1DMJ9HLLQ5bWG9FCjSjXpu YRkM3RpBfXZUKKeSNWu1goEyRgRYFes4T+aew6PaPoHu2EqJDCQr3FmxhuVqXa+4 0PCpcDxsVPbRbEAxCVAjbmvp9xj9SsxYee1OG3quMZJq4MLtbGSUCPr6lDy/B2OD ujomajGSaYBATJfWxObg8+20zj5Gk5EjTA2sqICOUEj+nhkdPfQ+k6ijuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLJvhEvpoP6iAZnLgd1UUGVS79wGMB8GA1UdIwQY MBaAFP9pjusuSfy1+cZamYV68pzgZkHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4Mzkt NTdjZDY4ZDljYjRlLzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4MzktNTdjZDY4ZDljYjRl LzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaidJ5SfS 4OQ9us56lBk6ETICX/WGVPZNrH8kThZBLDj80Zby72MX83OimiRqo65NqrgeUgzS VBxv6roANJFCPOb+8QoFN1hVZl1ZdqnuYgdxjLqjhfzHS2G8aFhlceQS+2uFLE5B 5TbOavFuc4G8Z8MyQMFjPzC/t8NjQnxSFRiV/6R5vdStfydiwN/CIE3i1EI4h2N/ e8JPE7c8OGn6GS34XA/YQEiqlp2na1MMiBJq1QnDT6/J9V5MISrFV8nDfIEFJvj+ n4jJpVhcnrX90KTYaKAklGfKd+fl7CZ6imLEY+fDerq5zx20Rw6h7I9Hr7tIC/1D 5NW/6RIl8mEkbg== -----END CERTIFICATE-----Generated at Tue Jan 27 08:29:42 2026 by rpki-client