This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft File: fpBL1x1v50pnFo_ZE-gocidVtJQ.mft (raw, json) Hash identifier: WBepJsoyxLNMc9KENHqxWsoJr2hmRnhT4b9Mi+U4Apg= Subject key identifier: E8:B3:88:F0:4B:AB:9C:A6:55:23:6A:DB:8A:4F:C3:5A:06:05:DC:7B Authority key identifier: 7E:90:4B:D7:1D:6F:E7:4A:67:16:8F:D9:13:E8:28:72:27:55:B4:94 Certificate issuer: /CN=7e904bd71d6fe74a67168fd913e828722755b494 Certificate serial: 019BF951F2FE4C4B3E2B02CC80CD7D888EE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fpBL1x1v50pnFo_ZE-gocidVtJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft Manifest number: 08B2 Signing time: Mon 26 Jan 2026 08:00:55 +0000 Manifest this update: Mon 26 Jan 2026 08:00:55 +0000 Manifest next update: Tue 27 Jan 2026 08:00:55 +0000 Files and hashes: 1: OJzGcjKcWBttWOSEl00EzIw2eSo.roa (hash: WpkGS5n3qr7ItAnomtxJOBjcvjZ+Y7UVUlP7YBtoJOg=) 2: fpBL1x1v50pnFo_ZE-gocidVtJQ.crl (hash: ImsUMKNRBkRNhpMFDgvxsy9xm+gJ7CXza/FBEZgepfQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/fpBL1x1v50pnFo_ZE-gocidVtJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:51:f2:fe:4c:4b:3e:2b:02:cc:80:cd:7d:88:8e:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e904bd71d6fe74a67168fd913e828722755b494 Validity Not Before: Jan 26 08:00:55 2026 GMT Not After : Jan 27 08:00:55 2026 GMT Subject: CN=e8b388f04bab9ca655236adb8a4fc35a0605dc7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:86:2e:07:26:47:b3:7f:13:ca:35:f7:17:fe: b6:79:07:37:d3:71:12:af:c6:d3:bb:73:bf:eb:26: b6:36:1b:31:c5:8d:0c:ef:3e:b9:82:e9:5a:23:67: 7a:83:9d:86:0f:05:14:67:a4:95:93:00:f3:dc:54: 6e:f9:57:4e:9f:f9:a3:76:3f:f4:5b:70:2c:62:01: 55:eb:2e:90:a5:b4:51:b8:78:2e:f3:20:e2:40:ba: 13:e9:e4:f7:06:a6:31:04:89:2e:e4:08:e7:ce:ad: 70:5e:bc:1f:d3:8d:82:c5:3d:8e:f1:4f:d6:57:59: 2e:67:7c:79:02:42:2c:a8:3c:7e:83:89:17:ca:41: ee:d9:e5:94:f4:c4:67:08:8c:7b:5f:53:a6:8c:c4: af:3a:51:a5:4c:ad:5f:7d:97:42:04:05:e3:ad:fa: 87:25:c5:b0:c3:92:61:59:0c:b5:b3:32:42:d0:60: 59:4d:67:f3:21:b5:67:f4:a5:c7:db:10:24:ba:1b: 8d:5f:69:f1:15:5e:ee:c4:06:39:ab:6b:49:c8:50: b7:79:38:9a:40:e7:13:2c:01:95:e2:d7:81:51:bd: 60:9e:26:9f:0b:62:ee:71:e6:52:ac:bc:b8:9b:52: b8:52:46:7f:e5:ea:0e:0d:0f:33:69:a9:fd:08:d2: 83:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:B3:88:F0:4B:AB:9C:A6:55:23:6A:DB:8A:4F:C3:5A:06:05:DC:7B X509v3 Authority Key Identifier: keyid:7E:90:4B:D7:1D:6F:E7:4A:67:16:8F:D9:13:E8:28:72:27:55:B4:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpBL1x1v50pnFo_ZE-gocidVtJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:30:0a:47:79:69:dd:d9:2b:45:42:bf:89:ee:30:cc:a7:91: 2c:d7:80:44:16:df:31:60:54:df:75:8f:9a:0d:c6:b8:01:9c: ae:ed:a4:77:67:ac:93:88:c9:12:21:3b:ce:b6:b7:a5:3c:da: 92:dd:d0:ae:9d:0b:64:09:1c:ed:9c:df:f9:ab:b0:a2:3c:95: a6:db:83:3e:df:71:d0:3d:49:f3:98:23:8d:8a:86:7b:f1:c8: 14:18:ef:a7:5a:70:65:0a:9c:17:9e:4e:dc:be:6f:8d:7c:40: b5:18:b4:0c:13:4e:3c:5e:01:01:c0:39:7a:18:bc:db:db:66: ad:65:49:cd:e6:0b:4f:45:19:5d:0d:89:f7:60:46:45:ad:a4: 5e:4a:dc:74:62:1d:16:10:a8:94:55:2d:13:b5:6d:ad:87:b3: 1b:52:cb:44:5b:6d:64:d0:fc:36:5e:0a:bd:fe:d4:c6:88:7c: dd:1b:81:64:e0:ed:ce:ae:8c:5f:f2:09:84:a3:46:43:69:3e: 15:d3:93:65:b1:42:9d:5a:b2:5c:71:38:6a:c3:ce:f1:85:ba: 4e:79:65:16:ab:cc:b8:77:31:01:99:63:6d:cb:7e:e0:e7:ec: 69:de:34:ba:36:f9:0b:4f:4d:47:0b:c4:84:42:53:25:eb:19: 6b:a7:db:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5UfL+TEs+KwLMgM19iI7kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlOTA0YmQ3MWQ2ZmU3NGE2NzE2OGZkOTEzZTgyODcyMjc1 NWI0OTQwHhcNMjYwMTI2MDgwMDU1WhcNMjYwMTI3MDgwMDU1WjAzMTEwLwYDVQQD EyhlOGIzODhmMDRiYWI5Y2E2NTUyMzZhZGI4YTRmYzM1YTA2MDVkYzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIYuByZHs38TyjX3F/62eQc303ES r8bTu3O/6ya2NhsxxY0M7z65gulaI2d6g52GDwUUZ6SVkwDz3FRu+VdOn/mjdj/0 W3AsYgFV6y6QpbRRuHgu8yDiQLoT6eT3BqYxBIku5Ajnzq1wXrwf042CxT2O8U/W V1kuZ3x5AkIsqDx+g4kXykHu2eWU9MRnCIx7X1OmjMSvOlGlTK1ffZdCBAXjrfqH JcWww5JhWQy1szJC0GBZTWfzIbVn9KXH2xAkuhuNX2nxFV7uxAY5q2tJyFC3eTia QOcTLAGV4teBUb1gniafC2LuceZSrLy4m1K4UkZ/5eoODQ8zaan9CNKDjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOiziPBLq5ymVSNq24pPw1oGBdx7MB8GA1UdIwQY MBaAFH6QS9cdb+dKZxaP2RPoKHInVbSUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnBCTDF4MXY1MHBuRm9fWkUtZ29jaWRWdEpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yZjEyNjQtMjNlOC00MmUwLTgzNjQt NGYzODJjYmI1OWYyLzEvZnBCTDF4MXY1MHBuRm9fWkUtZ29jaWRWdEpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8yZjEyNjQtMjNlOC00MmUwLTgzNjQtNGYzODJjYmI1OWYy LzEvZnBCTDF4MXY1MHBuRm9fWkUtZ29jaWRWdEpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlzAKR3lp 3dkrRUK/ie4wzKeRLNeARBbfMWBU33WPmg3GuAGcru2kd2esk4jJEiE7zra3pTza kt3Qrp0LZAkc7Zzf+auwojyVptuDPt9x0D1J85gjjYqGe/HIFBjvp1pwZQqcF55O 3L5vjXxAtRi0DBNOPF4BAcA5ehi829tmrWVJzeYLT0UZXQ2J92BGRa2kXkrcdGId FhColFUtE7VtrYezG1LLRFttZND8Nl4Kvf7Uxoh83RuBZODtzq6MX/IJhKNGQ2k+ FdOTZbFCnVqyXHE4asPO8YW6TnllFqvMuHcxAZljbct+4Ofsad40ujb5C09NRwvE hEJTJesZa6fbbQ== -----END CERTIFICATE-----Generated at Mon Jan 26 18:23:23 2026 by rpki-client