This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft File: fFV1K31vznKGsaGi5DvIbUWE6D8.mft (raw, json) Hash identifier: +QQFGP69cN42S2+QsI1EVfPk8ttg+rOInpAGcgriaSc= Subject key identifier: 48:5A:E6:29:DB:70:5A:0E:D4:72:3C:23:C0:A0:3D:41:AD:51:3E:A6 Authority key identifier: 7C:55:75:2B:7D:6F:CE:72:86:B1:A1:A2:E4:3B:C8:6D:45:84:E8:3F Certificate issuer: /CN=7c55752b7d6fce7286b1a1a2e43bc86d4584e83f Certificate serial: 019BFF1D750E97C511AF13FF3D7474F80867 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fFV1K31vznKGsaGi5DvIbUWE6D8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft Manifest number: 0DA1 Signing time: Tue 27 Jan 2026 11:01:18 +0000 Manifest this update: Tue 27 Jan 2026 11:01:18 +0000 Manifest next update: Wed 28 Jan 2026 11:01:18 +0000 Files and hashes: 1: 3qd6ryJVoFRB650Q_vjYdE5FH3c.roa (hash: 9UIvBWdv4SEGNEIJba6xg1//2eKqhjadOAhSloqCY4U=) 2: fFV1K31vznKGsaGi5DvIbUWE6D8.crl (hash: 4ltHK6lZOzcC8IlZ+scFU850zSDuAbXzvuYmQqAmTkI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.crl rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft rsync://rpki.ripe.net/repository/DEFAULT/fFV1K31vznKGsaGi5DvIbUWE6D8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ff:1d:75:0e:97:c5:11:af:13:ff:3d:74:74:f8:08:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c55752b7d6fce7286b1a1a2e43bc86d4584e83f Validity Not Before: Jan 27 11:01:18 2026 GMT Not After : Jan 28 11:01:18 2026 GMT Subject: CN=485ae629db705a0ed4723c23c0a03d41ad513ea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:46:35:e4:09:0f:8f:0c:5a:da:7c:74:fd:cf: 74:a5:5b:23:c3:59:11:05:66:83:a6:ce:43:c8:f5: bd:b9:bd:00:bf:38:ab:5c:be:10:ef:d8:74:c1:f5: 79:2e:43:5f:07:7c:d1:3f:a9:db:6e:ce:f3:2b:92: 25:f5:cb:49:69:e4:e4:9c:69:1e:7b:a3:f3:2c:65: 8f:01:15:e5:cc:b1:63:71:0a:03:96:0e:e9:4f:1a: 25:67:be:f2:ba:07:12:b1:6b:8b:78:03:8a:64:f9: 37:31:b3:f8:ed:61:ea:23:a2:cb:b6:99:bd:ef:fc: ad:65:fb:1b:ec:f4:f8:62:67:3d:62:b4:44:55:e2: af:d4:9f:a7:67:f5:1f:96:01:de:2f:d1:c7:97:e4: 61:22:8d:38:b1:5e:ee:e8:c0:33:c8:30:54:ee:02: 86:a6:b1:a6:b6:77:39:aa:cb:2b:5a:c6:71:09:8b: 8f:fd:ea:f8:9f:56:3a:6f:d5:bd:d8:e5:22:cf:7f: 2d:28:07:5c:76:8f:1f:a2:50:42:f1:f4:b6:4e:7e: f0:97:ad:6a:3e:46:36:ff:20:3b:4e:4d:c7:89:72: 7c:bf:3a:12:f9:ee:d2:d5:04:3e:b9:32:90:bb:e0: 7a:4b:1f:5c:96:47:bd:fa:ba:5b:a2:f0:29:e6:8a: 0c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:5A:E6:29:DB:70:5A:0E:D4:72:3C:23:C0:A0:3D:41:AD:51:3E:A6 X509v3 Authority Key Identifier: keyid:7C:55:75:2B:7D:6F:CE:72:86:B1:A1:A2:E4:3B:C8:6D:45:84:E8:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fFV1K31vznKGsaGi5DvIbUWE6D8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:17:4c:b6:a6:a1:f5:d5:65:2b:27:3e:85:65:de:21:e5:a9: 4e:a8:8e:dc:85:fd:9c:40:64:92:e5:d0:e4:fa:37:85:3a:94: 08:2d:08:8b:08:29:a2:81:1e:25:c9:35:83:03:24:e0:79:6c: 57:c9:e6:04:69:e7:21:3e:ee:d0:4d:ff:a3:19:7c:d6:f3:08: 48:43:cb:91:46:ac:51:e4:eb:cf:aa:d0:9e:d4:b8:2d:34:23: 37:51:42:dd:8d:ec:40:d0:5d:32:9a:a2:77:2e:e6:05:14:f2: af:40:20:b9:57:9a:29:0c:60:73:16:7a:53:a9:81:73:72:6a: 7f:44:23:74:e1:a2:f0:b1:05:b9:b3:fa:67:9b:a8:59:d8:a5: db:e0:7b:c3:8e:0d:87:17:27:db:c1:09:e5:5c:2b:f5:cf:6c: 19:4c:47:52:b9:5c:6a:40:13:9d:8c:57:f4:e3:eb:5e:26:72: ca:f2:22:e1:13:56:82:b9:87:45:bb:75:92:a8:be:0c:ea:46: c1:30:71:28:dc:22:36:d1:97:ea:09:69:7d:cb:fe:cf:16:26: f6:ab:81:50:e1:e6:81:0b:34:4e:8d:00:93:f4:42:0e:9b:9d: dc:73:d7:64:2b:86:e0:57:d1:b1:3f:38:cc:e4:a5:b7:af:aa: db:cd:8d:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv/HXUOl8URrxP/PXR0+AhnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjNTU3NTJiN2Q2ZmNlNzI4NmIxYTFhMmU0M2JjODZkNDU4 NGU4M2YwHhcNMjYwMTI3MTEwMTE4WhcNMjYwMTI4MTEwMTE4WjAzMTEwLwYDVQQD Eyg0ODVhZTYyOWRiNzA1YTBlZDQ3MjNjMjNjMGEwM2Q0MWFkNTEzZWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkY15AkPjwxa2nx0/c90pVsjw1kR BWaDps5DyPW9ub0AvzirXL4Q79h0wfV5LkNfB3zRP6nbbs7zK5Il9ctJaeTknGke e6PzLGWPARXlzLFjcQoDlg7pTxolZ77yugcSsWuLeAOKZPk3MbP47WHqI6LLtpm9 7/ytZfsb7PT4Ymc9YrREVeKv1J+nZ/UflgHeL9HHl+RhIo04sV7u6MAzyDBU7gKG prGmtnc5qssrWsZxCYuP/er4n1Y6b9W92OUiz38tKAdcdo8folBC8fS2Tn7wl61q PkY2/yA7Tk3HiXJ8vzoS+e7S1QQ+uTKQu+B6Sx9clke9+rpbovAp5ooMYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEha5inbcFoO1HI8I8CgPUGtUT6mMB8GA1UdIwQY MBaAFHxVdSt9b85yhrGhouQ7yG1FhOg/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkZWMUszMXZ6bktHc2FHaTVEdkliVVdFNkQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8zNGUwNzYtNTk4OS00MDJkLTk2ZGUt ZTg4Njk1ZmRkNmU1LzEvZkZWMUszMXZ6bktHc2FHaTVEdkliVVdFNkQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My8zNGUwNzYtNTk4OS00MDJkLTk2ZGUtZTg4Njk1ZmRkNmU1 LzEvZkZWMUszMXZ6bktHc2FHaTVEdkliVVdFNkQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHhdMtqah 9dVlKyc+hWXeIeWpTqiO3IX9nEBkkuXQ5Po3hTqUCC0IiwgpooEeJck1gwMk4Hls V8nmBGnnIT7u0E3/oxl81vMISEPLkUasUeTrz6rQntS4LTQjN1FC3Y3sQNBdMpqi dy7mBRTyr0AguVeaKQxgcxZ6U6mBc3Jqf0QjdOGi8LEFubP6Z5uoWdil2+B7w44N hxcn28EJ5Vwr9c9sGUxHUrlcakATnYxX9OPrXiZyyvIi4RNWgrmHRbt1kqi+DOpG wTBxKNwiNtGX6glpfcv+zxYm9quBUOHmgQs0To0Ak/RCDpud3HPXZCuG4FfRsT84 zOSlt6+q282Nlw== -----END CERTIFICATE-----Generated at Tue Jan 27 12:44:22 2026 by rpki-client