This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft File: f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft (raw, json) Hash identifier: MZBTUCgu1CBXSqsRaTU6DXFAi+jXZuChuG9v3mhEFYc= Subject key identifier: 14:7C:94:71:DF:9E:BB:85:64:AA:B2:89:74:00:2C:2E:BF:D9:DC:C0 Authority key identifier: 7F:56:89:DE:4A:7C:E7:68:BF:3A:B5:D9:F8:54:6E:85:6C:CB:19:36 Certificate issuer: /CN=7f5689de4a7ce768bf3ab5d9f8546e856ccb1936 Certificate serial: 019BF91B77AE65E84099F7566CCBEBAD2009 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1aJ3kp852i_OrXZ-FRuhWzLGTY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft Manifest number: 17EA Signing time: Mon 26 Jan 2026 07:01:25 +0000 Manifest this update: Mon 26 Jan 2026 07:01:25 +0000 Manifest next update: Tue 27 Jan 2026 07:01:25 +0000 Files and hashes: 1: BJI09oTntpyA_R-i8tfSB2MFaSE.roa (hash: BZK3sECoqLCGouNoMBVSC4IiRqublRHBZMNuAsbtmxY=) 2: f1aJ3kp852i_OrXZ-FRuhWzLGTY.crl (hash: fAc4x6u8h4R1iPPkpjBwt34HvJIn/YuftQSxjoskx04=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.crl rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft rsync://rpki.ripe.net/repository/DEFAULT/f1aJ3kp852i_OrXZ-FRuhWzLGTY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:77:ae:65:e8:40:99:f7:56:6c:cb:eb:ad:20:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f5689de4a7ce768bf3ab5d9f8546e856ccb1936 Validity Not Before: Jan 26 07:01:25 2026 GMT Not After : Jan 27 07:01:25 2026 GMT Subject: CN=147c9471df9ebb8564aab28974002c2ebfd9dcc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:31:ac:94:5b:fb:84:c0:2e:e1:74:cc:c4:6a: fa:1a:99:ad:eb:5e:af:a6:20:28:fe:db:ee:80:53: d6:dd:31:fe:ad:0f:6a:e6:d8:39:8b:d0:a9:bb:11: 2d:16:fc:93:4d:fe:6c:27:b7:03:d9:84:b0:57:fe: be:c5:34:91:3a:5c:9c:f5:58:89:e3:14:9a:f2:5e: 6a:62:e1:73:38:02:d8:0f:d1:ec:78:b4:75:06:23: 27:a0:7e:74:73:9a:af:af:b2:8f:23:af:51:73:ac: 17:15:29:58:24:0a:b0:99:d1:6d:72:d7:6c:9e:fe: 0f:0f:cd:06:66:24:4e:22:27:2e:2f:ca:c5:57:f9: 24:cc:39:ff:e9:65:48:27:03:7e:8f:0d:dc:39:be: da:89:e3:d5:3c:11:a0:53:2c:2a:f0:5b:81:af:54: 2a:ac:0e:2c:80:fc:d6:ad:a9:e1:7b:41:cb:c4:c1: 3a:55:90:6b:3d:f9:d3:b8:05:a5:41:57:88:5b:f0: f2:33:52:d6:39:29:a9:f7:80:19:b4:75:9e:ec:04: 8b:44:2f:bb:9d:a7:d0:86:7e:6a:1f:99:3c:54:d2: 7c:29:64:a7:eb:87:c1:9c:8e:5e:2c:fb:52:a4:f7: 06:a3:c2:c0:01:3e:97:08:1e:ce:4f:76:bb:61:94: 91:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:7C:94:71:DF:9E:BB:85:64:AA:B2:89:74:00:2C:2E:BF:D9:DC:C0 X509v3 Authority Key Identifier: keyid:7F:56:89:DE:4A:7C:E7:68:BF:3A:B5:D9:F8:54:6E:85:6C:CB:19:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1aJ3kp852i_OrXZ-FRuhWzLGTY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:6d:11:16:50:bc:c4:e6:90:c5:69:ee:92:36:88:58:99:3b: de:6f:3d:ae:0a:01:2a:79:d8:7d:1d:df:63:d5:da:2b:02:82: 19:84:85:ce:2c:9e:5a:7c:46:db:4d:30:26:63:65:53:74:ec: ad:12:d4:09:b8:a2:c9:56:64:14:d2:d5:03:57:40:f8:7f:a5: 18:91:61:d7:24:20:de:68:7e:67:27:d9:ba:a9:59:51:12:f3: 93:d3:9e:a7:66:e3:a7:a0:a5:1e:51:a5:58:c2:cc:f0:60:18: 91:ba:3a:40:86:69:a3:a7:13:2b:22:72:5d:3f:7e:d3:a9:30: 81:57:fc:4b:62:f0:34:81:6b:b8:be:9b:c9:b8:f6:fb:04:3e: 3c:a1:f9:cd:32:e2:5b:6b:2a:f7:76:e8:0d:a4:0a:7e:35:55: 91:72:e2:af:60:fc:23:b5:82:bb:85:8c:13:bf:12:b3:19:45: 1c:16:24:25:d4:a8:17:37:52:44:ab:2f:1c:76:2a:55:da:a2: e6:c0:81:02:a6:ed:b8:89:62:9b:eb:61:d4:33:14:a4:af:2b: 96:d0:3e:bc:7a:02:b2:bd:86:cf:c8:c4:33:c1:d0:0a:43:55: 93:5e:ab:6c:05:9b:d2:62:69:ca:27:0e:4d:a7:f1:9d:43:7b: e7:e8:f7:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5G3euZehAmfdWbMvrrSAJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNTY4OWRlNGE3Y2U3NjhiZjNhYjVkOWY4NTQ2ZTg1NmNj YjE5MzYwHhcNMjYwMTI2MDcwMTI1WhcNMjYwMTI3MDcwMTI1WjAzMTEwLwYDVQQD EygxNDdjOTQ3MWRmOWViYjg1NjRhYWIyODk3NDAwMmMyZWJmZDlkY2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDGslFv7hMAu4XTMxGr6Gpmt616v piAo/tvugFPW3TH+rQ9q5tg5i9CpuxEtFvyTTf5sJ7cD2YSwV/6+xTSROlyc9ViJ 4xSa8l5qYuFzOALYD9HseLR1BiMnoH50c5qvr7KPI69Rc6wXFSlYJAqwmdFtctds nv4PD80GZiROIicuL8rFV/kkzDn/6WVIJwN+jw3cOb7aiePVPBGgUywq8FuBr1Qq rA4sgPzWranhe0HLxME6VZBrPfnTuAWlQVeIW/DyM1LWOSmp94AZtHWe7ASLRC+7 nafQhn5qH5k8VNJ8KWSn64fBnI5eLPtSpPcGo8LAAT6XCB7OT3a7YZSROwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBR8lHHfnruFZKqyiXQALC6/2dzAMB8GA1UdIwQY MBaAFH9Wid5KfOdovzq12fhUboVsyxk2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjFhSjNrcDg1MmlfT3JYWi1GUnVoV3pMR1RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny82NGQ1MDUtMjIwNC00ZGNhLWE5NWUt OGI1MzcyNTg0YWNkLzEvZjFhSjNrcDg1MmlfT3JYWi1GUnVoV3pMR1RZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny82NGQ1MDUtMjIwNC00ZGNhLWE5NWUtOGI1MzcyNTg0YWNk LzEvZjFhSjNrcDg1MmlfT3JYWi1GUnVoV3pMR1RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUW0RFlC8 xOaQxWnukjaIWJk73m89rgoBKnnYfR3fY9XaKwKCGYSFziyeWnxG200wJmNlU3Ts rRLUCbiiyVZkFNLVA1dA+H+lGJFh1yQg3mh+ZyfZuqlZURLzk9Oep2bjp6ClHlGl WMLM8GAYkbo6QIZpo6cTKyJyXT9+06kwgVf8S2LwNIFruL6bybj2+wQ+PKH5zTLi W2sq93boDaQKfjVVkXLir2D8I7WCu4WME78SsxlFHBYkJdSoFzdSRKsvHHYqVdqi 5sCBAqbtuIlim+th1DMUpK8rltA+vHoCsr2Gz8jEM8HQCkNVk16rbAWb0mJpyicO TafxnUN75+j3Jw== -----END CERTIFICATE-----Generated at Mon Jan 26 15:39:29 2026 by rpki-client