This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft File: _P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft (raw, json) Hash identifier: smSZlPWPPX0S4oV50KHJR7uqO06ODP2Mm0X1j0EFamQ= Subject key identifier: F9:3C:FA:91:9F:62:90:D9:25:7E:8C:47:DF:8C:40:34:F2:8E:28:73 Authority key identifier: FC:FE:26:F9:A7:B2:3F:BF:11:82:DE:62:C3:AD:52:27:60:C3:16:F4 Certificate issuer: /CN=fcfe26f9a7b23fbf1182de62c3ad522760c316f4 Certificate serial: 019BFB0A203751A116C66E12DF04FED0DA39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft Manifest number: 0EF3 Signing time: Mon 26 Jan 2026 16:01:43 +0000 Manifest this update: Mon 26 Jan 2026 16:01:43 +0000 Manifest next update: Tue 27 Jan 2026 16:01:43 +0000 Files and hashes: 1: _P4m-aeyP78Rgt5iw61SJ2DDFvQ.crl (hash: gORGSAovSksPG79Ig93A1gQZGmody8Y5hFo/ezHL6PA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft rsync://rpki.ripe.net/repository/DEFAULT/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:0a:20:37:51:a1:16:c6:6e:12:df:04:fe:d0:da:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcfe26f9a7b23fbf1182de62c3ad522760c316f4 Validity Not Before: Jan 26 16:01:43 2026 GMT Not After : Jan 27 16:01:43 2026 GMT Subject: CN=f93cfa919f6290d9257e8c47df8c4034f28e2873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:74:54:5d:4e:dd:39:bb:fc:5a:f4:c9:52:ef: 40:67:91:b8:48:ef:7d:e1:3a:9a:bd:5e:c9:48:9c: 91:36:e3:55:16:b0:f9:a6:b6:60:c7:ab:bc:26:e3: b0:94:11:1b:ce:a8:20:52:e3:a5:8f:92:cb:bf:1e: 2f:d4:df:25:97:40:ca:27:7a:0c:0d:b9:73:e6:ce: bc:70:fc:24:8c:26:fb:55:81:1e:c9:c6:9e:a2:05: 90:fb:7a:06:ff:42:cd:8a:e0:e7:a1:b4:cd:49:50: db:c4:6f:02:39:16:b8:42:71:b2:9b:71:77:f8:80: 28:62:95:95:95:62:e6:5b:db:ff:61:a2:13:a6:05: f7:63:78:48:ce:22:fd:84:e3:22:9a:d3:c7:64:8c: e4:9b:e3:6f:ec:52:fa:8e:17:55:fe:fd:13:84:45: 5a:ae:23:7e:44:78:2f:8d:2b:e0:49:cd:5e:72:6c: d5:d0:ee:33:48:41:87:ae:01:11:cf:27:4b:1a:f4: 4e:93:ad:17:aa:b5:5c:73:cb:6b:08:fb:7f:cc:1d: 03:20:b8:fd:53:35:77:1f:bf:b7:2e:ff:ae:98:2a: 24:3e:56:8d:82:ef:33:3e:6a:1b:5b:5c:13:1a:c5: 02:74:71:69:30:ef:13:89:ea:a6:fa:99:a1:ba:43: 3b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:3C:FA:91:9F:62:90:D9:25:7E:8C:47:DF:8C:40:34:F2:8E:28:73 X509v3 Authority Key Identifier: keyid:FC:FE:26:F9:A7:B2:3F:BF:11:82:DE:62:C3:AD:52:27:60:C3:16:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:4a:43:ac:e1:33:81:ed:52:44:d6:f3:64:dc:f3:ac:f0:f8: 70:6a:bb:60:ef:3c:3a:d7:11:c8:b3:e0:8d:3d:59:36:cb:87: 19:54:0e:f3:9d:47:fc:73:e6:33:d9:0e:82:88:67:5c:3e:b3: 72:1b:4c:de:7a:27:8a:f3:47:00:59:7f:53:05:29:b2:aa:2f: 60:6c:de:74:50:71:93:99:48:b0:c6:61:4b:12:e3:31:df:e4: e6:55:a4:ca:3e:43:cd:3f:f5:c8:e8:01:a5:d6:ed:27:ca:de: 61:19:a7:8e:35:78:2a:35:09:bc:f0:c9:e7:fd:38:e8:f8:78: bc:55:0d:68:9c:79:3f:59:38:bc:34:88:4e:d3:25:be:0b:dc: d3:8a:d5:a1:a6:65:ec:29:d3:f4:36:d6:1f:e4:1b:f7:5f:db: 17:55:18:d9:7a:88:08:1a:63:d8:39:52:ed:b4:95:3c:1d:1d: 77:aa:21:04:9e:16:a2:86:17:3a:e1:c8:53:ad:e2:a8:b2:b5: da:0f:f5:e2:f7:62:35:40:58:97:cf:a1:53:07:f5:06:b4:fb: 37:76:02:de:e0:99:bf:c6:2e:95:67:e3:0f:36:81:4c:65:4e: b8:20:72:94:91:d8:aa:f7:77:54:cc:37:92:95:68:d2:a0:39: 23:49:b8:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7CiA3UaEWxm4S3wT+0No5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjZmUyNmY5YTdiMjNmYmYxMTgyZGU2MmMzYWQ1MjI3NjBj MzE2ZjQwHhcNMjYwMTI2MTYwMTQzWhcNMjYwMTI3MTYwMTQzWjAzMTEwLwYDVQQD EyhmOTNjZmE5MTlmNjI5MGQ5MjU3ZThjNDdkZjhjNDAzNGYyOGUyODczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXRUXU7dObv8WvTJUu9AZ5G4SO99 4TqavV7JSJyRNuNVFrD5prZgx6u8JuOwlBEbzqggUuOlj5LLvx4v1N8ll0DKJ3oM Dblz5s68cPwkjCb7VYEeycaeogWQ+3oG/0LNiuDnobTNSVDbxG8CORa4QnGym3F3 +IAoYpWVlWLmW9v/YaITpgX3Y3hIziL9hOMimtPHZIzkm+Nv7FL6jhdV/v0ThEVa riN+RHgvjSvgSc1ecmzV0O4zSEGHrgERzydLGvROk60XqrVcc8trCPt/zB0DILj9 UzV3H7+3Lv+umCokPlaNgu8zPmobW1wTGsUCdHFpMO8Tieqm+pmhukM7XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPk8+pGfYpDZJX6MR9+MQDTyjihzMB8GA1UdIwQY MBaAFPz+Jvmnsj+/EYLeYsOtUidgwxb0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1A0bS1hZXlQNzhSZ3Q1aXc2MVNKMkRERnZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9lNzhkZWQtZTg5MC00MGQyLTk4ZTAt MzFhMzVkYjIwMWY5LzEvX1A0bS1hZXlQNzhSZ3Q1aXc2MVNKMkRERnZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9lNzhkZWQtZTg5MC00MGQyLTk4ZTAtMzFhMzVkYjIwMWY5 LzEvX1A0bS1hZXlQNzhSZ3Q1aXc2MVNKMkRERnZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI0pDrOEz ge1SRNbzZNzzrPD4cGq7YO88OtcRyLPgjT1ZNsuHGVQO851H/HPmM9kOgohnXD6z chtM3nonivNHAFl/UwUpsqovYGzedFBxk5lIsMZhSxLjMd/k5lWkyj5DzT/1yOgB pdbtJ8reYRmnjjV4KjUJvPDJ5/046Ph4vFUNaJx5P1k4vDSITtMlvgvc04rVoaZl 7CnT9DbWH+Qb91/bF1UY2XqICBpj2DlS7bSVPB0dd6ohBJ4WooYXOuHIU63iqLK1 2g/14vdiNUBYl8+hUwf1BrT7N3YC3uCZv8YulWfjDzaBTGVOuCBylJHYqvd3VMw3 kpVo0qA5I0m4CQ== -----END CERTIFICATE-----Generated at Mon Jan 26 21:08:29 2026 by rpki-client