This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft File: fZ4KWRzFKRTMcA44de11qR7JjCg.mft (raw, json) Hash identifier: jpqQkjRgagiYsDr7zo2UJoyKCO08GM9S5l7rRMI9uZw= Subject key identifier: 51:8B:17:E2:5A:64:B9:DE:FC:91:EB:03:FE:91:ED:23:6C:58:8B:C4 Authority key identifier: 7D:9E:0A:59:1C:C5:29:14:CC:70:0E:38:75:ED:75:A9:1E:C9:8C:28 Certificate issuer: /CN=7d9e0a591cc52914cc700e3875ed75a91ec98c28 Certificate serial: 019C040CB0DD03362591D84DDCB4A3FC9DB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft Manifest number: 17F4 Signing time: Wed 28 Jan 2026 10:01:06 +0000 Manifest this update: Wed 28 Jan 2026 10:01:06 +0000 Manifest next update: Thu 29 Jan 2026 10:01:06 +0000 Files and hashes: 1: fZ4KWRzFKRTMcA44de11qR7JjCg.crl (hash: FBQobWgyA0v1X04Ok5eGxEt1Y5tba2CdKx6kgxIz++o=) 2: yaf29NVIhqCdkvttoww7qyjFE_A.roa (hash: irGoc61alZ1PWSj6VyeZR9D2OQ0SUu0n7A530YUuqMw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 10:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:04:0c:b0:dd:03:36:25:91:d8:4d:dc:b4:a3:fc:9d:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d9e0a591cc52914cc700e3875ed75a91ec98c28 Validity Not Before: Jan 28 10:01:06 2026 GMT Not After : Jan 29 10:01:06 2026 GMT Subject: CN=518b17e25a64b9defc91eb03fe91ed236c588bc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c9:64:4a:1d:b8:02:87:a9:ec:12:97:9e:4a: 05:54:39:04:0a:ff:fa:a4:13:f3:e3:61:a7:8e:b3: 2c:9e:df:97:78:fd:6b:c6:bc:d0:60:e8:ba:5a:52: 70:21:fc:2b:dc:70:0d:9c:11:ce:68:21:c2:39:9b: ff:f6:0b:38:88:ff:b1:fc:e3:3c:e4:57:d8:e6:90: b5:dc:c6:39:ed:96:60:62:30:ef:17:cf:72:d0:dd: 3a:1b:16:07:da:b0:46:30:88:b6:27:52:02:42:35: 31:27:f5:77:56:66:20:bb:73:0e:96:24:5a:43:13: 86:6b:21:3c:f6:b0:c7:ad:1b:52:f5:94:77:6a:f1: 8b:5f:0b:83:40:0e:41:91:36:22:73:e5:cf:14:ad: b5:a3:dc:21:88:98:4f:0f:ac:2f:33:03:6e:b6:ff: 29:b5:4d:44:28:a4:0b:ab:e4:f5:99:95:ff:3b:fc: f6:86:1f:97:3d:91:b4:ef:22:4a:21:38:e1:a3:62: 54:ff:70:3e:0a:a3:7f:c1:ac:b4:58:0c:d4:8d:10: a3:f5:90:fe:a2:62:b7:7a:a3:d8:a3:7c:e8:4a:2b: d7:58:3c:a8:71:6d:06:bc:80:f1:85:a5:50:8b:56: 37:b7:ec:9d:27:a2:9d:69:bd:f0:2e:44:4c:70:36: bb:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:8B:17:E2:5A:64:B9:DE:FC:91:EB:03:FE:91:ED:23:6C:58:8B:C4 X509v3 Authority Key Identifier: keyid:7D:9E:0A:59:1C:C5:29:14:CC:70:0E:38:75:ED:75:A9:1E:C9:8C:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:81:e9:7f:a7:37:c5:98:54:3d:88:12:8c:bc:88:ce:b6:39: d6:86:8e:e8:3c:9f:d6:bd:03:93:d8:21:87:29:63:c4:9e:b7: 22:e4:86:78:cb:18:56:f9:87:b6:ad:58:85:f0:49:09:1f:6e: 66:e1:61:9b:6e:e3:a5:59:1a:b5:a2:ae:f9:89:fa:d0:73:14: f5:04:3a:fd:64:86:95:6d:35:44:17:c9:d8:b6:58:4d:f5:80: d4:f3:8f:c5:27:31:55:b3:49:66:fa:06:43:83:37:b3:9b:a5: 57:92:03:19:3b:59:0a:ce:22:cf:93:ae:83:55:99:c5:d1:02: 73:0d:9e:af:87:66:39:36:5f:22:69:cc:4a:f4:46:80:d8:5f: 19:56:15:69:ae:c1:e4:ce:43:8e:e0:16:0e:d5:db:d9:b6:99: 73:cc:c2:4d:4b:95:e5:31:46:b4:17:c1:7b:27:74:9e:0d:dc: 99:5b:aa:d8:86:27:5f:ed:bf:02:5e:06:25:bf:38:3a:3d:3a: 2b:32:43:f1:84:f9:33:c1:ee:aa:0c:78:48:f9:43:9a:98:9d: 78:7a:24:33:60:d0:39:16:f6:2d:ac:ea:42:46:1e:8e:c9:fc: 4b:80:56:b4:c1:28:47:16:d2:5a:7a:f0:0d:93:a3:24:93:04: 16:03:af:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwEDLDdAzYlkdhN3LSj/J20MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkOWUwYTU5MWNjNTI5MTRjYzcwMGUzODc1ZWQ3NWE5MWVj OThjMjgwHhcNMjYwMTI4MTAwMTA2WhcNMjYwMTI5MTAwMTA2WjAzMTEwLwYDVQQD Eyg1MThiMTdlMjVhNjRiOWRlZmM5MWViMDNmZTkxZWQyMzZjNTg4YmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3slkSh24Aoep7BKXnkoFVDkECv/6 pBPz42GnjrMsnt+XeP1rxrzQYOi6WlJwIfwr3HANnBHOaCHCOZv/9gs4iP+x/OM8 5FfY5pC13MY57ZZgYjDvF89y0N06GxYH2rBGMIi2J1ICQjUxJ/V3VmYgu3MOliRa QxOGayE89rDHrRtS9ZR3avGLXwuDQA5BkTYic+XPFK21o9whiJhPD6wvMwNutv8p tU1EKKQLq+T1mZX/O/z2hh+XPZG07yJKITjho2JU/3A+CqN/way0WAzUjRCj9ZD+ omK3eqPYo3zoSivXWDyocW0GvIDxhaVQi1Y3t+ydJ6Kdab3wLkRMcDa7owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFGLF+JaZLne/JHrA/6R7SNsWIvEMB8GA1UdIwQY MBaAFH2eClkcxSkUzHAOOHXtdakeyYwoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlo0S1dSekZLUlRNY0E0NGRlMTFxUjdKakNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8wNGI2ZjctM2Y2NC00NzRmLWFjZDIt YzRkODhiMTNmMTNhLzEvZlo0S1dSekZLUlRNY0E0NGRlMTFxUjdKakNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS8wNGI2ZjctM2Y2NC00NzRmLWFjZDItYzRkODhiMTNmMTNh LzEvZlo0S1dSekZLUlRNY0E0NGRlMTFxUjdKakNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo4Hpf6c3 xZhUPYgSjLyIzrY51oaO6Dyf1r0Dk9ghhyljxJ63IuSGeMsYVvmHtq1YhfBJCR9u ZuFhm27jpVkataKu+Yn60HMU9QQ6/WSGlW01RBfJ2LZYTfWA1POPxScxVbNJZvoG Q4M3s5ulV5IDGTtZCs4iz5Oug1WZxdECcw2er4dmOTZfImnMSvRGgNhfGVYVaa7B 5M5DjuAWDtXb2baZc8zCTUuV5TFGtBfBeyd0ng3cmVuq2IYnX+2/Al4GJb84Oj06 KzJD8YT5M8Huqgx4SPlDmpideHokM2DQORb2LazqQkYejsn8S4BWtMEoRxbSWnrw DZOjJJMEFgOvNg== -----END CERTIFICATE-----Generated at Wed Jan 28 20:01:54 2026 by rpki-client