This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft File: fiyz0KZBdpx4AcSBYSAVwsyztlU.mft (raw, json) Hash identifier: 4FqSDJi8ZqLDgLMTJjUgyaT6symPlWfjhHMAiL6bS4w= Subject key identifier: DA:C7:F1:A0:E2:B0:A7:4D:AC:03:A3:A7:2A:68:7B:8A:D3:F4:99:D3 Authority key identifier: 7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55 Certificate issuer: /CN=7e2cb3d0a641769c7801c481612015c2ccb3b655 Certificate serial: 019B9EC86F6975CDABDC933E96B396359C38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft Manifest number: 17C3 Signing time: Thu 08 Jan 2026 18:04:54 +0000 Manifest this update: Thu 08 Jan 2026 18:04:54 +0000 Manifest next update: Fri 09 Jan 2026 18:04:54 +0000 Files and hashes: 1: 7n8VGN5qx8e1r_I5AO7cAIsae7I.roa (hash: onOfKp42Y6P86RHkvuJP/4SuTaGwNpgfQ3SNQsYro7c=) 2: L9jpwXDS-vYpi4qR-JKeAkBEf-o.roa (hash: DInUHVPHkb1b0chwDIDO63EENvDAowPZs43OgE4KgXg=) 3: ay-C8TILWdjhcn8eurN_Kh9djso.roa (hash: 5zpy3ri3yGj4QIMvpFMovV5Sm6F5Vl5ppvnDDWWEVdw=) 4: fiyz0KZBdpx4AcSBYSAVwsyztlU.crl (hash: N11nC4GvkrMcdZF51wfmUr2mVOU6W5jSV0J8NaJNVoM=) 5: re6lB-rbYJ_Z7LLPBqEUb5KSVrg.roa (hash: 27WGZ3waRnvUaK/S6mQGfDjYmQYiQzBcLnujDU+XKKs=) 6: xqs5TJLITzfBv07-IoHQdLrqQcg.roa (hash: jut+CFoJCXEYLUuwwpH1zOPE+0vbm6gNXxeU7ZDhKNY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.crl rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9e:c8:6f:69:75:cd:ab:dc:93:3e:96:b3:96:35:9c:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e2cb3d0a641769c7801c481612015c2ccb3b655 Validity Not Before: Jan 8 18:04:54 2026 GMT Not After : Jan 9 18:04:54 2026 GMT Subject: CN=dac7f1a0e2b0a74dac03a3a72a687b8ad3f499d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e2:11:1f:0c:47:5c:42:38:d9:b4:c3:d7:4b: fd:52:f2:1b:71:0b:1b:99:85:47:9e:30:45:3e:db: 70:f7:10:e2:fc:a4:9c:15:96:c5:a2:8e:0c:af:74: 02:91:8c:08:c9:6b:68:99:6e:53:d6:1e:83:f7:6d: c8:97:a0:13:08:ec:ba:23:b1:32:82:43:59:02:c3: ff:38:46:b9:d0:be:c6:25:36:aa:78:75:a0:83:5e: 3b:a8:63:a7:0e:0d:c8:b0:2f:66:46:1d:78:25:94: e7:d3:4a:06:ad:b2:e9:ab:3d:36:4b:a1:bc:a7:cd: a4:05:d0:ed:85:c5:7a:7d:db:ed:d7:d8:20:3f:a2: 32:a5:f9:f6:ba:16:b0:19:52:76:34:10:c4:ee:5b: 69:04:85:40:47:e7:b8:e9:08:b3:9a:aa:b7:d1:92: 12:91:45:2c:66:59:f2:45:ed:de:a1:bc:06:a3:e7: 45:02:fb:e4:d8:c0:56:34:55:12:ac:41:9f:7f:01: ca:1c:f0:2f:11:bb:92:f5:8f:23:97:f7:7c:15:99: 30:e6:4b:e0:46:95:0c:f0:c6:f3:18:5e:58:21:eb: bf:2f:a9:44:f0:0b:1a:2e:47:11:66:6c:73:0a:53: 97:24:73:9f:46:be:ea:da:0e:b4:9f:7d:21:56:bc: 3b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:C7:F1:A0:E2:B0:A7:4D:AC:03:A3:A7:2A:68:7B:8A:D3:F4:99:D3 X509v3 Authority Key Identifier: keyid:7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:f9:d7:ad:5c:09:e3:a9:37:9f:0b:0e:fb:0f:c4:42:d9:cd: ee:b0:48:2e:b4:1f:f9:dd:7c:b3:0e:5d:e6:ca:88:b0:59:2a: 63:07:ba:57:c0:06:72:4f:a6:05:b4:89:a9:53:23:ed:0c:63: fa:27:31:27:6c:b6:5c:0b:b0:9d:03:53:f0:51:e5:8e:67:c2: c4:1c:ae:f7:2c:48:be:22:f0:e5:ae:f0:90:50:e6:7f:7d:14: cc:af:49:7e:01:f7:a9:59:d0:10:c5:08:d6:04:41:2d:2d:2e: 88:5b:7e:65:4b:14:ee:d3:b0:f3:6b:e1:f3:e9:0c:bf:1b:18: e8:1b:4e:1f:cc:19:e6:a3:e8:ad:14:f2:5b:bb:c9:a4:26:62: 45:5d:09:21:9a:b4:68:d0:3e:f9:f3:a2:f2:e7:28:52:df:c0: c2:4d:05:7a:32:dc:03:e8:b2:d9:cd:ca:d2:c5:86:c3:02:05: 64:19:5d:c1:62:21:47:56:56:87:b5:dc:b9:34:5d:18:1a:42: 27:35:29:08:d1:ae:2a:e6:1d:ae:9a:c3:13:02:e3:9b:7f:3b: 86:6d:7a:3a:50:5d:36:a5:54:4b:12:36:52:7a:80:d0:07:03: 5e:3d:d6:24:28:40:52:e3:b6:91:41:15:c5:13:0b:e7:43:03: 60:bd:7d:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZueyG9pdc2r3JM+lrOWNZw4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMmNiM2QwYTY0MTc2OWM3ODAxYzQ4MTYxMjAxNWMyY2Ni M2I2NTUwHhcNMjYwMTA4MTgwNDU0WhcNMjYwMTA5MTgwNDU0WjAzMTEwLwYDVQQD EyhkYWM3ZjFhMGUyYjBhNzRkYWMwM2EzYTcyYTY4N2I4YWQzZjQ5OWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+IRHwxHXEI42bTD10v9UvIbcQsb mYVHnjBFPttw9xDi/KScFZbFoo4Mr3QCkYwIyWtomW5T1h6D923Il6ATCOy6I7Ey gkNZAsP/OEa50L7GJTaqeHWgg147qGOnDg3IsC9mRh14JZTn00oGrbLpqz02S6G8 p82kBdDthcV6fdvt19ggP6Iypfn2uhawGVJ2NBDE7ltpBIVAR+e46Qizmqq30ZIS kUUsZlnyRe3eobwGo+dFAvvk2MBWNFUSrEGffwHKHPAvEbuS9Y8jl/d8FZkw5kvg RpUM8MbzGF5YIeu/L6lE8AsaLkcRZmxzClOXJHOfRr7q2g60n30hVrw7nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNrH8aDisKdNrAOjpypoe4rT9JnTMB8GA1UdIwQY MBaAFH4ss9CmQXaceAHEgWEgFcLMs7ZVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZml5ejBLWkJkcHg0QWNTQllTQVZ3c3l6dGxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80MzFkZjEtMDlmNC00NzVjLWEwNDUt ZjViYjI4NDNjODllLzEvZml5ejBLWkJkcHg0QWNTQllTQVZ3c3l6dGxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC80MzFkZjEtMDlmNC00NzVjLWEwNDUtZjViYjI4NDNjODll LzEvZml5ejBLWkJkcHg0QWNTQllTQVZ3c3l6dGxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkfnXrVwJ 46k3nwsO+w/EQtnN7rBILrQf+d18sw5d5sqIsFkqYwe6V8AGck+mBbSJqVMj7Qxj +icxJ2y2XAuwnQNT8FHljmfCxByu9yxIviLw5a7wkFDmf30UzK9JfgH3qVnQEMUI 1gRBLS0uiFt+ZUsU7tOw82vh8+kMvxsY6BtOH8wZ5qPorRTyW7vJpCZiRV0JIZq0 aNA++fOi8ucoUt/Awk0FejLcA+iy2c3K0sWGwwIFZBldwWIhR1ZWh7XcuTRdGBpC JzUpCNGuKuYdrprDEwLjm387hm16OlBdNqVUSxI2UnqA0AcDXj3WJChAUuO2kUEV xRML50MDYL19Mw== -----END CERTIFICATE-----Generated at Fri Jan 9 01:13:23 2026 by rpki-client