This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft File: FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft (raw, json) Hash identifier: mIDCaZBeFpMuLNfqAeH+24coTcvMYtwJAnHLasulPfI= Subject key identifier: 8B:BA:8D:1B:BB:4A:BF:B0:5E:F1:25:7D:D4:44:69:29:B8:01:B0:A5 Authority key identifier: 15:F2:15:AD:27:4F:35:B2:4A:C6:A0:60:B2:F0:93:99:71:1B:C1:7F Certificate issuer: /CN=15f215ad274f35b24ac6a060b2f09399711bc17f Certificate serial: 019BFBE4C42A609CAFEF2D1CFA27312E2E8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfIVrSdPNbJKxqBgsvCTmXEbwX8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft Manifest number: 1071 Signing time: Mon 26 Jan 2026 20:00:32 +0000 Manifest this update: Mon 26 Jan 2026 20:00:32 +0000 Manifest next update: Tue 27 Jan 2026 20:00:32 +0000 Files and hashes: 1: 5xVQ4m-jQtcrOWJL2PGZ4M2MWSg.roa (hash: NrK0lUpUnRZszXt8HfAhRL5oVLBur1dwn9mTYD7ns44=) 2: FfIVrSdPNbJKxqBgsvCTmXEbwX8.crl (hash: cHD1QqeULtKzXCYbVwVANSbooovAOjchRySFtJZX0fE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft rsync://rpki.ripe.net/repository/DEFAULT/FfIVrSdPNbJKxqBgsvCTmXEbwX8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:e4:c4:2a:60:9c:af:ef:2d:1c:fa:27:31:2e:2e:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15f215ad274f35b24ac6a060b2f09399711bc17f Validity Not Before: Jan 26 20:00:32 2026 GMT Not After : Jan 27 20:00:32 2026 GMT Subject: CN=8bba8d1bbb4abfb05ef1257dd4446929b801b0a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:db:eb:ee:05:54:63:cc:2d:c6:f6:f8:9b:a5: af:03:3d:1e:ef:0b:b9:ad:ec:28:19:be:44:80:3d: b7:f8:6f:55:a6:a7:42:f3:e6:89:a0:d9:2c:18:1a: 0a:56:6b:ec:1d:25:45:cd:2c:f3:f7:a6:e1:ad:e1: 2c:4c:a8:16:99:6b:b1:56:a4:29:21:15:2b:24:0d: 1c:fb:4a:c5:7b:7c:44:1d:93:b3:4e:47:3b:8e:ae: ff:03:ab:77:03:fd:88:14:6e:9e:c9:f2:ce:7e:3c: 5c:73:1e:d1:61:4c:73:20:7a:71:83:eb:69:18:de: d7:a5:2f:44:df:ab:22:e8:0e:ca:b7:bf:1c:15:be: c3:81:dd:1c:ce:99:ce:06:ce:14:4a:c8:bc:1a:f7: 02:43:98:29:85:10:05:8e:65:b7:df:16:30:dd:55: 0a:53:b0:bd:a6:2a:ef:c5:4d:d9:37:53:67:bc:79: 58:c2:90:c3:62:58:90:bd:66:49:07:0f:e2:93:51: 91:ab:dc:03:0c:72:0d:b8:ea:a8:d2:d9:b2:0b:02: e2:cf:18:32:26:e2:a3:a0:98:9a:ec:ec:00:50:56: 94:45:34:d2:7d:ff:60:7f:27:4b:1e:1e:46:73:c6: f2:fa:11:da:d5:83:fb:24:fc:d7:11:4d:a1:bc:c2: 82:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:BA:8D:1B:BB:4A:BF:B0:5E:F1:25:7D:D4:44:69:29:B8:01:B0:A5 X509v3 Authority Key Identifier: keyid:15:F2:15:AD:27:4F:35:B2:4A:C6:A0:60:B2:F0:93:99:71:1B:C1:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfIVrSdPNbJKxqBgsvCTmXEbwX8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:23:ef:57:2b:a8:f5:93:c8:d3:8b:1c:18:c6:3a:51:90:62: 77:4f:5c:91:0e:41:25:cf:61:65:c0:3e:8f:d9:86:fd:77:4c: 77:64:e2:2e:aa:7f:05:59:ec:da:4e:20:3d:94:b7:8e:f5:88: 52:fb:51:d0:97:09:64:1f:b8:a6:4d:84:07:65:0e:2c:c3:60: 7d:cd:57:2a:3d:56:0c:e9:49:aa:6a:ef:0f:17:d4:22:77:86: 8f:69:70:23:e1:9e:1b:b4:f5:07:9b:aa:93:f1:92:16:38:39: d9:d0:8f:a9:2d:9f:08:8a:a6:e5:14:74:4e:70:1f:a9:8d:19: 2f:69:63:52:9e:29:d7:db:89:b9:4a:94:de:22:0d:66:b5:b4: 01:2c:11:3b:1d:d1:90:bf:41:4a:2c:6e:7a:f9:64:9f:84:9b: 38:df:74:58:2a:d3:ce:85:a7:0b:2b:cf:79:fa:a3:74:14:61: 2d:2e:86:ed:eb:29:ea:12:48:07:4d:b2:ac:e8:11:03:3c:26: 34:21:eb:81:b6:ab:7e:2d:fe:35:8f:48:55:6d:bb:78:b3:3a: ca:f4:c6:92:97:bb:8a:d2:aa:a9:24:1f:1c:ba:15:e9:a2:d0: 08:38:95:da:43:c5:71:6d:6a:0f:7f:02:4f:76:92:f1:c7:67: 67:0c:0a:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv75MQqYJyv7y0c+icxLi6NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZjIxNWFkMjc0ZjM1YjI0YWM2YTA2MGIyZjA5Mzk5NzEx YmMxN2YwHhcNMjYwMTI2MjAwMDMyWhcNMjYwMTI3MjAwMDMyWjAzMTEwLwYDVQQD Eyg4YmJhOGQxYmJiNGFiZmIwNWVmMTI1N2RkNDQ0NjkyOWI4MDFiMGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Nvr7gVUY8wtxvb4m6WvAz0e7wu5 rewoGb5EgD23+G9VpqdC8+aJoNksGBoKVmvsHSVFzSzz96bhreEsTKgWmWuxVqQp IRUrJA0c+0rFe3xEHZOzTkc7jq7/A6t3A/2IFG6eyfLOfjxccx7RYUxzIHpxg+tp GN7XpS9E36si6A7Kt78cFb7Dgd0czpnOBs4USsi8GvcCQ5gphRAFjmW33xYw3VUK U7C9pirvxU3ZN1NnvHlYwpDDYliQvWZJBw/ik1GRq9wDDHINuOqo0tmyCwLizxgy JuKjoJia7OwAUFaURTTSff9gfydLHh5Gc8by+hHa1YP7JPzXEU2hvMKC+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIu6jRu7Sr+wXvElfdREaSm4AbClMB8GA1UdIwQY MBaAFBXyFa0nTzWySsagYLLwk5lxG8F/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmZJVnJTZFBOYkpLeHFCZ3N2Q1RtWEVid1g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS85M2UyMGYtODg3OC00MDU4LThlMDEt YWQwMWUzMGE2MWIyLzEvRmZJVnJTZFBOYkpLeHFCZ3N2Q1RtWEVid1g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS85M2UyMGYtODg3OC00MDU4LThlMDEtYWQwMWUzMGE2MWIy LzEvRmZJVnJTZFBOYkpLeHFCZ3N2Q1RtWEVid1g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANSPvVyuo 9ZPI04scGMY6UZBid09ckQ5BJc9hZcA+j9mG/XdMd2TiLqp/BVns2k4gPZS3jvWI UvtR0JcJZB+4pk2EB2UOLMNgfc1XKj1WDOlJqmrvDxfUIneGj2lwI+GeG7T1B5uq k/GSFjg52dCPqS2fCIqm5RR0TnAfqY0ZL2ljUp4p19uJuUqU3iINZrW0ASwROx3R kL9BSixuevlkn4SbON90WCrTzoWnCyvPefqjdBRhLS6G7esp6hJIB02yrOgRAzwm NCHrgbarfi3+NY9IVW27eLM6yvTGkpe7itKqqSQfHLoV6aLQCDiV2kPFcW1qD38C T3aS8cdnZwwK+w== -----END CERTIFICATE-----Generated at Tue Jan 27 02:15:27 2026 by rpki-client