This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft File: f_F65Ue58mQeYFd_5VPdtvdJoIc.mft (raw, json) Hash identifier: +1XO0AtZremFwvX93KTi0/9DuEg00y25Ul+kZCYeLjc= Subject key identifier: 83:85:70:43:8C:B4:B8:80:CB:22:96:C4:66:B4:56:9D:D8:C5:FB:4C Authority key identifier: 7F:F1:7A:E5:47:B9:F2:64:1E:60:57:7F:E5:53:DD:B6:F7:49:A0:87 Certificate issuer: /CN=7ff17ae547b9f2641e60577fe553ddb6f749a087 Certificate serial: 019BDE128C355FD7E7CF7F25E9665E4AB7A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft Manifest number: 051C Signing time: Wed 21 Jan 2026 01:01:56 +0000 Manifest this update: Wed 21 Jan 2026 01:01:56 +0000 Manifest next update: Thu 22 Jan 2026 01:01:56 +0000 Files and hashes: 1: f_F65Ue58mQeYFd_5VPdtvdJoIc.crl (hash: IqfSN6/g0CykhFaWpVCL9sKT+DBFr4uTcwUIkaWj+FU=) 2: wKJrG3TzhAwbybBcB8HtZYod-Cw.asa (hash: 6ZWEWX50h36ZRdrhsUv174jWGFDg5H8Fr4bktK/9hRQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:de:12:8c:35:5f:d7:e7:cf:7f:25:e9:66:5e:4a:b7:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ff17ae547b9f2641e60577fe553ddb6f749a087 Validity Not Before: Jan 21 01:01:56 2026 GMT Not After : Jan 22 01:01:56 2026 GMT Subject: CN=838570438cb4b880cb2296c466b4569dd8c5fb4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:20:11:79:b5:fe:a9:22:89:32:31:d2:37:55: 88:d7:64:d9:3d:37:a9:b7:1a:a3:51:e9:ad:39:a3: 34:f9:14:16:d4:d6:a6:96:6e:8d:53:1c:db:2c:a8: 45:3b:b5:b8:a0:cd:6f:ca:b9:b7:09:52:3f:2d:9c: fd:21:20:34:5e:4f:bc:da:25:5e:ff:99:c8:fc:bf: 8b:16:b7:08:5c:20:ca:e2:d6:5c:9a:0e:80:5f:e4: be:08:be:f2:a9:9a:70:77:9f:a5:33:be:cd:6e:20: 87:58:bf:f2:c8:70:fb:75:d4:04:c9:b3:d4:8c:7e: 8d:ef:d5:87:57:2b:2e:8f:83:3c:8b:ba:9f:88:b8: 34:d2:80:b8:52:1c:ea:9d:70:80:ba:1d:90:6e:ca: 6a:84:20:87:72:58:06:9c:03:a2:60:ba:e5:77:d5: 11:4a:3d:cc:fc:7c:c6:a5:36:23:06:c3:b5:a0:04: 7d:a9:70:a5:ce:97:08:e5:b3:85:57:68:c4:73:a4: 5c:dc:3e:cc:a0:8b:9d:fd:6a:e8:fa:d9:c4:b1:00: e9:ce:f2:2c:b7:26:e5:50:b9:19:4b:bd:65:99:3b: 39:8f:b5:5b:f0:97:24:96:cd:ad:81:a5:27:2e:29: 3a:f8:2a:44:9f:2f:d0:90:38:df:65:a6:8c:ba:91: 53:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:85:70:43:8C:B4:B8:80:CB:22:96:C4:66:B4:56:9D:D8:C5:FB:4C X509v3 Authority Key Identifier: keyid:7F:F1:7A:E5:47:B9:F2:64:1E:60:57:7F:E5:53:DD:B6:F7:49:A0:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:9e:d1:b0:71:cc:28:28:4a:a0:1c:52:d4:76:9c:51:40:2d: cd:60:1e:79:2b:58:44:2a:90:ff:bb:4b:5f:da:f4:5b:f5:8f: 98:d5:b3:ef:37:12:9a:26:79:22:f0:1d:32:db:ca:8b:dc:fc: 82:46:7f:ef:48:64:4c:cc:84:96:cd:3a:8b:e9:e8:81:43:e0: 9e:1a:e0:a3:5c:8a:ff:cf:84:65:0c:20:5d:ab:58:b0:b0:85: 90:be:01:76:5e:76:82:23:be:c5:58:3c:e1:7d:ea:84:c3:b3: 20:ff:c0:b7:27:07:4e:1a:de:f8:7c:bf:b8:4b:cb:c3:d4:1f: d5:2a:b2:4d:76:6e:7b:59:28:9e:26:fd:83:67:22:3c:6a:1a: 20:65:cb:50:21:c8:d4:9f:8f:79:82:94:42:aa:21:00:96:f0: d1:b1:84:10:dd:e2:b5:53:16:e7:1c:ba:c9:4e:b8:63:cb:23: 25:03:f2:0d:96:44:c7:c4:52:98:5d:8a:66:24:41:b7:7a:c5: e7:07:dc:7b:98:1c:33:58:ba:a8:56:0e:8d:f5:7e:d2:0c:80: 74:be:5d:98:93:7c:02:45:3a:b7:a4:59:c3:7e:6b:80:92:41: 3e:ee:3f:e1:0f:72:25:1d:9a:bf:71:95:22:16:e9:56:13:9f: 2f:91:12:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZveEow1X9fnz38l6WZeSrelMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmZjE3YWU1NDdiOWYyNjQxZTYwNTc3ZmU1NTNkZGI2Zjc0 OWEwODcwHhcNMjYwMTIxMDEwMTU2WhcNMjYwMTIyMDEwMTU2WjAzMTEwLwYDVQQD Eyg4Mzg1NzA0MzhjYjRiODgwY2IyMjk2YzQ2NmI0NTY5ZGQ4YzVmYjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SARebX+qSKJMjHSN1WI12TZPTep txqjUemtOaM0+RQW1Namlm6NUxzbLKhFO7W4oM1vyrm3CVI/LZz9ISA0Xk+82iVe /5nI/L+LFrcIXCDK4tZcmg6AX+S+CL7yqZpwd5+lM77NbiCHWL/yyHD7ddQEybPU jH6N79WHVysuj4M8i7qfiLg00oC4UhzqnXCAuh2QbspqhCCHclgGnAOiYLrld9UR Sj3M/HzGpTYjBsO1oAR9qXClzpcI5bOFV2jEc6Rc3D7MoIud/Wro+tnEsQDpzvIs tyblULkZS71lmTs5j7Vb8Jckls2tgaUnLik6+CpEny/QkDjfZaaMupFTNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIOFcEOMtLiAyyKWxGa0Vp3YxftMMB8GA1UdIwQY MBaAFH/xeuVHufJkHmBXf+VT3bb3SaCHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZl9GNjVVZTU4bVFlWUZkXzVWUGR0dmRKb0ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8xYmMwZjktYmQ3Yy00ZjdhLWE0MDQt YTQzZmYyNWQ0NDdkLzEvZl9GNjVVZTU4bVFlWUZkXzVWUGR0dmRKb0ljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8xYmMwZjktYmQ3Yy00ZjdhLWE0MDQtYTQzZmYyNWQ0NDdk LzEvZl9GNjVVZTU4bVFlWUZkXzVWUGR0dmRKb0ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEJ7RsHHM KChKoBxS1HacUUAtzWAeeStYRCqQ/7tLX9r0W/WPmNWz7zcSmiZ5IvAdMtvKi9z8 gkZ/70hkTMyEls06i+nogUPgnhrgo1yK/8+EZQwgXatYsLCFkL4Bdl52giO+xVg8 4X3qhMOzIP/AtycHThre+Hy/uEvLw9Qf1SqyTXZue1konib9g2ciPGoaIGXLUCHI 1J+PeYKUQqohAJbw0bGEEN3itVMW5xy6yU64Y8sjJQPyDZZEx8RSmF2KZiRBt3rF 5wfce5gcM1i6qFYOjfV+0gyAdL5dmJN8AkU6t6RZw35rgJJBPu4/4Q9yJR2av3GV IhbpVhOfL5ES9A== -----END CERTIFICATE-----Generated at Wed Jan 21 09:44:37 2026 by rpki-client