This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft File: fiax73QQByzpboLXWBvkNuY5p8Q.mft (raw, json) Hash identifier: mz45sxCxb2qxk3v6xHn7wlF0Py5lq+HJGrqFRAEEWA4= Subject key identifier: E7:1D:43:6C:59:3C:D9:88:73:4B:6A:25:1F:65:14:26:29:18:64:C6 Authority key identifier: 7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4 Certificate issuer: /CN=7e26b1ef7410072ce96e82d7581be436e639a7c4 Certificate serial: 019C0E905C940683C5BABC218FBA46C98833 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft Manifest number: 17CC Signing time: Fri 30 Jan 2026 11:01:07 +0000 Manifest this update: Fri 30 Jan 2026 11:01:07 +0000 Manifest next update: Sat 31 Jan 2026 11:01:07 +0000 Files and hashes: 1: 7S2s5NvMEWjMmdP4tHVPuR44TrM.roa (hash: tQYbzfuvYbUtsAHpJGcR8MOd0wYit8Udr+nLe5FW+kY=) 2: fiax73QQByzpboLXWBvkNuY5p8Q.crl (hash: azyX33o6K3iGF7sMNnLIyWNk2aoyksZQZRdrQ1L8MwA=) 3: zAbYbd0War1iqYSyjtgKe0wPWK0.roa (hash: lHnNnamI74ze+EojrEsu93ZxnIhz1eP+7F0DGR8ciLQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0e:90:5c:94:06:83:c5:ba:bc:21:8f:ba:46:c9:88:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e26b1ef7410072ce96e82d7581be436e639a7c4 Validity Not Before: Jan 30 11:01:07 2026 GMT Not After : Jan 31 11:01:07 2026 GMT Subject: CN=e71d436c593cd988734b6a251f651426291864c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6d:fa:43:13:75:df:a2:0f:4a:91:86:c5:c3: 47:07:37:72:3f:16:8f:c6:30:16:64:74:c1:ff:b4: 73:12:9e:a1:84:6c:24:de:f7:8e:85:a1:a5:f1:65: eb:fd:20:fc:ee:0d:ff:2e:f3:8d:26:74:90:a4:d3: fc:9f:e5:f5:c1:b5:ab:38:2b:92:ae:8b:34:03:38: 45:9c:84:3d:d8:3d:9a:fc:fa:a4:31:a1:c6:e8:77: 84:f0:59:a2:20:23:cc:72:2c:e9:9a:0c:28:0a:58: 58:dc:93:0c:b6:77:b5:0a:a6:62:38:20:b5:74:96: 00:42:04:72:ac:b7:90:c4:ed:2c:13:a5:78:f2:be: c8:5a:71:9b:d7:f9:f4:a2:fa:92:bb:3f:7a:52:40: de:1b:10:4b:49:49:30:e3:df:11:52:22:1b:a3:88: c6:42:52:4c:72:b9:22:20:3b:a8:c4:56:a7:ba:8c: c5:bb:6c:01:c2:76:97:8c:ac:71:c9:18:f7:5c:2f: 72:6d:e2:eb:f0:08:ea:43:5b:10:92:eb:11:e3:ee: 67:9c:fc:7d:9d:04:8d:5e:c5:93:09:81:54:cf:c7: 00:77:1e:a5:26:ad:90:92:aa:12:50:6a:d7:5a:7c: 42:5b:cb:eb:5b:90:f0:92:88:ac:0c:7b:3c:ac:02: aa:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:1D:43:6C:59:3C:D9:88:73:4B:6A:25:1F:65:14:26:29:18:64:C6 X509v3 Authority Key Identifier: keyid:7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:1c:50:ed:f3:48:7a:6c:0d:61:1f:e8:a8:c6:54:3b:f7:1d: 67:47:af:44:2d:0c:6c:3c:90:78:41:44:5c:0a:43:7d:d1:b8: d6:8a:ef:cc:b0:1b:36:ca:05:79:5a:af:c1:ee:bc:b7:41:21: e2:89:3b:41:03:33:0f:60:9b:48:0a:3c:47:ad:7d:67:9b:2a: 00:aa:ff:b7:f9:ee:33:9e:1a:8b:64:23:6c:e9:a9:53:82:20: 54:30:c0:a4:0a:6b:ad:d5:65:34:04:99:3b:fd:f4:b1:40:11: 44:1a:ed:e6:e4:9c:1e:05:d2:88:da:e9:57:8f:63:a1:1f:e3: b1:fc:9d:a3:6e:f6:63:94:44:ae:b9:d0:d2:14:b4:95:94:13: 2e:f5:ed:34:d4:66:55:43:0c:08:44:c6:a4:33:26:82:cb:2c: 8a:3f:7c:54:a8:ea:8f:c8:a2:12:1b:74:f0:34:f1:fb:59:3b: 0b:d0:f0:46:6f:41:57:d7:8d:d5:a2:79:1e:6a:96:59:1d:72: 92:86:74:e8:a3:54:bb:58:7a:ba:cb:e9:f2:21:4c:a7:db:ad: 26:26:97:ae:19:18:a0:1b:62:cf:b8:8f:de:64:3e:27:53:81: 5d:69:5a:94:32:56:e6:58:a8:b3:ab:4d:cf:0b:bf:93:d3:d5: ea:7e:fc:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwOkFyUBoPFurwhj7pGyYgzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjZiMWVmNzQxMDA3MmNlOTZlODJkNzU4MWJlNDM2ZTYz OWE3YzQwHhcNMjYwMTMwMTEwMTA3WhcNMjYwMTMxMTEwMTA3WjAzMTEwLwYDVQQD EyhlNzFkNDM2YzU5M2NkOTg4NzM0YjZhMjUxZjY1MTQyNjI5MTg2NGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0W36QxN136IPSpGGxcNHBzdyPxaP xjAWZHTB/7RzEp6hhGwk3veOhaGl8WXr/SD87g3/LvONJnSQpNP8n+X1wbWrOCuS ros0AzhFnIQ92D2a/PqkMaHG6HeE8FmiICPMcizpmgwoClhY3JMMtne1CqZiOCC1 dJYAQgRyrLeQxO0sE6V48r7IWnGb1/n0ovqSuz96UkDeGxBLSUkw498RUiIbo4jG QlJMcrkiIDuoxFanuozFu2wBwnaXjKxxyRj3XC9ybeLr8AjqQ1sQkusR4+5nnPx9 nQSNXsWTCYFUz8cAdx6lJq2QkqoSUGrXWnxCW8vrW5DwkoisDHs8rAKqMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOcdQ2xZPNmIc0tqJR9lFCYpGGTGMB8GA1UdIwQY MBaAFH4mse90EAcs6W6C11gb5DbmOafEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlheDczUVFCeXpwYm9MWFdCdmtOdVk1cDhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jYWM2M2MtNTVlNS00MTU0LTg4NzYt OGMzMmMzNTFlZTcwLzEvZmlheDczUVFCeXpwYm9MWFdCdmtOdVk1cDhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9jYWM2M2MtNTVlNS00MTU0LTg4NzYtOGMzMmMzNTFlZTcw LzEvZmlheDczUVFCeXpwYm9MWFdCdmtOdVk1cDhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwBxQ7fNI emwNYR/oqMZUO/cdZ0evRC0MbDyQeEFEXApDfdG41orvzLAbNsoFeVqvwe68t0Eh 4ok7QQMzD2CbSAo8R619Z5sqAKr/t/nuM54ai2QjbOmpU4IgVDDApAprrdVlNASZ O/30sUARRBrt5uScHgXSiNrpV49joR/jsfydo272Y5RErrnQ0hS0lZQTLvXtNNRm VUMMCETGpDMmgsssij98VKjqj8iiEht08DTx+1k7C9DwRm9BV9eN1aJ5HmqWWR1y koZ06KNUu1h6usvp8iFMp9utJiaXrhkYoBtiz7iP3mQ+J1OBXWlalDJW5lios6tN zwu/k9PV6n78Mg== -----END CERTIFICATE-----Generated at Fri Jan 30 17:06:48 2026 by rpki-client