This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.mft File: fNG8cAkF0axtdzOuvDJj5q52-pc.mft (raw, json) Hash identifier: wMSAfovVbh15I1sXc8kwPNqgoxotd/PdgcqaA5r5xBQ= Subject key identifier: 25:6C:94:F8:76:81:39:7C:DB:FD:92:F1:EF:8E:09:F1:89:1C:4A:4C Authority key identifier: 7C:D1:BC:70:09:05:D1:AC:6D:77:33:AE:BC:32:63:E6:AE:76:FA:97 Certificate issuer: /CN=7cd1bc700905d1ac6d7733aebc3263e6ae76fa97 Certificate serial: 019C205FF0A49EBCF98C2CA57C54D7B8F367 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNG8cAkF0axtdzOuvDJj5q52-pc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.mft Manifest number: 01E7 Signing time: Mon 02 Feb 2026 22:01:24 +0000 Manifest this update: Mon 02 Feb 2026 22:01:24 +0000 Manifest next update: Tue 03 Feb 2026 22:01:24 +0000 Files and hashes: 1: fNG8cAkF0axtdzOuvDJj5q52-pc.crl (hash: g92yaiHqzJAmhA6fy/hbmLtJJeIyMizQm7AbixDt/5g=) 2: hhYndYmrtj6UVK4MXLjISC5kjY8.roa (hash: Hp6kG7ylNYSrFI+JCOb5ieLSxf03lMDks7YDXEs5v7Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.mft rsync://rpki.ripe.net/repository/DEFAULT/fNG8cAkF0axtdzOuvDJj5q52-pc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 15:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:20:5f:f0:a4:9e:bc:f9:8c:2c:a5:7c:54:d7:b8:f3:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7cd1bc700905d1ac6d7733aebc3263e6ae76fa97 Validity Not Before: Feb 2 22:01:24 2026 GMT Not After : Feb 3 22:01:24 2026 GMT Subject: CN=256c94f87681397cdbfd92f1ef8e09f1891c4a4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d2:72:c1:9f:da:87:68:9e:c6:cb:3d:d2:88: ae:76:cd:26:aa:41:e2:0e:92:3c:c2:69:7a:a2:35: 24:82:e5:73:23:47:57:f0:e7:44:b8:0d:c5:4d:38: 42:a4:24:f2:5a:f1:af:35:f2:ba:cf:f1:29:c7:3c: e7:f1:70:3b:33:b9:43:3f:8d:b8:aa:fb:ef:64:8a: 99:b4:2a:3f:d9:d7:5b:9e:d0:65:cd:f9:4f:ca:29: 80:91:09:c3:f6:5e:fb:cf:d1:57:80:e4:84:05:c4: 3f:91:e8:56:e5:c6:a2:92:cc:b1:fd:85:6a:13:f8: 50:41:f8:20:64:c7:9a:ee:8c:3b:0a:6c:bf:fb:f1: cb:1b:1f:c8:89:41:20:56:94:ab:e0:dc:30:f6:e6: f9:70:f9:c2:59:c2:47:ea:b2:23:ee:f9:58:4b:7d: 09:da:c7:e5:db:2c:72:e4:2b:9b:e0:a4:8e:bd:ba: 44:e4:87:96:e7:1c:dd:74:26:c0:8d:5d:b1:e9:aa: ea:7a:d8:b1:e9:25:94:02:38:f5:32:1e:2d:05:75: b5:53:19:b3:26:33:77:2e:a5:be:a9:0d:30:17:b8: c8:6f:b8:41:3b:db:0b:c0:1c:51:da:22:6b:f6:c5: c2:a4:75:5b:69:82:67:51:d3:38:65:ac:05:a1:1e: 95:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:6C:94:F8:76:81:39:7C:DB:FD:92:F1:EF:8E:09:F1:89:1C:4A:4C X509v3 Authority Key Identifier: keyid:7C:D1:BC:70:09:05:D1:AC:6D:77:33:AE:BC:32:63:E6:AE:76:FA:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNG8cAkF0axtdzOuvDJj5q52-pc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:2f:a4:8d:f7:88:ac:0c:d2:2a:7c:7c:87:b4:63:be:fe:f3: ba:30:f5:fb:02:b1:d7:39:cb:3c:79:5b:a6:ba:81:4d:b0:75: bc:77:f7:e9:69:5c:91:f8:5d:dc:c1:e5:ca:1a:a2:90:cf:0f: 2a:26:6b:0b:c0:07:c0:ac:e4:0b:81:2b:15:b0:b7:ef:32:3c: 2c:9a:df:74:11:93:db:53:ae:da:d9:b1:20:c9:e8:00:7d:9e: 43:0d:36:37:db:18:5b:35:8c:50:72:82:8b:45:9c:34:aa:8a: 7c:b5:f6:05:79:24:d9:0d:1b:40:2d:46:cb:b9:bb:a3:19:53: 35:b5:88:65:54:31:af:1c:21:2b:2c:2a:a7:a8:a5:12:e8:b0: d6:c3:f0:9c:26:ab:12:3f:52:51:8c:4f:45:c6:32:7e:d8:58: 48:24:03:52:ab:a6:f6:73:45:86:b8:f9:af:11:94:27:bd:82: 1b:ee:5b:32:ba:26:80:a3:79:ab:77:ac:5b:c7:72:5e:0c:c2: a7:34:7d:42:96:eb:73:ca:1a:2c:7e:4e:41:df:21:d7:fd:09: e2:89:90:de:5e:74:48:d5:10:77:0f:bb:1f:0e:e4:37:c5:44: 55:2a:6a:20:70:4d:57:c6:ee:b7:af:78:11:57:80:e3:d3:d6: 98:c6:a2:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwgX/Cknrz5jCylfFTXuPNnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjZDFiYzcwMDkwNWQxYWM2ZDc3MzNhZWJjMzI2M2U2YWU3 NmZhOTcwHhcNMjYwMjAyMjIwMTI0WhcNMjYwMjAzMjIwMTI0WjAzMTEwLwYDVQQD EygyNTZjOTRmODc2ODEzOTdjZGJmZDkyZjFlZjhlMDlmMTg5MWM0YTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNJywZ/ah2iexss90oiuds0mqkHi DpI8wml6ojUkguVzI0dX8OdEuA3FTThCpCTyWvGvNfK6z/Epxzzn8XA7M7lDP424 qvvvZIqZtCo/2ddbntBlzflPyimAkQnD9l77z9FXgOSEBcQ/kehW5caiksyx/YVq E/hQQfggZMea7ow7Cmy/+/HLGx/IiUEgVpSr4Nww9ub5cPnCWcJH6rIj7vlYS30J 2sfl2yxy5Cub4KSOvbpE5IeW5xzddCbAjV2x6arqetix6SWUAjj1Mh4tBXW1Uxmz JjN3LqW+qQ0wF7jIb7hBO9sLwBxR2iJr9sXCpHVbaYJnUdM4ZawFoR6VmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCVslPh2gTl82/2S8e+OCfGJHEpMMB8GA1UdIwQY MBaAFHzRvHAJBdGsbXczrrwyY+audvqXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZk5HOGNBa0YwYXh0ZHpPdXZESmo1cTUyLXBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9iYWRlODMtN2E4NC00YzQyLTlkMjYt ZmNlOWUyYmY0ZWY5LzEvZk5HOGNBa0YwYXh0ZHpPdXZESmo1cTUyLXBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9iYWRlODMtN2E4NC00YzQyLTlkMjYtZmNlOWUyYmY0ZWY5 LzEvZk5HOGNBa0YwYXh0ZHpPdXZESmo1cTUyLXBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACy+kjfeI rAzSKnx8h7Rjvv7zujD1+wKx1znLPHlbprqBTbB1vHf36Wlckfhd3MHlyhqikM8P KiZrC8AHwKzkC4ErFbC37zI8LJrfdBGT21Ou2tmxIMnoAH2eQw02N9sYWzWMUHKC i0WcNKqKfLX2BXkk2Q0bQC1Gy7m7oxlTNbWIZVQxrxwhKywqp6ilEuiw1sPwnCar Ej9SUYxPRcYyfthYSCQDUqum9nNFhrj5rxGUJ72CG+5bMromgKN5q3esW8dyXgzC pzR9Qpbrc8oaLH5OQd8h1/0J4omQ3l50SNUQdw+7Hw7kN8VEVSpqIHBNV8but694 EVeA49PWmMaiOg== -----END CERTIFICATE-----Generated at Tue Feb 3 01:52:48 2026 by rpki-client