This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft File: _97EpGpubk-aktC6Lgs6tWWL4b0.mft (raw, json) Hash identifier: 6DCp1dhxQ0rHaOXG9xl2KZUlH8IRx9Yzo5LY1TA9R5Y= Subject key identifier: AF:80:52:B6:82:7A:31:F2:27:AB:10:18:5E:06:A6:3A:40:AE:80:05 Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Certificate serial: 019BFB77628B7B961DBF37E8B57624899A01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft Manifest number: 1809 Signing time: Mon 26 Jan 2026 18:01:03 +0000 Manifest this update: Mon 26 Jan 2026 18:01:03 +0000 Manifest next update: Tue 27 Jan 2026 18:01:03 +0000 Files and hashes: 1: 1iiQznngAAUoJBg2IRNbTIROLgA.roa (hash: IfOiJ0y8Jxc7SmQONu8fFngEQ795WWF+gFMreRxG3CU=) 2: A5PgGRLn4kXJK7rp7MRelJlQCGs.roa (hash: uoHX6U7FvckkMUmhHzgYs1oGVMNEJnR2TmiJTsJFLvY=) 3: Bzo_VHzhyMxVmlaGb7eDpMOzKNw.roa (hash: faAu0B/ZNdAR9cPNQILlVsqLeHnhVt95YfA/GQi7kCw=) 4: GIo6XBIIGKLKY5fo-2KAJGPCwGY.roa (hash: KkZCoIa9nndDPKaAqxfqTYTtr6XtVmuZC5N9YIEfldg=) 5: HQZ8h0k5o98AkDATLinCxsRe43I.roa (hash: aSwjxHDuomJbPa6AGVBEyYNaJyQepEqbPTE9fjxbKqY=) 6: MASv_rraqDJSYbqgrPz4hvaUE2c.roa (hash: cVsPoSNgg1jdtpq+zgxbSf3SDxFypt0t/a96jTQx6hE=) 7: NzbIi-FrPomQ6ctOPJJUrBGgm1I.roa (hash: PdBiVtgjdqqfmsvkZMECcdaQfrG9aEwqLBPPRyETYkY=) 8: _97EpGpubk-aktC6Lgs6tWWL4b0.crl (hash: eBeddjNhknSEs0gIkV0VruzhPxmkQ4UWRESLjiGVxxg=) 9: bzkVBP_m0QOkL7HvzQFXrT5rq10.roa (hash: NzVgHolIVrpawCE7CDio6iuv1mdZYc6KIW6NA0eXBBI=) 10: mr3eytu19hz9X8102ddOQBMhaCs.roa (hash: rgExvt59Z6M78VouciXS9dA08jr+rMik1ukA2amoJZc=) 11: pUmN_6XpWcEqw-3rUBgKOFddqas.roa (hash: Cn7MMw/oqRiT9o2HCgwnJRlue/qjCZYJ4u8zRlj1ypM=) 12: w-PDKFF3prApvO2JzmgAyow-O5c.roa (hash: yGP/NbSbCcqtvQkL6kf+yxHQ3/xxKzetGY7fqt3Etok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:77:62:8b:7b:96:1d:bf:37:e8:b5:76:24:89:9a:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Validity Not Before: Jan 26 18:01:03 2026 GMT Not After : Jan 27 18:01:03 2026 GMT Subject: CN=af8052b6827a31f227ab10185e06a63a40ae8005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f5:b6:0b:8c:9a:7d:f9:0a:6a:4f:64:9f:f8: a1:c6:bb:f1:12:8f:87:d9:4f:8a:9e:82:09:a5:be: 80:4e:3e:bb:91:c8:1f:7b:d5:5a:10:39:2c:b5:40: 71:42:52:b8:2e:5d:db:b9:7b:65:84:8a:31:70:79: c1:d6:11:48:cb:97:20:75:c8:95:32:00:f2:f9:a0: c6:e6:aa:d0:14:85:43:33:4c:d5:b9:c9:73:54:c7: e1:26:e3:3a:82:f7:29:54:26:0c:31:fe:f3:82:7c: 33:d3:3a:ed:36:d9:95:15:d0:9e:e1:80:96:b1:0b: 7d:a8:57:9f:03:53:be:ea:b9:0f:b4:dc:ca:25:47: d7:6d:0d:76:a4:2d:61:41:bf:fe:25:2e:f1:d0:1b: d3:f5:83:44:a7:07:82:9a:36:8a:73:e9:af:0b:c1: 1a:62:9e:42:b8:37:1b:07:62:86:bc:0b:ad:8a:04: a6:93:b4:74:64:28:f1:8b:10:4c:8f:0e:34:47:14: df:1e:73:74:f9:62:e9:e0:75:87:d1:7f:2c:9d:44: 83:01:d2:f0:83:7a:9b:84:1a:57:76:10:63:9c:e9: 8f:ab:ae:8e:b7:5e:90:40:84:fd:0b:f5:62:f7:d8: b4:8d:e8:21:19:14:4a:c1:9a:bf:09:d4:17:3c:06: 21:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:80:52:B6:82:7A:31:F2:27:AB:10:18:5E:06:A6:3A:40:AE:80:05 X509v3 Authority Key Identifier: keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:fa:c2:3e:7d:b2:e2:d6:1b:98:fa:bb:f4:8d:f8:25:d1:cb: ba:4a:19:25:12:fa:48:60:19:b4:ea:1c:7b:aa:e7:05:fa:84: 18:fc:02:c1:f0:b9:44:4c:42:64:67:75:4e:aa:f3:27:35:84: f6:f5:d0:3a:2a:32:fb:f0:8b:9a:99:e4:7c:65:50:7b:83:8e: 85:a4:8d:e5:b1:44:ca:33:1a:4f:f3:0a:b6:74:f5:81:f1:1c: b1:4e:28:80:13:27:bf:13:89:ae:3f:ce:fc:ea:53:24:ac:be: 3e:40:f9:c7:64:08:57:35:1d:c4:89:5f:a1:4b:eb:0b:5d:7b: c9:95:3a:1f:87:e6:a8:94:b1:e1:fd:2d:1d:78:9a:1b:4c:f6: 88:d2:c9:f3:9f:0e:b1:75:9d:92:89:76:18:42:ea:d1:30:30: 2a:37:d3:ff:d0:e1:80:5a:56:84:5f:cc:30:f5:ad:02:42:eb: 33:c7:39:7a:e6:fd:66:21:f0:56:bf:86:ad:80:a8:f9:53:1f: f1:29:9a:4f:5c:1f:3f:f5:20:65:83:93:91:3c:91:da:eb:b4: 5e:87:59:de:3d:1e:d4:50:12:2d:57:a2:3f:3c:bc:fb:bb:3a: 3f:c5:74:53:d5:13:f4:6c:c0:54:11:9a:24:ca:ce:91:e1:58: d5:8a:dc:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7d2KLe5YdvzfotXYkiZoBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZGVjNGE0NmE2ZTZlNGY5YTkyZDBiYTJlMGIzYWI1NjU4 YmUxYmQwHhcNMjYwMTI2MTgwMTAzWhcNMjYwMTI3MTgwMTAzWjAzMTEwLwYDVQQD EyhhZjgwNTJiNjgyN2EzMWYyMjdhYjEwMTg1ZTA2YTYzYTQwYWU4MDA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PW2C4yaffkKak9kn/ihxrvxEo+H 2U+KnoIJpb6ATj67kcgfe9VaEDkstUBxQlK4Ll3buXtlhIoxcHnB1hFIy5cgdciV MgDy+aDG5qrQFIVDM0zVuclzVMfhJuM6gvcpVCYMMf7zgnwz0zrtNtmVFdCe4YCW sQt9qFefA1O+6rkPtNzKJUfXbQ12pC1hQb/+JS7x0BvT9YNEpweCmjaKc+mvC8Ea Yp5CuDcbB2KGvAutigSmk7R0ZCjxixBMjw40RxTfHnN0+WLp4HWH0X8snUSDAdLw g3qbhBpXdhBjnOmPq66Ot16QQIT9C/Vi99i0jeghGRRKwZq/CdQXPAYhQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK+AUraCejHyJ6sQGF4GpjpAroAFMB8GA1UdIwQY MBaAFP/exKRqbm5PmpLQui4LOrVli+G9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEt N2U4YzZkNGQ5YmVmLzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEtN2U4YzZkNGQ5YmVm LzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUfrCPn2y 4tYbmPq79I34JdHLukoZJRL6SGAZtOoce6rnBfqEGPwCwfC5RExCZGd1TqrzJzWE 9vXQOioy+/CLmpnkfGVQe4OOhaSN5bFEyjMaT/MKtnT1gfEcsU4ogBMnvxOJrj/O /OpTJKy+PkD5x2QIVzUdxIlfoUvrC117yZU6H4fmqJSx4f0tHXiaG0z2iNLJ858O sXWdkol2GELq0TAwKjfT/9DhgFpWhF/MMPWtAkLrM8c5eub9ZiHwVr+GrYCo+VMf 8SmaT1wfP/UgZYOTkTyR2uu0XodZ3j0e1FASLVeiPzy8+7s6P8V0U9UT9GzAVBGa JMrOkeFY1YrctQ== -----END CERTIFICATE-----Generated at Mon Jan 26 21:53:15 2026 by rpki-client