This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft File: fz4IdInuI6lCTVP6whbuS44BKA4.mft (raw, json) Hash identifier: FuY7Yg7+Q7vnqF5Pjy6OPO5+nidrI716WmBtTpQG9pc= Subject key identifier: 68:9C:E1:8E:31:FD:21:41:60:0D:F6:9C:65:CB:F6:54:93:9B:91:90 Authority key identifier: 7F:3E:08:74:89:EE:23:A9:42:4D:53:FA:C2:16:EE:4B:8E:01:28:0E Certificate issuer: /CN=7f3e087489ee23a9424d53fac216ee4b8e01280e Certificate serial: 019BFDD39B3D6D3E006BF0C857D62FA605F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft Manifest number: 177F Signing time: Tue 27 Jan 2026 05:01:01 +0000 Manifest this update: Tue 27 Jan 2026 05:01:01 +0000 Manifest next update: Wed 28 Jan 2026 05:01:01 +0000 Files and hashes: 1: RO8EIzazCz5i9qCar0Fb-jUPsko.roa (hash: DUy255OTmG341QO1OT1MJtYrEowqoZ8jB65GBc6gQ8o=) 2: fz4IdInuI6lCTVP6whbuS44BKA4.crl (hash: eZEYwe9J3s0xd879auNpAPcn2siDfhNrChJ1MeczSsI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:d3:9b:3d:6d:3e:00:6b:f0:c8:57:d6:2f:a6:05:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f3e087489ee23a9424d53fac216ee4b8e01280e Validity Not Before: Jan 27 05:01:01 2026 GMT Not After : Jan 28 05:01:01 2026 GMT Subject: CN=689ce18e31fd2141600df69c65cbf654939b9190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:22:cc:2d:da:f3:05:a0:99:29:08:06:7c:84: 67:f2:17:ba:68:ad:2e:45:74:3f:a5:89:b8:1a:78: 2d:8b:81:87:ba:79:71:f2:aa:57:00:db:df:a6:cc: b3:27:cd:09:b1:f5:9e:4c:a6:2d:92:52:fc:81:80: dc:04:5b:1b:91:e2:80:ed:ee:f3:2e:82:42:48:54: fa:41:ba:df:51:24:07:cd:3f:e7:3a:d2:1d:cf:e3: f0:11:d4:19:94:4b:85:1d:0a:eb:24:0e:c9:25:7b: 82:17:1c:8f:a1:57:31:ea:91:48:89:15:8a:65:e3: de:8a:d3:aa:cc:53:e3:11:28:8f:8b:4f:42:91:89: b7:dd:c3:c5:9f:98:30:50:54:d0:3b:87:a9:0c:15: 04:86:0e:bf:3e:9d:82:f6:40:f8:93:5f:a3:76:10: be:7c:98:c5:0a:2b:69:89:c8:7d:78:1d:0c:02:08: 55:c3:cc:d6:af:a2:f8:7e:08:13:e1:ed:2c:fd:03: 87:c3:1d:dc:b5:42:fb:53:a1:12:68:7d:3a:79:0a: a9:9c:f9:29:33:7d:ec:6d:59:cd:6c:b8:70:cf:50: ca:50:d9:b4:54:48:c6:fe:c9:01:88:d3:23:c3:d6: c5:12:c9:1d:da:fd:8d:00:27:cb:33:36:f8:3e:d0: 93:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:9C:E1:8E:31:FD:21:41:60:0D:F6:9C:65:CB:F6:54:93:9B:91:90 X509v3 Authority Key Identifier: keyid:7F:3E:08:74:89:EE:23:A9:42:4D:53:FA:C2:16:EE:4B:8E:01:28:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:d6:86:b3:15:49:9f:d5:02:4e:2d:10:4f:f8:86:9a:1a:d0: b6:69:49:1b:d1:7d:3f:6f:5e:70:84:8a:97:79:64:e1:4c:c6: 30:fd:a6:94:01:b8:b3:49:b6:a9:7d:50:b8:f2:a3:59:03:51: 30:ff:e5:e2:a0:fe:c1:19:a1:0e:ff:52:6a:7d:f1:3a:e0:0c: 6c:63:2a:f8:12:a1:b2:59:e6:ac:e4:92:df:62:84:22:bd:cf: 96:a0:cf:50:9a:a9:45:2b:fc:47:8f:76:23:99:ef:cc:44:44: b3:e0:f7:bf:4d:37:fa:f1:36:d5:22:ce:d8:2c:91:78:74:ac: 78:8b:b0:5b:33:b6:25:fc:10:17:be:7c:3d:8e:cd:36:c1:3b: 0e:eb:37:a1:6b:6a:6d:6d:8e:5a:a0:00:77:d7:68:69:27:97: 1a:d9:7d:a4:c1:c5:55:a9:2e:e1:ee:73:40:66:df:b4:f8:cc: 35:f8:dc:d9:f0:6d:bf:3a:61:e9:5f:58:ba:f7:73:ee:13:67: c4:62:3f:45:1a:70:c9:6f:ae:ab:93:8f:bf:f8:b5:c1:61:02: 5d:29:f8:99:a8:5e:01:79:ff:54:0a:a9:57:ca:e3:a3:ac:06: 11:77:ad:6e:68:08:37:29:19:02:cf:ea:fc:74:e7:13:25:c8: e1:84:f0:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv905s9bT4Aa/DIV9YvpgXwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmM2UwODc0ODllZTIzYTk0MjRkNTNmYWMyMTZlZTRiOGUw MTI4MGUwHhcNMjYwMTI3MDUwMTAxWhcNMjYwMTI4MDUwMTAxWjAzMTEwLwYDVQQD Eyg2ODljZTE4ZTMxZmQyMTQxNjAwZGY2OWM2NWNiZjY1NDkzOWI5MTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSLMLdrzBaCZKQgGfIRn8he6aK0u RXQ/pYm4Gngti4GHunlx8qpXANvfpsyzJ80JsfWeTKYtklL8gYDcBFsbkeKA7e7z LoJCSFT6QbrfUSQHzT/nOtIdz+PwEdQZlEuFHQrrJA7JJXuCFxyPoVcx6pFIiRWK ZePeitOqzFPjESiPi09CkYm33cPFn5gwUFTQO4epDBUEhg6/Pp2C9kD4k1+jdhC+ fJjFCitpich9eB0MAghVw8zWr6L4fggT4e0s/QOHwx3ctUL7U6ESaH06eQqpnPkp M33sbVnNbLhwz1DKUNm0VEjG/skBiNMjw9bFEskd2v2NACfLMzb4PtCTtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGic4Y4x/SFBYA32nGXL9lSTm5GQMB8GA1UdIwQY MBaAFH8+CHSJ7iOpQk1T+sIW7kuOASgOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZno0SWRJbnVJNmxDVFZQNndoYnVTNDRCS0E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9jMmM5OWQtY2Y5MS00ZGZiLTk0ZGUt YTdjNjNkNTYyZTU2LzEvZno0SWRJbnVJNmxDVFZQNndoYnVTNDRCS0E0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9jMmM5OWQtY2Y5MS00ZGZiLTk0ZGUtYTdjNjNkNTYyZTU2 LzEvZno0SWRJbnVJNmxDVFZQNndoYnVTNDRCS0E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP9aGsxVJ n9UCTi0QT/iGmhrQtmlJG9F9P29ecISKl3lk4UzGMP2mlAG4s0m2qX1QuPKjWQNR MP/l4qD+wRmhDv9San3xOuAMbGMq+BKhslnmrOSS32KEIr3PlqDPUJqpRSv8R492 I5nvzEREs+D3v003+vE21SLO2CyReHSseIuwWzO2JfwQF758PY7NNsE7Dus3oWtq bW2OWqAAd9doaSeXGtl9pMHFVaku4e5zQGbftPjMNfjc2fBtvzph6V9Yuvdz7hNn xGI/RRpwyW+uq5OPv/i1wWECXSn4maheAXn/VAqpV8rjo6wGEXetbmgINykZAs/q /HTnEyXI4YTwzg== -----END CERTIFICATE-----Generated at Tue Jan 27 08:28:34 2026 by rpki-client