This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft File: 71fC2dk6x8-bLxfKp4WbaYWzm50.mft (raw, json) Hash identifier: WFMvsTPHF6cwv2k+mc+T+j7+rLpdD8C5GnWNsGi5adA= Subject key identifier: F9:93:4F:44:5D:A8:8E:E0:44:BA:10:50:C6:22:D3:5B:7D:99:09:9E Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Certificate serial: 019BD8B4989D30E2B0F24E4565F9669B2CFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft Manifest number: 1420 Signing time: Tue 20 Jan 2026 00:01:12 +0000 Manifest this update: Tue 20 Jan 2026 00:01:12 +0000 Manifest next update: Wed 21 Jan 2026 00:01:12 +0000 Files and hashes: 1: 2ngTJwoTyX1Nz5fKPJKsViXxDHk.roa (hash: Ir7bv4VELFAPGwsqBM/ur+v9Fopro+iM13JltIh4cX4=) 2: 6rWzroD3N7hgAXbNo3yuEEQJsfI.roa (hash: E8YwvFkIVbhynhPsVej9fShdrkMGkyiT775U87D7jFU=) 3: 71fC2dk6x8-bLxfKp4WbaYWzm50.crl (hash: PhJsgZrkxOWzV2bXimX5OmpgF47Uc/eeEEIODBgG/9Q=) 4: 7G49o5z8bi7Lcd53h1h0bVLCJZ4.roa (hash: xDGbGchiaLKjcl8d608rUMISo9V9+y1tYFZNtiJzodk=) 5: LEPIREdkNINi3YsArD5Iqz6JZKw.roa (hash: u5xGsEDr0cKb/8SFVnNCp/maWigXZl2skRgwHSiizuc=) 6: MhN5MRvvgoofpuFJ5m4YLHyq3Nc.roa (hash: NsITOI3k4qxMk9t6uldTtNFi2z9FnXsMOLB/akZmaQE=) 7: OoWh-cPJxIo9-JnYWW14PlGkMmw.roa (hash: cwPQ8D+hZiBjw4HTvZt5RVfnCwIHlW6ts6eZs3ca5ro=) 8: SFT1d23h5s56wOshvucHEdfHMus.roa (hash: VF+VBV1f8xNTi+BzW8c6Ab0X5I99oWpbTy8oGRDDLo4=) 9: Y6USBv7EsN_hgdgW0uW5KbpmRN4.roa (hash: tv5XftYxR3URBlazOVai0U6SyL0OPoC8TTkoFI5KZuM=) 10: cJiubHQvHYR5Esd1XVcnoAH7nVc.roa (hash: FMFv+8H/z6shQKfY24LWmw315shSovkbNLpCdkTVVts=) 11: fxFIclzOclkDebowO2HCdBIp7JU.roa (hash: kKrwCtFqATS4Q0FX0wGNL2DdvolnBDZchK0yi2jbTGw=) 12: hOLoSAjKi_Ysduv-PJ2ejNql5Ok.roa (hash: lHppC78Yz/GWXK8KxKeoOvZZKZRlVzNZc6B6F5euHEc=) 13: lQ3OWX0myb8uFOtmBUqCeb2oHhA.roa (hash: bhpFnL+TI2NRedv8XMlX+BIC3gSuHb2XvhJF/GSwAJE=) 14: lfuF0jCiq554Dy69uuASsTOPZ58.roa (hash: 6OAF0vEeoAJWYtA3vCDPsWGl38QU6NBLN+OCMZmyOUQ=) 15: mOLu5yy1hfuAdimwt8EIDKecKDQ.roa (hash: 5YCmlSPstxquYrl1BiHwoJ0FV26JerY9NJHkI5lqyeU=) 16: xgcIl72OMRsTXzMLl7PIGrHb2sQ.roa (hash: 2SWmpy8UdVqECkthus0V0cF6NslAcNvMaIDq36UHafw=) 17: yJInE-fPhdu-ABKOdKIoShinhzo.roa (hash: skD34yjii/PhcEF3U0syiUJjraUYJpJM6Jt4QrA1zs8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d8:b4:98:9d:30:e2:b0:f2:4e:45:65:f9:66:9b:2c:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Validity Not Before: Jan 20 00:01:12 2026 GMT Not After : Jan 21 00:01:12 2026 GMT Subject: CN=f9934f445da88ee044ba1050c622d35b7d99099e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8a:41:39:59:cd:52:33:0a:0d:97:c1:0a:6b: 2a:8d:35:a3:e2:65:89:a7:5a:d4:d6:5e:cb:37:a0: d3:69:85:0e:a7:2b:20:d7:6e:aa:1f:5b:0c:67:51: e6:21:94:64:33:42:3b:03:0a:97:7a:5a:bb:86:bc: 36:c4:06:2f:89:36:b3:a0:61:69:f4:f0:bf:3d:b5: c0:d1:e5:3e:c2:a0:91:08:5e:68:63:3a:e9:d9:d8: e5:60:db:6c:67:16:bc:bc:ff:4f:05:1a:15:15:7d: 59:aa:45:86:54:b2:6f:a2:61:c4:14:f9:90:86:0d: e3:60:17:55:8e:09:0a:09:6e:27:09:23:38:e3:d0: 49:ce:bb:4c:43:43:39:2e:36:20:d9:02:ea:7e:af: af:d8:04:99:c8:30:fc:f1:b1:5e:71:0e:99:8c:bd: ec:d7:1d:44:13:c6:c8:81:2a:1c:4a:f8:e0:51:18: 2e:c1:39:e5:ea:7a:f9:a8:4a:d2:8b:e7:3d:f5:d9: 75:a7:55:b2:89:79:5d:15:f6:64:2c:75:28:35:3d: 19:93:fc:aa:1f:fe:60:52:d5:f2:e2:b9:ee:a2:64: 22:1d:a7:0c:08:7f:cf:05:6b:e5:3d:7f:bc:fe:44: 97:54:29:34:aa:f8:63:ff:ea:dd:98:2b:5b:1c:30: 98:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:93:4F:44:5D:A8:8E:E0:44:BA:10:50:C6:22:D3:5B:7D:99:09:9E X509v3 Authority Key Identifier: keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:59:a3:99:95:3c:46:2d:c5:e2:3a:21:2d:4b:44:41:37:46: 06:f7:fe:73:e3:4a:b7:43:7a:8d:dd:7d:8e:cc:48:e4:7a:04: 2a:34:52:83:81:4b:be:3a:10:9c:32:27:95:8d:ec:9a:2c:b3: 7c:6b:f8:55:ba:56:94:3a:0b:36:8d:09:26:8b:ac:64:18:28: 7c:21:2f:27:70:6a:23:b6:8a:e2:05:fe:cb:58:12:64:b0:94: ab:07:0d:db:80:33:f3:00:ea:28:cd:ec:64:cd:9a:2a:18:31: b0:97:f8:52:2a:d2:0c:86:b2:e0:78:d3:35:c1:47:c7:dc:5c: 94:83:3a:b6:89:70:12:1e:5d:e4:c0:85:af:57:ad:2c:64:bf: a6:3b:9f:eb:a9:00:c7:a7:c2:0d:40:73:e1:9e:6a:64:8b:f2: bb:ca:90:04:18:ea:a6:53:ed:fc:4c:9a:f4:b9:b2:ad:e5:37: 5a:3e:59:7f:f7:d0:2b:b9:52:c6:fc:1f:21:cd:4d:e6:1c:e6: d1:0f:dd:75:cc:e4:87:80:81:f8:52:e4:9f:4c:e1:6e:52:44: 22:75:72:8a:8e:03:47:c2:76:72:47:42:20:35:9f:9a:bb:16: aa:9e:4f:40:3d:76:18:10:81:3e:63:01:b4:33:3a:bd:de:f5: fc:58:1b:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvYtJidMOKw8k5FZflmmyz6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTdjMmQ5ZDkzYWM3Y2Y5YjJmMTdjYWE3ODU5YjY5ODVi MzliOWQwHhcNMjYwMTIwMDAwMTEyWhcNMjYwMTIxMDAwMTEyWjAzMTEwLwYDVQQD EyhmOTkzNGY0NDVkYTg4ZWUwNDRiYTEwNTBjNjIyZDM1YjdkOTkwOTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYpBOVnNUjMKDZfBCmsqjTWj4mWJ p1rU1l7LN6DTaYUOpysg126qH1sMZ1HmIZRkM0I7AwqXelq7hrw2xAYviTazoGFp 9PC/PbXA0eU+wqCRCF5oYzrp2djlYNtsZxa8vP9PBRoVFX1ZqkWGVLJvomHEFPmQ hg3jYBdVjgkKCW4nCSM449BJzrtMQ0M5LjYg2QLqfq+v2ASZyDD88bFecQ6ZjL3s 1x1EE8bIgSocSvjgURguwTnl6nr5qErSi+c99dl1p1WyiXldFfZkLHUoNT0Zk/yq H/5gUtXy4rnuomQiHacMCH/PBWvlPX+8/kSXVCk0qvhj/+rdmCtbHDCYHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPmTT0RdqI7gRLoQUMYi01t9mQmeMB8GA1UdIwQY MBaAFO9XwtnZOsfPmy8XyqeFm2mFs5udMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2Njct OGU2Zjg3OGRiNWY0LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2NjctOGU2Zjg3OGRiNWY0 LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK1mjmZU8 Ri3F4johLUtEQTdGBvf+c+NKt0N6jd19jsxI5HoEKjRSg4FLvjoQnDInlY3smiyz fGv4VbpWlDoLNo0JJousZBgofCEvJ3BqI7aK4gX+y1gSZLCUqwcN24Az8wDqKM3s ZM2aKhgxsJf4UirSDIay4HjTNcFHx9xclIM6tolwEh5d5MCFr1etLGS/pjuf66kA x6fCDUBz4Z5qZIvyu8qQBBjqplPt/Eya9LmyreU3Wj5Zf/fQK7lSxvwfIc1N5hzm 0Q/ddczkh4CB+FLkn0zhblJEInVyio4DR8J2ckdCIDWfmrsWqp5PQD12GBCBPmMB tDM6vd71/Fgb7Q== -----END CERTIFICATE-----Generated at Tue Jan 20 03:00:47 2026 by rpki-client