This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft File: fexyg377vE6m3dS-lDYZFrTDYto.mft (raw, json) Hash identifier: VOmIj1xTsnZdhSUH4FqAoFsoUZuvO4dRM8/+BBXib6o= Subject key identifier: 68:DB:6E:EA:B0:07:F9:8F:57:64:8D:AA:8A:38:50:62:0D:10:7A:C6 Authority key identifier: 7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA Certificate issuer: /CN=7dec72837efbbc4ea6ddd4be94361916b4c362da Certificate serial: 019BFD2E58B8A22B75B7DCC6FBEDC180A98A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft Manifest number: 0ED4 Signing time: Tue 27 Jan 2026 02:00:31 +0000 Manifest this update: Tue 27 Jan 2026 02:00:31 +0000 Manifest next update: Wed 28 Jan 2026 02:00:31 +0000 Files and hashes: 1: 3g6ILoE9ejngNxt1ax6rYM1LQ60.roa (hash: LEUisAJ5IBxkUseMOfjHAnJQfW3VdAcMs8IPdC6dNso=) 2: fexyg377vE6m3dS-lDYZFrTDYto.crl (hash: 8jPBsXj78iXOvo8LtrYJWBqmtaA4XVL9zZB3ifEBAjM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:2e:58:b8:a2:2b:75:b7:dc:c6:fb:ed:c1:80:a9:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7dec72837efbbc4ea6ddd4be94361916b4c362da Validity Not Before: Jan 27 02:00:31 2026 GMT Not After : Jan 28 02:00:31 2026 GMT Subject: CN=68db6eeab007f98f57648daa8a3850620d107ac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7f:ff:8f:40:0d:20:7e:95:ce:69:13:0f:d4: 27:4e:26:d4:d2:9b:f5:60:c1:b9:e8:c5:aa:22:c2: 1d:9d:09:bb:a1:11:78:bc:81:b7:0c:30:12:f8:04: 0e:81:41:3c:8c:81:19:19:19:20:63:54:da:8f:bb: a3:05:85:ac:84:7f:26:d0:f3:14:64:55:c3:e0:d7: 9a:6d:0c:c4:5f:8f:56:78:de:74:26:ef:4c:be:de: b8:18:22:35:b0:20:c2:1b:15:7b:0e:27:15:e9:1d: 39:59:af:bc:5f:89:10:f9:19:f1:04:64:30:72:55: 84:9c:04:6e:c9:93:ea:9b:3a:1a:35:c6:e0:20:df: 8a:9c:5d:c5:07:c2:b7:df:df:fd:13:fe:3c:52:01: 2f:83:81:7d:ff:1f:dd:29:1f:01:a1:4c:b0:60:91: 52:68:45:e6:8c:0e:8e:58:e4:a1:49:f3:d5:48:7b: 92:8e:1d:45:84:6a:3b:ba:8a:1c:7a:b9:34:60:86: 88:bb:77:56:51:a1:6a:ce:8d:57:9a:3c:35:90:63: f0:96:13:f7:05:43:0b:f3:e4:e0:f6:8d:86:4b:23: a3:db:b7:7a:35:fb:3b:b7:cc:e0:45:4d:1d:3c:4d: 96:25:ec:f3:53:a5:0e:61:e9:49:e2:49:3f:0f:48: f2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:DB:6E:EA:B0:07:F9:8F:57:64:8D:AA:8A:38:50:62:0D:10:7A:C6 X509v3 Authority Key Identifier: keyid:7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:c1:d2:44:e9:00:a9:32:dc:a6:aa:f7:ff:39:1e:cc:5f:1a: 14:10:ee:62:88:3b:a1:a6:5a:b4:36:bd:78:d1:3c:9e:47:43: fe:16:27:33:cd:cd:c2:39:3b:5e:c8:72:f6:54:b7:5d:f0:95: f4:ab:de:e9:31:2c:6a:4d:8d:b1:83:8b:5d:62:2f:11:d6:27: 14:8d:97:4a:81:03:eb:9d:32:fb:b7:fc:0f:91:77:87:24:e7: 63:be:3c:c6:cc:b3:cd:a3:8e:83:47:80:21:a4:e1:59:c1:29: 65:b0:c7:41:d3:0f:97:7c:04:3b:2e:f2:d3:75:a6:47:0d:b4: cc:7f:e0:50:2e:0f:93:ab:94:2f:09:7b:cd:b3:e1:c3:9a:04: ee:de:5f:f3:6c:25:39:ef:ec:88:83:09:69:be:42:e1:cb:23: 9b:11:8b:f7:23:46:f9:99:6e:2e:aa:e0:f4:9a:5a:6f:48:98: 26:f8:dd:36:e2:36:d3:b3:52:a4:38:48:c1:f5:9d:0e:6f:2e: ff:02:ee:2b:e8:f5:c8:41:da:d6:68:56:7d:64:e1:64:8e:3a: 8d:82:8f:b9:11:97:59:b8:1a:d4:3d:5f:9a:ec:a5:47:a2:f6: cd:0c:d3:89:2a:d7:8c:22:a5:eb:c4:bf:e9:b0:00:9a:a6:15: 73:4a:29:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9Lli4oit1t9zG++3BgKmKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZWM3MjgzN2VmYmJjNGVhNmRkZDRiZTk0MzYxOTE2YjRj MzYyZGEwHhcNMjYwMTI3MDIwMDMxWhcNMjYwMTI4MDIwMDMxWjAzMTEwLwYDVQQD Eyg2OGRiNmVlYWIwMDdmOThmNTc2NDhkYWE4YTM4NTA2MjBkMTA3YWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1X//j0ANIH6VzmkTD9QnTibU0pv1 YMG56MWqIsIdnQm7oRF4vIG3DDAS+AQOgUE8jIEZGRkgY1Taj7ujBYWshH8m0PMU ZFXD4NeabQzEX49WeN50Ju9Mvt64GCI1sCDCGxV7DicV6R05Wa+8X4kQ+RnxBGQw clWEnARuyZPqmzoaNcbgIN+KnF3FB8K339/9E/48UgEvg4F9/x/dKR8BoUywYJFS aEXmjA6OWOShSfPVSHuSjh1FhGo7uoocerk0YIaIu3dWUaFqzo1Xmjw1kGPwlhP3 BUML8+Tg9o2GSyOj27d6Nfs7t8zgRU0dPE2WJezzU6UOYelJ4kk/D0jydwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGjbbuqwB/mPV2SNqoo4UGINEHrGMB8GA1UdIwQY MBaAFH3scoN++7xOpt3UvpQ2GRa0w2LaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmV4eWczNzd2RTZtM2RTLWxEWVpGclREWXRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy80NDQ3OGYtZTk4MC00ZTYwLTlkNmUt Mzg2NjE3YTY2NGZlLzEvZmV4eWczNzd2RTZtM2RTLWxEWVpGclREWXRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy80NDQ3OGYtZTk4MC00ZTYwLTlkNmUtMzg2NjE3YTY2NGZl LzEvZmV4eWczNzd2RTZtM2RTLWxEWVpGclREWXRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAccHSROkA qTLcpqr3/zkezF8aFBDuYog7oaZatDa9eNE8nkdD/hYnM83Nwjk7Xshy9lS3XfCV 9Kve6TEsak2NsYOLXWIvEdYnFI2XSoED650y+7f8D5F3hyTnY748xsyzzaOOg0eA IaThWcEpZbDHQdMPl3wEOy7y03WmRw20zH/gUC4Pk6uULwl7zbPhw5oE7t5f82wl Oe/siIMJab5C4csjmxGL9yNG+ZluLqrg9Jpab0iYJvjdNuI207NSpDhIwfWdDm8u /wLuK+j1yEHa1mhWfWThZI46jYKPuRGXWbga1D1fmuylR6L2zQzTiSrXjCKl68S/ 6bAAmqYVc0opeA== -----END CERTIFICATE-----Generated at Tue Jan 27 07:16:56 2026 by rpki-client