This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft File: Fni0n5riXx4SdTSxkVBErH0NnnM.mft (raw, json) Hash identifier: 0BfsGou7C2Qp40wKaeWTaHOq2Wq0vUhvCHAZmb5LJgc= Subject key identifier: 31:7A:89:E8:C1:46:9E:F9:D8:D7:E1:42:B7:36:DA:A0:23:B8:0B:EF Authority key identifier: 16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73 Certificate issuer: /CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73 Certificate serial: 019BFB09D89879069B4533F28C5CD22904CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft Manifest number: 17EF Signing time: Mon 26 Jan 2026 16:01:24 +0000 Manifest this update: Mon 26 Jan 2026 16:01:24 +0000 Manifest next update: Tue 27 Jan 2026 16:01:24 +0000 Files and hashes: 1: Fni0n5riXx4SdTSxkVBErH0NnnM.crl (hash: gM4wGqzey8ff+V05CUBIxeu9nvebrMN02sv+B3CbDWw=) 2: YS_ybeFO-kBpHk4oOV6WmpXFmYQ.roa (hash: myHnrIBgh1OqNZnDZDrhs0mkn1s9VqCibLxchoW9EaQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:09:d8:98:79:06:9b:45:33:f2:8c:5c:d2:29:04:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73 Validity Not Before: Jan 26 16:01:24 2026 GMT Not After : Jan 27 16:01:24 2026 GMT Subject: CN=317a89e8c1469ef9d8d7e142b736daa023b80bef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2d:02:5d:59:c7:dc:02:10:25:46:e0:9e:af: c2:e1:37:b6:4d:3b:a2:26:91:d3:36:44:b3:da:cc: 8e:b5:98:7d:4a:b9:cb:84:c2:df:e4:c8:23:e6:13: e8:f1:e9:e5:76:27:03:a8:97:8a:2a:dc:ae:8c:05: 02:36:33:e0:eb:01:5f:59:af:ba:f1:df:c8:b0:02: b8:95:71:ec:38:0c:ec:16:ce:20:c6:3e:bb:10:b4: 08:00:88:7f:8a:9e:37:e4:cb:b6:cd:43:fa:b1:e1: 9d:03:93:c1:af:58:df:10:8d:29:9b:3a:64:cc:53: 83:29:23:92:ef:75:08:e4:9a:29:08:27:95:e2:70: 06:05:34:76:d0:94:c6:4f:ef:d9:a7:58:35:7f:c5: 0d:cf:35:58:67:28:7b:dd:ba:9a:43:7b:7f:46:ad: 6d:31:38:94:23:0e:e7:c8:42:38:e9:3d:f0:55:19: 5c:20:7a:2e:cf:68:1f:fc:da:ba:01:ec:ba:95:ac: d3:25:5f:bf:f2:ab:c8:6e:e6:1a:53:19:88:ee:c5: 77:b9:c1:0a:e4:80:7b:1d:89:32:33:12:7c:bd:6e: ad:ec:49:ed:66:35:e5:98:72:56:31:91:ca:87:e4: 3a:48:83:77:d5:05:36:cd:54:3f:47:62:a5:72:57: 13:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:7A:89:E8:C1:46:9E:F9:D8:D7:E1:42:B7:36:DA:A0:23:B8:0B:EF X509v3 Authority Key Identifier: keyid:16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:35:ab:43:6a:96:66:8c:4b:55:c4:1d:06:da:f0:71:70:94: 19:3d:ae:a5:f3:f7:cf:cd:4f:6c:40:82:2c:ae:8c:9f:36:86: e3:99:83:f2:ed:8f:e3:cf:4c:ec:16:69:c8:3f:62:fd:d4:bb: 3c:7f:5d:3f:e9:65:fe:e5:66:08:e8:a1:da:d7:c3:e9:bf:cf: 5f:57:26:b3:72:73:16:18:5f:85:86:e2:10:08:f7:78:38:a6: 72:14:cb:64:e0:42:14:b0:68:bc:c8:80:4e:a6:03:fd:f4:08: 50:17:66:60:bb:52:8a:60:8e:c1:95:10:21:9f:ff:01:07:a7: d9:bb:4f:df:fd:12:a3:88:d4:62:34:87:a3:02:6b:e7:da:fb: 28:89:28:1e:52:ce:ac:60:d8:a5:8a:75:51:c6:75:1c:36:61: b9:7c:e4:d5:21:56:85:27:e1:7d:bb:4c:8e:4c:7d:8e:bc:78: 19:b1:0b:81:39:7f:8e:6e:36:5c:d8:45:48:f1:f0:d6:4c:68: 9b:25:c3:76:f5:cd:23:b7:b9:e9:90:63:52:84:9a:c4:a8:1e: 92:87:16:02:bb:68:38:4c:5e:07:87:f7:6a:9b:fa:38:8e:65: 60:d5:6c:f4:2f:c2:99:5f:cc:05:2a:da:44:4e:7d:a3:17:6f: 9d:de:33:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7CdiYeQabRTPyjFzSKQTKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NzhiNDlmOWFlMjVmMWUxMjc1MzRiMTkxNTA0NGFjN2Qw ZDllNzMwHhcNMjYwMTI2MTYwMTI0WhcNMjYwMTI3MTYwMTI0WjAzMTEwLwYDVQQD EygzMTdhODllOGMxNDY5ZWY5ZDhkN2UxNDJiNzM2ZGFhMDIzYjgwYmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqS0CXVnH3AIQJUbgnq/C4Te2TTui JpHTNkSz2syOtZh9SrnLhMLf5Mgj5hPo8enldicDqJeKKtyujAUCNjPg6wFfWa+6 8d/IsAK4lXHsOAzsFs4gxj67ELQIAIh/ip435Mu2zUP6seGdA5PBr1jfEI0pmzpk zFODKSOS73UI5JopCCeV4nAGBTR20JTGT+/Zp1g1f8UNzzVYZyh73bqaQ3t/Rq1t MTiUIw7nyEI46T3wVRlcIHouz2gf/Nq6Aey6lazTJV+/8qvIbuYaUxmI7sV3ucEK 5IB7HYkyMxJ8vW6t7EntZjXlmHJWMZHKh+Q6SIN31QU2zVQ/R2KlclcTRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDF6iejBRp752NfhQrc22qAjuAvvMB8GA1UdIwQY MBaAFBZ4tJ+a4l8eEnU0sZFQRKx9DZ5zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm5pMG41cmlYeDRTZFRTeGtWQkVySDBObm5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8wZjcxZjMtN2UxMy00NzEzLWIyMzIt NzQ1NGExOWQzMmQxLzEvRm5pMG41cmlYeDRTZFRTeGtWQkVySDBObm5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8wZjcxZjMtN2UxMy00NzEzLWIyMzItNzQ1NGExOWQzMmQx LzEvRm5pMG41cmlYeDRTZFRTeGtWQkVySDBObm5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJTWrQ2qW ZoxLVcQdBtrwcXCUGT2upfP3z81PbECCLK6MnzaG45mD8u2P489M7BZpyD9i/dS7 PH9dP+ll/uVmCOih2tfD6b/PX1cms3JzFhhfhYbiEAj3eDimchTLZOBCFLBovMiA TqYD/fQIUBdmYLtSimCOwZUQIZ//AQen2btP3/0So4jUYjSHowJr59r7KIkoHlLO rGDYpYp1UcZ1HDZhuXzk1SFWhSfhfbtMjkx9jrx4GbELgTl/jm42XNhFSPHw1kxo myXDdvXNI7e56ZBjUoSaxKgekocWArtoOExeB4f3apv6OI5lYNVs9C/CmV/MBSra RE59oxdvnd4zNA== -----END CERTIFICATE-----Generated at Mon Jan 26 18:47:03 2026 by rpki-client