This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft File: fcVVNSMj28woe4fg1qSBSmOrvUY.mft (raw, json) Hash identifier: rpmqn7BhT45xYa8CMOGOjWdl6L/Tqf3QVMyDtlcln3Q= Subject key identifier: C8:FD:7A:77:13:A0:18:71:11:26:34:A0:EB:27:D8:63:E2:28:86:CA Authority key identifier: 7D:C5:55:35:23:23:DB:CC:28:7B:87:E0:D6:A4:81:4A:63:AB:BD:46 Certificate issuer: /CN=7dc555352323dbcc287b87e0d6a4814a63abbd46 Certificate serial: 019BFCF810F7F87813F757DB3533BB151628 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft Manifest number: 04CA Signing time: Tue 27 Jan 2026 01:01:14 +0000 Manifest this update: Tue 27 Jan 2026 01:01:14 +0000 Manifest next update: Wed 28 Jan 2026 01:01:14 +0000 Files and hashes: 1: d3XCpcyn0uAgmWptpHQjYP7UPLA.roa (hash: ou/aEB+Ce2n+pbDK9cilwO6M3zpwbvFU2gW96y63Kxw=) 2: fcVVNSMj28woe4fg1qSBSmOrvUY.crl (hash: wITRBl05Aeyrt8WTv8RqdGFq1XJumLKgXCm8a8e1n6o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.crl rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 01:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:f8:10:f7:f8:78:13:f7:57:db:35:33:bb:15:16:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7dc555352323dbcc287b87e0d6a4814a63abbd46 Validity Not Before: Jan 27 01:01:14 2026 GMT Not After : Jan 28 01:01:14 2026 GMT Subject: CN=c8fd7a7713a01871112634a0eb27d863e22886ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:03:aa:09:25:7e:1b:05:fa:a3:1c:92:f9:43: 9f:e4:2c:bc:c5:b5:21:8a:03:63:eb:cf:d4:77:5a: 74:04:4c:88:01:48:53:38:bb:53:20:ec:eb:30:38: 1b:67:c8:20:a5:60:a4:60:81:93:2f:74:f9:ff:d5: 37:da:1c:0e:0b:fc:68:92:95:3c:06:7f:f7:73:da: b0:95:0c:9e:c6:fe:1c:7f:68:fd:d3:dc:fd:5c:a4: 0d:8e:e2:ca:4a:36:74:d9:76:f3:bc:d3:aa:38:42: b8:29:e4:e7:70:68:31:d9:19:ee:46:f0:99:70:5a: 1c:0b:fb:81:f0:5f:bb:e0:a0:d6:47:26:af:7e:12: b7:ce:23:fd:6e:f3:48:4f:84:d8:ff:59:77:ac:4e: 88:a8:bb:13:15:14:a9:2f:c4:91:b7:bc:d8:b4:a5: 23:b3:5a:2e:e8:54:78:c5:41:7b:22:a9:2c:25:23: a2:bd:f7:24:a8:90:01:31:d6:e1:dd:4f:bd:a1:34: aa:f4:0f:85:f1:35:f6:2c:f8:df:b1:8f:bd:d5:1c: 82:55:f3:77:e7:44:a9:32:90:aa:8f:f0:19:de:4b: 43:ad:96:c6:c8:6e:f3:0e:1c:ef:9b:5b:e2:c6:00: 41:4d:7d:2b:12:5c:4f:c0:e1:04:f8:0a:0d:69:b3: 7e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:FD:7A:77:13:A0:18:71:11:26:34:A0:EB:27:D8:63:E2:28:86:CA X509v3 Authority Key Identifier: keyid:7D:C5:55:35:23:23:DB:CC:28:7B:87:E0:D6:A4:81:4A:63:AB:BD:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:29:46:2c:86:a5:44:fe:10:3b:ee:08:7e:3e:e3:0b:ab:7c: 2e:5f:58:50:c0:5f:81:fc:93:ee:69:d0:5b:e4:33:c8:36:38: 18:1b:01:9a:6b:fa:33:3a:d3:bc:18:7f:19:25:4a:c1:a5:3a: fb:1e:23:93:af:93:67:1d:b5:f3:16:7e:21:42:ad:4a:09:d2: ed:b7:25:18:47:33:0e:1a:24:69:42:36:52:f0:e2:b3:1b:bb: 85:89:35:7e:f4:d2:79:f5:6c:66:c9:fc:0d:2c:d0:9f:da:4f: ac:20:bf:98:20:eb:7b:06:d1:c1:90:ad:94:00:f3:dd:09:97: c9:69:c2:71:ae:38:32:bc:00:0d:16:3f:41:4a:66:80:d6:ea: 02:55:a7:52:b3:4f:bb:89:da:ee:be:18:db:a2:8f:7a:99:24: d4:75:bc:6d:1e:22:a8:cb:03:75:86:b8:a3:12:2c:0e:43:9e: dd:24:62:ee:b7:d4:26:33:e0:44:65:6a:43:d9:9e:e5:61:40: 35:e0:ab:0d:2d:2f:2d:ec:45:0b:cc:c6:9b:ce:f9:c3:af:63: c5:91:ba:7f:4e:97:f2:22:bb:2c:d3:e9:2c:08:4b:27:3e:92: 56:f5:45:1c:6d:be:60:c1:79:78:ee:ef:58:b4:80:ad:3b:0e: d1:08:31:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8+BD3+HgT91fbNTO7FRYoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYzU1NTM1MjMyM2RiY2MyODdiODdlMGQ2YTQ4MTRhNjNh YmJkNDYwHhcNMjYwMTI3MDEwMTE0WhcNMjYwMTI4MDEwMTE0WjAzMTEwLwYDVQQD EyhjOGZkN2E3NzEzYTAxODcxMTEyNjM0YTBlYjI3ZDg2M2UyMjg4NmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wOqCSV+GwX6oxyS+UOf5Cy8xbUh igNj68/Ud1p0BEyIAUhTOLtTIOzrMDgbZ8ggpWCkYIGTL3T5/9U32hwOC/xokpU8 Bn/3c9qwlQyexv4cf2j909z9XKQNjuLKSjZ02XbzvNOqOEK4KeTncGgx2RnuRvCZ cFocC/uB8F+74KDWRyavfhK3ziP9bvNIT4TY/1l3rE6IqLsTFRSpL8SRt7zYtKUj s1ou6FR4xUF7IqksJSOivfckqJABMdbh3U+9oTSq9A+F8TX2LPjfsY+91RyCVfN3 50SpMpCqj/AZ3ktDrZbGyG7zDhzvm1vixgBBTX0rElxPwOEE+AoNabN+FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMj9encToBhxESY0oOsn2GPiKIbKMB8GA1UdIwQY MBaAFH3FVTUjI9vMKHuH4NakgUpjq71GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmNWVk5TTWoyOHdvZTRmZzFxU0JTbU9ydlVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi83YTFhZWUtNjcxYi00ZjM5LWI0ZGQt MjEyYTlmMzEwNjIyLzEvZmNWVk5TTWoyOHdvZTRmZzFxU0JTbU9ydlVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi83YTFhZWUtNjcxYi00ZjM5LWI0ZGQtMjEyYTlmMzEwNjIy LzEvZmNWVk5TTWoyOHdvZTRmZzFxU0JTbU9ydlVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIClGLIal RP4QO+4Ifj7jC6t8Ll9YUMBfgfyT7mnQW+QzyDY4GBsBmmv6MzrTvBh/GSVKwaU6 +x4jk6+TZx218xZ+IUKtSgnS7bclGEczDhokaUI2UvDisxu7hYk1fvTSefVsZsn8 DSzQn9pPrCC/mCDrewbRwZCtlADz3QmXyWnCca44MrwADRY/QUpmgNbqAlWnUrNP u4na7r4Y26KPepkk1HW8bR4iqMsDdYa4oxIsDkOe3SRi7rfUJjPgRGVqQ9me5WFA NeCrDS0vLexFC8zGm875w69jxZG6f06X8iK7LNPpLAhLJz6SVvVFHG2+YMF5eO7v WLSArTsO0QgxsA== -----END CERTIFICATE-----Generated at Tue Jan 27 11:52:50 2026 by rpki-client