This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft File: F0G9doUTjcUdWmsM03gPRmtX_RM.mft (raw, json) Hash identifier: AEsRT5+FVin0Q13cCSjFY5gdLD1A+XhlypDAC4FDe1I= Subject key identifier: 1E:06:54:E6:76:32:03:25:C5:66:53:FE:99:CB:1B:03:3D:A9:98:E5 Authority key identifier: 17:41:BD:76:85:13:8D:C5:1D:5A:6B:0C:D3:78:0F:46:6B:57:FD:13 Certificate issuer: /CN=1741bd7685138dc51d5a6b0cd3780f466b57fd13 Certificate serial: 019BFCF837D4E361BDB565444A1B7EFB5DBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft Manifest number: 17F0 Signing time: Tue 27 Jan 2026 01:01:24 +0000 Manifest this update: Tue 27 Jan 2026 01:01:24 +0000 Manifest next update: Wed 28 Jan 2026 01:01:24 +0000 Files and hashes: 1: F0G9doUTjcUdWmsM03gPRmtX_RM.crl (hash: nN/wcSMkJm037mxZr90JIAkWII2EX3RffrDmCr3isc4=) 2: bZtAv7jof-AuwEu0cxY9E17KiEM.roa (hash: GmHiN36XVNHoznaH+f5s8+gOGqjQoGIfCLxDgTEZBEA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:f8:37:d4:e3:61:bd:b5:65:44:4a:1b:7e:fb:5d:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1741bd7685138dc51d5a6b0cd3780f466b57fd13 Validity Not Before: Jan 27 01:01:24 2026 GMT Not After : Jan 28 01:01:24 2026 GMT Subject: CN=1e0654e676320325c56653fe99cb1b033da998e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:0d:d8:e3:a4:51:b8:40:bf:b8:50:6e:d0:69: e6:33:57:d3:a2:e2:3d:b8:d8:9d:7b:93:0a:90:8c: 8e:63:3e:e7:68:1d:0e:1a:cb:c8:86:f3:36:9d:fe: 74:38:de:3c:1e:b1:2c:d8:fb:5e:31:e6:dc:dd:01: 96:7d:a4:0b:72:01:6e:d2:fe:25:21:3d:80:66:c9: ea:73:b9:b5:18:19:34:2c:55:75:10:fb:d4:d9:72: 44:99:b7:69:11:fb:b3:46:0d:09:8a:7b:23:7d:07: 71:09:b4:6c:f7:cf:95:e5:01:1b:8b:00:4c:07:90: c1:af:ef:bc:8a:0c:17:e2:9a:c8:54:a4:10:92:b2: e3:4d:ee:42:9a:8b:cf:7b:76:2e:9a:22:08:c5:23: e5:03:71:26:2f:f4:84:62:98:4a:47:41:aa:ec:dc: 7e:78:82:a7:9b:19:44:ad:10:ae:2e:16:62:ae:5a: d9:5a:3d:dc:cf:0a:72:e5:84:63:24:64:68:84:0c: 02:05:66:52:7e:cb:0e:28:f4:b9:3b:94:30:0b:e9: 5c:9c:d6:65:c2:85:35:45:f1:eb:60:84:d1:aa:9a: 27:87:92:f5:2e:ae:47:45:0c:ca:65:28:1e:74:ec: 84:8b:4e:63:d5:aa:a4:09:b6:da:0e:2f:04:46:2d: 2c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:06:54:E6:76:32:03:25:C5:66:53:FE:99:CB:1B:03:3D:A9:98:E5 X509v3 Authority Key Identifier: keyid:17:41:BD:76:85:13:8D:C5:1D:5A:6B:0C:D3:78:0F:46:6B:57:FD:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:42:f7:60:dc:98:13:a1:b7:42:2b:37:c3:f1:60:06:0e:c4: 23:c8:95:93:e2:4e:48:f9:bf:8a:33:3a:9b:31:3a:ef:5c:85: 60:6d:81:b2:04:29:4e:d9:0d:fa:01:a6:29:fe:8e:71:73:7b: 8f:c7:9b:1a:ff:5b:65:ca:5d:03:18:c8:6d:ca:9d:d2:ab:6b: de:ea:e5:64:31:40:9c:42:00:4d:34:3d:07:6b:13:ec:34:cf: a5:95:a2:d5:e5:ac:cb:02:d0:90:24:7f:f1:ed:3b:10:b5:80: 3f:af:5f:ef:97:37:10:ac:fc:e9:b6:21:de:84:fb:5d:03:3b: b8:0a:c4:56:48:f4:c5:5b:c8:dc:5d:2a:0a:03:da:3a:cc:3b: 8e:d0:48:34:23:d3:69:ba:39:87:fe:c7:69:f0:fc:74:86:e8: b9:af:59:cb:0b:82:e1:1e:a9:74:96:9d:c0:2a:2e:97:55:9e: 86:14:fa:b7:4d:45:67:85:04:0c:32:a3:30:eb:5b:3c:22:b6: 2a:74:82:f9:b3:d4:b0:19:27:e6:a7:17:d9:75:b0:ed:6d:2d: a8:2f:83:60:95:59:75:64:04:a4:9b:e4:c7:08:cb:37:a1:cd: e4:77:4c:ca:11:ea:05:cb:fb:86:e5:09:7c:d8:ae:88:be:d9: 58:d9:5c:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8+DfU42G9tWVESht++127MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NDFiZDc2ODUxMzhkYzUxZDVhNmIwY2QzNzgwZjQ2NmI1 N2ZkMTMwHhcNMjYwMTI3MDEwMTI0WhcNMjYwMTI4MDEwMTI0WjAzMTEwLwYDVQQD EygxZTA2NTRlNjc2MzIwMzI1YzU2NjUzZmU5OWNiMWIwMzNkYTk5OGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Q3Y46RRuEC/uFBu0GnmM1fTouI9 uNide5MKkIyOYz7naB0OGsvIhvM2nf50ON48HrEs2PteMebc3QGWfaQLcgFu0v4l IT2AZsnqc7m1GBk0LFV1EPvU2XJEmbdpEfuzRg0JinsjfQdxCbRs98+V5QEbiwBM B5DBr++8igwX4prIVKQQkrLjTe5CmovPe3YumiIIxSPlA3EmL/SEYphKR0Gq7Nx+ eIKnmxlErRCuLhZirlrZWj3czwpy5YRjJGRohAwCBWZSfssOKPS5O5QwC+lcnNZl woU1RfHrYITRqponh5L1Lq5HRQzKZSgedOyEi05j1aqkCbbaDi8ERi0sywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB4GVOZ2MgMlxWZT/pnLGwM9qZjlMB8GA1UdIwQY MBaAFBdBvXaFE43FHVprDNN4D0ZrV/0TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjBHOWRvVVRqY1VkV21zTTAzZ1BSbXRYX1JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9kZjI5MmQtOTU5Yi00ZWFkLTkzNDgt MjlmMDlkODkzYWU3LzEvRjBHOWRvVVRqY1VkV21zTTAzZ1BSbXRYX1JNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9kZjI5MmQtOTU5Yi00ZWFkLTkzNDgtMjlmMDlkODkzYWU3 LzEvRjBHOWRvVVRqY1VkV21zTTAzZ1BSbXRYX1JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO0L3YNyY E6G3Qis3w/FgBg7EI8iVk+JOSPm/ijM6mzE671yFYG2BsgQpTtkN+gGmKf6OcXN7 j8ebGv9bZcpdAxjIbcqd0qtr3urlZDFAnEIATTQ9B2sT7DTPpZWi1eWsywLQkCR/ 8e07ELWAP69f75c3EKz86bYh3oT7XQM7uArEVkj0xVvI3F0qCgPaOsw7jtBINCPT abo5h/7HafD8dIboua9ZywuC4R6pdJadwCoul1WehhT6t01FZ4UEDDKjMOtbPCK2 KnSC+bPUsBkn5qcX2XWw7W0tqC+DYJVZdWQEpJvkxwjLN6HN5HdMyhHqBcv7huUJ fNiuiL7ZWNlceA== -----END CERTIFICATE-----Generated at Tue Jan 27 09:13:13 2026 by rpki-client