This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft File: rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft (raw, json) Hash identifier: KgHsmAiEEDDm4//a1QAOqXkRoI0BYuYnR2xoxpiMlR0= Subject key identifier: 67:CA:5D:90:AC:05:8E:EE:28:E1:C7:A0:6C:41:82:8E:84:94:2A:A0 Authority key identifier: AC:5F:C6:C6:AE:A3:F0:E4:ED:F7:CC:B9:2E:6E:B2:37:7A:74:79:A5 Certificate issuer: /CN=ac5fc6c6aea3f0e4edf7ccb92e6eb2377a7479a5 Certificate serial: 019BE06E015687E29CC5E14A4759C3A5627B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft Manifest number: 1568 Signing time: Wed 21 Jan 2026 12:01:04 +0000 Manifest this update: Wed 21 Jan 2026 12:01:04 +0000 Manifest next update: Thu 22 Jan 2026 12:01:04 +0000 Files and hashes: 1: ErNXrycTzph6JSf18PtwwsQoz2w.roa (hash: JFPJWJTX9AS74O2qvrW7DFe57VW6uqTN8mG7Rp0yt+w=) 2: SZE5e1h7vVE1K8b37udvVnSNQcM.roa (hash: DCVuhDnUxaJKtTV6uLri/M27ey5GSqDohY5/pt5Ejsk=) 3: Z1IlhEZgiQwk8auaQbQKsQhfjGw.roa (hash: GuAHOBM9mGxQz1BFFSnguR68MvXbC1uYn6q2dEBSyQ0=) 4: rF_Gxq6j8OTt98y5Lm6yN3p0eaU.crl (hash: mVSQhs4y/i1IFfEyEqPxBEjfViTLLE9ugy/+FL8gQ1Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:6e:01:56:87:e2:9c:c5:e1:4a:47:59:c3:a5:62:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac5fc6c6aea3f0e4edf7ccb92e6eb2377a7479a5 Validity Not Before: Jan 21 12:01:04 2026 GMT Not After : Jan 22 12:01:04 2026 GMT Subject: CN=67ca5d90ac058eee28e1c7a06c41828e84942aa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0c:27:80:7c:15:e9:5e:fc:ae:e5:08:b7:8d: a8:e6:47:d5:b4:f5:1b:b1:52:b5:7d:f4:34:1c:e4: 73:af:af:9f:e6:61:f7:33:4e:c5:2f:68:63:19:13: 13:44:1e:13:b4:ab:a2:e2:87:76:40:b6:a4:23:02: 56:bf:f1:7c:82:70:ba:1c:f3:35:5d:07:cc:e3:f4: 55:c2:ed:c1:9c:ab:4e:af:45:07:93:9d:76:6c:1c: e0:a3:75:ad:9b:ab:9e:e1:31:17:50:c1:97:8c:8f: ca:be:1e:b9:70:f1:71:e8:78:c8:f1:b5:14:d5:c4: ba:2b:87:4e:bf:3d:16:a2:a6:c0:ef:3e:7c:1e:75: 49:fe:7f:cd:4b:35:cd:e0:aa:88:0a:f9:a4:a2:8e: 98:84:a4:48:11:71:18:d1:cb:fa:0d:ba:ea:91:26: 45:b3:ee:a0:47:25:6a:9c:c3:e5:63:e2:9e:1d:7d: d1:b4:48:dd:af:97:0b:bc:75:21:0d:d3:62:d6:b7: 72:5f:24:b9:3d:70:da:de:60:36:7d:f3:e4:73:ef: a6:e4:3a:ef:b7:9d:58:02:d8:df:8e:d5:41:8d:a5: e7:fe:f7:6f:d3:84:e4:a6:c4:40:61:e4:b6:28:fb: 94:23:da:87:b8:ff:a7:4a:6d:9f:6f:83:61:56:c9: 56:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:CA:5D:90:AC:05:8E:EE:28:E1:C7:A0:6C:41:82:8E:84:94:2A:A0 X509v3 Authority Key Identifier: keyid:AC:5F:C6:C6:AE:A3:F0:E4:ED:F7:CC:B9:2E:6E:B2:37:7A:74:79:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:e9:18:89:bb:0a:98:09:dc:f8:d2:f1:54:31:51:c3:87:27: cc:94:f3:fe:a2:e1:2a:fa:19:22:fe:4d:82:ac:41:01:43:9b: 3f:16:5a:9b:13:02:d1:11:a9:60:7b:3f:d7:0e:da:b2:7d:8a: 7c:58:40:9f:46:54:0d:79:3c:7c:9a:9e:77:ab:b8:2a:d6:dd: 54:f9:3a:fa:c7:31:ff:05:d2:51:e6:fb:e2:47:08:9b:73:b6: 63:24:cb:0b:f3:9b:51:3e:65:ab:4d:cc:b2:ff:fe:26:b5:8d: b5:eb:12:7d:6a:53:82:94:73:b0:de:8a:0f:5a:2b:3c:ba:32: 17:aa:8a:13:9d:86:9f:4f:28:63:e1:32:1c:ef:e6:7e:51:3a: bf:25:26:38:8e:97:7b:8b:c9:cd:b9:5a:80:fe:98:8b:68:57: ea:09:d6:c1:86:6d:3b:ee:20:8e:8f:98:04:2f:9a:5f:ec:c7: 3e:2b:ee:95:88:9e:55:4e:1a:31:97:18:b0:7b:29:5c:01:74: 84:56:c6:89:8a:60:75:c7:32:16:fe:fd:77:bc:1e:1c:4f:e0: 25:da:ce:54:5a:45:6e:03:cd:fe:10:ad:b5:aa:16:e3:8c:c6: 94:e2:de:2c:97:bc:fb:e4:7c:9c:aa:b8:12:63:39:9e:a0:73: 0f:64:56:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvgbgFWh+KcxeFKR1nDpWJ7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjNWZjNmM2YWVhM2YwZTRlZGY3Y2NiOTJlNmViMjM3N2E3 NDc5YTUwHhcNMjYwMTIxMTIwMTA0WhcNMjYwMTIyMTIwMTA0WjAzMTEwLwYDVQQD Eyg2N2NhNWQ5MGFjMDU4ZWVlMjhlMWM3YTA2YzQxODI4ZTg0OTQyYWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAwngHwV6V78ruUIt42o5kfVtPUb sVK1ffQ0HORzr6+f5mH3M07FL2hjGRMTRB4TtKui4od2QLakIwJWv/F8gnC6HPM1 XQfM4/RVwu3BnKtOr0UHk512bBzgo3Wtm6ue4TEXUMGXjI/Kvh65cPFx6HjI8bUU 1cS6K4dOvz0WoqbA7z58HnVJ/n/NSzXN4KqICvmkoo6YhKRIEXEY0cv6DbrqkSZF s+6gRyVqnMPlY+KeHX3RtEjdr5cLvHUhDdNi1rdyXyS5PXDa3mA2ffPkc++m5Drv t51YAtjfjtVBjaXn/vdv04TkpsRAYeS2KPuUI9qHuP+nSm2fb4NhVslWGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGfKXZCsBY7uKOHHoGxBgo6ElCqgMB8GA1UdIwQY MBaAFKxfxsauo/Dk7ffMuS5usjd6dHmlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckZfR3hxNmo4T1R0OTh5NUxtNnlOM3AwZWFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8wODI3ZTAtMzMzMS00MGI0LTk5YjIt OWExMzcwOTJjZGQwLzEvckZfR3hxNmo4T1R0OTh5NUxtNnlOM3AwZWFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8wODI3ZTAtMzMzMS00MGI0LTk5YjItOWExMzcwOTJjZGQw LzEvckZfR3hxNmo4T1R0OTh5NUxtNnlOM3AwZWFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArOkYibsK mAnc+NLxVDFRw4cnzJTz/qLhKvoZIv5NgqxBAUObPxZamxMC0RGpYHs/1w7asn2K fFhAn0ZUDXk8fJqed6u4KtbdVPk6+scx/wXSUeb74kcIm3O2YyTLC/ObUT5lq03M sv/+JrWNtesSfWpTgpRzsN6KD1orPLoyF6qKE52Gn08oY+EyHO/mflE6vyUmOI6X e4vJzblagP6Yi2hX6gnWwYZtO+4gjo+YBC+aX+zHPivulYieVU4aMZcYsHspXAF0 hFbGiYpgdccyFv79d7weHE/gJdrOVFpFbgPN/hCttaoW44zGlOLeLJe8++R8nKq4 EmM5nqBzD2RW0g== -----END CERTIFICATE-----Generated at Wed Jan 21 14:45:49 2026 by rpki-client