This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft File: RFc3PhpobWtZ7oXcN4mdBlMThuU.mft (raw, json) Hash identifier: zdaxbhMz4m4lq0rDpM7c+kHqFvcBoUFCKhjaJIZqUrA= Subject key identifier: A5:49:40:E8:94:73:73:57:21:87:85:7A:CE:F0:5D:E4:35:7C:6B:76 Authority key identifier: 44:57:37:3E:1A:68:6D:6B:59:EE:85:DC:37:89:9D:06:53:13:86:E5 Certificate issuer: /CN=4457373e1a686d6b59ee85dc37899d06531386e5 Certificate serial: 019BD055C6A96304A6BE75B7576BC5DD3161 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft Manifest number: 0555 Signing time: Sun 18 Jan 2026 09:00:40 +0000 Manifest this update: Sun 18 Jan 2026 09:00:40 +0000 Manifest next update: Mon 19 Jan 2026 09:00:40 +0000 Files and hashes: 1: RFc3PhpobWtZ7oXcN4mdBlMThuU.crl (hash: 8xvtOZqBLouyLkWiPCe8LEqko0XBx56d1whmwzRSwzo=) 2: ttScyk0nEJvj6B9dbcRTLoD0eDc.roa (hash: 88OBT/soYdFP6btKziYk7b6XdT5PNfcTrPxPNTk8amc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d0:55:c6:a9:63:04:a6:be:75:b7:57:6b:c5:dd:31:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4457373e1a686d6b59ee85dc37899d06531386e5 Validity Not Before: Jan 18 09:00:40 2026 GMT Not After : Jan 19 09:00:40 2026 GMT Subject: CN=a54940e8947373572187857acef05de4357c6b76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:af:69:d4:8e:49:c7:42:ef:59:60:d7:a6:b2: 74:b0:e1:8d:e4:3f:1b:f2:05:ec:4b:60:cf:3c:04: 10:81:a0:ea:e9:45:5d:bd:05:95:7b:e5:71:8b:b9: 5b:86:a9:c3:45:88:d0:46:63:1f:bd:4c:29:4f:60: 68:2b:4d:11:a0:cc:fa:7e:a1:09:e7:4c:1f:dd:79: 3a:62:94:84:a0:60:3e:85:65:f9:ba:6e:d0:e8:8c: d7:f4:a3:e8:37:de:78:0e:44:f2:cc:47:7e:db:59: 6f:8d:06:44:77:44:ef:bf:1e:37:0d:42:70:17:3d: 05:c4:cd:70:39:e1:3a:a4:b3:fb:2e:a2:e3:a9:61: 50:f8:6e:8c:a1:04:d2:6a:4f:8b:08:c7:8c:1d:c5: 78:f2:2e:d6:ba:58:8f:67:7e:50:32:eb:78:a1:9e: d0:5a:db:c2:91:78:39:8e:26:10:c6:59:c9:b9:ad: 95:4a:26:30:1e:e3:fd:27:27:19:60:8c:f3:9c:d7: b6:56:7c:03:95:7e:ef:f5:3a:84:6c:1a:0f:23:3c: 2f:5d:f0:c6:01:90:b2:ad:11:96:43:9f:57:b3:7c: 06:52:28:44:42:d3:c2:ab:09:4a:34:94:75:c3:8d: 5f:40:9d:19:a1:8e:be:5b:69:15:c1:02:6f:f3:bd: 29:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:49:40:E8:94:73:73:57:21:87:85:7A:CE:F0:5D:E4:35:7C:6B:76 X509v3 Authority Key Identifier: keyid:44:57:37:3E:1A:68:6D:6B:59:EE:85:DC:37:89:9D:06:53:13:86:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:44:0d:60:f2:5e:20:fc:db:b1:9b:fb:2b:73:79:8d:55:86: e3:27:e1:e6:1e:39:02:ed:20:c9:94:2c:51:81:12:84:45:c3: 2c:1c:19:01:ae:a3:54:09:97:18:4d:db:a5:e5:91:ae:54:71: 96:a9:b8:14:eb:7c:b3:dc:17:d0:6f:8f:8d:eb:99:ff:d5:1c: 70:10:c8:e9:46:40:b6:b3:4c:b9:fc:2b:6e:6c:3f:e5:4e:7f: e3:a6:0a:3c:7f:f0:54:60:08:e6:e3:c1:fb:2f:9f:85:40:fa: 5a:78:00:7a:9e:99:52:4c:04:65:47:27:46:68:3a:c6:1e:41: c2:a9:08:ea:46:46:d7:2b:03:f6:a1:b4:6c:dd:23:62:a2:cd: e0:1d:58:54:28:ca:99:3c:da:30:fe:d1:de:fb:ab:eb:07:f0: 4f:d1:71:25:6b:df:1a:cb:df:d5:0a:c5:6b:99:9e:ce:2a:cf: 1a:01:61:78:8f:c5:c2:78:44:29:3c:cd:1c:84:15:3f:2f:ee: 74:9b:02:aa:6d:24:36:6c:92:3e:b5:57:0f:0e:80:61:4e:d4: fe:19:d7:58:e2:53:47:5e:a8:4f:27:3a:20:cd:f7:3a:7d:93: d9:14:c6:b7:73:1d:7e:9c:45:2f:57:40:1e:76:b2:f7:eb:d8: 5d:3f:d4:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvQVcapYwSmvnW3V2vF3TFhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTczNzNlMWE2ODZkNmI1OWVlODVkYzM3ODk5ZDA2NTMx Mzg2ZTUwHhcNMjYwMTE4MDkwMDQwWhcNMjYwMTE5MDkwMDQwWjAzMTEwLwYDVQQD EyhhNTQ5NDBlODk0NzM3MzU3MjE4Nzg1N2FjZWYwNWRlNDM1N2M2Yjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqq9p1I5Jx0LvWWDXprJ0sOGN5D8b 8gXsS2DPPAQQgaDq6UVdvQWVe+Vxi7lbhqnDRYjQRmMfvUwpT2BoK00RoMz6fqEJ 50wf3Xk6YpSEoGA+hWX5um7Q6IzX9KPoN954DkTyzEd+21lvjQZEd0Tvvx43DUJw Fz0FxM1wOeE6pLP7LqLjqWFQ+G6MoQTSak+LCMeMHcV48i7WuliPZ35QMut4oZ7Q WtvCkXg5jiYQxlnJua2VSiYwHuP9JycZYIzznNe2VnwDlX7v9TqEbBoPIzwvXfDG AZCyrRGWQ59Xs3wGUihEQtPCqwlKNJR1w41fQJ0ZoY6+W2kVwQJv870p6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKVJQOiUc3NXIYeFes7wXeQ1fGt2MB8GA1UdIwQY MBaAFERXNz4aaG1rWe6F3DeJnQZTE4blMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZjM1BocG9iV3RaN29YY040bWRCbE1UaHVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84ODYyNTMtODQxNy00ZTQ1LThlMjYt OWU4NjQzNjg1MTMzLzEvUkZjM1BocG9iV3RaN29YY040bWRCbE1UaHVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi84ODYyNTMtODQxNy00ZTQ1LThlMjYtOWU4NjQzNjg1MTMz LzEvUkZjM1BocG9iV3RaN29YY040bWRCbE1UaHVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAikQNYPJe IPzbsZv7K3N5jVWG4yfh5h45Au0gyZQsUYEShEXDLBwZAa6jVAmXGE3bpeWRrlRx lqm4FOt8s9wX0G+PjeuZ/9UccBDI6UZAtrNMufwrbmw/5U5/46YKPH/wVGAI5uPB +y+fhUD6WngAep6ZUkwEZUcnRmg6xh5BwqkI6kZG1ysD9qG0bN0jYqLN4B1YVCjK mTzaMP7R3vur6wfwT9FxJWvfGsvf1QrFa5mezirPGgFheI/FwnhEKTzNHIQVPy/u dJsCqm0kNmySPrVXDw6AYU7U/hnXWOJTR16oTyc6IM33On2T2RTGt3MdfpxFL1dA Hnay9+vYXT/UcQ== -----END CERTIFICATE-----Generated at Sun Jan 18 13:14:46 2026 by rpki-client