This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft File: fx0OMpi-06fzn7OyRO2Ri_bE178.mft (raw, json) Hash identifier: EKPftU5ROyBNzGpS2zyr3y5g/WdUDtJyJ5XObpoOE98= Subject key identifier: 2E:9A:62:1B:B0:1D:B2:38:00:67:83:4B:D4:B0:58:CB:89:F5:61:54 Authority key identifier: 7F:1D:0E:32:98:BE:D3:A7:F3:9F:B3:B2:44:ED:91:8B:F6:C4:D7:BF Certificate issuer: /CN=7f1d0e3298bed3a7f39fb3b244ed918bf6c4d7bf Certificate serial: 019BD9224A5045AD5517E7CF8B02C957729B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fx0OMpi-06fzn7OyRO2Ri_bE178.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft Manifest number: 15AF Signing time: Tue 20 Jan 2026 02:01:01 +0000 Manifest this update: Tue 20 Jan 2026 02:01:01 +0000 Manifest next update: Wed 21 Jan 2026 02:01:01 +0000 Files and hashes: 1: CTvb0FUa15u0RFsbQjogkyjXQEo.roa (hash: rc8P8+g7ke0pQjl95RJtZC0Plvgs/SZq9fu71nIHzfo=) 2: fx0OMpi-06fzn7OyRO2Ri_bE178.crl (hash: geTK/LVs90cUeux1PE9ZKsPvS0Upihjl0AAOk/pDFJE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft rsync://rpki.ripe.net/repository/DEFAULT/fx0OMpi-06fzn7OyRO2Ri_bE178.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d9:22:4a:50:45:ad:55:17:e7:cf:8b:02:c9:57:72:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f1d0e3298bed3a7f39fb3b244ed918bf6c4d7bf Validity Not Before: Jan 20 02:01:01 2026 GMT Not After : Jan 21 02:01:01 2026 GMT Subject: CN=2e9a621bb01db2380067834bd4b058cb89f56154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a8:a3:e6:fa:5e:25:5a:9e:b1:1e:46:dc:53: f7:b8:45:d0:74:c7:80:9c:13:63:b4:86:f2:6f:08: 1c:6a:1e:30:5d:26:b1:f1:6d:1b:49:a7:29:24:7d: ff:18:17:cc:af:75:6c:73:2f:1f:8f:1c:a4:76:1a: c1:ad:7a:b9:62:e3:20:2e:82:bd:33:f2:73:9c:b2: 63:7b:ff:7e:79:2e:7e:2c:0b:ac:ff:6e:04:23:3a: dc:0a:8a:64:7f:78:0a:98:38:45:46:58:0a:2f:c4: 2a:37:74:d0:5a:b6:07:3c:a7:6c:90:12:a1:42:41: 1f:0f:bd:5d:d3:1b:f6:46:09:b0:be:b1:a2:7e:55: 97:7d:66:3a:ed:46:e4:6a:75:f2:b6:08:be:cb:78: 51:29:59:c4:14:27:8e:f2:03:c1:07:9c:a1:8f:27: 3c:80:a9:6b:ea:bb:dc:3e:14:76:12:52:2e:04:ee: 54:4c:05:7c:26:a4:c2:02:39:7c:7c:ae:68:9e:16: d4:f6:e6:27:de:f9:e9:e6:d6:c6:c6:54:22:3e:97: b3:45:26:f5:68:0f:b3:64:1a:98:78:6b:f7:6c:b6: 34:62:f7:9f:76:09:2d:7e:73:69:4e:12:12:49:ec: 77:d1:56:20:bb:c6:de:ca:4f:4b:df:6a:80:bc:ec: df:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:9A:62:1B:B0:1D:B2:38:00:67:83:4B:D4:B0:58:CB:89:F5:61:54 X509v3 Authority Key Identifier: keyid:7F:1D:0E:32:98:BE:D3:A7:F3:9F:B3:B2:44:ED:91:8B:F6:C4:D7:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fx0OMpi-06fzn7OyRO2Ri_bE178.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:5d:93:5d:e7:d0:d1:60:09:1f:78:ce:35:ca:a1:ad:53:e9: 6e:41:aa:c6:6b:b8:56:bb:74:93:97:0c:ca:fe:94:84:19:e1: 00:b8:9c:3d:cc:1c:29:b8:59:e5:ec:84:f1:1a:80:98:1f:50: 8b:4e:50:3b:c7:32:9d:be:5a:a0:db:4d:d6:a9:11:20:46:46: 18:26:94:ff:a1:9c:bd:46:95:11:9f:fa:22:b0:5d:16:c4:29: 9a:2b:18:9e:b4:20:73:b5:5e:28:06:d7:6a:7d:0d:1e:57:f3: db:ce:14:ea:7e:86:54:ea:bf:d1:3c:f9:db:37:57:30:d7:df: ba:7b:83:c5:7d:cd:a6:f5:3f:33:0c:1b:a5:10:75:41:47:6a: 2c:55:ca:d4:25:3a:6c:25:63:ea:d6:20:ae:c5:da:fb:19:2e: 31:59:30:65:b6:85:8d:fc:8b:ab:5a:a5:be:2e:72:88:e8:ec: d0:0e:ef:96:39:9a:07:c1:c5:74:2b:98:42:1a:28:45:e3:4c: 7c:f0:43:47:81:b3:cf:66:44:b5:a1:9c:e9:55:a9:21:40:7f: 67:16:77:e9:86:fd:1d:ba:b8:4b:ee:18:29:0b:2e:45:90:00: b9:c4:c6:0a:32:bd:fa:28:90:af:fe:9b:66:eb:c9:51:56:b2: 33:c5:3f:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvZIkpQRa1VF+fPiwLJV3KbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmMWQwZTMyOThiZWQzYTdmMzlmYjNiMjQ0ZWQ5MThiZjZj NGQ3YmYwHhcNMjYwMTIwMDIwMTAxWhcNMjYwMTIxMDIwMTAxWjAzMTEwLwYDVQQD EygyZTlhNjIxYmIwMWRiMjM4MDA2NzgzNGJkNGIwNThjYjg5ZjU2MTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqij5vpeJVqesR5G3FP3uEXQdMeA nBNjtIbybwgcah4wXSax8W0bSacpJH3/GBfMr3Vscy8fjxykdhrBrXq5YuMgLoK9 M/JznLJje/9+eS5+LAus/24EIzrcCopkf3gKmDhFRlgKL8QqN3TQWrYHPKdskBKh QkEfD71d0xv2RgmwvrGiflWXfWY67UbkanXytgi+y3hRKVnEFCeO8gPBB5yhjyc8 gKlr6rvcPhR2ElIuBO5UTAV8JqTCAjl8fK5onhbU9uYn3vnp5tbGxlQiPpezRSb1 aA+zZBqYeGv3bLY0YvefdgktfnNpThISSex30VYgu8beyk9L32qAvOzfZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC6aYhuwHbI4AGeDS9SwWMuJ9WFUMB8GA1UdIwQY MBaAFH8dDjKYvtOn85+zskTtkYv2xNe/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZngwT01waS0wNmZ6bjdPeVJPMlJpX2JFMTc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9lNjUwNmUtNzY4NS00OGU3LWE1ODMt MjFhZjNkZWU4ZWU5LzEvZngwT01waS0wNmZ6bjdPeVJPMlJpX2JFMTc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9lNjUwNmUtNzY4NS00OGU3LWE1ODMtMjFhZjNkZWU4ZWU5 LzEvZngwT01waS0wNmZ6bjdPeVJPMlJpX2JFMTc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl12TXefQ 0WAJH3jONcqhrVPpbkGqxmu4Vrt0k5cMyv6UhBnhALicPcwcKbhZ5eyE8RqAmB9Q i05QO8cynb5aoNtN1qkRIEZGGCaU/6GcvUaVEZ/6IrBdFsQpmisYnrQgc7VeKAbX an0NHlfz284U6n6GVOq/0Tz52zdXMNffunuDxX3NpvU/MwwbpRB1QUdqLFXK1CU6 bCVj6tYgrsXa+xkuMVkwZbaFjfyLq1qlvi5yiOjs0A7vljmaB8HFdCuYQhooReNM fPBDR4Gzz2ZEtaGc6VWpIUB/ZxZ36Yb9Hbq4S+4YKQsuRZAAucTGCjK9+iiQr/6b ZuvJUVayM8U/qQ== -----END CERTIFICATE-----Generated at Tue Jan 20 04:02:07 2026 by rpki-client