This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft File: Fm9ncLp34DLn59HXMtl1AkHhGfk.mft (raw, json) Hash identifier: VsLEdOFQE3CYkI0miL4KmbE7r19k+wwLpID5AjM1/qY= Subject key identifier: 53:2B:A5:73:C5:FC:DF:D5:CD:1C:A0:24:9D:98:FA:5E:25:F9:00:EA Authority key identifier: 16:6F:67:70:BA:77:E0:32:E7:E7:D1:D7:32:D9:75:02:41:E1:19:F9 Certificate issuer: /CN=166f6770ba77e032e7e7d1d732d9750241e119f9 Certificate serial: 019B785CDF19E03D62DF9ED4923471EC518D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft Manifest number: 05D9 Signing time: Thu 01 Jan 2026 07:01:50 +0000 Manifest this update: Thu 01 Jan 2026 07:01:50 +0000 Manifest next update: Fri 02 Jan 2026 07:01:50 +0000 Files and hashes: 1: Fm9ncLp34DLn59HXMtl1AkHhGfk.crl (hash: YJNtAqK/vi+FPzM0uMWSgAZPpY9GmGvYYlvJjP9UGYA=) 2: pzlWJjQzQzoCKZbR26xCajPlSDU.roa (hash: 61Hu+9N0msg0OltqRJ2+tDJ9j89XxxQKSANBLiUSU78=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.crl rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:5c:df:19:e0:3d:62:df:9e:d4:92:34:71:ec:51:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=166f6770ba77e032e7e7d1d732d9750241e119f9 Validity Not Before: Jan 1 07:01:50 2026 GMT Not After : Jan 2 07:01:50 2026 GMT Subject: CN=532ba573c5fcdfd5cd1ca0249d98fa5e25f900ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2b:e8:0f:e8:e8:af:d5:54:6f:8e:c7:36:50: ef:d0:b4:76:f1:8c:bb:41:20:c6:64:83:c9:73:04: 3d:59:5b:46:08:31:69:f3:f4:54:22:8b:c9:60:05: e5:56:ec:98:7a:a1:e7:99:4d:12:c4:fe:0d:62:d4: 50:13:3a:d1:a8:f4:fb:be:e5:94:08:e4:e1:22:73: b6:bf:01:02:81:ab:75:88:d4:a6:61:22:ba:d6:13: b2:c6:c9:bf:0c:72:02:ad:6e:64:4a:0f:58:70:21: f3:29:b8:9d:8d:d4:56:f7:63:1b:70:f2:48:5a:e0: 5a:b4:7f:d9:3e:ba:6e:b6:c0:8b:19:44:68:53:3d: 53:6e:31:02:70:82:ba:ca:c8:74:4d:bf:bd:94:71: de:e2:f9:99:67:7b:14:7c:88:c7:11:17:2c:3c:e6: 05:1b:de:42:0f:98:1c:90:db:ba:5d:7c:f1:67:26: 61:bb:c9:df:d3:77:3d:70:5e:b7:e9:04:64:83:b3: c4:c3:10:d0:e6:14:c1:a4:cc:9e:b6:cc:e7:1b:95: 55:d8:9a:14:ce:8e:ca:f4:fc:f4:55:87:74:8a:dd: 93:92:3f:73:5a:9d:e6:e3:72:79:c0:3a:be:9f:5b: 24:ef:8c:91:05:56:57:8e:0b:50:e1:66:33:e3:a8: d3:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:2B:A5:73:C5:FC:DF:D5:CD:1C:A0:24:9D:98:FA:5E:25:F9:00:EA X509v3 Authority Key Identifier: keyid:16:6F:67:70:BA:77:E0:32:E7:E7:D1:D7:32:D9:75:02:41:E1:19:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:d8:62:38:72:3e:8b:c1:5e:b6:fa:d6:cb:c3:bd:bd:1f:f7: 53:37:cb:00:c7:7f:0b:35:8d:2d:35:ee:c6:ab:4e:48:e4:a1: d8:43:5c:05:19:5c:14:04:d5:fb:3e:56:7c:a6:b8:c5:45:bb: 41:b4:03:ef:ea:c6:1d:92:b3:3b:a4:88:0b:f1:e9:cb:98:de: 60:0d:f8:75:8c:18:6c:28:46:c3:80:bf:f2:8d:66:02:25:e6: 14:99:a1:92:34:76:82:54:42:01:25:df:d6:6a:1e:35:f0:f0: 41:48:db:bf:79:07:38:18:e9:cd:47:61:98:77:ff:3d:c4:ba: 5a:96:d0:07:d0:84:fe:d9:ba:c4:e8:7c:23:55:f8:a8:e5:fa: de:98:e7:56:b6:23:a0:6e:80:0f:93:73:c7:01:1e:f5:56:93: eb:19:be:b2:7c:b9:47:9a:1b:3a:76:09:74:5d:fd:ee:fd:d0: 11:28:04:a3:75:a5:b2:dc:01:67:bd:40:a8:ee:6c:85:08:52: a5:da:5a:d0:0c:9e:30:03:5f:8b:44:fd:7a:b1:38:1d:a3:50: 03:36:98:61:7c:bc:f8:33:99:6c:10:13:a1:46:23:cd:6f:2f: 00:b2:2f:00:10:d0:6e:61:52:bf:eb:b4:cd:2b:3c:21:60:e9: 82:31:ee:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4XN8Z4D1i357UkjRx7FGNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NmY2NzcwYmE3N2UwMzJlN2U3ZDFkNzMyZDk3NTAyNDFl MTE5ZjkwHhcNMjYwMTAxMDcwMTUwWhcNMjYwMTAyMDcwMTUwWjAzMTEwLwYDVQQD Eyg1MzJiYTU3M2M1ZmNkZmQ1Y2QxY2EwMjQ5ZDk4ZmE1ZTI1ZjkwMGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwivoD+jor9VUb47HNlDv0LR28Yy7 QSDGZIPJcwQ9WVtGCDFp8/RUIovJYAXlVuyYeqHnmU0SxP4NYtRQEzrRqPT7vuWU COThInO2vwECgat1iNSmYSK61hOyxsm/DHICrW5kSg9YcCHzKbidjdRW92MbcPJI WuBatH/ZPrputsCLGURoUz1TbjECcIK6ysh0Tb+9lHHe4vmZZ3sUfIjHERcsPOYF G95CD5gckNu6XXzxZyZhu8nf03c9cF636QRkg7PEwxDQ5hTBpMyetsznG5VV2JoU zo7K9Pz0VYd0it2Tkj9zWp3m43J5wDq+n1sk74yRBVZXjgtQ4WYz46jTAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFMrpXPF/N/VzRygJJ2Y+l4l+QDqMB8GA1UdIwQY MBaAFBZvZ3C6d+Ay5+fR1zLZdQJB4Rn5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm05bmNMcDM0RExuNTlIWE10bDFBa0hoR2ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy83YmRjNDEtMTg3NS00ZTUwLWIzZDQt MDY5YzEwZGFmYjA3LzEvRm05bmNMcDM0RExuNTlIWE10bDFBa0hoR2ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy83YmRjNDEtMTg3NS00ZTUwLWIzZDQtMDY5YzEwZGFmYjA3 LzEvRm05bmNMcDM0RExuNTlIWE10bDFBa0hoR2ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkthiOHI+ i8FetvrWy8O9vR/3UzfLAMd/CzWNLTXuxqtOSOSh2ENcBRlcFATV+z5WfKa4xUW7 QbQD7+rGHZKzO6SIC/Hpy5jeYA34dYwYbChGw4C/8o1mAiXmFJmhkjR2glRCASXf 1moeNfDwQUjbv3kHOBjpzUdhmHf/PcS6WpbQB9CE/tm6xOh8I1X4qOX63pjnVrYj oG6AD5NzxwEe9VaT6xm+sny5R5obOnYJdF397v3QESgEo3WlstwBZ71AqO5shQhS pdpa0AyeMANfi0T9erE4HaNQAzaYYXy8+DOZbBAToUYjzW8vALIvABDQbmFSv+u0 zSs8IWDpgjHuPA== -----END CERTIFICATE-----Generated at Thu Jan 1 08:48:18 2026 by rpki-client