This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft File: fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft (raw, json) Hash identifier: hzmYepCiA6P7n5DpNmvJi+LOJ3dCDlO1qzcGbDbH+Fg= Subject key identifier: 32:F7:C2:CF:E0:FF:B3:FE:26:7F:17:4F:53:5A:79:C4:70:03:7C:30 Authority key identifier: 7E:05:83:77:51:0A:3A:92:45:CE:72:CB:E8:8E:0E:FA:19:71:92:04 Certificate issuer: /CN=7e058377510a3a9245ce72cbe88e0efa19719204 Certificate serial: 019BAF13F2AA45E55D8AD219191789D39EF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgWDd1EKOpJFznLL6I4O-hlxkgQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft Manifest number: 120C Signing time: Sun 11 Jan 2026 22:01:18 +0000 Manifest this update: Sun 11 Jan 2026 22:01:18 +0000 Manifest next update: Mon 12 Jan 2026 22:01:18 +0000 Files and hashes: 1: beJshXTCFytgHzjAamZUfkQuubM.roa (hash: Lh9/62VbhV+tIPQCobGS97fKdIV26rAllSw/ibORPkA=) 2: fgWDd1EKOpJFznLL6I4O-hlxkgQ.crl (hash: sl9mWcu2nEydxKqvAAvjpoJsb4KXbhQ9LLazg0poJ48=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.crl rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft rsync://rpki.ripe.net/repository/DEFAULT/fgWDd1EKOpJFznLL6I4O-hlxkgQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:af:13:f2:aa:45:e5:5d:8a:d2:19:19:17:89:d3:9e:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e058377510a3a9245ce72cbe88e0efa19719204 Validity Not Before: Jan 11 22:01:18 2026 GMT Not After : Jan 12 22:01:18 2026 GMT Subject: CN=32f7c2cfe0ffb3fe267f174f535a79c470037c30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5e:50:86:a6:08:45:59:05:26:6b:f4:33:be: d1:7d:6e:12:f9:d5:08:4b:bd:00:31:b7:80:4c:e4: 2d:7e:ca:88:9e:6e:f9:6a:77:ad:b2:2e:47:4f:42: 56:75:98:62:50:54:2f:9d:58:b3:a4:0d:21:5f:a6: 20:bf:6a:fc:c2:09:f4:13:6d:06:bb:1d:a9:82:56: 93:08:5e:06:55:ef:4e:9d:6a:c2:49:ac:fe:be:7c: ef:f4:e7:ce:78:77:18:fa:a0:43:4f:55:b3:05:33: 64:18:c2:99:e6:a2:2f:a8:80:dc:26:92:7d:90:db: ca:00:e9:f8:59:f9:cd:b3:7e:0a:67:75:77:37:9b: 8f:40:b9:0a:62:16:3e:98:46:94:a8:2d:67:cf:6e: b2:78:8a:ed:6c:06:06:f5:da:f8:4e:5f:f9:5c:83: 3b:7e:59:9a:94:34:85:df:fa:7f:96:af:79:6b:01: c2:c6:f7:9f:23:d6:9f:28:81:6f:75:82:3e:6a:ab: c8:ee:3f:43:77:ec:7f:9c:f1:63:d4:72:26:48:97: e4:88:96:7c:17:e3:bd:93:2f:4b:fd:82:9d:0d:e6: fb:7c:2f:bc:d5:30:b2:7f:57:63:bd:2c:fd:bd:6a: b0:09:ca:76:f1:24:0c:ad:14:15:ec:9e:59:6f:6a: 42:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F7:C2:CF:E0:FF:B3:FE:26:7F:17:4F:53:5A:79:C4:70:03:7C:30 X509v3 Authority Key Identifier: keyid:7E:05:83:77:51:0A:3A:92:45:CE:72:CB:E8:8E:0E:FA:19:71:92:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgWDd1EKOpJFznLL6I4O-hlxkgQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:d7:fa:3d:32:72:4a:9c:8f:45:87:1d:b1:70:98:b8:cf:21: cd:da:37:26:58:dd:e8:11:37:ce:bf:da:03:1b:7d:a6:1d:75: 29:19:dc:90:33:88:95:0c:c0:5d:c9:ee:ce:84:0a:c0:a9:ef: 25:5c:a3:6d:d9:c3:c8:df:00:fe:62:1f:0f:8e:7b:19:39:6a: cc:f5:d3:e1:56:c9:fb:cc:3b:6a:30:4e:e4:d1:c7:e7:31:ae: b2:c4:71:32:1c:94:7c:03:7d:85:01:fd:d5:23:2c:3a:b9:bb: 2f:c5:78:f3:3b:39:63:b2:1f:32:0a:7a:98:9e:e1:71:fd:a9: 66:27:35:0c:ab:0b:28:f4:96:13:d5:e5:ca:22:35:91:f7:cd: 2a:eb:c5:a8:55:f3:f3:db:75:ed:45:e5:6e:59:0d:28:ce:e0: 8e:b3:6d:07:bc:f1:3f:26:b7:ba:70:d0:dc:aa:03:09:d3:ef: c0:34:86:5a:39:7c:dc:4a:70:21:24:40:9e:41:7f:a9:8f:4b: c5:75:30:2c:cd:68:4c:d6:3a:fc:77:3e:b2:19:e8:20:a5:b8: 79:82:1e:f9:dd:9d:55:53:cc:2a:f2:88:82:fb:20:52:14:73: 49:a4:5f:4b:5d:bb:62:bc:c2:b0:65:91:19:d3:f7:72:e6:43: 02:b9:3e:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuvE/KqReVditIZGReJ057zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMDU4Mzc3NTEwYTNhOTI0NWNlNzJjYmU4OGUwZWZhMTk3 MTkyMDQwHhcNMjYwMTExMjIwMTE4WhcNMjYwMTEyMjIwMTE4WjAzMTEwLwYDVQQD EygzMmY3YzJjZmUwZmZiM2ZlMjY3ZjE3NGY1MzVhNzljNDcwMDM3YzMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsl5QhqYIRVkFJmv0M77RfW4S+dUI S70AMbeATOQtfsqInm75anetsi5HT0JWdZhiUFQvnVizpA0hX6Ygv2r8wgn0E20G ux2pglaTCF4GVe9OnWrCSaz+vnzv9OfOeHcY+qBDT1WzBTNkGMKZ5qIvqIDcJpJ9 kNvKAOn4WfnNs34KZ3V3N5uPQLkKYhY+mEaUqC1nz26yeIrtbAYG9dr4Tl/5XIM7 flmalDSF3/p/lq95awHCxvefI9afKIFvdYI+aqvI7j9Dd+x/nPFj1HImSJfkiJZ8 F+O9ky9L/YKdDeb7fC+81TCyf1djvSz9vWqwCcp28SQMrRQV7J5Zb2pC5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDL3ws/g/7P+Jn8XT1NaecRwA3wwMB8GA1UdIwQY MBaAFH4Fg3dRCjqSRc5yy+iODvoZcZIEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmdXRGQxRUtPcEpGem5MTDZJNE8taGx4a2dRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wMjA1ZjItZGYyYS00MWQ2LWJjMmQt NzI4MjdmZTZkN2FmLzEvZmdXRGQxRUtPcEpGem5MTDZJNE8taGx4a2dRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8wMjA1ZjItZGYyYS00MWQ2LWJjMmQtNzI4MjdmZTZkN2Fm LzEvZmdXRGQxRUtPcEpGem5MTDZJNE8taGx4a2dRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAptf6PTJy SpyPRYcdsXCYuM8hzdo3Jljd6BE3zr/aAxt9ph11KRnckDOIlQzAXcnuzoQKwKnv JVyjbdnDyN8A/mIfD457GTlqzPXT4VbJ+8w7ajBO5NHH5zGussRxMhyUfAN9hQH9 1SMsOrm7L8V48zs5Y7IfMgp6mJ7hcf2pZic1DKsLKPSWE9XlyiI1kffNKuvFqFXz 89t17UXlblkNKM7gjrNtB7zxPya3unDQ3KoDCdPvwDSGWjl83EpwISRAnkF/qY9L xXUwLM1oTNY6/Hc+shnoIKW4eYIe+d2dVVPMKvKIgvsgUhRzSaRfS127YrzCsGWR GdP3cuZDArk+WQ== -----END CERTIFICATE-----Generated at Mon Jan 12 01:31:40 2026 by rpki-client