This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft File: fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft (raw, json) Hash identifier: nWpZi6OEtJIgsfGjs6fvwwRnjN/Mbf7JQf2KRQ7x7sc= Subject key identifier: B1:1D:B8:89:D9:4E:42:84:FD:69:2A:0D:C6:1A:15:39:1D:CF:7C:ED Authority key identifier: 7C:AB:39:C6:E0:41:22:35:EF:C7:87:7A:9F:73:78:99:31:3E:D1:5E Certificate issuer: /CN=7cab39c6e0412235efc7877a9f737899313ed15e Certificate serial: 019B8D99E82376C67C4C432AF6C8EBFD99CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft Manifest number: 02CC Signing time: Mon 05 Jan 2026 10:00:32 +0000 Manifest this update: Mon 05 Jan 2026 10:00:32 +0000 Manifest next update: Tue 06 Jan 2026 10:00:32 +0000 Files and hashes: 1: cj2iG-kAiX7g7Q_YyN0wXBDsPQA.roa (hash: Iwu4QuDjHy9svFihD9XS6FTYQQqAdESvSACyQGECMOI=) 2: fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl (hash: LAC2waycgyifSQCVBnI9+QmoGgtGtT5+2Tgb5upZrWc=) 3: kZ_QLDF4UjP63-RQO5uGQvJwAKg.roa (hash: GT17iGmvyx7VuRxULTyyPoqEbSTqD+0/CsQqVCeuwic=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 10:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8d:99:e8:23:76:c6:7c:4c:43:2a:f6:c8:eb:fd:99:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7cab39c6e0412235efc7877a9f737899313ed15e Validity Not Before: Jan 5 10:00:32 2026 GMT Not After : Jan 6 10:00:32 2026 GMT Subject: CN=b11db889d94e4284fd692a0dc61a15391dcf7ced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:d0:22:78:03:95:8a:9f:3f:fc:ef:44:db:53: fc:6c:33:8d:34:11:42:e2:cf:c5:c0:03:81:95:e7: 67:d0:e8:37:8d:50:a7:1d:4f:99:83:0c:dc:05:62: 4c:a1:24:86:3c:cd:ce:66:94:af:9e:78:df:e5:d0: be:6c:55:88:07:a2:ee:2c:aa:6a:bb:c0:12:bb:2e: ff:e3:fb:89:52:09:6b:2e:06:cc:8b:ec:49:49:24: 24:fa:11:07:5a:73:e0:d0:c6:03:e0:98:87:1c:b4: 92:56:17:85:ad:e9:59:b2:08:05:8f:82:55:82:09: 34:16:85:b8:60:aa:75:bc:b6:74:90:b5:b3:6a:ea: 1c:2a:aa:a3:4f:1c:8d:15:5c:a7:a0:88:3f:44:4a: 42:65:20:85:11:35:74:48:ff:42:f9:68:48:c9:11: 71:1a:cc:87:18:20:e5:24:ef:dc:52:07:0f:ef:05: 2f:fa:75:a6:9c:70:e1:f7:94:0c:47:d0:c8:d4:4d: 02:43:3c:0e:f8:4f:fc:4a:09:7d:80:08:23:99:d3: 4c:98:be:9f:b5:c7:9d:f6:38:69:81:9b:b4:f2:32: 46:3d:c1:f3:ba:b6:99:3c:7c:6f:f9:44:5b:dd:33: be:f0:ad:29:e9:c6:6f:49:4a:7f:98:91:d5:67:d5: 16:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:1D:B8:89:D9:4E:42:84:FD:69:2A:0D:C6:1A:15:39:1D:CF:7C:ED X509v3 Authority Key Identifier: keyid:7C:AB:39:C6:E0:41:22:35:EF:C7:87:7A:9F:73:78:99:31:3E:D1:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:96:48:82:59:31:4a:43:72:b7:e3:cc:9e:27:15:6a:6f:b6: d8:0c:30:a8:71:0e:1d:30:32:d7:a2:c8:95:3b:be:25:75:a2: ba:28:f1:ff:5b:23:bc:ab:3a:b1:dd:d4:fd:68:98:c6:52:c6: b8:5c:ec:ff:38:58:6e:0b:61:f3:0a:2a:6b:dc:78:89:9f:c2: 3b:b8:b8:95:c4:5b:4c:c6:34:8c:0e:13:3b:cd:b2:c0:d2:4b: 2c:ac:6c:70:1d:b8:66:0c:35:ac:f5:d3:6d:e8:b5:28:96:94: e6:6b:00:43:df:6c:6d:ca:f5:bf:80:5b:cd:34:da:67:12:d9: 6a:fb:4a:e7:d3:e5:af:0d:91:5d:33:08:7d:75:d5:d5:07:c1: 4f:27:85:50:c4:74:24:8c:b9:64:5e:f9:88:23:b7:35:33:80: 3e:d6:bc:9f:4c:91:15:05:a9:c8:58:59:1d:a8:4d:48:e5:fc: 10:1f:e6:d2:bc:ce:3a:d2:69:41:01:53:b8:a1:ed:b2:2a:6d: 6b:0d:c7:73:0d:ff:25:53:c4:3e:fd:e6:89:b9:41:af:6e:04: 13:d2:94:ee:91:0d:c0:19:90:02:96:c9:53:4a:38:e1:21:55: c9:09:e9:f2:60:04:62:4a:3a:02:d3:fd:87:d0:95:c9:07:5f: 96:dd:82:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuNmegjdsZ8TEMq9sjr/ZnOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYWIzOWM2ZTA0MTIyMzVlZmM3ODc3YTlmNzM3ODk5MzEz ZWQxNWUwHhcNMjYwMTA1MTAwMDMyWhcNMjYwMTA2MTAwMDMyWjAzMTEwLwYDVQQD EyhiMTFkYjg4OWQ5NGU0Mjg0ZmQ2OTJhMGRjNjFhMTUzOTFkY2Y3Y2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA79AieAOVip8//O9E21P8bDONNBFC 4s/FwAOBledn0Og3jVCnHU+ZgwzcBWJMoSSGPM3OZpSvnnjf5dC+bFWIB6LuLKpq u8ASuy7/4/uJUglrLgbMi+xJSSQk+hEHWnPg0MYD4JiHHLSSVheFrelZsggFj4JV ggk0FoW4YKp1vLZ0kLWzauocKqqjTxyNFVynoIg/REpCZSCFETV0SP9C+WhIyRFx GsyHGCDlJO/cUgcP7wUv+nWmnHDh95QMR9DI1E0CQzwO+E/8Sgl9gAgjmdNMmL6f tced9jhpgZu08jJGPcHzuraZPHxv+URb3TO+8K0p6cZvSUp/mJHVZ9UWUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLEduInZTkKE/WkqDcYaFTkdz3ztMB8GA1UdIwQY MBaAFHyrOcbgQSI178eHep9zeJkxPtFeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZktzNXh1QkJJalh2eDRkNm4zTjRtVEUtMFY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mODkxNzAtMTM4ZS00OTk5LWFlZjct YzQ0MDI5OGRmYzVjLzEvZktzNXh1QkJJalh2eDRkNm4zTjRtVEUtMFY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9mODkxNzAtMTM4ZS00OTk5LWFlZjctYzQ0MDI5OGRmYzVj LzEvZktzNXh1QkJJalh2eDRkNm4zTjRtVEUtMFY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp5ZIglkx SkNyt+PMnicVam+22AwwqHEOHTAy16LIlTu+JXWiuijx/1sjvKs6sd3U/WiYxlLG uFzs/zhYbgth8woqa9x4iZ/CO7i4lcRbTMY0jA4TO82ywNJLLKxscB24Zgw1rPXT bei1KJaU5msAQ99sbcr1v4BbzTTaZxLZavtK59Plrw2RXTMIfXXV1QfBTyeFUMR0 JIy5ZF75iCO3NTOAPta8n0yRFQWpyFhZHahNSOX8EB/m0rzOOtJpQQFTuKHtsipt aw3Hcw3/JVPEPv3miblBr24EE9KU7pENwBmQApbJU0o44SFVyQnp8mAEYko6AtP9 h9CVyQdflt2CLg== -----END CERTIFICATE-----Generated at Mon Jan 5 19:10:54 2026 by rpki-client