This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft File: fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft (raw, json) Hash identifier: +0NVaorRcNvXgd4nmreelKWKnEqwe8iOWCOhdYnOq0c= Subject key identifier: E5:09:76:BC:09:69:1E:DB:C2:DF:C6:63:A1:3D:CA:6B:17:98:F8:FF Authority key identifier: 7C:AB:39:C6:E0:41:22:35:EF:C7:87:7A:9F:73:78:99:31:3E:D1:5E Certificate issuer: /CN=7cab39c6e0412235efc7877a9f737899313ed15e Certificate serial: 019B95542B8204089124FC262399C42165B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft Manifest number: 02D0 Signing time: Tue 06 Jan 2026 22:01:19 +0000 Manifest this update: Tue 06 Jan 2026 22:01:19 +0000 Manifest next update: Wed 07 Jan 2026 22:01:19 +0000 Files and hashes: 1: cj2iG-kAiX7g7Q_YyN0wXBDsPQA.roa (hash: Iwu4QuDjHy9svFihD9XS6FTYQQqAdESvSACyQGECMOI=) 2: fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl (hash: 63YZB70sSCyZhhHMZsLmovMS84y+Are7eN/MORdZaNM=) 3: kZ_QLDF4UjP63-RQO5uGQvJwAKg.roa (hash: GT17iGmvyx7VuRxULTyyPoqEbSTqD+0/CsQqVCeuwic=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 21:34:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:95:54:2b:82:04:08:91:24:fc:26:23:99:c4:21:65:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7cab39c6e0412235efc7877a9f737899313ed15e Validity Not Before: Jan 6 22:01:19 2026 GMT Not After : Jan 7 22:01:19 2026 GMT Subject: CN=e50976bc09691edbc2dfc663a13dca6b1798f8ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3c:33:b8:d1:99:ec:8a:56:72:c5:3a:86:64: 4f:74:2a:3a:ce:b5:4c:49:9a:ac:46:5e:64:ea:1e: a5:32:4f:14:68:5d:a4:df:a6:c9:4d:70:8a:87:0d: 1f:f5:88:6f:15:8a:df:ac:5e:68:88:0c:27:56:ba: 4c:40:51:00:03:ba:36:41:5e:1c:44:91:d8:59:33: 5f:23:39:66:3f:b8:cf:d2:73:1a:1e:09:e3:d1:75: 79:de:97:74:1b:bd:94:fb:6f:07:35:d1:5d:c3:ab: 0a:01:fa:ab:12:4e:7b:bb:66:42:17:de:d6:01:4e: 64:6e:53:57:70:1c:de:d9:50:cd:c6:54:51:b1:b9: 70:1e:88:c5:5e:fc:ef:17:56:ae:33:52:c4:fe:51: de:63:39:61:5e:e5:66:e8:b1:15:35:03:71:ca:f1: 52:2f:80:74:5b:3f:3a:30:ad:b6:fd:ce:06:9b:c0: 95:1f:5e:4d:9c:dd:04:f8:10:17:14:ce:04:28:b5: 10:2e:73:70:b0:5b:ea:ce:26:ab:6c:d5:8b:40:d5: c2:76:1c:44:79:0f:3c:fb:c3:f5:dd:fa:07:8d:1e: 65:7e:a0:80:5e:16:62:d8:65:74:53:d2:95:32:ef: 95:45:fd:7c:df:fa:15:a8:9b:ca:3e:90:bf:13:42: 02:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:09:76:BC:09:69:1E:DB:C2:DF:C6:63:A1:3D:CA:6B:17:98:F8:FF X509v3 Authority Key Identifier: keyid:7C:AB:39:C6:E0:41:22:35:EF:C7:87:7A:9F:73:78:99:31:3E:D1:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:5b:f4:85:e4:d8:39:a6:fb:37:94:48:ca:ba:34:52:50:7d: 6a:a7:6d:04:df:12:3d:97:2e:36:01:db:4d:2f:9b:fd:ba:33: 9e:40:01:5e:73:46:10:b9:43:cc:c1:39:38:c8:73:4c:ea:2d: 3d:b6:dc:07:78:b7:89:d7:0e:7f:04:dd:d0:4e:ae:ff:5c:6a: ab:14:f8:d0:1e:f2:7a:2d:c4:c4:86:e5:ab:3d:45:b3:07:3d: 58:a0:c7:74:9c:9c:6f:9d:5f:8a:04:7b:4b:a2:46:be:60:5c: 35:21:74:66:cb:74:0b:3e:21:09:25:15:f3:2e:8c:75:09:01: 26:b6:32:42:a4:da:e7:6c:d7:70:83:a4:8e:e3:2b:fc:b3:f5: c0:ff:3a:c0:4f:a5:c1:f6:27:02:47:84:02:11:31:3f:3b:0d: e9:77:0a:77:f5:b7:88:44:e1:31:51:95:1f:fe:ce:0d:8b:2d: c7:58:a3:f7:2e:59:02:8a:89:37:6d:77:84:67:ea:45:7d:11: ce:cd:4a:68:e0:67:aa:b8:80:f3:5e:d1:46:20:51:8b:20:09: 85:dd:51:c8:9b:92:76:5b:9c:1e:c4:1d:78:a3:eb:b8:cf:4c: 6e:6b:2f:10:4c:f4:84:4a:03:1e:52:23:e8:da:7d:1e:96:8c: 46:f4:b9:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuVVCuCBAiRJPwmI5nEIWW4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYWIzOWM2ZTA0MTIyMzVlZmM3ODc3YTlmNzM3ODk5MzEz ZWQxNWUwHhcNMjYwMTA2MjIwMTE5WhcNMjYwMTA3MjIwMTE5WjAzMTEwLwYDVQQD EyhlNTA5NzZiYzA5NjkxZWRiYzJkZmM2NjNhMTNkY2E2YjE3OThmOGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzwzuNGZ7IpWcsU6hmRPdCo6zrVM SZqsRl5k6h6lMk8UaF2k36bJTXCKhw0f9YhvFYrfrF5oiAwnVrpMQFEAA7o2QV4c RJHYWTNfIzlmP7jP0nMaHgnj0XV53pd0G72U+28HNdFdw6sKAfqrEk57u2ZCF97W AU5kblNXcBze2VDNxlRRsblwHojFXvzvF1auM1LE/lHeYzlhXuVm6LEVNQNxyvFS L4B0Wz86MK22/c4Gm8CVH15NnN0E+BAXFM4EKLUQLnNwsFvqziarbNWLQNXCdhxE eQ88+8P13foHjR5lfqCAXhZi2GV0U9KVMu+VRf183/oVqJvKPpC/E0ICbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOUJdrwJaR7bwt/GY6E9ymsXmPj/MB8GA1UdIwQY MBaAFHyrOcbgQSI178eHep9zeJkxPtFeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZktzNXh1QkJJalh2eDRkNm4zTjRtVEUtMFY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mODkxNzAtMTM4ZS00OTk5LWFlZjct YzQ0MDI5OGRmYzVjLzEvZktzNXh1QkJJalh2eDRkNm4zTjRtVEUtMFY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9mODkxNzAtMTM4ZS00OTk5LWFlZjctYzQ0MDI5OGRmYzVj LzEvZktzNXh1QkJJalh2eDRkNm4zTjRtVEUtMFY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl1v0heTY Oab7N5RIyro0UlB9aqdtBN8SPZcuNgHbTS+b/boznkABXnNGELlDzME5OMhzTOot PbbcB3i3idcOfwTd0E6u/1xqqxT40B7yei3ExIblqz1Fswc9WKDHdJycb51figR7 S6JGvmBcNSF0Zst0Cz4hCSUV8y6MdQkBJrYyQqTa52zXcIOkjuMr/LP1wP86wE+l wfYnAkeEAhExPzsN6XcKd/W3iEThMVGVH/7ODYstx1ij9y5ZAoqJN213hGfqRX0R zs1KaOBnqriA817RRiBRiyAJhd1RyJuSdlucHsQdeKPruM9MbmsvEEz0hEoDHlIj 6Np9HpaMRvS5sw== -----END CERTIFICATE-----Generated at Wed Jan 7 02:39:19 2026 by rpki-client