This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft File: FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft (raw, json) Hash identifier: Sbx3wREj7pp/trfmXfCE2iLk8f8Lzs44Io7QKBQkaPE= Subject key identifier: BB:E3:14:B0:A7:44:73:74:2F:BC:0D:FE:5D:46:04:B8:BA:9F:5A:1F Authority key identifier: 15:F1:FB:12:90:3A:5C:D4:BC:17:AB:B5:98:73:C9:D6:DA:7E:69:B5 Certificate issuer: /CN=15f1fb12903a5cd4bc17abb59873c9d6da7e69b5 Certificate serial: 019B7D5DF8529976B538B395C83FF4B80FD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfH7EpA6XNS8F6u1mHPJ1tp-abU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft Manifest number: 0556 Signing time: Fri 02 Jan 2026 06:21:08 +0000 Manifest this update: Fri 02 Jan 2026 06:21:08 +0000 Manifest next update: Sat 03 Jan 2026 06:21:08 +0000 Files and hashes: 1: 5KwTCXGaEmxfineap3j8xC_SkiM.roa (hash: iGdOA9kuMVNiObXLidash5z/PzOjRgRSWtuN684ej3Q=) 2: FfH7EpA6XNS8F6u1mHPJ1tp-abU.crl (hash: wNKn3HI0G3aJ04UkQnCUZhN4kNdOV9hNI+lF4wdXQrg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft rsync://rpki.ripe.net/repository/DEFAULT/FfH7EpA6XNS8F6u1mHPJ1tp-abU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:f8:52:99:76:b5:38:b3:95:c8:3f:f4:b8:0f:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15f1fb12903a5cd4bc17abb59873c9d6da7e69b5 Validity Not Before: Jan 2 06:21:08 2026 GMT Not After : Jan 3 06:21:08 2026 GMT Subject: CN=bbe314b0a74473742fbc0dfe5d4604b8ba9f5a1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:15:7e:9f:7b:18:2d:2d:87:b4:e8:45:a1:4f: 68:78:ad:60:6c:3d:c4:d7:06:c4:94:f4:d8:c6:be: 15:5a:d7:bc:34:76:59:13:a1:2e:59:bb:35:63:d9: 1a:cf:4e:82:36:6b:ee:53:e5:e4:5d:9d:64:20:f1: 5e:8a:84:f4:4c:ed:77:fc:45:21:ae:77:63:78:fd: 9a:d7:21:8b:c7:8b:1d:1d:e0:b8:b2:04:f1:31:d0: 81:db:b6:d2:69:34:89:1b:1f:c2:f5:9b:a5:d4:05: e2:83:30:f3:0a:e5:52:f2:9f:17:59:51:5d:bb:15: 3d:e0:c2:de:d1:72:13:a7:01:cb:25:c9:3b:21:d6: 65:aa:5d:5e:bf:c6:f6:d4:9a:dc:3e:8a:a9:47:78: 41:4c:fc:04:05:23:2e:75:8d:1a:c8:d0:2b:e2:85: db:fc:02:0e:65:7d:09:ab:c0:0b:6c:ed:2c:a5:9c: cc:8d:15:ca:eb:e4:ef:70:65:28:4a:d6:98:7d:89: 0e:43:1c:4c:16:80:55:26:78:cd:4b:0a:46:d7:6e: 59:56:5b:5b:fe:f5:88:fe:0d:1a:6f:e8:c0:bb:f7: 76:4b:86:0b:bc:a2:6a:72:4f:13:3a:b8:9d:5d:61: 05:24:5f:62:b6:cb:8e:6a:88:32:c4:f7:16:38:50: d7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E3:14:B0:A7:44:73:74:2F:BC:0D:FE:5D:46:04:B8:BA:9F:5A:1F X509v3 Authority Key Identifier: keyid:15:F1:FB:12:90:3A:5C:D4:BC:17:AB:B5:98:73:C9:D6:DA:7E:69:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfH7EpA6XNS8F6u1mHPJ1tp-abU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:17:53:56:c3:c3:31:5e:22:e5:1e:e6:35:19:bc:eb:7a:ce: 9d:09:96:0b:a3:5e:ea:64:b7:bb:80:a9:50:23:3c:38:96:ed: 6b:c2:64:5c:e8:ed:94:00:b9:4b:77:bc:97:2e:e3:c9:6e:f1: 31:55:ee:ec:03:c4:57:a2:e6:a6:3e:4e:7e:5e:68:22:e6:d3: fe:12:a5:b8:31:04:07:97:32:d3:f4:c8:da:11:17:b2:3d:75: 7f:6c:6f:a1:8c:96:14:f8:40:da:97:bc:53:eb:e3:10:fc:3d: d4:73:0e:34:a8:5e:f8:0b:33:92:80:c2:a4:8f:51:3a:68:1b: 6d:cf:a1:6f:e0:b1:b3:4d:9e:03:13:76:59:e7:72:82:e4:84: ea:9f:2a:c0:f5:75:d3:89:98:b4:e6:6a:37:a1:4a:a7:0f:ae: 09:b4:ad:92:c9:68:ef:a1:83:32:64:aa:34:27:69:8f:0f:7d: 03:29:a8:b1:3e:2a:de:40:f9:7a:04:0d:cf:84:cc:a4:e4:86: fb:2f:36:4a:f2:ce:4c:d6:2f:dd:a2:77:fa:95:e7:7f:9b:87: ad:77:4d:69:97:30:fa:0e:a0:0f:f1:14:6e:78:7c:c4:bb:72: 20:9e:a3:7d:79:db:dc:e1:a9:2e:0f:05:73:11:76:22:cf:90: c1:ed:af:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt9XfhSmXa1OLOVyD/0uA/UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZjFmYjEyOTAzYTVjZDRiYzE3YWJiNTk4NzNjOWQ2ZGE3 ZTY5YjUwHhcNMjYwMTAyMDYyMTA4WhcNMjYwMTAzMDYyMTA4WjAzMTEwLwYDVQQD EyhiYmUzMTRiMGE3NDQ3Mzc0MmZiYzBkZmU1ZDQ2MDRiOGJhOWY1YTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxV+n3sYLS2HtOhFoU9oeK1gbD3E 1wbElPTYxr4VWte8NHZZE6EuWbs1Y9kaz06CNmvuU+XkXZ1kIPFeioT0TO13/EUh rndjeP2a1yGLx4sdHeC4sgTxMdCB27bSaTSJGx/C9Zul1AXigzDzCuVS8p8XWVFd uxU94MLe0XITpwHLJck7IdZlql1ev8b21JrcPoqpR3hBTPwEBSMudY0ayNAr4oXb /AIOZX0Jq8ALbO0spZzMjRXK6+TvcGUoStaYfYkOQxxMFoBVJnjNSwpG125ZVltb /vWI/g0ab+jAu/d2S4YLvKJqck8TOridXWEFJF9itsuOaogyxPcWOFDXZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLvjFLCnRHN0L7wN/l1GBLi6n1ofMB8GA1UdIwQY MBaAFBXx+xKQOlzUvBertZhzydbafmm1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmZIN0VwQTZYTlM4RjZ1MW1IUEoxdHAtYWJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9lYzRhMmItNzZkNy00NDczLTk5NDUt MmYyZjhiNTkwNTAzLzEvRmZIN0VwQTZYTlM4RjZ1MW1IUEoxdHAtYWJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9lYzRhMmItNzZkNy00NDczLTk5NDUtMmYyZjhiNTkwNTAz LzEvRmZIN0VwQTZYTlM4RjZ1MW1IUEoxdHAtYWJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVRdTVsPD MV4i5R7mNRm863rOnQmWC6Ne6mS3u4CpUCM8OJbta8JkXOjtlAC5S3e8ly7jyW7x MVXu7APEV6Lmpj5Ofl5oIubT/hKluDEEB5cy0/TI2hEXsj11f2xvoYyWFPhA2pe8 U+vjEPw91HMONKhe+AszkoDCpI9ROmgbbc+hb+Cxs02eAxN2WedyguSE6p8qwPV1 04mYtOZqN6FKpw+uCbStkslo76GDMmSqNCdpjw99AymosT4q3kD5egQNz4TMpOSG +y82SvLOTNYv3aJ3+pXnf5uHrXdNaZcw+g6gD/EUbnh8xLtyIJ6jfXnb3OGpLg8F cxF2Is+Qwe2vdQ== -----END CERTIFICATE-----Generated at Fri Jan 2 11:30:20 2026 by rpki-client