This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft File: fYx0FDwic-IBpnVxVDHfryj-F7I.mft (raw, json) Hash identifier: 4RxxI1fGLQvOft2Hhu0mFcEclz7i4OJf/m23ujmXcoY= Subject key identifier: FB:48:DA:DD:5A:6D:37:13:A8:D3:47:78:F5:EE:BF:23:08:58:08:4B Authority key identifier: 7D:8C:74:14:3C:22:73:E2:01:A6:75:71:54:31:DF:AF:28:FE:17:B2 Certificate issuer: /CN=7d8c74143c2273e201a675715431dfaf28fe17b2 Certificate serial: 019B79A5B7EE32632287D7F9D4F6DBF666E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft Manifest number: 0C32 Signing time: Thu 01 Jan 2026 13:01:01 +0000 Manifest this update: Thu 01 Jan 2026 13:01:01 +0000 Manifest next update: Fri 02 Jan 2026 13:01:01 +0000 Files and hashes: 1: Xrjs-S2RSbrZu3yjzq9Uz6FE53U.roa (hash: BOs1xZvMppiPo1LljXNukiOUbDIO0taZ6bkmR9k5vfQ=) 2: fYx0FDwic-IBpnVxVDHfryj-F7I.crl (hash: k4mDbum2cFJE5VAC/7exFSjeM1gm3wJ2EgoZeYraHuc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.crl rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 13:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:a5:b7:ee:32:63:22:87:d7:f9:d4:f6:db:f6:66:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d8c74143c2273e201a675715431dfaf28fe17b2 Validity Not Before: Jan 1 13:01:01 2026 GMT Not After : Jan 2 13:01:01 2026 GMT Subject: CN=fb48dadd5a6d3713a8d34778f5eebf230858084b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ab:88:fc:c2:34:63:0e:b4:5c:3c:ba:6e:a0: 33:b8:54:85:67:02:94:ac:53:05:52:6b:a4:2b:b1: 81:ba:ea:7e:3d:4b:5d:3e:e8:2f:86:c8:3b:01:d5: bb:ad:3e:c7:73:76:09:4f:f4:46:7e:2b:73:0f:96: b3:fa:1d:15:22:b6:5f:41:fe:d6:c8:b8:47:07:03: c0:a0:23:c4:c8:7d:05:d3:81:cd:b7:b9:ea:38:37: 48:ab:09:3f:28:b4:cf:09:fd:ae:bb:f7:51:65:19: 01:6d:50:6b:a4:56:a3:ff:45:86:c6:3c:f9:d2:4d: b9:ba:63:b1:18:69:72:27:29:c2:26:a5:36:09:fc: e2:89:57:f4:42:7e:33:c4:82:bd:1f:a7:71:19:cb: 86:39:73:f1:13:84:17:32:17:3a:da:07:4f:9e:9b: 95:6c:9e:02:c0:ee:56:fe:a1:d0:1d:6e:dc:35:84: 06:79:b9:f9:3e:49:cc:9a:47:74:a6:96:ee:a6:4c: cb:31:ee:c0:8e:9a:e4:50:48:8d:b7:fa:e9:12:1e: ef:ec:30:e4:d3:e7:fe:59:70:1e:40:5d:60:2e:58: bf:5f:b2:b2:26:37:f1:de:15:24:32:c3:37:85:8d: 12:7b:ef:a8:89:db:8a:ea:06:aa:c0:48:03:35:fa: 69:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:48:DA:DD:5A:6D:37:13:A8:D3:47:78:F5:EE:BF:23:08:58:08:4B X509v3 Authority Key Identifier: keyid:7D:8C:74:14:3C:22:73:E2:01:A6:75:71:54:31:DF:AF:28:FE:17:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:66:d4:0e:09:48:3d:ef:a4:3a:7c:86:19:83:02:b9:27:e0: 9a:34:68:95:6d:a9:8f:b1:52:80:e6:56:b7:ef:62:59:57:a7: 64:f4:04:8d:d1:f9:c4:80:5a:84:7a:1b:78:6d:f9:3d:6e:1c: 24:31:c5:1e:a8:c2:0e:bf:b4:1e:e0:47:b2:06:b4:6f:84:38: 0b:ea:db:c1:f2:35:89:d8:24:a1:7b:20:d2:15:18:18:ec:e5: 5e:1b:1d:93:c4:9c:1e:b4:35:bc:bf:cd:66:43:2c:a1:dd:97: bd:b0:0c:d3:09:fe:6a:4b:06:39:8c:c2:9d:a9:0f:2f:44:97: 84:54:2e:03:e6:22:23:20:80:d1:50:8c:14:0b:d1:ce:90:7a: f9:c5:5b:1a:a9:fb:e5:1a:22:fb:38:fb:e7:91:4d:3b:fb:14: 0c:de:fc:35:9d:95:99:57:c5:e8:42:3e:05:10:32:1f:58:20: 5b:12:77:e2:cc:7f:7d:35:fb:c6:0f:8d:64:c6:1c:db:64:6b: 16:f1:d4:0d:79:cc:fc:52:d7:db:2f:e6:ca:51:6e:1c:4e:2b: da:39:d8:65:0f:20:af:c7:ec:b0:38:ad:19:96:b0:f2:a8:da: 11:17:a9:99:85:f0:4a:4e:93:38:7c:0a:f1:d4:3b:52:5a:c0: 97:df:27:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt5pbfuMmMih9f51Pbb9mbhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkOGM3NDE0M2MyMjczZTIwMWE2NzU3MTU0MzFkZmFmMjhm ZTE3YjIwHhcNMjYwMTAxMTMwMTAxWhcNMjYwMTAyMTMwMTAxWjAzMTEwLwYDVQQD EyhmYjQ4ZGFkZDVhNmQzNzEzYThkMzQ3NzhmNWVlYmYyMzA4NTgwODRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6uI/MI0Yw60XDy6bqAzuFSFZwKU rFMFUmukK7GBuup+PUtdPugvhsg7AdW7rT7Hc3YJT/RGfitzD5az+h0VIrZfQf7W yLhHBwPAoCPEyH0F04HNt7nqODdIqwk/KLTPCf2uu/dRZRkBbVBrpFaj/0WGxjz5 0k25umOxGGlyJynCJqU2CfziiVf0Qn4zxIK9H6dxGcuGOXPxE4QXMhc62gdPnpuV bJ4CwO5W/qHQHW7cNYQGebn5PknMmkd0ppbupkzLMe7AjprkUEiNt/rpEh7v7DDk 0+f+WXAeQF1gLli/X7KyJjfx3hUkMsM3hY0Se++oiduK6gaqwEgDNfppWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPtI2t1abTcTqNNHePXuvyMIWAhLMB8GA1UdIwQY MBaAFH2MdBQ8InPiAaZ1cVQx368o/heyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZll4MEZEd2ljLUlCcG5WeFZESGZyeWotRjdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS81YzNhNGMtOTg0My00YmVjLWExNjIt MThjMDM2NTMwN2JmLzEvZll4MEZEd2ljLUlCcG5WeFZESGZyeWotRjdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS81YzNhNGMtOTg0My00YmVjLWExNjItMThjMDM2NTMwN2Jm LzEvZll4MEZEd2ljLUlCcG5WeFZESGZyeWotRjdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANWbUDglI Pe+kOnyGGYMCuSfgmjRolW2pj7FSgOZWt+9iWVenZPQEjdH5xIBahHobeG35PW4c JDHFHqjCDr+0HuBHsga0b4Q4C+rbwfI1idgkoXsg0hUYGOzlXhsdk8ScHrQ1vL/N ZkMsod2XvbAM0wn+aksGOYzCnakPL0SXhFQuA+YiIyCA0VCMFAvRzpB6+cVbGqn7 5Roi+zj755FNO/sUDN78NZ2VmVfF6EI+BRAyH1ggWxJ34sx/fTX7xg+NZMYc22Rr FvHUDXnM/FLX2y/mylFuHE4r2jnYZQ8gr8fssDitGZaw8qjaERepmYXwSk6TOHwK 8dQ7UlrAl98nzQ== -----END CERTIFICATE-----Generated at Thu Jan 1 19:54:38 2026 by rpki-client