This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft File: fhNA7SMjqShumA9mRpmQqaHjB10.mft (raw, json) Hash identifier: Rq/OjTncPeIdjpbDEflBtSl4GlZxr4/sJyKFJ0DSv/g= Subject key identifier: 04:C9:D8:32:4C:71:23:78:3E:23:D1:BE:A1:01:79:A4:15:2A:E4:E4 Authority key identifier: 7E:13:40:ED:23:23:A9:28:6E:98:0F:66:46:99:90:A9:A1:E3:07:5D Certificate issuer: /CN=7e1340ed2323a9286e980f66469990a9a1e3075d Certificate serial: 019BADCB51B30BABBE318E66EB1070233188 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft Manifest number: 037B Signing time: Sun 11 Jan 2026 16:02:21 +0000 Manifest this update: Sun 11 Jan 2026 16:02:21 +0000 Manifest next update: Mon 12 Jan 2026 16:02:21 +0000 Files and hashes: 1: fhNA7SMjqShumA9mRpmQqaHjB10.crl (hash: 5Q9G+fEuy2huzjm+/JuTQpqk2fBcQNwSxP5btJggmsI=) 2: l1nrHCg1JaRGqWglwBj3oSy_fj8.roa (hash: y4C2wS/8hOK+ga53wXjcr5tBKnj/Yfql4LK0XM8fOmk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.crl rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 16:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ad:cb:51:b3:0b:ab:be:31:8e:66:eb:10:70:23:31:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e1340ed2323a9286e980f66469990a9a1e3075d Validity Not Before: Jan 11 16:02:21 2026 GMT Not After : Jan 12 16:02:21 2026 GMT Subject: CN=04c9d8324c7123783e23d1bea10179a4152ae4e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2d:f2:bf:38:fe:f7:98:3e:e6:5b:b1:ab:12: 4a:7f:47:26:26:7e:11:37:24:45:0e:5b:ad:4b:29: 9e:e8:6a:02:1e:e5:ea:b3:a6:02:ce:3b:1f:73:f4: de:0c:88:2a:00:27:46:e8:59:e8:c5:2d:8a:5b:ff: 13:3e:ca:97:93:36:05:dc:80:5a:a3:c9:cf:89:20: 33:33:0a:96:0a:eb:bc:b0:e8:f0:3f:ad:62:6b:75: a5:6e:cf:63:64:eb:92:30:7d:56:76:d7:61:23:00: b2:30:fc:1a:13:92:c1:97:81:c9:48:40:18:e9:46: d1:d9:c3:c6:44:df:ea:6b:5a:9d:72:e2:3d:38:b3: d1:d7:b0:54:2e:8d:5b:ff:f7:88:96:ca:62:82:88: fe:d2:19:33:aa:c6:0f:ba:10:c9:8c:da:68:2d:7f: 6f:8b:81:63:d0:1f:83:7d:2f:29:95:4b:af:66:e1: 2f:24:47:a7:7c:c7:97:1f:ef:d1:66:ba:0b:1b:d0: e3:99:da:8f:cf:74:72:7f:27:4a:61:73:65:ae:fa: da:57:55:94:0f:e5:41:9f:fb:4a:b1:be:14:92:bd: e3:31:9a:73:44:dc:cb:53:0c:58:6c:13:c8:30:17: 6f:23:25:7a:ec:9f:10:56:b7:ee:c9:d3:f2:fa:6e: 1c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C9:D8:32:4C:71:23:78:3E:23:D1:BE:A1:01:79:A4:15:2A:E4:E4 X509v3 Authority Key Identifier: keyid:7E:13:40:ED:23:23:A9:28:6E:98:0F:66:46:99:90:A9:A1:E3:07:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:6a:e7:50:8e:47:b3:ca:e2:c9:e4:15:23:aa:81:34:5f:18: 46:a4:85:ac:e2:b5:7e:1e:0b:2b:d3:63:6d:2a:79:9f:63:c6: a7:64:01:2d:52:df:9b:75:1f:2a:a5:eb:e3:0b:5e:63:55:b0: 27:94:66:a7:79:9a:19:9b:1f:8d:8b:32:5d:ad:4d:4c:8a:48: cf:09:8a:74:37:ea:8b:ed:52:98:7d:21:2b:7d:e5:0f:59:6d: 59:3e:14:cb:f4:13:aa:19:bb:ab:3d:aa:68:68:67:1c:f2:83: e5:a2:94:d3:43:05:6f:57:4a:4f:01:c9:a1:ff:c9:56:5b:cb: 14:92:76:7a:c3:0a:48:0b:f6:58:7e:ce:ee:d2:e0:83:64:77: d5:62:0b:c6:16:66:e7:ec:b2:6d:1c:ca:b6:08:9e:f4:17:29: c7:d6:c9:cf:42:34:f1:06:56:1c:fa:ea:47:33:eb:ad:57:76: bf:01:d5:67:5b:3d:c3:57:1b:44:66:ae:e1:b4:e3:2b:2d:70: 72:de:60:e2:71:48:10:c5:b6:29:36:b5:65:55:fe:21:e5:52: ac:26:54:68:86:6e:93:bd:0d:5d:56:c7:87:85:55:d8:53:f1: 98:25:47:87:6a:ad:2d:1d:c2:69:3e:02:43:74:a2:e8:76:47: c3:fc:0e:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuty1GzC6u+MY5m6xBwIzGIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMTM0MGVkMjMyM2E5Mjg2ZTk4MGY2NjQ2OTk5MGE5YTFl MzA3NWQwHhcNMjYwMTExMTYwMjIxWhcNMjYwMTEyMTYwMjIxWjAzMTEwLwYDVQQD EygwNGM5ZDgzMjRjNzEyMzc4M2UyM2QxYmVhMTAxNzlhNDE1MmFlNGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAui3yvzj+95g+5luxqxJKf0cmJn4R NyRFDlutSyme6GoCHuXqs6YCzjsfc/TeDIgqACdG6FnoxS2KW/8TPsqXkzYF3IBa o8nPiSAzMwqWCuu8sOjwP61ia3Wlbs9jZOuSMH1WdtdhIwCyMPwaE5LBl4HJSEAY 6UbR2cPGRN/qa1qdcuI9OLPR17BULo1b//eIlspigoj+0hkzqsYPuhDJjNpoLX9v i4Fj0B+DfS8plUuvZuEvJEenfMeXH+/RZroLG9DjmdqPz3RyfydKYXNlrvraV1WU D+VBn/tKsb4Ukr3jMZpzRNzLUwxYbBPIMBdvIyV67J8QVrfuydPy+m4cFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFATJ2DJMcSN4PiPRvqEBeaQVKuTkMB8GA1UdIwQY MBaAFH4TQO0jI6kobpgPZkaZkKmh4wddMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmhOQTdTTWpxU2h1bUE5bVJwbVFxYUhqQjEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8xOWZjYzktY2IzMy00MjU1LTg4ODMt ZmUwMjdhMDM0NDQ5LzEvZmhOQTdTTWpxU2h1bUE5bVJwbVFxYUhqQjEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS8xOWZjYzktY2IzMy00MjU1LTg4ODMtZmUwMjdhMDM0NDQ5 LzEvZmhOQTdTTWpxU2h1bUE5bVJwbVFxYUhqQjEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY2rnUI5H s8riyeQVI6qBNF8YRqSFrOK1fh4LK9NjbSp5n2PGp2QBLVLfm3UfKqXr4wteY1Ww J5Rmp3maGZsfjYsyXa1NTIpIzwmKdDfqi+1SmH0hK33lD1ltWT4Uy/QTqhm7qz2q aGhnHPKD5aKU00MFb1dKTwHJof/JVlvLFJJ2esMKSAv2WH7O7tLgg2R31WILxhZm 5+yybRzKtgie9Bcpx9bJz0I08QZWHPrqRzPrrVd2vwHVZ1s9w1cbRGau4bTjKy1w ct5g4nFIEMW2KTa1ZVX+IeVSrCZUaIZuk70NXVbHh4VV2FPxmCVHh2qtLR3CaT4C Q3Si6HZHw/wONw== -----END CERTIFICATE-----Generated at Mon Jan 12 02:38:04 2026 by rpki-client