This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft File: FumqrOUCeVhbXFpdjuhWEGhsJsA.mft (raw, json) Hash identifier: KPRI8kMg/VD1+yKzTEeS/+1KKVJX3HrB8Ghx99Ovukc= Subject key identifier: 17:9B:BB:30:85:44:6A:95:D5:4F:1B:40:F3:1C:86:07:45:93:B1:09 Authority key identifier: 16:E9:AA:AC:E5:02:79:58:5B:5C:5A:5D:8E:E8:56:10:68:6C:26:C0 Certificate issuer: /CN=16e9aaace50279585b5c5a5d8ee85610686c26c0 Certificate serial: 019B7900DA9E5A024DFEB710576EFB2812B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FumqrOUCeVhbXFpdjuhWEGhsJsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft Manifest number: 17A6 Signing time: Thu 01 Jan 2026 10:00:57 +0000 Manifest this update: Thu 01 Jan 2026 10:00:57 +0000 Manifest next update: Fri 02 Jan 2026 10:00:57 +0000 Files and hashes: 1: FumqrOUCeVhbXFpdjuhWEGhsJsA.crl (hash: e4Wk24eMACWBk0OLUn/pafSxc3SHbynXqRm6Ygqzcrs=) 2: XHC_hDAqYlIYXrUHwPjCSmuap-w.roa (hash: QCdmiPzQ+fM9D3JEIMjhnM6hVdihEFRjXxcysEmoq04=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft rsync://rpki.ripe.net/repository/DEFAULT/FumqrOUCeVhbXFpdjuhWEGhsJsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:00:da:9e:5a:02:4d:fe:b7:10:57:6e:fb:28:12:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16e9aaace50279585b5c5a5d8ee85610686c26c0 Validity Not Before: Jan 1 10:00:57 2026 GMT Not After : Jan 2 10:00:57 2026 GMT Subject: CN=179bbb3085446a95d54f1b40f31c86074593b109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e1:45:b8:45:44:c2:2d:35:dd:5d:43:42:5c: a0:0c:cb:d8:42:c3:49:09:7d:d4:0f:8a:04:68:ce: ce:38:10:e8:39:c9:8b:d2:76:33:32:c8:71:1f:c8: 0a:80:b2:2c:7e:55:67:08:37:fe:7d:ca:2f:62:00: 0f:4c:05:cd:72:9d:bd:4a:b8:70:8a:47:5a:7c:32: e0:b7:ac:c5:37:d4:15:b5:3f:79:63:31:5d:60:ff: c2:cd:08:3a:9c:d7:af:06:81:16:8c:2d:27:c1:fa: 04:e6:85:3e:b5:98:46:9a:92:9e:fc:dd:a1:9b:05: ea:4f:a1:20:65:61:ff:64:d5:0f:f7:66:0a:e4:bd: e5:70:69:3d:8a:3f:f8:69:b7:70:57:86:69:85:4e: e5:ac:ba:55:3c:44:82:6f:17:6d:a7:56:9d:5d:ef: 5f:7c:19:db:3b:99:8c:4b:12:a2:2a:fb:2a:f0:b0: 84:b1:1b:1b:23:c4:1b:03:bb:ae:8e:af:33:ec:8b: 96:10:84:55:6b:b6:3c:48:e2:8f:8a:ac:3e:c9:65: 16:05:e1:0b:3e:f7:2c:63:0a:f1:63:c9:29:4a:82: 1b:fb:78:0a:49:bd:75:36:93:5a:37:27:f9:da:c8: 25:7c:af:97:3b:25:0b:ef:e5:78:ab:97:6f:a9:ea: f6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:9B:BB:30:85:44:6A:95:D5:4F:1B:40:F3:1C:86:07:45:93:B1:09 X509v3 Authority Key Identifier: keyid:16:E9:AA:AC:E5:02:79:58:5B:5C:5A:5D:8E:E8:56:10:68:6C:26:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FumqrOUCeVhbXFpdjuhWEGhsJsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:f2:35:a8:69:1a:dd:47:c9:03:d9:c7:63:75:85:1b:52:b9: a1:75:e1:c0:7b:07:e9:93:8b:68:cc:98:20:47:d2:41:c7:71: 7d:9b:f4:59:d8:da:ca:33:04:88:49:dd:e0:a9:73:b8:31:fc: 2b:e3:96:fb:a6:36:f3:4d:bd:67:ab:ec:90:01:0e:b0:95:94: b0:73:62:10:0a:41:61:6d:8b:53:d5:9e:9b:d4:97:e6:8b:bf: 56:8a:c4:e0:7b:e2:b4:e5:72:3e:de:a9:dc:06:8e:3a:22:f6: f1:5f:3a:65:38:57:c5:c4:bb:e0:56:8a:39:10:10:86:61:76: 3d:c7:6c:62:4f:6a:85:da:88:7a:e4:69:94:58:d4:d6:bf:8a: 1b:d8:55:49:4d:8a:1e:b8:1b:c9:09:f7:a6:1c:e7:4e:58:12: 2d:d1:b3:63:29:e8:5e:ba:84:23:d4:ef:e8:7b:29:94:5c:a0: 95:5e:a0:79:8d:95:e3:5f:f7:8c:fc:e9:fb:ba:a9:36:18:b6: 14:38:ec:ae:d7:a7:a0:57:28:29:b4:d2:4e:ec:40:7d:ce:e6: 44:12:3a:57:64:8b:7b:7a:37:32:85:c6:bb:8d:ef:a7:1f:f1: 4c:ea:0d:62:77:b4:f9:03:d8:c5:f4:c7:5f:8d:1c:d1:84:65: 3e:6b:b2:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt5ANqeWgJN/rcQV277KBKzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2ZTlhYWFjZTUwMjc5NTg1YjVjNWE1ZDhlZTg1NjEwNjg2 YzI2YzAwHhcNMjYwMTAxMTAwMDU3WhcNMjYwMTAyMTAwMDU3WjAzMTEwLwYDVQQD EygxNzliYmIzMDg1NDQ2YTk1ZDU0ZjFiNDBmMzFjODYwNzQ1OTNiMTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOFFuEVEwi013V1DQlygDMvYQsNJ CX3UD4oEaM7OOBDoOcmL0nYzMshxH8gKgLIsflVnCDf+fcovYgAPTAXNcp29Srhw ikdafDLgt6zFN9QVtT95YzFdYP/CzQg6nNevBoEWjC0nwfoE5oU+tZhGmpKe/N2h mwXqT6EgZWH/ZNUP92YK5L3lcGk9ij/4abdwV4ZphU7lrLpVPESCbxdtp1adXe9f fBnbO5mMSxKiKvsq8LCEsRsbI8QbA7uujq8z7IuWEIRVa7Y8SOKPiqw+yWUWBeEL PvcsYwrxY8kpSoIb+3gKSb11NpNaNyf52sglfK+XOyUL7+V4q5dvqer2bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBebuzCFRGqV1U8bQPMchgdFk7EJMB8GA1UdIwQY MBaAFBbpqqzlAnlYW1xaXY7oVhBobCbAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnVtcXJPVUNlVmhiWEZwZGp1aFdFR2hzSnNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMmRmMGUtN2JmZS00NGE5LWJmODYt ZjllZjk3NDIwNzY0LzEvRnVtcXJPVUNlVmhiWEZwZGp1aFdFR2hzSnNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9lMmRmMGUtN2JmZS00NGE5LWJmODYtZjllZjk3NDIwNzY0 LzEvRnVtcXJPVUNlVmhiWEZwZGp1aFdFR2hzSnNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbfI1qGka 3UfJA9nHY3WFG1K5oXXhwHsH6ZOLaMyYIEfSQcdxfZv0WdjayjMEiEnd4KlzuDH8 K+OW+6Y28029Z6vskAEOsJWUsHNiEApBYW2LU9Wem9SX5ou/VorE4HvitOVyPt6p 3AaOOiL28V86ZThXxcS74FaKORAQhmF2PcdsYk9qhdqIeuRplFjU1r+KG9hVSU2K HrgbyQn3phznTlgSLdGzYynoXrqEI9Tv6HsplFyglV6geY2V41/3jPzp+7qpNhi2 FDjsrtenoFcoKbTSTuxAfc7mRBI6V2SLe3o3MoXGu43vpx/xTOoNYne0+QPYxfTH X40c0YRlPmuyug== -----END CERTIFICATE-----Generated at Thu Jan 1 17:35:32 2026 by rpki-client