This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft File: fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft (raw, json) Hash identifier: y3JMcZbkc7MGG3e+jjZJaYNgw7tqP979ivln0ORjITc= Subject key identifier: BB:8A:FF:BD:ED:52:49:51:FD:FB:7B:55:22:40:30:75:DD:35:97:B0 Authority key identifier: 7E:13:41:4B:DC:23:12:40:0D:FA:9F:50:65:0D:51:EE:04:43:DF:16 Certificate issuer: /CN=7e13414bdc2312400dfa9f50650d51ee0443df16 Certificate serial: 019BB13964A22152CB9D4B752BCF4373EB2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft Manifest number: 17C6 Signing time: Mon 12 Jan 2026 08:01:27 +0000 Manifest this update: Mon 12 Jan 2026 08:01:27 +0000 Manifest next update: Tue 13 Jan 2026 08:01:27 +0000 Files and hashes: 1: anOK_t3CyTqq8NlqFB7A075gooA.roa (hash: UdYKN437GE/t4do7Cb6fa4jEkY53zklvjYRy+PQ0Xrg=) 2: fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl (hash: EsYvl6K919jih5P3h+zp0mDaeULVVgaznrvqORU5EZI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b1:39:64:a2:21:52:cb:9d:4b:75:2b:cf:43:73:eb:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e13414bdc2312400dfa9f50650d51ee0443df16 Validity Not Before: Jan 12 08:01:27 2026 GMT Not After : Jan 13 08:01:27 2026 GMT Subject: CN=bb8affbded524951fdfb7b5522403075dd3597b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4f:b8:5a:66:8d:64:0e:2d:6d:04:4c:96:d1: a0:2f:dd:00:6e:50:10:ba:7a:32:33:30:bc:0e:a3: 9d:05:24:bb:6b:c9:45:e8:39:a2:63:0b:16:c0:2b: 19:b1:d2:3e:29:1e:27:db:35:7d:49:de:bb:38:7c: 5d:1b:f9:88:44:25:27:6c:cd:a2:8a:32:1b:8f:c9: 95:d0:a9:ba:24:a6:19:f9:d2:c8:b2:ff:42:9e:8a: 5c:c7:41:78:0f:9a:03:96:c0:ad:d8:71:1f:c3:79: c2:d2:ed:11:99:53:b4:e2:f4:61:ae:98:34:c7:05: 76:5e:c5:f4:06:40:ae:cc:e6:6b:d3:e9:00:51:ae: 5a:c5:63:eb:8f:23:94:d2:0a:8f:aa:e4:a8:dd:de: 46:6b:ea:e8:fb:3d:57:c6:22:89:07:14:27:c0:87: f2:e4:31:dd:c7:3b:85:eb:c1:a0:88:2d:49:65:3e: 21:92:4f:22:83:16:a3:66:3e:1c:ae:19:57:c9:b2: 9f:19:03:56:bc:01:4a:38:d2:d3:7e:a3:79:61:ba: e0:18:f9:f7:ee:ae:2a:a0:aa:d1:e3:6b:50:56:00: 4e:54:2a:e3:39:29:2c:a3:b4:1a:d3:03:d2:c4:0f: 56:46:b7:b5:95:b9:db:25:36:71:fd:06:a7:08:b4: 56:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:8A:FF:BD:ED:52:49:51:FD:FB:7B:55:22:40:30:75:DD:35:97:B0 X509v3 Authority Key Identifier: keyid:7E:13:41:4B:DC:23:12:40:0D:FA:9F:50:65:0D:51:EE:04:43:DF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:03:4a:1d:02:6a:60:17:5a:fa:dc:ca:98:92:a4:83:84:09: 1d:11:93:d9:63:8e:8f:4e:8d:80:d3:f6:1b:76:ff:b1:42:f8: e9:a2:8f:4b:28:fe:a3:ad:9f:43:93:f0:33:1a:45:e9:9d:1c: 24:87:bd:4a:f5:44:9d:f7:57:8a:28:b0:89:b2:22:52:fd:08: cb:57:52:53:89:43:2c:08:4d:d2:f1:6e:09:bc:e0:a6:d2:d7: d0:89:df:ea:a2:bb:57:4c:d2:c6:1a:dd:88:4f:3f:c1:e2:16: ea:62:8e:4e:0f:97:8f:55:bb:5d:3b:bc:bc:c1:0f:18:87:57: 18:d6:20:26:d0:cd:87:2b:46:51:78:2a:a1:6d:68:16:77:64: f6:60:11:e9:43:2c:59:25:b8:c4:5b:75:a1:b3:c1:29:8f:cd: 1b:6b:f8:6a:5f:7b:22:76:1a:98:29:bd:c1:d6:8f:1b:88:98: f5:09:fd:75:33:a6:6d:f3:c1:ab:e0:94:d4:4b:7a:4d:98:4e: 19:99:3f:a3:55:7e:b6:d7:53:89:6f:89:f8:42:b9:fa:b0:f0: 55:2d:bd:c4:9d:13:cb:a1:a6:64:4a:44:b8:b9:81:01:a8:1b: 05:52:e0:87:69:e6:2a:6e:25:04:6b:3d:5b:29:3c:7a:90:11: d6:f0:ee:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuxOWSiIVLLnUt1K89Dc+sqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMTM0MTRiZGMyMzEyNDAwZGZhOWY1MDY1MGQ1MWVlMDQ0 M2RmMTYwHhcNMjYwMTEyMDgwMTI3WhcNMjYwMTEzMDgwMTI3WjAzMTEwLwYDVQQD EyhiYjhhZmZiZGVkNTI0OTUxZmRmYjdiNTUyMjQwMzA3NWRkMzU5N2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0+4WmaNZA4tbQRMltGgL90AblAQ unoyMzC8DqOdBSS7a8lF6DmiYwsWwCsZsdI+KR4n2zV9Sd67OHxdG/mIRCUnbM2i ijIbj8mV0Km6JKYZ+dLIsv9Cnopcx0F4D5oDlsCt2HEfw3nC0u0RmVO04vRhrpg0 xwV2XsX0BkCuzOZr0+kAUa5axWPrjyOU0gqPquSo3d5Ga+ro+z1XxiKJBxQnwIfy 5DHdxzuF68GgiC1JZT4hkk8igxajZj4crhlXybKfGQNWvAFKONLTfqN5YbrgGPn3 7q4qoKrR42tQVgBOVCrjOSkso7Qa0wPSxA9WRre1lbnbJTZx/QanCLRWfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLuK/73tUklR/ft7VSJAMHXdNZewMB8GA1UdIwQY MBaAFH4TQUvcIxJADfqfUGUNUe4EQ98WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmhOQlM5d2pFa0FOLXA5UVpRMVI3Z1JEM3hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi80NGMzNjUtNmNlZC00NWQ5LTg2NWQt MDRmY2VjYWQ3MGVjLzEvZmhOQlM5d2pFa0FOLXA5UVpRMVI3Z1JEM3hZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi80NGMzNjUtNmNlZC00NWQ5LTg2NWQtMDRmY2VjYWQ3MGVj LzEvZmhOQlM5d2pFa0FOLXA5UVpRMVI3Z1JEM3hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxANKHQJq YBda+tzKmJKkg4QJHRGT2WOOj06NgNP2G3b/sUL46aKPSyj+o62fQ5PwMxpF6Z0c JIe9SvVEnfdXiiiwibIiUv0Iy1dSU4lDLAhN0vFuCbzgptLX0Inf6qK7V0zSxhrd iE8/weIW6mKOTg+Xj1W7XTu8vMEPGIdXGNYgJtDNhytGUXgqoW1oFndk9mAR6UMs WSW4xFt1obPBKY/NG2v4al97InYamCm9wdaPG4iY9Qn9dTOmbfPBq+CU1Et6TZhO GZk/o1V+ttdTiW+J+EK5+rDwVS29xJ0Ty6GmZEpEuLmBAagbBVLgh2nmKm4lBGs9 Wyk8epAR1vDu+w== -----END CERTIFICATE-----Generated at Mon Jan 12 13:48:14 2026 by rpki-client