This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft File: n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft (raw, json) Hash identifier: v6DTW200wJEM/WnNJMNyai95d2HxhHYO7Rr1tQWPIaE= Subject key identifier: 4B:34:A3:50:97:64:4A:6E:E4:34:A4:29:B6:1E:D1:91:56:65:D7:3A Authority key identifier: 9F:E1:61:01:E4:21:D2:1C:DB:5E:5B:05:A2:E2:89:DF:B7:73:F4:C9 Certificate issuer: /CN=9fe16101e421d21cdb5e5b05a2e289dfb773f4c9 Certificate serial: 019BAE6F76E3DFA8D67E2F74A6A9E9585E31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft Manifest number: 0742 Signing time: Sun 11 Jan 2026 19:01:39 +0000 Manifest this update: Sun 11 Jan 2026 19:01:39 +0000 Manifest next update: Mon 12 Jan 2026 19:01:39 +0000 Files and hashes: 1: n-FhAeQh0hzbXlsFouKJ37dz9Mk.crl (hash: d5jSyAQZeu1Rg9Xeu1VN2lfism7FeGwfwpU0UdI7RoY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:6f:76:e3:df:a8:d6:7e:2f:74:a6:a9:e9:58:5e:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fe16101e421d21cdb5e5b05a2e289dfb773f4c9 Validity Not Before: Jan 11 19:01:39 2026 GMT Not After : Jan 12 19:01:39 2026 GMT Subject: CN=4b34a35097644a6ee434a429b61ed1915665d73a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:96:05:c0:12:99:19:92:e1:5c:06:ec:27:55: 2a:8d:1a:5f:fa:f4:1c:b9:06:d7:56:6b:80:62:28: 90:5e:79:81:cc:a7:1c:a7:5f:22:a2:3d:9d:f1:a6: d6:e7:29:3c:0d:2a:c0:bc:92:ba:a0:6e:8c:5c:c0: 0a:ad:03:8a:56:c2:8c:e5:33:b0:02:82:64:7a:58: c1:e1:46:0e:7d:4d:13:22:c2:c9:47:9f:eb:8e:60: a6:25:73:de:98:8e:e4:7d:d1:fd:1d:93:56:dd:00: c2:09:8b:40:89:e1:60:54:c8:e8:4c:b0:19:38:1f: 2a:f7:59:36:d7:65:87:95:a9:ea:e2:d1:3b:ec:38: fd:c3:fd:3f:08:a1:dd:74:c7:49:9d:42:71:80:ab: 48:45:bf:8a:8d:11:92:e2:94:6d:3b:c1:41:d1:0b: e7:17:a1:0f:ec:25:0c:d8:29:59:20:8d:2e:9b:95: e3:93:c7:8d:b5:83:50:bb:77:00:f0:08:2a:a4:b5: 71:98:0e:c6:e3:48:42:bb:65:71:62:08:41:d5:87: 64:7b:cd:54:20:5d:a2:90:37:1f:4f:a9:09:9c:f9: 2b:fb:90:70:c3:9b:de:1a:9b:3a:1b:9b:b9:03:76: 07:4f:16:fd:ec:25:9e:f4:fe:9b:73:44:61:ee:43: 16:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:34:A3:50:97:64:4A:6E:E4:34:A4:29:B6:1E:D1:91:56:65:D7:3A X509v3 Authority Key Identifier: keyid:9F:E1:61:01:E4:21:D2:1C:DB:5E:5B:05:A2:E2:89:DF:B7:73:F4:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:3a:2e:0b:25:a0:cc:33:eb:9f:55:73:50:7d:a0:b4:02:5c: db:83:35:c7:80:17:5d:77:b0:74:41:a2:76:1d:97:76:a7:1c: b6:6b:06:75:b8:0d:0d:f2:c7:d8:63:a5:ab:30:5e:12:d5:82: ef:e4:00:23:60:f5:05:a9:82:1d:29:51:5a:f6:2e:2c:5e:d5: b8:6e:64:65:32:7b:fe:32:c0:cd:b3:63:34:3c:5c:c6:c4:02: eb:5b:8e:14:0f:cc:f4:dc:7a:9d:aa:e8:cf:e2:79:22:ba:9f: 11:dc:e8:d9:af:f7:ed:67:82:23:fd:35:56:c4:30:f6:42:ac: 22:93:94:01:29:15:42:aa:53:c1:76:63:56:de:13:27:17:3d: 7e:e2:5d:3d:a2:47:7f:19:f5:f1:0f:59:c8:21:d6:00:75:1f: 2e:47:93:70:3e:6f:05:2a:e5:e9:87:c7:14:1a:f9:6a:0d:9d: 87:a5:67:12:da:fc:61:dd:12:f4:bc:d0:4b:95:c4:af:5e:10: a9:88:68:a7:3d:26:6d:f1:57:3f:8d:7c:f6:9c:16:c8:04:d7: bb:8d:dc:b1:e9:34:9d:1d:36:e0:8b:8e:31:85:1e:67:57:07: 34:75:0d:a7:41:71:36:08:ee:97:5d:b6:0c:6b:f4:80:12:72: 3e:29:47:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuub3bj36jWfi90pqnpWF4xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZTE2MTAxZTQyMWQyMWNkYjVlNWIwNWEyZTI4OWRmYjc3 M2Y0YzkwHhcNMjYwMTExMTkwMTM5WhcNMjYwMTEyMTkwMTM5WjAzMTEwLwYDVQQD Eyg0YjM0YTM1MDk3NjQ0YTZlZTQzNGE0MjliNjFlZDE5MTU2NjVkNzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5YFwBKZGZLhXAbsJ1UqjRpf+vQc uQbXVmuAYiiQXnmBzKccp18ioj2d8abW5yk8DSrAvJK6oG6MXMAKrQOKVsKM5TOw AoJkeljB4UYOfU0TIsLJR5/rjmCmJXPemI7kfdH9HZNW3QDCCYtAieFgVMjoTLAZ OB8q91k212WHlanq4tE77Dj9w/0/CKHddMdJnUJxgKtIRb+KjRGS4pRtO8FB0Qvn F6EP7CUM2ClZII0um5Xjk8eNtYNQu3cA8AgqpLVxmA7G40hCu2VxYghB1Ydke81U IF2ikDcfT6kJnPkr+5Bww5veGps6G5u5A3YHTxb97CWe9P6bc0Rh7kMWwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEs0o1CXZEpu5DSkKbYe0ZFWZdc6MB8GA1UdIwQY MBaAFJ/hYQHkIdIc215bBaLiid+3c/TJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbi1GaEFlUWgwaHpiWGxzRm91S0ozN2R6OU1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8xNTZlZWItODAxOS00ZDYwLThlYWQt ZTk3MTFmNTc2YjRlLzEvbi1GaEFlUWgwaHpiWGxzRm91S0ozN2R6OU1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy8xNTZlZWItODAxOS00ZDYwLThlYWQtZTk3MTFmNTc2YjRl LzEvbi1GaEFlUWgwaHpiWGxzRm91S0ozN2R6OU1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnTouCyWg zDPrn1VzUH2gtAJc24M1x4AXXXewdEGidh2XdqcctmsGdbgNDfLH2GOlqzBeEtWC 7+QAI2D1BamCHSlRWvYuLF7VuG5kZTJ7/jLAzbNjNDxcxsQC61uOFA/M9Nx6naro z+J5IrqfEdzo2a/37WeCI/01VsQw9kKsIpOUASkVQqpTwXZjVt4TJxc9fuJdPaJH fxn18Q9ZyCHWAHUfLkeTcD5vBSrl6YfHFBr5ag2dh6VnEtr8Yd0S9LzQS5XEr14Q qYhopz0mbfFXP4189pwWyATXu43csek0nR024IuOMYUeZ1cHNHUNp0FxNgjul122 DGv0gBJyPilH0Q== -----END CERTIFICATE-----Generated at Mon Jan 12 00:03:06 2026 by rpki-client