This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft File: fHvscgXfiNB3CG9Kj7WuznXLtmE.mft (raw, json) Hash identifier: cvu8eKgfJ2Hx36Sz1/VXtKVQ5nFBC0Bze9p/LQnhAa0= Subject key identifier: 84:D4:74:D4:91:E8:94:1A:9A:87:69:35:16:72:21:2C:57:6F:35:AC Authority key identifier: 7C:7B:EC:72:05:DF:88:D0:77:08:6F:4A:8F:B5:AE:CE:75:CB:B6:61 Certificate issuer: /CN=7c7bec7205df88d077086f4a8fb5aece75cbb661 Certificate serial: 019BB139004371F4BDB24F87A1A4AABBAB78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft Manifest number: 1619 Signing time: Mon 12 Jan 2026 08:01:01 +0000 Manifest this update: Mon 12 Jan 2026 08:01:01 +0000 Manifest next update: Tue 13 Jan 2026 08:01:01 +0000 Files and hashes: 1: fHvscgXfiNB3CG9Kj7WuznXLtmE.crl (hash: x4YVki9QDmi4fyWc0LZzudnc2t86QAsKfhybfaYzd5k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 08:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b1:39:00:43:71:f4:bd:b2:4f:87:a1:a4:aa:bb:ab:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c7bec7205df88d077086f4a8fb5aece75cbb661 Validity Not Before: Jan 12 08:01:01 2026 GMT Not After : Jan 13 08:01:01 2026 GMT Subject: CN=84d474d491e8941a9a8769351672212c576f35ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:96:39:ea:d5:1a:06:6a:71:a2:34:31:4d:e9: 97:97:ca:3d:6d:80:a2:1e:a8:b0:eb:a2:3e:51:bc: 20:5a:2c:e0:1e:6a:b0:a8:10:f5:a2:77:d3:5f:bc: 90:3c:28:a8:4f:0e:0c:1d:be:cb:7d:ee:3d:ab:82: 1b:9d:01:4f:1a:03:98:84:fd:fe:57:8d:5e:f5:de: 1d:5d:74:f6:3b:3d:9d:22:4c:0c:b8:bc:96:83:19: db:39:e9:28:9a:f7:40:81:e8:f2:da:fd:e3:3b:e6: 5b:70:54:62:e5:7a:d0:af:52:64:a3:9d:5a:54:d9: 44:da:73:d9:9c:fd:4d:ca:d4:bf:ac:90:95:0f:ca: 39:49:69:d2:30:e0:28:91:3f:61:7d:40:a0:5c:9a: 62:2c:03:db:9a:a6:b1:9a:7e:c0:c1:64:7b:2a:45: 7a:dc:3a:d5:89:2e:67:0f:6b:2f:d1:46:3c:21:b6: b4:7e:8a:f5:de:6f:60:2b:2c:1b:b0:1a:14:70:60: c3:d5:7f:9a:56:ab:5a:cd:9f:0a:19:de:ed:8a:67: 07:48:4d:5c:a0:50:0d:ff:41:69:2c:cb:3d:e0:64: 64:d8:9b:69:b7:1f:25:37:5c:6f:11:d3:59:0a:68: ba:1e:8d:da:27:d0:e0:3a:0f:89:d4:31:f7:89:19: 78:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:D4:74:D4:91:E8:94:1A:9A:87:69:35:16:72:21:2C:57:6F:35:AC X509v3 Authority Key Identifier: keyid:7C:7B:EC:72:05:DF:88:D0:77:08:6F:4A:8F:B5:AE:CE:75:CB:B6:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:40:dc:e6:f2:a4:48:0b:87:15:5c:e0:e6:16:cf:33:9e:d0: 31:ce:86:e9:e2:68:6d:92:c9:bb:80:25:c1:0f:23:1f:13:c5: 4f:47:17:e5:e8:dd:a3:02:e2:b4:7f:32:28:93:ba:c5:d5:a4: e0:44:97:48:5a:7f:65:54:2b:44:59:58:5f:82:85:b9:bd:fe: 9e:7c:c5:7a:c4:80:a4:7a:b5:bc:a8:f5:1c:f0:df:44:eb:a8: f1:12:4c:fc:e7:7d:56:f1:2e:b4:e0:a8:10:43:11:82:46:81: 48:36:d6:da:58:06:67:64:ab:1a:68:ec:64:3c:e2:74:92:46: 4c:df:8b:26:bf:b6:e7:5e:71:a3:ce:a2:b1:af:21:f1:f7:98: 3c:24:17:89:20:4d:32:68:e7:b7:cb:d8:ba:fa:bb:27:5a:6f: 25:4f:26:50:6d:05:95:9b:6f:cd:ff:3a:00:d6:c7:ab:6c:a2: 07:13:53:79:c9:c8:53:15:7e:60:5e:7a:36:d7:1d:07:b6:d0: f7:72:11:74:dc:7c:81:33:27:bd:d7:24:a7:c4:1a:44:11:19: 1b:f7:8f:01:d5:48:6f:ff:94:06:5a:88:56:d7:3e:96:bb:ed: 5e:dc:65:3d:54:a4:30:0b:80:2c:14:a2:46:5b:f3:ab:76:38: 3b:9b:8a:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuxOQBDcfS9sk+HoaSqu6t4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjN2JlYzcyMDVkZjg4ZDA3NzA4NmY0YThmYjVhZWNlNzVj YmI2NjEwHhcNMjYwMTEyMDgwMTAxWhcNMjYwMTEzMDgwMTAxWjAzMTEwLwYDVQQD Eyg4NGQ0NzRkNDkxZTg5NDFhOWE4NzY5MzUxNjcyMjEyYzU3NmYzNWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZY56tUaBmpxojQxTemXl8o9bYCi Hqiw66I+UbwgWizgHmqwqBD1onfTX7yQPCioTw4MHb7Lfe49q4IbnQFPGgOYhP3+ V41e9d4dXXT2Oz2dIkwMuLyWgxnbOekomvdAgejy2v3jO+ZbcFRi5XrQr1Jko51a VNlE2nPZnP1NytS/rJCVD8o5SWnSMOAokT9hfUCgXJpiLAPbmqaxmn7AwWR7KkV6 3DrViS5nD2sv0UY8Iba0for13m9gKywbsBoUcGDD1X+aVqtazZ8KGd7timcHSE1c oFAN/0FpLMs94GRk2Jtptx8lN1xvEdNZCmi6Ho3aJ9DgOg+J1DH3iRl4QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFITUdNSR6JQamodpNRZyISxXbzWsMB8GA1UdIwQY MBaAFHx77HIF34jQdwhvSo+1rs51y7ZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkh2c2NnWGZpTkIzQ0c5S2o3V3V6blhMdG1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8yY2Q0Y2MtZjQ5OC00ZGFlLTllMjQt OGFmNjZmNDg4YmJjLzEvZkh2c2NnWGZpTkIzQ0c5S2o3V3V6blhMdG1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8yY2Q0Y2MtZjQ5OC00ZGFlLTllMjQtOGFmNjZmNDg4YmJj LzEvZkh2c2NnWGZpTkIzQ0c5S2o3V3V6blhMdG1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiEDc5vKk SAuHFVzg5hbPM57QMc6G6eJobZLJu4AlwQ8jHxPFT0cX5ejdowLitH8yKJO6xdWk 4ESXSFp/ZVQrRFlYX4KFub3+nnzFesSApHq1vKj1HPDfROuo8RJM/Od9VvEutOCo EEMRgkaBSDbW2lgGZ2SrGmjsZDzidJJGTN+LJr+2515xo86isa8h8feYPCQXiSBN Mmjnt8vYuvq7J1pvJU8mUG0FlZtvzf86ANbHq2yiBxNTecnIUxV+YF56NtcdB7bQ 93IRdNx8gTMnvdckp8QaRBEZG/ePAdVIb/+UBlqIVtc+lrvtXtxlPVSkMAuALBSi Rlvzq3Y4O5uKKQ== -----END CERTIFICATE-----Generated at Mon Jan 12 16:40:32 2026 by rpki-client