This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.mft File: cF3hUpBmZK56yfIIesTQBoWl1_A.mft (raw, json) Hash identifier: MYxyfovjt/wyM+Mm/foV6nj2y35T4TVvg/jfcPkfG3o= Subject key identifier: 3A:75:AA:F8:69:27:AF:FC:13:F3:A2:1F:CD:66:2D:D8:EE:90:07:F0 Authority key identifier: 70:5D:E1:52:90:66:64:AE:7A:C9:F2:08:7A:C4:D0:06:85:A5:D7:F0 Certificate issuer: /CN=705de152906664ae7ac9f2087ac4d00685a5d7f0 Certificate serial: 019BAEDCC97EBE49B78336F1F0ABDA66D7E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cF3hUpBmZK56yfIIesTQBoWl1_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.mft Manifest number: 17C5 Signing time: Sun 11 Jan 2026 21:01:03 +0000 Manifest this update: Sun 11 Jan 2026 21:01:03 +0000 Manifest next update: Mon 12 Jan 2026 21:01:03 +0000 Files and hashes: 1: cF3hUpBmZK56yfIIesTQBoWl1_A.crl (hash: lIOOjnm209EcQQyHGQ+X5P/o46quBxnBZag6XD0ySSw=) 2: y7AqiXLlolDvCA4ci8GI1FGSGEk.roa (hash: SHdF4S1wOxIU7MQoEG79yqjjmd2Uh7jceITC2kby4Xo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.mft rsync://rpki.ripe.net/repository/DEFAULT/cF3hUpBmZK56yfIIesTQBoWl1_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:dc:c9:7e:be:49:b7:83:36:f1:f0:ab:da:66:d7:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=705de152906664ae7ac9f2087ac4d00685a5d7f0 Validity Not Before: Jan 11 21:01:03 2026 GMT Not After : Jan 12 21:01:03 2026 GMT Subject: CN=3a75aaf86927affc13f3a21fcd662dd8ee9007f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:2a:37:07:ed:01:0a:e2:ee:be:2c:a3:57:55: 06:45:18:4c:1c:43:f9:69:44:49:3c:af:0e:f2:f5: a9:04:03:f4:cb:1c:d9:af:63:02:fc:6e:1f:19:48: 18:67:88:e3:25:00:f1:23:d1:60:85:ee:09:75:95: aa:26:4f:9f:20:08:ef:1a:e2:a9:0d:8d:83:de:54: 33:34:83:1d:5a:98:f1:f0:c8:ba:c6:95:22:05:44: d1:91:48:02:f7:cc:de:c6:e0:86:16:3e:25:df:c8: fd:90:6b:e2:36:ae:1d:cd:60:a3:e6:c7:ad:ea:61: ed:fd:b8:6a:87:b9:f5:1a:db:0b:d7:ac:70:a4:87: 96:d6:be:36:86:d9:b1:3b:52:fe:6f:8b:07:06:5d: 2f:61:be:d8:5b:59:82:0f:11:14:29:1b:14:2c:83: 4e:e0:9f:e7:50:bb:11:09:97:4e:7d:94:6e:99:46: de:2c:41:2d:ec:8c:f6:01:3a:5f:fb:d9:1b:0c:63: e7:7c:9b:fa:e0:4d:3b:27:7b:6b:09:0d:c0:11:8a: c7:f4:96:b2:ef:f8:f1:07:a7:db:af:5a:c2:df:b0: 84:b8:2b:4c:2d:8a:9e:1d:1e:35:57:c7:14:e3:46: 08:a7:70:4a:31:a1:2c:fa:8d:56:8f:11:f7:92:95: eb:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:75:AA:F8:69:27:AF:FC:13:F3:A2:1F:CD:66:2D:D8:EE:90:07:F0 X509v3 Authority Key Identifier: keyid:70:5D:E1:52:90:66:64:AE:7A:C9:F2:08:7A:C4:D0:06:85:A5:D7:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cF3hUpBmZK56yfIIesTQBoWl1_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:8c:48:e0:68:73:cc:71:1b:2f:c4:15:a9:26:b8:65:5d:fd: 8a:dc:64:ed:ba:81:96:88:e5:bc:a9:7b:cb:99:4a:88:80:58: 52:d1:9c:9f:e4:13:ab:1e:a2:aa:ef:f5:7a:a1:86:61:ef:3e: e9:95:d4:cc:4e:73:60:91:0b:61:5b:38:05:e5:bd:c0:a9:1f: 59:d1:0d:62:cc:73:94:c4:ff:14:8f:2b:6d:fb:ba:76:e9:a3: 74:dc:0f:15:60:ef:05:48:75:cf:e8:a0:e8:8c:df:c3:66:aa: 08:94:8c:c7:71:37:1f:8b:eb:cf:81:db:7a:b8:72:93:f2:30: a5:8d:23:bb:2b:c8:93:0d:03:d3:8e:98:57:79:19:48:3f:a3: 34:78:be:d8:b1:ee:36:95:01:af:10:92:a4:3f:15:d3:d1:93: ca:d2:a4:5f:61:a3:89:83:4d:1b:4c:c0:3f:e3:2f:ab:17:67: a1:ad:a7:32:d7:d8:46:28:be:a8:95:9f:f2:de:7d:7a:b5:7c: e4:1b:ee:4e:09:7d:9e:64:b4:dc:fd:f5:6b:ad:e2:e7:c6:ec: b0:b6:15:97:5c:a2:80:1d:8b:23:85:63:57:52:cd:2a:3a:90: 5b:85:b8:91:24:94:57:7a:42:ab:4a:12:44:36:28:10:92:05: 52:c2:f2:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuu3Ml+vkm3gzbx8KvaZtfoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNWRlMTUyOTA2NjY0YWU3YWM5ZjIwODdhYzRkMDA2ODVh NWQ3ZjAwHhcNMjYwMTExMjEwMTAzWhcNMjYwMTEyMjEwMTAzWjAzMTEwLwYDVQQD EygzYTc1YWFmODY5MjdhZmZjMTNmM2EyMWZjZDY2MmRkOGVlOTAwN2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiio3B+0BCuLuviyjV1UGRRhMHEP5 aURJPK8O8vWpBAP0yxzZr2MC/G4fGUgYZ4jjJQDxI9Fghe4JdZWqJk+fIAjvGuKp DY2D3lQzNIMdWpjx8Mi6xpUiBUTRkUgC98zexuCGFj4l38j9kGviNq4dzWCj5set 6mHt/bhqh7n1GtsL16xwpIeW1r42htmxO1L+b4sHBl0vYb7YW1mCDxEUKRsULINO 4J/nULsRCZdOfZRumUbeLEEt7Iz2ATpf+9kbDGPnfJv64E07J3trCQ3AEYrH9Jay 7/jxB6fbr1rC37CEuCtMLYqeHR41V8cU40YIp3BKMaEs+o1WjxH3kpXr/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDp1qvhpJ6/8E/OiH81mLdjukAfwMB8GA1UdIwQY MBaAFHBd4VKQZmSuesnyCHrE0AaFpdfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0YzaFVwQm1aSzU2eWZJSWVzVFFCb1dsMV9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8yMTJhNzYtNzkzNC00Y2MxLTgyYzQt ZjU2MTg0NzdmOGQ0LzEvY0YzaFVwQm1aSzU2eWZJSWVzVFFCb1dsMV9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi8yMTJhNzYtNzkzNC00Y2MxLTgyYzQtZjU2MTg0NzdmOGQ0 LzEvY0YzaFVwQm1aSzU2eWZJSWVzVFFCb1dsMV9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOYxI4Ghz zHEbL8QVqSa4ZV39itxk7bqBlojlvKl7y5lKiIBYUtGcn+QTqx6iqu/1eqGGYe8+ 6ZXUzE5zYJELYVs4BeW9wKkfWdENYsxzlMT/FI8rbfu6dumjdNwPFWDvBUh1z+ig 6Izfw2aqCJSMx3E3H4vrz4Hberhyk/IwpY0juyvIkw0D046YV3kZSD+jNHi+2LHu NpUBrxCSpD8V09GTytKkX2GjiYNNG0zAP+Mvqxdnoa2nMtfYRii+qJWf8t59erV8 5BvuTgl9nmS03P31a63i58bssLYVl1yigB2LI4VjV1LNKjqQW4W4kSSUV3pCq0oS RDYoEJIFUsLyFg== -----END CERTIFICATE-----Generated at Mon Jan 12 02:56:39 2026 by rpki-client