This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft File: FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft (raw, json) Hash identifier: ASKemQmf/ie3uWYUVTZtUHUCTEToF6Y2q7+guBHkeU4= Subject key identifier: 7B:9B:7E:9F:DD:47:8F:33:E4:15:68:73:A3:D5:17:A4:35:58:0E:E5 Authority key identifier: 14:DB:04:F9:C9:23:17:EC:C7:A2:AA:FF:2C:A4:D7:09:8D:1B:D2:6A Certificate issuer: /CN=14db04f9c92317ecc7a2aaff2ca4d7098d1bd26a Certificate serial: 019BFB0A29537E145F1008C6E6EDB146E348 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 16:01:45 +0000 Manifest this update: Mon 26 Jan 2026 16:01:45 +0000 Manifest next update: Tue 27 Jan 2026 16:01:45 +0000 Files and hashes: 1: 1OfpxNPFwqp9XMtv17DCToBd3A0.roa (hash: EiZWsUI66iHeWYb4Ke4tZ8rBlqUcSPgP0TnEIClGK4A=) 2: FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl (hash: DfLvCAOFtI65cIPImdBJ1BnJ2PDdse2ZKRN+gO2j25I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:0a:29:53:7e:14:5f:10:08:c6:e6:ed:b1:46:e3:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14db04f9c92317ecc7a2aaff2ca4d7098d1bd26a Validity Not Before: Jan 26 16:01:45 2026 GMT Not After : Jan 27 16:01:45 2026 GMT Subject: CN=7b9b7e9fdd478f33e4156873a3d517a435580ee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:44:41:6b:5c:08:af:d3:0b:ed:c8:18:99:83: 86:3e:20:8b:1f:52:31:22:05:2b:aa:f0:90:79:8e: 4a:8e:f6:ee:e7:bf:69:f7:a4:22:12:cf:50:fd:48: ae:2b:f0:c1:27:39:e8:2c:3f:79:69:71:45:45:b0: 15:4e:f9:0f:0b:22:8f:1d:bd:bd:f3:33:b1:dc:4b: 6d:fb:2e:42:95:82:85:cc:fc:73:62:ad:90:a8:3e: 50:f0:46:b4:fb:38:5c:36:9e:34:d2:30:c5:2d:88: 35:ad:17:67:c5:69:b6:eb:c9:a6:68:e4:26:6d:00: bb:97:d8:8b:e7:90:d8:b5:33:17:aa:b8:1e:91:84: 44:39:5b:42:e4:fc:6e:26:f9:df:4f:15:7d:c5:cf: 00:d5:b4:8a:fd:64:3a:0e:fc:ae:67:5c:6b:62:ce: 40:ca:02:8c:40:bb:13:a0:87:91:b4:77:55:63:08: 64:88:94:33:fb:21:d3:e7:1e:e4:70:2a:32:06:80: b9:f4:6b:fb:a1:33:1f:e4:0f:13:e5:5c:af:9d:c9: 0f:3d:02:0d:04:13:35:af:dc:2f:76:e9:0e:fa:ea: 3a:41:20:18:29:cc:8c:eb:20:53:8b:27:19:1e:94: a4:64:91:0a:fd:1c:bc:fa:6c:3b:35:32:8b:32:11: b7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:9B:7E:9F:DD:47:8F:33:E4:15:68:73:A3:D5:17:A4:35:58:0E:E5 X509v3 Authority Key Identifier: keyid:14:DB:04:F9:C9:23:17:EC:C7:A2:AA:FF:2C:A4:D7:09:8D:1B:D2:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:09:e1:08:fd:f6:b8:43:9c:fd:4c:e8:4a:aa:53:0b:bd:9c: c3:ea:88:c2:40:4a:29:77:bc:00:4a:79:f3:11:e5:a4:d3:27: 42:0a:a3:95:8e:f2:bb:44:9b:07:c2:03:39:68:89:c1:27:28: c1:bb:57:78:7a:95:be:42:62:ef:94:ca:79:64:ee:4a:6c:d1: 29:30:14:3d:02:05:ef:f5:14:51:66:74:f7:40:68:8a:65:f1: 50:72:51:3c:0c:25:1b:63:f2:e2:78:be:28:7b:85:14:df:8d: 75:7c:70:57:52:e1:aa:d5:ed:97:4f:b7:dd:e5:1d:6b:5a:4d: a6:77:89:c4:61:3e:fd:00:e9:1a:0d:55:cc:6c:14:63:07:4b: 8f:93:43:4b:1a:9d:cb:cc:77:26:cf:d0:93:86:a7:0b:91:0b: 7b:2a:56:f4:af:b7:8a:ee:b4:bd:8a:08:da:61:a4:e5:d8:dc: 41:31:8e:b1:e2:42:d6:ce:90:70:67:0a:c6:a3:07:e7:6c:74: 44:53:3e:d4:d7:cc:d7:f4:7f:09:3e:16:ba:df:38:ac:5f:1e: cf:d1:f5:ec:79:92:0d:5f:11:fd:3d:30:27:d9:0f:12:a4:18: e8:3b:f2:6d:96:aa:b6:08:20:6e:b0:48:30:dd:2c:47:09:28: c9:c7:c6:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7CilTfhRfEAjG5u2xRuNIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0ZGIwNGY5YzkyMzE3ZWNjN2EyYWFmZjJjYTRkNzA5OGQx YmQyNmEwHhcNMjYwMTI2MTYwMTQ1WhcNMjYwMTI3MTYwMTQ1WjAzMTEwLwYDVQQD Eyg3YjliN2U5ZmRkNDc4ZjMzZTQxNTY4NzNhM2Q1MTdhNDM1NTgwZWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0RBa1wIr9ML7cgYmYOGPiCLH1Ix IgUrqvCQeY5Kjvbu579p96QiEs9Q/UiuK/DBJznoLD95aXFFRbAVTvkPCyKPHb29 8zOx3Ett+y5ClYKFzPxzYq2QqD5Q8Ea0+zhcNp400jDFLYg1rRdnxWm268mmaOQm bQC7l9iL55DYtTMXqrgekYREOVtC5PxuJvnfTxV9xc8A1bSK/WQ6DvyuZ1xrYs5A ygKMQLsToIeRtHdVYwhkiJQz+yHT5x7kcCoyBoC59Gv7oTMf5A8T5VyvnckPPQIN BBM1r9wvdukO+uo6QSAYKcyM6yBTiycZHpSkZJEK/Ry8+mw7NTKLMhG3OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHubfp/dR48z5BVoc6PVF6Q1WA7lMB8GA1UdIwQY MBaAFBTbBPnJIxfsx6Kq/yyk1wmNG9JqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRk5zRS1ja2pGLXpIb3FyX0xLVFhDWTBiMG1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy81OTFhNDYtMWUyMS00NTkwLTg3NGMt NThjN2JmY2RjZmRmLzEvRk5zRS1ja2pGLXpIb3FyX0xLVFhDWTBiMG1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy81OTFhNDYtMWUyMS00NTkwLTg3NGMtNThjN2JmY2RjZmRm LzEvRk5zRS1ja2pGLXpIb3FyX0xLVFhDWTBiMG1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbAnhCP32 uEOc/UzoSqpTC72cw+qIwkBKKXe8AEp58xHlpNMnQgqjlY7yu0SbB8IDOWiJwSco wbtXeHqVvkJi75TKeWTuSmzRKTAUPQIF7/UUUWZ090BoimXxUHJRPAwlG2Py4ni+ KHuFFN+NdXxwV1LhqtXtl0+33eUda1pNpneJxGE+/QDpGg1VzGwUYwdLj5NDSxqd y8x3Js/Qk4anC5ELeypW9K+3iu60vYoI2mGk5djcQTGOseJC1s6QcGcKxqMH52x0 RFM+1NfM1/R/CT4Wut84rF8ez9H17HmSDV8R/T0wJ9kPEqQY6DvybZaqtgggbrBI MN0sRwkoycfG3w== -----END CERTIFICATE-----Generated at Tue Jan 27 00:29:38 2026 by rpki-client