This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft File: FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft (raw, json) Hash identifier: qALNK9yx5glLCv1k+jQUx6ciRU+J8DNVRbWMLtairBE= Subject key identifier: 9D:D4:F1:13:B8:2B:82:DC:B6:FA:9F:2F:45:66:A8:9E:58:6F:4F:E2 Authority key identifier: 14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF Certificate issuer: /CN=14da869ba03374a192c8e3bdce950a90027adcaf Certificate serial: 019BD80F76865B4384FE9678D88500765504 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft Manifest number: 0F3C Signing time: Mon 19 Jan 2026 21:00:50 +0000 Manifest this update: Mon 19 Jan 2026 21:00:50 +0000 Manifest next update: Tue 20 Jan 2026 21:00:50 +0000 Files and hashes: 1: 45BMgCuqB7Qqmdq4IfySW95860Q.roa (hash: /3yVgENUMMM3hvYZVMX2EJz9expmMzP+geHM5UtLC0g=) 2: FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl (hash: fOZgZsLpuJ6GxITKF/BdLp7ARhY19cG7L+HulAxQa3I=) 3: RWQ71z2DZSS9r_C7kS5T8uzb9QA.roa (hash: gaz/WwXIMVoLlKWboyvLKp3LOZlOzuqEFf6XY+CWPxw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d8:0f:76:86:5b:43:84:fe:96:78:d8:85:00:76:55:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14da869ba03374a192c8e3bdce950a90027adcaf Validity Not Before: Jan 19 21:00:50 2026 GMT Not After : Jan 20 21:00:50 2026 GMT Subject: CN=9dd4f113b82b82dcb6fa9f2f4566a89e586f4fe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:bc:f8:03:ce:41:8a:f8:8c:5f:a3:9b:cd:1d: d2:7e:df:40:a9:ac:16:e3:cd:09:9a:72:d6:04:f9: 32:93:93:62:06:65:12:d3:30:76:87:b8:a1:85:11: 5c:a3:93:66:85:c8:37:6f:3e:dd:db:20:28:24:e6: fd:a3:f8:49:42:dc:3c:43:e4:bf:a1:5e:32:8f:2e: 81:40:39:06:d9:be:d6:b9:3c:fa:54:26:b9:92:bc: 61:a7:f4:f8:fc:f2:a2:41:3a:b0:e3:81:df:1d:f3: 62:57:a7:54:26:87:84:ab:4a:c6:62:e4:bc:65:40: 6d:66:be:e6:5c:56:66:44:06:8c:3c:68:35:d3:6d: 3d:dc:92:e5:cd:92:5b:b6:6b:76:80:37:62:61:04: ae:0c:a3:ac:2a:07:26:b4:0e:a5:07:c4:f3:db:d9: c1:ff:a1:36:9d:31:93:88:18:27:d3:ed:77:54:50: 41:cf:14:7d:51:c4:b1:b2:18:cc:a4:64:e9:2b:16: a4:82:d8:f6:2d:ef:67:91:bd:f0:01:13:54:84:5b: ef:d2:7f:58:96:32:42:ba:99:0e:22:d6:1f:dd:6f: 2b:71:b8:76:1a:f4:78:6a:86:63:62:c4:bd:c4:00: c0:b5:09:da:85:91:d5:98:d0:3b:e2:4a:99:33:01: 08:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:D4:F1:13:B8:2B:82:DC:B6:FA:9F:2F:45:66:A8:9E:58:6F:4F:E2 X509v3 Authority Key Identifier: keyid:14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:d2:0a:a8:8f:11:7a:1e:13:7a:5e:ba:02:f1:cd:b9:51:b7: be:f9:bb:f3:03:48:e9:30:39:4b:96:47:52:f5:7b:a4:a5:bd: 19:48:d3:21:87:14:8f:21:51:38:a7:c3:49:88:4a:28:c7:d4: 9e:8d:77:ee:41:3a:d2:9d:56:16:58:b6:04:7f:12:6f:20:27: 15:10:c7:50:d2:f3:f4:ba:51:c8:d3:7f:ab:65:ec:51:44:b5: e6:e7:b9:8d:eb:2f:fd:66:61:07:f0:a9:b5:fc:dc:64:47:62: 3f:82:a0:b4:ba:f8:24:70:98:65:37:cf:25:41:99:ae:d7:fd: 65:66:0c:61:ef:ba:e7:ee:4f:70:58:4e:a1:db:57:00:ff:35: 01:5c:b0:a8:fe:b5:86:1f:7d:e9:d4:c7:7f:41:a9:a6:47:96: b1:28:aa:90:23:0f:ca:20:96:f2:04:91:91:27:66:27:80:e6: 42:ca:b8:3d:ac:b0:69:ea:39:2e:78:79:a7:55:b9:75:98:9e: e0:3a:e2:02:35:e2:44:68:7c:40:a4:3c:ef:24:ff:e7:75:d9: e2:e4:2e:a3:5a:d3:43:d9:86:a8:37:9b:b3:38:d8:cb:47:14: 97:2a:46:6a:36:e1:99:6a:9d:2c:a1:ae:2f:94:46:c5:f8:e6: 2e:4d:cd:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvYD3aGW0OE/pZ42IUAdlUEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0ZGE4NjliYTAzMzc0YTE5MmM4ZTNiZGNlOTUwYTkwMDI3 YWRjYWYwHhcNMjYwMTE5MjEwMDUwWhcNMjYwMTIwMjEwMDUwWjAzMTEwLwYDVQQD Eyg5ZGQ0ZjExM2I4MmI4MmRjYjZmYTlmMmY0NTY2YTg5ZTU4NmY0ZmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbz4A85BiviMX6ObzR3Sft9AqawW 480JmnLWBPkyk5NiBmUS0zB2h7ihhRFco5Nmhcg3bz7d2yAoJOb9o/hJQtw8Q+S/ oV4yjy6BQDkG2b7WuTz6VCa5krxhp/T4/PKiQTqw44HfHfNiV6dUJoeEq0rGYuS8 ZUBtZr7mXFZmRAaMPGg102093JLlzZJbtmt2gDdiYQSuDKOsKgcmtA6lB8Tz29nB /6E2nTGTiBgn0+13VFBBzxR9UcSxshjMpGTpKxakgtj2Le9nkb3wARNUhFvv0n9Y ljJCupkOItYf3W8rcbh2GvR4aoZjYsS9xADAtQnahZHVmNA74kqZMwEISQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ3U8RO4K4LctvqfL0VmqJ5Yb0/iMB8GA1UdIwQY MBaAFBTahpugM3Shksjjvc6VCpACetyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRk5xR202QXpkS0dTeU9POXpwVUtrQUo2M0s4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8xOGU1YTktMTIzZi00OGFkLTkxYzUt ZjYwMDc0ODJmYTkzLzEvRk5xR202QXpkS0dTeU9POXpwVUtrQUo2M0s4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8xOGU1YTktMTIzZi00OGFkLTkxYzUtZjYwMDc0ODJmYTkz LzEvRk5xR202QXpkS0dTeU9POXpwVUtrQUo2M0s4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZNIKqI8R eh4Tel66AvHNuVG3vvm78wNI6TA5S5ZHUvV7pKW9GUjTIYcUjyFROKfDSYhKKMfU no137kE60p1WFli2BH8SbyAnFRDHUNLz9LpRyNN/q2XsUUS15ue5jesv/WZhB/Cp tfzcZEdiP4KgtLr4JHCYZTfPJUGZrtf9ZWYMYe+65+5PcFhOodtXAP81AVywqP61 hh996dTHf0GppkeWsSiqkCMPyiCW8gSRkSdmJ4DmQsq4Paywaeo5Lnh5p1W5dZie 4DriAjXiRGh8QKQ87yT/53XZ4uQuo1rTQ9mGqDebszjYy0cUlypGajbhmWqdLKGu L5RGxfjmLk3N5Q== -----END CERTIFICATE-----Generated at Tue Jan 20 03:01:51 2026 by rpki-client