This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft File: FjnmEbWLf3BV32p_mV0B-5XXkMk.mft (raw, json) Hash identifier: pkAnhbowZ5dzS7M/o0Taj+3nyWbJpe6jPSypUv60OsM= Subject key identifier: B7:59:FB:55:10:BA:2D:00:9B:86:D8:4E:9E:4A:DB:7B:13:8D:B9:FE Authority key identifier: 16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9 Certificate issuer: /CN=1639e611b58b7f7055df6a7f995d01fb95d790c9 Certificate serial: 019C4358C84A74BB89B477F8DB96C655D02C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft Manifest number: 17A5 Signing time: Mon 09 Feb 2026 17:00:17 +0000 Manifest this update: Mon 09 Feb 2026 17:00:17 +0000 Manifest next update: Tue 10 Feb 2026 17:00:17 +0000 Files and hashes: 1: FjnmEbWLf3BV32p_mV0B-5XXkMk.crl (hash: 17fF8M30wPTVwh0KORo89RgsNtIATD95ludCnhyNYDg=) 2: GmYrfW3k8osvPQTynxaphEXGOF0.roa (hash: KL4WvC6vPGKTcuwvQwS3AK/arMjab0ANyIFkXhXDgSc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.crl rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:c8:4a:74:bb:89:b4:77:f8:db:96:c6:55:d0:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1639e611b58b7f7055df6a7f995d01fb95d790c9 Validity Not Before: Feb 9 17:00:17 2026 GMT Not After : Feb 10 17:00:17 2026 GMT Subject: CN=b759fb5510ba2d009b86d84e9e4adb7b138db9fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9c:b0:17:85:dd:12:ee:9c:59:3b:51:64:72: b5:ba:ce:a4:a2:1a:2e:84:1a:b1:e1:1c:5e:bb:00: 08:78:83:f1:f9:8c:f7:69:54:2a:60:af:09:e3:78: dc:88:f8:33:bf:2e:9a:f3:31:09:a6:55:bd:4f:35: 52:62:3a:98:c0:52:3f:08:bf:b8:46:ee:0f:a5:60: 36:fa:09:f1:68:7e:5a:03:04:b5:6f:53:dd:45:5a: 43:c2:9c:9c:83:e9:40:38:15:d1:64:f8:97:24:37: ab:ea:55:04:f9:01:54:28:97:19:55:0f:08:9e:65: f1:2a:60:fd:94:4d:f7:b7:e9:64:d4:83:3e:9b:ca: 17:62:01:e1:6d:f1:95:08:08:48:30:3d:35:0d:0f: 16:dc:75:15:36:bc:d2:6e:00:94:f1:01:c9:b1:a8: 31:58:6e:04:b9:ae:2c:0f:00:21:75:fa:df:88:ab: a4:69:83:1b:03:e1:13:68:5c:e2:2a:45:78:4f:d2: b8:bc:aa:14:24:71:c1:bf:f0:d1:4a:c4:9f:b3:83: d5:f7:3f:48:0e:49:ac:39:a7:7f:a8:6b:ca:99:9b: 4c:45:1e:27:09:cb:b4:e9:4d:31:72:ae:6b:98:40: e1:f0:52:0c:de:ba:38:0c:a6:36:85:2f:8d:fd:e9: ff:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:59:FB:55:10:BA:2D:00:9B:86:D8:4E:9E:4A:DB:7B:13:8D:B9:FE X509v3 Authority Key Identifier: keyid:16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:93:60:ec:b2:ab:6f:f8:6e:aa:0c:d9:c6:d2:8e:86:de:68: 6a:83:7e:a5:f7:8d:c9:03:01:9d:d1:1f:77:d2:a1:bd:99:a6: a4:e8:b7:e2:04:59:03:5b:d6:85:e3:8c:86:50:2e:e9:05:34: f5:d6:34:1c:8a:8c:e9:c1:4c:59:5a:3f:da:e0:ff:6c:73:59: 08:64:90:a8:e8:9b:35:de:e2:59:0c:49:08:d7:ad:be:48:83: c4:7f:6b:33:94:3e:68:cc:95:ff:5d:ab:15:b3:be:96:1e:38: 53:f5:17:c7:04:e2:6e:83:e1:2b:2e:34:9a:8c:01:3a:cf:e1: 90:05:8b:ee:53:0d:06:38:7e:37:ac:a8:f0:24:6c:b7:e8:d4: 60:3f:08:be:b8:08:c8:19:4d:09:07:1e:a5:ac:e7:c4:58:ab: 6d:47:e4:08:cc:12:2f:a0:b7:10:3e:6e:36:7c:04:18:a3:ce: 42:a7:a6:e1:89:e1:e5:31:ec:fa:20:4d:5e:08:7c:c6:91:39: 59:6c:8c:20:0a:a9:68:43:9d:4b:93:a3:7f:80:8a:1c:f1:27: 40:9c:62:89:cb:25:83:f7:c3:b4:4e:3e:ce:d5:ae:92:2b:47: 2e:98:a8:df:c7:a5:67:76:c3:80:62:dc:ca:59:43:85:ab:dc: ba:d6:8a:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWMhKdLuJtHf425bGVdAsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MzllNjExYjU4YjdmNzA1NWRmNmE3Zjk5NWQwMWZiOTVk NzkwYzkwHhcNMjYwMjA5MTcwMDE3WhcNMjYwMjEwMTcwMDE3WjAzMTEwLwYDVQQD EyhiNzU5ZmI1NTEwYmEyZDAwOWI4NmQ4NGU5ZTRhZGI3YjEzOGRiOWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZywF4XdEu6cWTtRZHK1us6kohou hBqx4RxeuwAIeIPx+Yz3aVQqYK8J43jciPgzvy6a8zEJplW9TzVSYjqYwFI/CL+4 Ru4PpWA2+gnxaH5aAwS1b1PdRVpDwpycg+lAOBXRZPiXJDer6lUE+QFUKJcZVQ8I nmXxKmD9lE33t+lk1IM+m8oXYgHhbfGVCAhIMD01DQ8W3HUVNrzSbgCU8QHJsagx WG4Eua4sDwAhdfrfiKukaYMbA+ETaFziKkV4T9K4vKoUJHHBv/DRSsSfs4PV9z9I DkmsOad/qGvKmZtMRR4nCcu06U0xcq5rmEDh8FIM3ro4DKY2hS+N/en/lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLdZ+1UQui0Am4bYTp5K23sTjbn+MB8GA1UdIwQY MBaAFBY55hG1i39wVd9qf5ldAfuV15DJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmpubUViV0xmM0JWMzJwX21WMEItNVhYa01rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9jZWZmMDgtMDUyNy00OGJlLTkyYjct MGNkZmExYzI5MWY2LzEvRmpubUViV0xmM0JWMzJwX21WMEItNVhYa01rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9jZWZmMDgtMDUyNy00OGJlLTkyYjctMGNkZmExYzI5MWY2 LzEvRmpubUViV0xmM0JWMzJwX21WMEItNVhYa01rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW5Ng7LKr b/huqgzZxtKOht5oaoN+pfeNyQMBndEfd9KhvZmmpOi34gRZA1vWheOMhlAu6QU0 9dY0HIqM6cFMWVo/2uD/bHNZCGSQqOibNd7iWQxJCNetvkiDxH9rM5Q+aMyV/12r FbO+lh44U/UXxwTiboPhKy40mowBOs/hkAWL7lMNBjh+N6yo8CRst+jUYD8IvrgI yBlNCQcepaznxFirbUfkCMwSL6C3ED5uNnwEGKPOQqem4Ynh5THs+iBNXgh8xpE5 WWyMIAqpaEOdS5Ojf4CKHPEnQJxiicslg/fDtE4+ztWukitHLpio38elZ3bDgGLc yllDhavcutaK1w== -----END CERTIFICATE-----Generated at Tue Feb 10 01:48:41 2026 by rpki-client