This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.mft File: FAyGl-PS6UuFRiU9zyZJymAGKmg.mft (raw, json) Hash identifier: Bv8OGaF3/wgT0TQfx1QIiLMcaLYLTieZA+mp2oW3is8= Subject key identifier: 97:65:9E:77:B0:25:83:F3:2E:16:28:C4:DC:D0:4B:DD:E4:BE:C8:4C Authority key identifier: 14:0C:86:97:E3:D2:E9:4B:85:46:25:3D:CF:26:49:CA:60:06:2A:68 Certificate issuer: /CN=140c8697e3d2e94b8546253dcf2649ca60062a68 Certificate serial: 019BFAD2C8C2570590F15407ACF595B2A44B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FAyGl-PS6UuFRiU9zyZJymAGKmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.mft Manifest number: 17E6 Signing time: Mon 26 Jan 2026 15:01:16 +0000 Manifest this update: Mon 26 Jan 2026 15:01:16 +0000 Manifest next update: Tue 27 Jan 2026 15:01:16 +0000 Files and hashes: 1: FAyGl-PS6UuFRiU9zyZJymAGKmg.crl (hash: uORVrlPBDt8fNwzrAL2ibRPFd6COTug5Dcm7jnn6ZG4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.mft rsync://rpki.ripe.net/repository/DEFAULT/FAyGl-PS6UuFRiU9zyZJymAGKmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:d2:c8:c2:57:05:90:f1:54:07:ac:f5:95:b2:a4:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=140c8697e3d2e94b8546253dcf2649ca60062a68 Validity Not Before: Jan 26 15:01:16 2026 GMT Not After : Jan 27 15:01:16 2026 GMT Subject: CN=97659e77b02583f32e1628c4dcd04bdde4bec84c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:d8:bb:5f:2b:ba:b9:76:36:a2:07:d2:3f:80: 06:2d:25:70:0a:35:ae:a4:21:cb:0e:96:12:be:4d: 0b:69:43:a1:c7:52:da:80:bc:e2:70:b3:88:81:51: 3d:94:90:44:8b:c3:44:2e:3d:b4:45:15:aa:97:df: e4:41:56:8f:f8:6b:1a:04:7e:bb:0e:64:d1:8e:b7: bc:9c:35:75:6c:95:98:49:0f:da:a6:e2:bd:71:20: b4:73:86:4d:35:0f:9c:25:82:91:f1:5d:36:96:d5: 65:1e:f7:79:0a:8d:27:76:3d:cb:63:86:08:d8:ba: 20:6e:5f:16:20:fe:35:da:14:c8:e6:2b:32:57:19: 0e:2d:91:b7:fb:21:1b:e4:9b:37:22:da:21:4f:34: 41:30:e3:8f:d1:e8:32:4f:1b:02:c6:04:d1:25:ea: a7:23:f9:a0:65:c9:6c:e1:a2:9b:af:59:f9:e2:d3: 67:dd:5d:b0:15:d1:5d:81:c1:f3:35:bd:9a:fd:2c: 8a:b0:ea:9c:46:e9:65:59:41:7f:30:db:bc:61:c9: 1e:87:64:47:22:8e:fe:a8:f6:b2:97:be:f6:37:ad: ff:61:ea:34:58:df:4a:d1:5d:94:23:03:ba:6c:43: 9b:30:56:9e:30:a8:b0:0b:30:af:f2:43:b3:9e:ea: d1:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:65:9E:77:B0:25:83:F3:2E:16:28:C4:DC:D0:4B:DD:E4:BE:C8:4C X509v3 Authority Key Identifier: keyid:14:0C:86:97:E3:D2:E9:4B:85:46:25:3D:CF:26:49:CA:60:06:2A:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FAyGl-PS6UuFRiU9zyZJymAGKmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:10:78:71:ce:09:c1:b9:35:aa:7a:c4:ba:0c:2b:07:c3:0c: 44:af:b9:57:95:32:35:ec:32:96:a2:21:93:3d:5f:77:14:ff: 08:af:5d:65:a9:4f:ef:a5:a6:f9:a9:3b:d4:b8:92:40:56:f9: d0:7b:1c:e2:08:77:43:06:a4:16:9b:67:24:c4:11:d3:f3:f4: 31:47:0b:33:cc:c0:c7:1e:e3:eb:cd:39:2f:a9:88:ef:d2:05: e4:76:3c:00:2c:3b:ac:60:4f:9b:4d:34:66:f3:89:a2:f8:0f: 7d:f1:7c:42:99:b0:93:48:dc:b3:a5:63:2a:85:75:00:b8:c6: 82:75:22:ac:1f:ea:69:be:bb:99:86:08:52:46:20:46:42:08: 69:ba:4e:6f:0c:cc:a5:d0:95:f5:5c:19:d6:ac:b4:65:e2:44: 74:fb:71:e7:03:4a:0d:da:44:0e:a2:32:e7:b2:b5:8e:c1:09: 38:92:d5:f3:2e:b1:58:04:31:4b:bc:e3:95:2c:45:c7:85:e9: 5f:38:ba:15:f0:d9:10:e4:e9:78:1d:fc:10:fc:b5:ca:a1:20: 63:75:25:fc:f6:e3:5d:4c:4c:3c:53:2f:d5:02:8b:a3:b7:ec: 4e:a4:9c:78:e8:1b:5b:81:d2:d0:d7:4b:2b:e0:73:d7:db:92: 00:ad:89:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv60sjCVwWQ8VQHrPWVsqRLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0MGM4Njk3ZTNkMmU5NGI4NTQ2MjUzZGNmMjY0OWNhNjAw NjJhNjgwHhcNMjYwMTI2MTUwMTE2WhcNMjYwMTI3MTUwMTE2WjAzMTEwLwYDVQQD Eyg5NzY1OWU3N2IwMjU4M2YzMmUxNjI4YzRkY2QwNGJkZGU0YmVjODRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ti7Xyu6uXY2ogfSP4AGLSVwCjWu pCHLDpYSvk0LaUOhx1LagLzicLOIgVE9lJBEi8NELj20RRWql9/kQVaP+GsaBH67 DmTRjre8nDV1bJWYSQ/apuK9cSC0c4ZNNQ+cJYKR8V02ltVlHvd5Co0ndj3LY4YI 2Logbl8WIP412hTI5isyVxkOLZG3+yEb5Js3ItohTzRBMOOP0egyTxsCxgTRJeqn I/mgZcls4aKbr1n54tNn3V2wFdFdgcHzNb2a/SyKsOqcRullWUF/MNu8Yckeh2RH Io7+qPayl772N63/Yeo0WN9K0V2UIwO6bEObMFaeMKiwCzCv8kOznurRRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJdlnnewJYPzLhYoxNzQS93kvshMMB8GA1UdIwQY MBaAFBQMhpfj0ulLhUYlPc8mScpgBipoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkF5R2wtUFM2VXVGUmlVOXp5Wkp5bUFHS21nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8zMDRmZTktODlhMi00ZjgzLTk5N2Yt YmZmNjRkNGNjZjk1LzEvRkF5R2wtUFM2VXVGUmlVOXp5Wkp5bUFHS21nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8zMDRmZTktODlhMi00ZjgzLTk5N2YtYmZmNjRkNGNjZjk1 LzEvRkF5R2wtUFM2VXVGUmlVOXp5Wkp5bUFHS21nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjRB4cc4J wbk1qnrEugwrB8MMRK+5V5UyNewylqIhkz1fdxT/CK9dZalP76Wm+ak71LiSQFb5 0Hsc4gh3QwakFptnJMQR0/P0MUcLM8zAxx7j6805L6mI79IF5HY8ACw7rGBPm000 ZvOJovgPffF8Qpmwk0jcs6VjKoV1ALjGgnUirB/qab67mYYIUkYgRkIIabpObwzM pdCV9VwZ1qy0ZeJEdPtx5wNKDdpEDqIy57K1jsEJOJLV8y6xWAQxS7zjlSxFx4Xp Xzi6FfDZEOTpeB38EPy1yqEgY3Ul/PbjXUxMPFMv1QKLo7fsTqSceOgbW4HS0NdL K+Bz19uSAK2JtQ== -----END CERTIFICATE-----Generated at Mon Jan 26 19:38:58 2026 by rpki-client