This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft File: FoYA36ydPRp15mMNaXEC8vITLEg.mft (raw, json) Hash identifier: yQd19R17CgqACf2aZnR0jZW7GwdjTgDP88AVjBsJlDQ= Subject key identifier: F1:24:63:D2:82:EB:74:3D:1F:35:C5:28:6F:03:C5:C0:6F:E5:F6:2D Authority key identifier: 16:86:00:DF:AC:9D:3D:1A:75:E6:63:0D:69:71:02:F2:F2:13:2C:48 Certificate issuer: /CN=168600dfac9d3d1a75e6630d697102f2f2132c48 Certificate serial: 019BFC8A2B161DCBCF2EB4DAC1BD9B3AA13C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft Manifest number: 17FB Signing time: Mon 26 Jan 2026 23:01:11 +0000 Manifest this update: Mon 26 Jan 2026 23:01:11 +0000 Manifest next update: Tue 27 Jan 2026 23:01:11 +0000 Files and hashes: 1: E4NAfEwW3jbfNnqs4s6wX2om-oU.roa (hash: fdTtA83SV7tJMvW5toFMANKX74HjpiK+6fBeEianyoA=) 2: FoYA36ydPRp15mMNaXEC8vITLEg.crl (hash: bSp945FyLsXoGGd0i3Gt/nHjzCi7xH6gHrLfkmc8Sis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.crl rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:8a:2b:16:1d:cb:cf:2e:b4:da:c1:bd:9b:3a:a1:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=168600dfac9d3d1a75e6630d697102f2f2132c48 Validity Not Before: Jan 26 23:01:11 2026 GMT Not After : Jan 27 23:01:11 2026 GMT Subject: CN=f12463d282eb743d1f35c5286f03c5c06fe5f62d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:49:7f:c5:33:9f:f6:1a:87:e8:a6:6f:5e:b3: ae:4a:09:45:d8:9a:54:25:bb:05:e7:d1:7f:1e:fa: 17:d9:45:56:6e:69:59:a1:52:3a:db:a9:ba:07:cf: 79:bb:7c:38:db:0a:63:69:2b:51:3e:72:a5:61:ce: db:3a:58:e4:ff:5b:9b:bb:8a:74:f8:56:4f:ca:26: 64:b5:70:e9:16:8a:4e:9a:d0:d0:a0:2e:f6:49:b1: b6:1e:81:ad:84:25:d8:c8:d2:1e:63:af:9c:54:a5: 76:ea:67:f8:97:88:31:df:4a:96:2f:d0:ee:a5:72: b6:95:fc:b3:06:3c:2e:6b:68:21:4b:76:c8:fe:65: bc:19:0b:5b:0c:5b:12:4d:8e:43:ba:09:e1:1f:8c: ac:33:d3:94:7b:07:f7:3e:53:8d:c5:fc:6b:93:43: dd:1c:f5:6d:15:19:e9:9c:33:3f:91:7a:5f:ec:4e: a8:f0:0e:e4:e9:b3:12:9a:1c:b3:74:36:bc:7f:31: 7d:44:f9:5e:93:f0:f6:4c:5e:96:b2:34:eb:d6:cc: 81:d1:9a:f7:62:44:dc:dd:08:7e:d6:5b:c2:f5:d9: c0:1d:56:f7:fb:7b:79:06:d8:16:4b:6b:61:70:75: b3:a5:b2:3e:3f:e3:8a:b4:13:8e:f1:a6:60:87:9f: c6:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:24:63:D2:82:EB:74:3D:1F:35:C5:28:6F:03:C5:C0:6F:E5:F6:2D X509v3 Authority Key Identifier: keyid:16:86:00:DF:AC:9D:3D:1A:75:E6:63:0D:69:71:02:F2:F2:13:2C:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:f8:18:b8:a5:82:f9:54:b8:bd:cf:18:9f:5c:8d:d6:d6:d7: 69:5f:72:0b:b4:a6:91:9b:f2:39:7e:b0:d6:50:69:87:47:ba: ab:f1:f5:b0:54:1b:38:9e:ce:dd:09:65:ad:2e:91:21:e1:10: cb:cf:3a:39:ba:41:88:2d:4b:7f:a8:90:30:c5:2e:c6:64:4b: 45:93:7d:ff:49:10:4b:1e:a0:10:f0:40:a9:10:88:0f:8a:6b: 38:a9:9d:0c:2e:13:a2:9d:7e:75:46:1e:05:7b:6a:a3:c2:52: 8a:2f:6b:b7:8b:86:2c:40:14:f2:fb:55:bf:0a:c6:f4:50:1d: 6d:4b:70:8c:25:49:7d:35:9d:5b:7e:46:3f:7f:84:59:65:18: 8d:75:ef:40:27:ab:23:d7:5a:f0:2f:b4:8a:16:31:d3:a4:95: c0:07:21:1d:1e:e4:28:24:a7:d6:2a:2a:19:ef:84:35:78:f4: bf:9b:4d:73:a5:57:82:c1:a1:59:87:34:fc:17:28:7d:68:f0: 03:97:b8:59:cf:10:bc:44:83:b9:fb:74:31:47:ef:d6:6e:b6: 93:9c:ca:53:36:6f:54:0f:c7:c6:32:62:d0:03:39:1f:6d:ee: 54:81:0c:05:6a:89:f6:4e:f2:95:bc:88:7d:97:17:58:bb:45: 85:c3:59:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8iisWHcvPLrTawb2bOqE8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2ODYwMGRmYWM5ZDNkMWE3NWU2NjMwZDY5NzEwMmYyZjIx MzJjNDgwHhcNMjYwMTI2MjMwMTExWhcNMjYwMTI3MjMwMTExWjAzMTEwLwYDVQQD EyhmMTI0NjNkMjgyZWI3NDNkMWYzNWM1Mjg2ZjAzYzVjMDZmZTVmNjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUl/xTOf9hqH6KZvXrOuSglF2JpU JbsF59F/HvoX2UVWbmlZoVI626m6B895u3w42wpjaStRPnKlYc7bOljk/1ubu4p0 +FZPyiZktXDpFopOmtDQoC72SbG2HoGthCXYyNIeY6+cVKV26mf4l4gx30qWL9Du pXK2lfyzBjwua2ghS3bI/mW8GQtbDFsSTY5DugnhH4ysM9OUewf3PlONxfxrk0Pd HPVtFRnpnDM/kXpf7E6o8A7k6bMSmhyzdDa8fzF9RPlek/D2TF6WsjTr1syB0Zr3 YkTc3Qh+1lvC9dnAHVb3+3t5BtgWS2thcHWzpbI+P+OKtBOO8aZgh5/G8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPEkY9KC63Q9HzXFKG8DxcBv5fYtMB8GA1UdIwQY MBaAFBaGAN+snT0adeZjDWlxAvLyEyxIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm9ZQTM2eWRQUnAxNW1NTmFYRUM4dklUTEVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9hZjM1YzMtN2Y4MS00ODI5LThkYmEt MThkYmU2NTA0YmI0LzEvRm9ZQTM2eWRQUnAxNW1NTmFYRUM4dklUTEVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9hZjM1YzMtN2Y4MS00ODI5LThkYmEtMThkYmU2NTA0YmI0 LzEvRm9ZQTM2eWRQUnAxNW1NTmFYRUM4dklUTEVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkfgYuKWC +VS4vc8Yn1yN1tbXaV9yC7SmkZvyOX6w1lBph0e6q/H1sFQbOJ7O3QllrS6RIeEQ y886ObpBiC1Lf6iQMMUuxmRLRZN9/0kQSx6gEPBAqRCID4prOKmdDC4Top1+dUYe BXtqo8JSii9rt4uGLEAU8vtVvwrG9FAdbUtwjCVJfTWdW35GP3+EWWUYjXXvQCer I9da8C+0ihYx06SVwAchHR7kKCSn1ioqGe+ENXj0v5tNc6VXgsGhWYc0/BcofWjw A5e4Wc8QvESDuft0MUfv1m62k5zKUzZvVA/HxjJi0AM5H23uVIEMBWqJ9k7ylbyI fZcXWLtFhcNZEQ== -----END CERTIFICATE-----Generated at Tue Jan 27 00:35:55 2026 by rpki-client