This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft File: FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft (raw, json) Hash identifier: uCxt3sEvEz+3/TTbj6Esgc+qPmI1T4qaq9WlWaWcq18= Subject key identifier: DA:66:0C:28:F7:0E:42:91:D2:0B:98:4C:0E:2D:54:32:A9:C3:FD:E6 Authority key identifier: 15:C1:8A:29:08:CE:BD:90:85:E0:12:66:BB:02:FB:8A:F2:24:77:35 Certificate issuer: /CN=15c18a2908cebd9085e01266bb02fb8af2247735 Certificate serial: 019BFD65BC2FE35E09C29617CE03D1EFBE44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcGKKQjOvZCF4BJmuwL7ivIkdzU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft Manifest number: 02A1 Signing time: Tue 27 Jan 2026 03:01:01 +0000 Manifest this update: Tue 27 Jan 2026 03:01:01 +0000 Manifest next update: Wed 28 Jan 2026 03:01:01 +0000 Files and hashes: 1: FcGKKQjOvZCF4BJmuwL7ivIkdzU.crl (hash: Bv1EFC8ypHr+N6ZusdB4jm/MA9m4r5lIRXECzNvx21w=) 2: dLRmwhFl83bEy7zAcdX4mKmlXjY.roa (hash: VThAeMBueXR/zSSpQFMxHljw4NYIZkHXHe6JR0i+XFk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft rsync://rpki.ripe.net/repository/DEFAULT/FcGKKQjOvZCF4BJmuwL7ivIkdzU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:65:bc:2f:e3:5e:09:c2:96:17:ce:03:d1:ef:be:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15c18a2908cebd9085e01266bb02fb8af2247735 Validity Not Before: Jan 27 03:01:01 2026 GMT Not After : Jan 28 03:01:01 2026 GMT Subject: CN=da660c28f70e4291d20b984c0e2d5432a9c3fde6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:40:f6:4d:dc:4b:ba:b4:0b:72:01:0d:87:1d: cd:0e:1b:22:01:a0:73:01:83:9c:e5:bd:9d:8d:9c: 0e:4d:e8:c0:f2:06:67:68:8e:85:90:5a:4f:2d:93: 48:00:4a:24:cf:bd:2a:01:16:ec:0e:e5:2e:d2:f0: 12:42:98:7b:b1:7c:06:a0:8e:37:57:07:97:d2:79: 8d:e6:3b:c3:aa:8a:f3:65:e5:fd:33:fb:e8:29:47: d2:58:a8:bf:bf:27:ff:62:b3:72:56:a8:e2:e3:87: 74:ef:c7:d7:1d:c9:87:3f:99:be:e4:00:a4:f7:77: a0:da:f7:25:09:a6:5d:bc:b6:ab:96:00:e1:a9:0e: 8c:2a:a6:63:4e:c7:eb:6c:ad:40:17:4e:e6:94:56: 75:1c:a6:a3:e8:09:f2:98:ca:96:87:5c:90:c6:fb: 8b:26:6b:a3:55:4b:81:84:d7:90:e2:60:ec:d2:f3: 02:14:8d:81:bc:de:7e:59:f9:9a:36:3d:10:25:07: 5e:c2:89:dc:9e:24:c8:5d:8d:87:19:fc:cb:06:45: 57:50:03:25:64:07:eb:d7:e9:04:d4:8f:79:a9:cd: 93:bf:0e:97:36:d1:e8:d3:91:bf:09:ff:3c:d8:ec: 80:0b:ac:16:fd:69:73:a0:60:bb:b5:72:21:dd:7f: 11:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:66:0C:28:F7:0E:42:91:D2:0B:98:4C:0E:2D:54:32:A9:C3:FD:E6 X509v3 Authority Key Identifier: keyid:15:C1:8A:29:08:CE:BD:90:85:E0:12:66:BB:02:FB:8A:F2:24:77:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcGKKQjOvZCF4BJmuwL7ivIkdzU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:ef:44:eb:3e:6d:f4:23:ec:8d:12:4c:6b:5c:ca:23:6b:11: bc:36:b7:26:3e:cf:70:c4:43:31:16:64:c9:98:24:8b:b5:eb: be:df:98:bc:6d:35:82:48:2c:71:4e:f5:bd:00:fd:03:e0:0c: e4:10:d7:63:c9:fc:5f:2b:63:b6:97:07:eb:c4:75:99:e6:40: c6:d0:6e:87:cc:9d:1e:54:46:15:5b:62:0a:08:d0:12:c1:e4: 81:0a:6d:04:0e:d5:ae:25:48:7a:45:e8:c7:23:7e:c8:3a:bf: cd:42:2d:3c:4b:a7:ab:48:e2:b9:cb:7b:8c:af:29:5f:4d:e9: 0b:be:9b:c3:92:a3:b5:58:47:f8:51:f4:5c:73:19:cb:44:06: 24:26:e7:28:f9:8b:79:93:26:a2:70:a9:dc:15:a3:be:fc:22: de:e7:8f:31:82:fa:c2:4d:75:c3:a7:fe:24:33:9c:9c:60:aa: 58:a1:7a:b2:58:3e:74:31:55:a8:1d:5a:28:9a:1e:7a:f4:5d: 76:4c:ab:53:d4:7b:87:96:41:c3:be:14:00:8f:33:d4:50:84: 44:8d:9c:8b:9b:0d:28:04:bb:83:a1:af:e2:4a:e6:b3:d1:68: dc:cc:51:da:31:b7:65:cf:d6:d1:ed:8a:fd:13:a9:dc:4e:09: a8:8a:87:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9Zbwv414JwpYXzgPR775EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1YzE4YTI5MDhjZWJkOTA4NWUwMTI2NmJiMDJmYjhhZjIy NDc3MzUwHhcNMjYwMTI3MDMwMTAxWhcNMjYwMTI4MDMwMTAxWjAzMTEwLwYDVQQD EyhkYTY2MGMyOGY3MGU0MjkxZDIwYjk4NGMwZTJkNTQzMmE5YzNmZGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwED2TdxLurQLcgENhx3NDhsiAaBz AYOc5b2djZwOTejA8gZnaI6FkFpPLZNIAEokz70qARbsDuUu0vASQph7sXwGoI43 VweX0nmN5jvDqorzZeX9M/voKUfSWKi/vyf/YrNyVqji44d078fXHcmHP5m+5ACk 93eg2vclCaZdvLarlgDhqQ6MKqZjTsfrbK1AF07mlFZ1HKaj6AnymMqWh1yQxvuL JmujVUuBhNeQ4mDs0vMCFI2BvN5+WfmaNj0QJQdewoncniTIXY2HGfzLBkVXUAMl ZAfr1+kE1I95qc2Tvw6XNtHo05G/Cf882OyAC6wW/WlzoGC7tXIh3X8RaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNpmDCj3DkKR0guYTA4tVDKpw/3mMB8GA1UdIwQY MBaAFBXBiikIzr2QheASZrsC+4ryJHc1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmNHS0tRak92WkNGNEJKbXV3TDdpdklrZHpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC82ZjgxNTctOGQ3Ni00ZDNlLTg5Mzgt N2U1M2QxYzU1OGQ5LzEvRmNHS0tRak92WkNGNEJKbXV3TDdpdklrZHpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC82ZjgxNTctOGQ3Ni00ZDNlLTg5MzgtN2U1M2QxYzU1OGQ5 LzEvRmNHS0tRak92WkNGNEJKbXV3TDdpdklrZHpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM+9E6z5t 9CPsjRJMa1zKI2sRvDa3Jj7PcMRDMRZkyZgki7Xrvt+YvG01gkgscU71vQD9A+AM 5BDXY8n8XytjtpcH68R1meZAxtBuh8ydHlRGFVtiCgjQEsHkgQptBA7VriVIekXo xyN+yDq/zUItPEunq0jiuct7jK8pX03pC76bw5KjtVhH+FH0XHMZy0QGJCbnKPmL eZMmonCp3BWjvvwi3uePMYL6wk11w6f+JDOcnGCqWKF6slg+dDFVqB1aKJoeevRd dkyrU9R7h5ZBw74UAI8z1FCERI2ci5sNKAS7g6Gv4krms9Fo3MxR2jG3Zc/W0e2K /ROp3E4JqIqHJw== -----END CERTIFICATE-----Generated at Tue Jan 27 05:36:37 2026 by rpki-client