This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft File: FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft (raw, json) Hash identifier: aw7jWGi0xw0rjyGNpJD5y+vQPHcQoDAwI0UzsBzyIWQ= Subject key identifier: 34:A6:50:F0:5E:25:10:4F:96:A6:0D:31:94:54:09:04:C7:EC:88:BE Authority key identifier: 14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95 Certificate issuer: /CN=1492a20754c9a7650b8279b9390689c469d73595 Certificate serial: 019BFC1BFF457497130A13E8CC6169694686 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft Manifest number: 17EE Signing time: Mon 26 Jan 2026 21:00:51 +0000 Manifest this update: Mon 26 Jan 2026 21:00:51 +0000 Manifest next update: Tue 27 Jan 2026 21:00:51 +0000 Files and hashes: 1: FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl (hash: aBDoz1Uw8Ckgg5fV0ytRJ1fixnM5XQTgZ7a0p/ZTvDU=) 2: UTis-WRbY-GU5C280jtcweSQcGM.roa (hash: nSL7O1zv/Owqh3yoxdhgakgYNvWvR6WzZovijGhXAe0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:1b:ff:45:74:97:13:0a:13:e8:cc:61:69:69:46:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1492a20754c9a7650b8279b9390689c469d73595 Validity Not Before: Jan 26 21:00:51 2026 GMT Not After : Jan 27 21:00:51 2026 GMT Subject: CN=34a650f05e25104f96a60d3194540904c7ec88be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:60:3d:21:7f:5e:71:d5:24:4f:b9:ab:cb:66: 0f:80:b0:c6:54:f1:88:e0:1b:10:16:0e:43:83:e9: dd:3d:e3:78:3a:6f:75:b7:ed:78:80:b3:24:7b:e0: 9c:3f:1c:55:54:4f:01:c8:4f:9e:14:d8:21:97:16: 3e:d7:ae:af:5f:9b:0d:42:b5:50:c5:1a:fb:70:98: 75:09:bb:00:b8:b4:5a:86:7d:da:c8:a0:c1:ec:40: b3:b0:1a:87:8f:32:22:ed:7e:75:53:ac:d0:29:a7: d0:e1:b3:fb:f9:84:c1:60:49:2e:c8:2f:70:7d:91: d0:bf:9e:9a:7e:c8:d4:66:a3:e1:9c:35:52:53:1e: de:1e:14:0d:19:00:73:d5:5c:36:23:ea:98:37:e3: 1f:7f:a9:e2:22:54:e6:02:50:30:97:d8:7d:b8:b6: c6:10:cc:40:fa:0e:c2:11:9f:d5:a5:ee:8a:fd:13: 30:f6:15:fb:34:2a:b2:a3:14:bb:96:4a:54:6f:9f: a8:f3:c0:bd:43:c1:27:c2:0c:3b:a7:7b:fa:15:0f: d7:5e:75:ee:a0:fa:e0:50:d1:e8:f7:a5:47:01:83: 2d:32:8b:b6:95:81:96:9c:62:cc:fe:46:f6:90:42: e1:22:64:8e:8b:0c:eb:38:2e:d6:9f:65:9a:85:b3: 4b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:A6:50:F0:5E:25:10:4F:96:A6:0D:31:94:54:09:04:C7:EC:88:BE X509v3 Authority Key Identifier: keyid:14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:c8:ce:04:21:ea:a9:72:52:dc:73:42:34:3d:33:bb:1a:b4: 38:19:b9:ec:d9:3a:08:0b:e5:e8:b5:ee:3b:1d:00:77:b5:84: 0a:c3:04:cf:c0:68:e4:de:03:46:28:2f:74:58:17:7b:4f:32: c2:82:01:c7:0c:b3:63:1f:e5:ac:37:14:b2:81:e6:85:4b:dc: 5d:18:a2:9c:6b:17:3f:e3:98:13:21:b5:34:7f:59:f8:16:a5: c3:95:39:f3:04:63:44:0d:94:92:2b:47:4e:ae:fe:87:0c:93: bd:7c:c4:3f:ad:8d:c3:51:2e:ef:98:f2:cf:ed:16:eb:a1:63: 53:58:04:ba:00:3c:8e:22:3f:33:76:51:3f:38:ae:d5:28:0f: 26:39:be:cd:64:87:16:e4:ea:b3:d2:e0:c9:dd:9f:67:30:c1: b8:94:25:c5:31:89:7d:1c:a3:9c:96:9e:04:be:ac:78:10:f3: 84:95:b1:a6:0c:c8:63:63:bb:81:55:da:55:3c:e5:d9:e7:57: 2b:b3:ad:a3:48:06:34:29:b1:d3:f3:76:23:11:23:3e:5d:2f: 57:06:c1:db:56:bc:0a:08:1e:22:ac:96:0e:b2:c4:80:09:2d: fc:77:45:96:b3:0c:1d:e1:3b:1b:1c:51:d8:f5:ae:04:56:a6: fa:c8:4f:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8G/9FdJcTChPozGFpaUaGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0OTJhMjA3NTRjOWE3NjUwYjgyNzliOTM5MDY4OWM0Njlk NzM1OTUwHhcNMjYwMTI2MjEwMDUxWhcNMjYwMTI3MjEwMDUxWjAzMTEwLwYDVQQD EygzNGE2NTBmMDVlMjUxMDRmOTZhNjBkMzE5NDU0MDkwNGM3ZWM4OGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GA9IX9ecdUkT7mry2YPgLDGVPGI 4BsQFg5Dg+ndPeN4Om91t+14gLMke+CcPxxVVE8ByE+eFNghlxY+166vX5sNQrVQ xRr7cJh1CbsAuLRahn3ayKDB7ECzsBqHjzIi7X51U6zQKafQ4bP7+YTBYEkuyC9w fZHQv56afsjUZqPhnDVSUx7eHhQNGQBz1Vw2I+qYN+Mff6niIlTmAlAwl9h9uLbG EMxA+g7CEZ/Vpe6K/RMw9hX7NCqyoxS7lkpUb5+o88C9Q8Enwgw7p3v6FQ/XXnXu oPrgUNHo96VHAYMtMou2lYGWnGLM/kb2kELhImSOiwzrOC7Wn2WahbNLvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDSmUPBeJRBPlqYNMZRUCQTH7Ii+MB8GA1UdIwQY MBaAFBSSogdUyadlC4J5uTkGicRp1zWVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkpLaUIxVEpwMlVMZ25tNU9RYUp4R25YTlpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS82MzFlNmEtN2QwNi00ZmExLWJmZDkt Y2E3NGEwNjdmZWJmLzEvRkpLaUIxVEpwMlVMZ25tNU9RYUp4R25YTlpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS82MzFlNmEtN2QwNi00ZmExLWJmZDktY2E3NGEwNjdmZWJm LzEvRkpLaUIxVEpwMlVMZ25tNU9RYUp4R25YTlpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAosjOBCHq qXJS3HNCND0zuxq0OBm57Nk6CAvl6LXuOx0Ad7WECsMEz8Bo5N4DRigvdFgXe08y woIBxwyzYx/lrDcUsoHmhUvcXRiinGsXP+OYEyG1NH9Z+Balw5U58wRjRA2UkitH Tq7+hwyTvXzEP62Nw1Eu75jyz+0W66FjU1gEugA8jiI/M3ZRPziu1SgPJjm+zWSH FuTqs9Lgyd2fZzDBuJQlxTGJfRyjnJaeBL6seBDzhJWxpgzIY2O7gVXaVTzl2edX K7Oto0gGNCmx0/N2IxEjPl0vVwbB21a8CggeIqyWDrLEgAkt/HdFlrMMHeE7GxxR 2PWuBFam+shPqg== -----END CERTIFICATE-----Generated at Mon Jan 26 23:48:05 2026 by rpki-client