This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft File: FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft (raw, json) Hash identifier: XJkvVygN8efEYz3VWSsHqstg1c2H6UYWTvl7p7lYPLQ= Subject key identifier: 6F:77:16:C1:7A:E1:33:1D:DA:8E:60:6C:4A:9E:5E:FF:F7:82:6C:6A Authority key identifier: 14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95 Certificate issuer: /CN=1492a20754c9a7650b8279b9390689c469d73595 Certificate serial: 019BFA2DAC25773FCFEC51E0C716A4266D8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft Manifest number: 17ED Signing time: Mon 26 Jan 2026 12:00:55 +0000 Manifest this update: Mon 26 Jan 2026 12:00:55 +0000 Manifest next update: Tue 27 Jan 2026 12:00:55 +0000 Files and hashes: 1: FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl (hash: d+otfhfwawqssceZMVs17CuyKqYw4TLJF4YNaXjOs+I=) 2: UTis-WRbY-GU5C280jtcweSQcGM.roa (hash: nSL7O1zv/Owqh3yoxdhgakgYNvWvR6WzZovijGhXAe0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2d:ac:25:77:3f:cf:ec:51:e0:c7:16:a4:26:6d:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1492a20754c9a7650b8279b9390689c469d73595 Validity Not Before: Jan 26 12:00:55 2026 GMT Not After : Jan 27 12:00:55 2026 GMT Subject: CN=6f7716c17ae1331dda8e606c4a9e5efff7826c6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:25:e6:6f:5a:87:71:9f:3c:3d:78:cb:f4:53: f2:3d:43:d4:1e:ad:72:b3:c6:b5:5c:09:79:39:9e: a3:14:da:d0:3d:c2:a8:f1:83:cd:d8:a6:16:e4:25: e1:a2:90:bc:f7:a7:18:12:54:19:2c:67:b1:59:7f: 27:ed:ea:e4:60:eb:ef:cd:83:ad:fd:11:85:bd:30: 3f:d2:24:00:93:ea:87:08:98:f6:bc:71:e0:0b:5a: 0c:bc:4e:f3:e7:ac:58:4f:f8:4c:0b:4e:48:98:d9: c8:39:2c:a7:f0:0a:c0:21:27:aa:00:9b:79:a0:68: dc:9f:26:9b:4a:60:b8:30:ce:ee:7d:34:bc:8a:24: d9:58:d7:d3:03:ad:d4:c7:f7:89:84:1a:c3:3c:db: 4f:d3:df:ae:e6:6e:6e:06:ee:e8:e2:d4:28:78:b3: dc:90:de:0c:7f:ea:5b:4c:26:58:5e:00:09:70:60: c9:07:c4:eb:df:84:fa:a4:86:b5:65:e9:2a:55:ef: 7a:ab:a0:19:1d:38:f3:ad:4a:37:0d:7d:5b:29:33: 5e:85:24:e3:a8:a9:eb:55:82:3b:33:6c:d9:d9:df: 83:63:21:be:24:4d:f0:c4:b1:cf:4b:61:5d:6b:ef: 43:c5:df:d2:d1:4b:b8:99:79:2d:43:96:51:3b:88: 5a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:77:16:C1:7A:E1:33:1D:DA:8E:60:6C:4A:9E:5E:FF:F7:82:6C:6A X509v3 Authority Key Identifier: keyid:14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:07:b1:4b:21:91:12:0e:44:bc:10:92:46:6a:5f:2d:ef:c3: 94:b2:ce:ac:2b:84:13:9b:15:fb:a5:f4:04:b3:53:25:42:f6: 88:f7:98:34:a4:28:56:21:b8:03:3f:6a:e1:e5:d0:ef:8e:af: 3c:c3:05:89:f8:ad:c2:5e:5c:fb:2f:20:d4:a1:85:e1:f1:a8: 2c:38:d0:63:12:48:e1:67:82:17:98:6a:15:07:e0:0c:e0:2d: 71:1a:a8:74:72:af:49:c7:0c:2b:bd:bd:59:e6:28:a6:4f:0b: 9c:a0:11:d0:67:2b:d2:4f:13:5f:0c:03:bb:43:40:8b:95:ee: fb:85:83:00:f8:20:31:7b:d9:1e:3f:d4:e1:5a:ac:1e:74:f2: 73:e5:76:b8:dc:45:b0:9e:28:d5:be:eb:21:0b:0d:60:74:8e: cb:4e:b4:4c:4b:46:ac:9e:c6:12:d5:1f:6a:ca:fa:60:b0:11: 34:e3:6c:1b:2b:e6:32:91:e9:29:17:52:61:77:44:45:5f:47: 02:d1:51:3b:11:f1:a8:6d:29:c9:12:e6:0b:de:50:b5:67:c6: 23:21:47:4f:2d:45:7a:b9:96:6d:76:68:46:1a:dd:86:db:7f: db:a9:27:93:4c:49:d1:1f:3a:82:98:ca:85:e8:56:7e:78:0c: 51:b0:38:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6Lawldz/P7FHgxxakJm2KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0OTJhMjA3NTRjOWE3NjUwYjgyNzliOTM5MDY4OWM0Njlk NzM1OTUwHhcNMjYwMTI2MTIwMDU1WhcNMjYwMTI3MTIwMDU1WjAzMTEwLwYDVQQD Eyg2Zjc3MTZjMTdhZTEzMzFkZGE4ZTYwNmM0YTllNWVmZmY3ODI2YzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yXmb1qHcZ88PXjL9FPyPUPUHq1y s8a1XAl5OZ6jFNrQPcKo8YPN2KYW5CXhopC896cYElQZLGexWX8n7erkYOvvzYOt /RGFvTA/0iQAk+qHCJj2vHHgC1oMvE7z56xYT/hMC05ImNnIOSyn8ArAISeqAJt5 oGjcnyabSmC4MM7ufTS8iiTZWNfTA63Ux/eJhBrDPNtP09+u5m5uBu7o4tQoeLPc kN4Mf+pbTCZYXgAJcGDJB8Tr34T6pIa1ZekqVe96q6AZHTjzrUo3DX1bKTNehSTj qKnrVYI7M2zZ2d+DYyG+JE3wxLHPS2Fda+9Dxd/S0Uu4mXktQ5ZRO4hadwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG93FsF64TMd2o5gbEqeXv/3gmxqMB8GA1UdIwQY MBaAFBSSogdUyadlC4J5uTkGicRp1zWVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkpLaUIxVEpwMlVMZ25tNU9RYUp4R25YTlpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS82MzFlNmEtN2QwNi00ZmExLWJmZDkt Y2E3NGEwNjdmZWJmLzEvRkpLaUIxVEpwMlVMZ25tNU9RYUp4R25YTlpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS82MzFlNmEtN2QwNi00ZmExLWJmZDktY2E3NGEwNjdmZWJm LzEvRkpLaUIxVEpwMlVMZ25tNU9RYUp4R25YTlpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHQexSyGR Eg5EvBCSRmpfLe/DlLLOrCuEE5sV+6X0BLNTJUL2iPeYNKQoViG4Az9q4eXQ746v PMMFifitwl5c+y8g1KGF4fGoLDjQYxJI4WeCF5hqFQfgDOAtcRqodHKvSccMK729 WeYopk8LnKAR0Gcr0k8TXwwDu0NAi5Xu+4WDAPggMXvZHj/U4VqsHnTyc+V2uNxF sJ4o1b7rIQsNYHSOy060TEtGrJ7GEtUfasr6YLARNONsGyvmMpHpKRdSYXdERV9H AtFROxHxqG0pyRLmC95QtWfGIyFHTy1FermWbXZoRhrdhtt/26knk0xJ0R86gpjK hehWfngMUbA48g== -----END CERTIFICATE-----Generated at Mon Jan 26 22:11:30 2026 by rpki-client