This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft File: FOKCz2FihLWPhexD5UyQv5WU5Jw.mft (raw, json) Hash identifier: By+Yy4rBWMmmiUDkwGLuOD+Hrlxy6CrrAbgBrX/SS/Q= Subject key identifier: 62:24:F6:01:27:D1:FA:B1:AE:61:43:FA:2E:A7:18:21:FF:AC:04:E3 Authority key identifier: 14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C Certificate issuer: /CN=14e282cf616284b58f85ec43e54c90bf9594e49c Certificate serial: 019BFCC0FE9281FAF2CE980EB6B2863364BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft Manifest number: 1757 Signing time: Tue 27 Jan 2026 00:01:04 +0000 Manifest this update: Tue 27 Jan 2026 00:01:04 +0000 Manifest next update: Wed 28 Jan 2026 00:01:04 +0000 Files and hashes: 1: FOKCz2FihLWPhexD5UyQv5WU5Jw.crl (hash: svwv9P+mF/h0+b5hI23V5J3z/M6dY2n35A7+cf8pfqY=) 2: ic08Zy2tp5ErO4fCUtcLYzoJ7HA.roa (hash: rUWPt9ieqVy+Gp/oD9EsBpO1X47eqDC+02qK6K5SPS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:c0:fe:92:81:fa:f2:ce:98:0e:b6:b2:86:33:64:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14e282cf616284b58f85ec43e54c90bf9594e49c Validity Not Before: Jan 27 00:01:04 2026 GMT Not After : Jan 28 00:01:04 2026 GMT Subject: CN=6224f60127d1fab1ae6143fa2ea71821ffac04e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:12:72:8f:05:2d:8c:1c:96:87:c7:4c:ab:a2: 7b:ff:2f:3e:17:06:da:6a:e3:8c:95:c3:dc:42:e5: 60:c5:69:21:14:f6:91:e6:f7:e0:3d:04:27:4b:59: 2d:fe:ad:ac:34:f8:b1:df:a0:ec:ed:8c:f4:82:30: cd:ae:a1:9c:83:8b:f3:b3:2c:e9:46:b5:12:5f:37: d1:38:65:df:3f:f2:96:80:bc:d1:0c:c7:f9:1e:c3: d6:ea:d2:99:0d:ab:61:2b:dc:66:02:25:d9:5a:4c: 61:f9:64:5b:a0:c0:f4:46:d0:39:eb:e8:8f:c0:e5: d8:75:c3:a0:9e:e5:1a:e4:d0:f4:71:e7:73:35:91: 16:5d:4c:1c:07:9a:5d:1e:7a:a4:3d:36:6f:0d:05: 56:e7:ba:cd:2a:57:2a:4b:25:b5:9d:9b:72:f0:dc: 6b:ac:98:72:2c:45:85:76:c1:ab:94:1f:7d:6c:e2: bb:60:7a:6b:f8:25:f8:25:91:f6:84:09:9c:30:36: a8:a1:e9:2c:09:3d:d4:ef:88:39:25:a9:c5:4c:b9: a4:f3:57:e1:b8:14:cf:bc:d9:0f:66:16:38:89:77: c1:f6:90:c3:b3:4d:a0:0e:76:21:36:99:0e:56:2b: ca:f7:08:1e:49:1d:c1:cd:41:d0:78:f6:9e:94:0d: 78:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:24:F6:01:27:D1:FA:B1:AE:61:43:FA:2E:A7:18:21:FF:AC:04:E3 X509v3 Authority Key Identifier: keyid:14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:2a:ee:05:4d:48:17:86:ff:8b:90:4b:fc:72:74:44:45:93: f4:4c:13:53:92:a3:f6:ca:1b:25:16:cb:da:86:df:0c:2a:b7: d5:be:7e:f8:8a:e4:c9:e0:69:2c:2b:dd:62:10:9f:fb:d6:14: 22:21:ca:db:a4:cd:ca:d6:7d:63:b7:85:84:c6:ea:c0:df:80: 87:88:60:cd:e5:a2:0a:1a:31:27:d9:e3:14:17:11:30:fe:89: 08:aa:70:eb:7d:57:61:b2:a3:56:0e:38:2b:b6:24:13:6d:d1: 52:c5:4e:ca:52:7b:0d:45:1a:d4:13:99:0a:c7:33:46:7e:39: bc:c1:d2:c7:43:42:82:e2:78:80:10:82:79:a1:07:00:fc:97: 55:7a:a2:b8:54:d0:21:d9:8a:a5:c6:e6:cb:90:8d:df:35:62: da:99:cf:1c:b5:7d:0e:6f:32:4d:54:61:4c:b0:ab:c9:e7:a7: 76:42:50:f2:3d:de:5b:6b:95:f6:87:f8:47:de:57:7c:d0:41: 65:62:a6:3c:58:6a:fa:27:e0:73:17:dd:fc:49:ae:52:0d:58: 75:ec:df:76:03:3b:64:53:e0:a0:cc:39:c8:35:a7:4b:ac:9d: 52:81:ce:2e:55:f2:fc:1f:8d:e7:9f:76:83:55:e6:ff:bb:d0: df:01:78:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8wP6SgfryzpgOtrKGM2S8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0ZTI4MmNmNjE2Mjg0YjU4Zjg1ZWM0M2U1NGM5MGJmOTU5 NGU0OWMwHhcNMjYwMTI3MDAwMTA0WhcNMjYwMTI4MDAwMTA0WjAzMTEwLwYDVQQD Eyg2MjI0ZjYwMTI3ZDFmYWIxYWU2MTQzZmEyZWE3MTgyMWZmYWMwNGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xJyjwUtjByWh8dMq6J7/y8+Fwba auOMlcPcQuVgxWkhFPaR5vfgPQQnS1kt/q2sNPix36Ds7Yz0gjDNrqGcg4vzsyzp RrUSXzfROGXfP/KWgLzRDMf5HsPW6tKZDathK9xmAiXZWkxh+WRboMD0RtA56+iP wOXYdcOgnuUa5ND0cedzNZEWXUwcB5pdHnqkPTZvDQVW57rNKlcqSyW1nZty8Nxr rJhyLEWFdsGrlB99bOK7YHpr+CX4JZH2hAmcMDaooeksCT3U74g5JanFTLmk81fh uBTPvNkPZhY4iXfB9pDDs02gDnYhNpkOVivK9wgeSR3BzUHQePaelA14zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGIk9gEn0fqxrmFD+i6nGCH/rATjMB8GA1UdIwQY MBaAFBTigs9hYoS1j4XsQ+VMkL+VlOScMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRk9LQ3oyRmloTFdQaGV4RDVVeVF2NVdVNUp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9jOGQ4YWQtY2Q3Mi00MTliLTk3M2Yt NTYwOTRmZDZjYzZjLzEvRk9LQ3oyRmloTFdQaGV4RDVVeVF2NVdVNUp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9jOGQ4YWQtY2Q3Mi00MTliLTk3M2YtNTYwOTRmZDZjYzZj LzEvRk9LQ3oyRmloTFdQaGV4RDVVeVF2NVdVNUp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMiruBU1I F4b/i5BL/HJ0REWT9EwTU5Kj9sobJRbL2obfDCq31b5++IrkyeBpLCvdYhCf+9YU IiHK26TNytZ9Y7eFhMbqwN+Ah4hgzeWiChoxJ9njFBcRMP6JCKpw631XYbKjVg44 K7YkE23RUsVOylJ7DUUa1BOZCsczRn45vMHSx0NCguJ4gBCCeaEHAPyXVXqiuFTQ IdmKpcbmy5CN3zVi2pnPHLV9Dm8yTVRhTLCryeendkJQ8j3eW2uV9of4R95XfNBB ZWKmPFhq+ifgcxfd/EmuUg1YdezfdgM7ZFPgoMw5yDWnS6ydUoHOLlXy/B+N5592 g1Xm/7vQ3wF4Eg== -----END CERTIFICATE-----Generated at Tue Jan 27 07:46:50 2026 by rpki-client