This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft File: fTXAsgkTXCLMgAWnwuIixjwTbLA.mft (raw, json) Hash identifier: mPM30Z+rDKUgnxusZGgE5LZgFsvgXc88q2qlrGYR1WA= Subject key identifier: 34:3E:2D:F5:F1:B7:3E:2F:34:1A:32:4E:6D:34:61:63:FC:89:9C:5E Authority key identifier: 7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0 Certificate issuer: /CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0 Certificate serial: 019BF5AC863F2DC8D84DBC00428712AC147E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 15:01:23 +0000 Manifest this update: Sun 25 Jan 2026 15:01:23 +0000 Manifest next update: Mon 26 Jan 2026 15:01:23 +0000 Files and hashes: 1: fTXAsgkTXCLMgAWnwuIixjwTbLA.crl (hash: d/fVhrYCmSuX+Mtj2QvV6rEN1qILno5lQ9szacZgLB8=) 2: grQlShm9Yf4p9v0UY4WRgIC18Rg.roa (hash: 0KLMtmRL0pnGPXXoN5qSCFJywF+voZI8ebkJsYdl6wg=) 3: l1AVp_w4-LVuNkKZXyFJBaRiTqU.roa (hash: pv6l02vTFMwEiJ4PcQNABkmbJULiDmx5aoXWeKtSRA0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:86:3f:2d:c8:d8:4d:bc:00:42:87:12:ac:14:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0 Validity Not Before: Jan 25 15:01:23 2026 GMT Not After : Jan 26 15:01:23 2026 GMT Subject: CN=343e2df5f1b73e2f341a324e6d346163fc899c5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b3:18:ea:3a:3c:ce:2b:63:83:4c:16:0c:d9: e8:9e:00:d8:4f:ba:d2:3d:15:db:d3:b1:e3:a2:e5: f1:2d:94:a7:63:5a:c0:f4:2e:66:94:8f:a7:17:f9: c9:92:e9:a4:02:90:9a:c8:e4:8b:62:6c:45:09:8f: 99:32:ce:45:84:cc:f7:2d:c9:ad:3b:ee:3b:0b:5e: f7:22:f8:66:5f:61:5b:79:9e:f4:02:c0:b1:98:a2: ff:0c:ec:6b:c6:d5:3a:bb:84:b9:fa:fa:8a:8a:24: b3:0b:6f:fe:26:a3:a8:9a:c7:a7:33:e8:48:61:ce: f7:3a:f1:86:19:66:86:7c:1a:19:c9:8c:40:e7:33: a3:2b:13:68:4f:8e:28:e1:17:a4:23:b4:e7:d5:81: 95:90:80:b1:08:70:c6:03:09:49:0c:a3:59:a7:af: ac:70:d6:e6:5e:f1:d7:4a:c0:fc:37:78:d2:9d:e6: 54:a2:dd:31:9f:be:1c:44:a3:b2:b2:28:d3:53:a7: dd:dd:ef:2c:aa:6c:d5:5d:3a:71:d6:72:76:de:26: 46:bb:75:c6:09:a7:b6:e4:8f:e9:45:42:ad:17:f3: 29:4d:fa:a4:5c:dd:93:c4:7a:28:23:d4:6b:2e:17: ff:fb:f5:0a:92:93:6e:52:df:a0:b5:d4:f4:5c:c8: 97:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:3E:2D:F5:F1:B7:3E:2F:34:1A:32:4E:6D:34:61:63:FC:89:9C:5E X509v3 Authority Key Identifier: keyid:7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:c8:f2:3d:02:03:8a:ee:4e:7d:20:19:40:a6:88:a6:f5:62: f7:29:82:5d:c3:d8:96:99:94:df:62:64:f7:fa:81:b2:53:bf: df:53:f7:f7:f3:f3:4a:51:c0:2c:78:09:6a:b2:6f:16:37:c9: 74:e2:c1:c6:00:2d:df:87:7e:50:e8:3b:47:12:e3:2b:79:ce: d3:21:b9:02:06:d4:b7:de:02:77:38:c8:63:31:53:67:28:e5: bf:25:2c:86:27:a9:00:aa:79:cf:4c:5e:d5:2d:b1:a7:5d:fa: 4a:91:a9:26:9a:da:88:6d:06:9d:3f:9a:60:fa:c7:20:d8:92: 4a:e9:cb:d0:0b:43:51:e5:8d:03:1c:80:0d:39:c6:4e:5f:24: e7:7e:02:83:ea:81:f8:7d:27:27:89:df:83:df:71:39:11:8d: e6:c6:4b:0f:ff:8f:fa:6f:47:6f:72:81:45:f4:26:6d:18:58: 05:ce:6a:60:63:00:74:76:10:83:ef:ea:96:c0:7a:1f:7f:70: 68:10:d1:4b:3f:5b:e8:7b:a0:ee:78:6f:69:85:b1:2d:ef:34: 9c:e6:a3:b5:67:8d:4d:73:7f:97:5b:d0:06:0c:37:5a:0d:4c: 99:b9:4d:4a:05:b2:93:40:e4:b3:ee:78:99:d4:85:2f:99:ff: cb:38:ef:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rIY/LcjYTbwAQocSrBR+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMzVjMGIyMDkxMzVjMjJjYzgwMDVhN2MyZTIyMmM2M2Mx MzZjYjAwHhcNMjYwMTI1MTUwMTIzWhcNMjYwMTI2MTUwMTIzWjAzMTEwLwYDVQQD EygzNDNlMmRmNWYxYjczZTJmMzQxYTMyNGU2ZDM0NjE2M2ZjODk5YzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbMY6jo8zitjg0wWDNnongDYT7rS PRXb07HjouXxLZSnY1rA9C5mlI+nF/nJkumkApCayOSLYmxFCY+ZMs5FhMz3Lcmt O+47C173IvhmX2FbeZ70AsCxmKL/DOxrxtU6u4S5+vqKiiSzC2/+JqOomsenM+hI Yc73OvGGGWaGfBoZyYxA5zOjKxNoT44o4RekI7Tn1YGVkICxCHDGAwlJDKNZp6+s cNbmXvHXSsD8N3jSneZUot0xn74cRKOysijTU6fd3e8sqmzVXTpx1nJ23iZGu3XG Cae25I/pRUKtF/MpTfqkXN2TxHooI9RrLhf/+/UKkpNuUt+gtdT0XMiXjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQ+LfXxtz4vNBoyTm00YWP8iZxeMB8GA1UdIwQY MBaAFH01wLIJE1wizIAFp8LiIsY8E2ywMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlRYQXNna1RYQ0xNZ0FXbnd1SWl4andUYkxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9iOWM5MDYtMWU4NS00NTczLThmNjIt ODI1N2Q1MTkyOGE5LzEvZlRYQXNna1RYQ0xNZ0FXbnd1SWl4andUYkxBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9iOWM5MDYtMWU4NS00NTczLThmNjItODI1N2Q1MTkyOGE5 LzEvZlRYQXNna1RYQ0xNZ0FXbnd1SWl4andUYkxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXsjyPQID iu5OfSAZQKaIpvVi9ymCXcPYlpmU32Jk9/qBslO/31P39/PzSlHALHgJarJvFjfJ dOLBxgAt34d+UOg7RxLjK3nO0yG5AgbUt94CdzjIYzFTZyjlvyUshiepAKp5z0xe 1S2xp136SpGpJpraiG0GnT+aYPrHINiSSunL0AtDUeWNAxyADTnGTl8k534Cg+qB +H0nJ4nfg99xORGN5sZLD/+P+m9Hb3KBRfQmbRhYBc5qYGMAdHYQg+/qlsB6H39w aBDRSz9b6Hug7nhvaYWxLe80nOajtWeNTXN/l1vQBgw3Wg1MmblNSgWyk0Dks+54 mdSFL5n/yzjvDw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:35:45 2026 by rpki-client