This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft File: FtQJAygYpijNKyg4OALXfnSUolI.mft (raw, json) Hash identifier: fFRcAswtZWF9gp7VzGQ1lokQDZ3VmxkCEDL2WNoBKsk= Subject key identifier: 56:0E:5A:09:FD:83:4F:D4:2A:68:7E:9B:B2:EC:13:ED:7B:D0:F9:16 Authority key identifier: 16:D4:09:03:28:18:A6:28:CD:2B:28:38:38:02:D7:7E:74:94:A2:52 Certificate issuer: /CN=16d409032818a628cd2b28383802d77e7494a252 Certificate serial: 019BF688459DE74CBCA96C603CE0C0914BC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft Manifest number: 01AA Signing time: Sun 25 Jan 2026 19:01:24 +0000 Manifest this update: Sun 25 Jan 2026 19:01:24 +0000 Manifest next update: Mon 26 Jan 2026 19:01:24 +0000 Files and hashes: 1: FtQJAygYpijNKyg4OALXfnSUolI.crl (hash: kWNYO8yLYlB3iZqo79uleT+tVohpvlk44pTVCj4tXbM=) 2: LaKgTWrQkobeVQ1YjLHD79ykJ5M.roa (hash: aWACl4kesdkEy6/Xa5+RkoBL499zzk7WgONY6WBsSTw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:88:45:9d:e7:4c:bc:a9:6c:60:3c:e0:c0:91:4b:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16d409032818a628cd2b28383802d77e7494a252 Validity Not Before: Jan 25 19:01:24 2026 GMT Not After : Jan 26 19:01:24 2026 GMT Subject: CN=560e5a09fd834fd42a687e9bb2ec13ed7bd0f916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:31:55:bf:61:7b:f2:81:48:df:23:f7:28:3d: 9f:40:b0:49:d7:e9:87:d9:38:21:f7:a5:7e:1a:d6: d7:60:a5:bc:ae:b0:7e:c3:eb:18:30:bc:b6:ac:46: c1:bf:a7:6d:48:3c:72:42:82:d7:d4:35:f6:74:6e: ca:b9:4c:62:20:ca:2f:76:a1:7c:d3:9e:ca:b3:81: 16:23:09:d7:22:f7:d6:53:df:02:c5:41:1e:a1:93: d2:f5:a4:f8:cd:36:c3:a2:7a:01:37:78:8c:6d:70: 27:32:ef:20:9c:f0:7f:7e:a4:6d:2b:5f:46:ed:23: 5c:cc:c8:02:22:91:4d:fb:47:81:83:5f:b5:f1:93: 2b:d0:30:e1:b9:4a:45:8e:df:e5:8e:fd:fa:6f:b0: 84:55:b4:5c:e1:29:3c:63:8a:b6:ec:a6:22:68:5c: 52:9a:cb:0c:17:09:4b:00:0f:44:f9:2b:a7:cb:1a: 38:42:99:17:6d:15:7b:f5:82:bd:7b:d3:c7:99:4e: 39:30:53:c8:ff:77:0c:59:63:88:7a:a6:af:c3:3c: a9:06:3f:53:77:64:ab:e4:52:0b:42:83:a8:b2:6e: f4:0c:42:23:d5:f9:8a:0d:c2:18:e3:e9:7d:89:6e: a0:eb:2c:95:bb:98:9b:e1:32:51:a0:81:03:7d:7b: 2c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:0E:5A:09:FD:83:4F:D4:2A:68:7E:9B:B2:EC:13:ED:7B:D0:F9:16 X509v3 Authority Key Identifier: keyid:16:D4:09:03:28:18:A6:28:CD:2B:28:38:38:02:D7:7E:74:94:A2:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ac:5d:96:f9:d5:ff:14:04:74:0e:0b:da:48:ba:43:e1:4e: fc:d4:5c:35:93:12:98:e2:33:8e:e1:c5:45:ea:d0:e7:ec:28: 15:ac:f8:c3:f3:c2:9b:37:f1:3a:88:a2:65:ad:28:96:1d:95: 14:72:61:e5:bf:bf:65:2d:d0:6f:08:8f:b5:d3:7c:6d:48:b8: f5:e2:2f:ed:20:4c:82:d9:6b:47:78:ef:a0:fc:fe:3a:21:86: c0:e7:83:6f:c2:e5:b7:9c:fa:47:13:eb:da:1c:ec:fc:25:a6: 8a:ea:45:f5:22:79:38:40:7d:b2:71:f2:49:ae:76:38:eb:61: ce:5f:a6:a8:52:4c:2f:d9:6d:98:5b:44:44:12:4b:ca:78:aa: c0:cf:8e:bd:bf:2a:dc:c0:5d:1e:44:be:12:7f:41:f1:e9:96: 06:69:46:52:36:87:c0:11:90:e4:a6:b5:fc:bf:1a:2a:10:59: ff:26:4f:f5:8e:7b:d6:62:88:fa:54:45:37:16:93:64:2b:aa: c7:16:da:3d:e8:d3:40:a9:62:f9:7a:1c:78:0f:c1:78:78:8d: 05:cb:ca:92:72:0e:93:28:28:8c:69:ea:1a:8b:8d:fd:c5:c4: 83:7e:7a:38:86:5c:f2:92:28:a9:13:ea:7f:8f:ca:57:4f:74: 13:0f:84:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2iEWd50y8qWxgPODAkUvCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2ZDQwOTAzMjgxOGE2MjhjZDJiMjgzODM4MDJkNzdlNzQ5 NGEyNTIwHhcNMjYwMTI1MTkwMTI0WhcNMjYwMTI2MTkwMTI0WjAzMTEwLwYDVQQD Eyg1NjBlNWEwOWZkODM0ZmQ0MmE2ODdlOWJiMmVjMTNlZDdiZDBmOTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTFVv2F78oFI3yP3KD2fQLBJ1+mH 2Tgh96V+GtbXYKW8rrB+w+sYMLy2rEbBv6dtSDxyQoLX1DX2dG7KuUxiIMovdqF8 057Ks4EWIwnXIvfWU98CxUEeoZPS9aT4zTbDonoBN3iMbXAnMu8gnPB/fqRtK19G 7SNczMgCIpFN+0eBg1+18ZMr0DDhuUpFjt/ljv36b7CEVbRc4Sk8Y4q27KYiaFxS mssMFwlLAA9E+Sunyxo4QpkXbRV79YK9e9PHmU45MFPI/3cMWWOIeqavwzypBj9T d2Sr5FILQoOosm70DEIj1fmKDcIY4+l9iW6g6yyVu5ib4TJRoIEDfXssqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFYOWgn9g0/UKmh+m7LsE+170PkWMB8GA1UdIwQY MBaAFBbUCQMoGKYozSsoODgC1350lKJSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnRRSkF5Z1lwaWpOS3lnNE9BTFhmblNVb2xJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS81ODYzNzUtYmM4ZC00MDY1LTgzZGMt MGFlYjlkMzc3ODdlLzEvRnRRSkF5Z1lwaWpOS3lnNE9BTFhmblNVb2xJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS81ODYzNzUtYmM4ZC00MDY1LTgzZGMtMGFlYjlkMzc3ODdl LzEvRnRRSkF5Z1lwaWpOS3lnNE9BTFhmblNVb2xJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX6xdlvnV /xQEdA4L2ki6Q+FO/NRcNZMSmOIzjuHFRerQ5+woFaz4w/PCmzfxOoiiZa0olh2V FHJh5b+/ZS3QbwiPtdN8bUi49eIv7SBMgtlrR3jvoPz+OiGGwOeDb8Llt5z6RxPr 2hzs/CWmiupF9SJ5OEB9snHySa52OOthzl+mqFJML9ltmFtERBJLyniqwM+Ovb8q 3MBdHkS+En9B8emWBmlGUjaHwBGQ5Ka1/L8aKhBZ/yZP9Y571mKI+lRFNxaTZCuq xxbaPejTQKli+XoceA/BeHiNBcvKknIOkygojGnqGouN/cXEg356OIZc8pIoqRPq f4/KV090Ew+E3Q== -----END CERTIFICATE-----Generated at Mon Jan 26 01:22:56 2026 by rpki-client