This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft File: FmVeVZX1o8BxwSsXnbknncfbCRM.mft (raw, json) Hash identifier: fvtvuoF2J5mBykX2zLkh+qxvLu7vEmDUshVsaGCa67g= Subject key identifier: AD:67:46:05:5E:0C:09:A2:35:01:96:A8:8D:7D:C1:18:87:2F:45:4C Authority key identifier: 16:65:5E:55:95:F5:A3:C0:71:C1:2B:17:9D:B9:27:9D:C7:DB:09:13 Certificate issuer: /CN=16655e5595f5a3c071c12b179db9279dc7db0913 Certificate serial: 019BF72C8B3D6A8C9AE1312BD7641079DA36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft Manifest number: 10FF Signing time: Sun 25 Jan 2026 22:00:50 +0000 Manifest this update: Sun 25 Jan 2026 22:00:50 +0000 Manifest next update: Mon 26 Jan 2026 22:00:50 +0000 Files and hashes: 1: 9EY388q_8N1ByylpLUNJcoEQmNc.roa (hash: swwp7NtGKddr8ryZRv2cyRO8Q2e4qDuv+717NcJsQ10=) 2: FmVeVZX1o8BxwSsXnbknncfbCRM.crl (hash: SpNRa3homuSEXPhULMOB/FY6tkBD4d4q6fBvl1W+xqI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.crl rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:8b:3d:6a:8c:9a:e1:31:2b:d7:64:10:79:da:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16655e5595f5a3c071c12b179db9279dc7db0913 Validity Not Before: Jan 25 22:00:50 2026 GMT Not After : Jan 26 22:00:50 2026 GMT Subject: CN=ad6746055e0c09a2350196a88d7dc118872f454c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:07:d4:10:e2:4f:70:d6:29:d8:07:96:18:f3: 2e:17:84:3d:93:3d:0c:9b:b6:e9:3e:aa:ba:9c:b6: f1:d0:9a:77:6a:83:1c:e6:ef:80:26:54:76:79:bd: 0b:79:b8:67:ec:89:b5:51:49:1c:64:b3:75:77:7d: c9:c3:a3:98:86:03:18:42:3b:d9:16:4b:05:9c:61: 67:d0:fb:cd:2a:70:c3:c9:f1:85:a0:1f:a8:a7:a6: 49:23:1a:e4:0f:71:03:a3:3e:c8:e6:3f:eb:00:74: bb:19:90:11:0d:36:a8:1a:b0:5f:7e:bb:60:a8:a1: 29:9e:31:42:cc:8c:bb:8b:f7:80:26:70:61:23:dd: ff:77:cf:85:16:d9:00:b5:1a:4c:9c:51:f5:d5:90: 81:f7:2f:44:6f:7b:c5:d4:cf:e4:49:57:6d:9f:84: 7b:0e:17:ca:75:be:85:ea:5c:a7:70:7b:46:b2:47: 5d:db:d4:e6:3c:cd:bc:53:ba:5d:8c:ee:e7:4c:fb: 79:7a:d8:02:6f:c5:93:57:a3:b0:65:eb:05:b3:7f: 25:d1:b4:16:ae:b3:ab:7b:f0:a1:3f:08:ba:97:e6: 5a:b5:06:0f:13:f1:c9:84:04:4b:46:ef:86:41:49: 2e:03:e1:14:5b:77:79:d7:f5:c0:0c:25:0a:80:32: 55:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:67:46:05:5E:0C:09:A2:35:01:96:A8:8D:7D:C1:18:87:2F:45:4C X509v3 Authority Key Identifier: keyid:16:65:5E:55:95:F5:A3:C0:71:C1:2B:17:9D:B9:27:9D:C7:DB:09:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:bb:44:36:d9:d4:c0:5a:62:9e:12:ee:87:c0:b9:15:64:95: 5a:54:98:52:c7:bd:9c:2f:5d:ec:a1:02:7c:88:87:f0:0b:80: 52:88:09:2e:03:c5:0d:bd:d5:a8:0f:ff:d3:48:3c:1b:e0:5b: f8:b4:ca:3c:ae:93:f0:8a:97:92:25:6e:4f:9b:0d:d8:c3:ce: 46:98:2e:1f:ce:e0:13:12:51:be:a0:94:17:4c:fc:89:85:6c: c1:33:ef:7d:a3:f1:d0:f1:c6:d1:ff:50:86:1b:ce:f9:1b:46: 26:e9:3d:98:75:eb:33:23:9b:57:b3:8b:0f:0c:6b:68:c3:a4: a9:a8:09:3e:7c:64:43:f3:87:72:c3:a8:54:78:9e:bc:dc:d8: c1:1d:c1:f8:33:ce:be:b4:47:48:6b:e6:49:f1:e2:94:95:c7: 48:6b:e3:b2:26:52:a1:75:dd:76:92:fc:da:52:1e:04:f8:f9: 22:a6:f2:c2:a7:0e:cd:16:62:4c:04:de:fd:5d:1c:6a:ec:ff: 4b:0b:8d:3b:e1:e4:75:f6:ab:c9:cb:6a:f7:8d:96:19:8e:9b: 26:6f:24:e4:e4:02:bb:be:94:43:d8:69:cd:59:29:d5:10:22: 10:12:b1:d4:a2:8e:fe:ab:e3:90:62:36:fa:65:b3:5c:5d:fe: d1:0b:30:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LIs9aoya4TEr12QQedo2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NjU1ZTU1OTVmNWEzYzA3MWMxMmIxNzlkYjkyNzlkYzdk YjA5MTMwHhcNMjYwMTI1MjIwMDUwWhcNMjYwMTI2MjIwMDUwWjAzMTEwLwYDVQQD EyhhZDY3NDYwNTVlMGMwOWEyMzUwMTk2YTg4ZDdkYzExODg3MmY0NTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugfUEOJPcNYp2AeWGPMuF4Q9kz0M m7bpPqq6nLbx0Jp3aoMc5u+AJlR2eb0Lebhn7Im1UUkcZLN1d33Jw6OYhgMYQjvZ FksFnGFn0PvNKnDDyfGFoB+op6ZJIxrkD3EDoz7I5j/rAHS7GZARDTaoGrBffrtg qKEpnjFCzIy7i/eAJnBhI93/d8+FFtkAtRpMnFH11ZCB9y9Eb3vF1M/kSVdtn4R7 DhfKdb6F6lyncHtGskdd29TmPM28U7pdjO7nTPt5etgCb8WTV6OwZesFs38l0bQW rrOre/ChPwi6l+ZatQYPE/HJhARLRu+GQUkuA+EUW3d51/XADCUKgDJVGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK1nRgVeDAmiNQGWqI19wRiHL0VMMB8GA1UdIwQY MBaAFBZlXlWV9aPAccErF525J53H2wkTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm1WZVZaWDFvOEJ4d1NzWG5ia25uY2ZiQ1JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC82NzE5Y2QtODY0YS00MmYwLTgxOGYt ZGQ0ODA0ODQwZGQ2LzEvRm1WZVZaWDFvOEJ4d1NzWG5ia25uY2ZiQ1JNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC82NzE5Y2QtODY0YS00MmYwLTgxOGYtZGQ0ODA0ODQwZGQ2 LzEvRm1WZVZaWDFvOEJ4d1NzWG5ia25uY2ZiQ1JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHbtENtnU wFpinhLuh8C5FWSVWlSYUse9nC9d7KECfIiH8AuAUogJLgPFDb3VqA//00g8G+Bb +LTKPK6T8IqXkiVuT5sN2MPORpguH87gExJRvqCUF0z8iYVswTPvfaPx0PHG0f9Q hhvO+RtGJuk9mHXrMyObV7OLDwxraMOkqagJPnxkQ/OHcsOoVHievNzYwR3B+DPO vrRHSGvmSfHilJXHSGvjsiZSoXXddpL82lIeBPj5IqbywqcOzRZiTATe/V0cauz/ SwuNO+Hkdfaryctq942WGY6bJm8k5OQCu76UQ9hpzVkp1RAiEBKx1KKO/qvjkGI2 +mWzXF3+0Qsw4g== -----END CERTIFICATE-----Generated at Mon Jan 26 02:26:23 2026 by rpki-client