This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft File: FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft (raw, json) Hash identifier: B0HfSAaGOGVoJnjUOD62HF0DrtiKWO/XVu+nM6z17kw= Subject key identifier: 74:4B:E3:BC:CC:29:21:29:BB:9E:6B:A5:26:7D:A8:52:15:6C:01:90 Authority key identifier: 14:D6:92:7B:5A:75:B7:66:9B:1F:E2:AC:8F:DC:7B:61:37:7C:91:01 Certificate issuer: /CN=14d6927b5a75b7669b1fe2ac8fdc7b61377c9101 Certificate serial: 019BF619A655FA043D7957E55AF23DC1E2DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft Manifest number: 0DEF Signing time: Sun 25 Jan 2026 17:00:34 +0000 Manifest this update: Sun 25 Jan 2026 17:00:34 +0000 Manifest next update: Mon 26 Jan 2026 17:00:34 +0000 Files and hashes: 1: FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl (hash: LkxXxwciHsJasRermMPeg+n1LCWC6AHSjbGQmi9/0Ro=) 2: jjz54tPWsuXjHrsRR3lGh9uQu6o.roa (hash: 02vfAYgOdeQNaFi8ZY69MJehPQkiX3iDuuBOrYgPuMM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:a6:55:fa:04:3d:79:57:e5:5a:f2:3d:c1:e2:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14d6927b5a75b7669b1fe2ac8fdc7b61377c9101 Validity Not Before: Jan 25 17:00:34 2026 GMT Not After : Jan 26 17:00:34 2026 GMT Subject: CN=744be3bccc292129bb9e6ba5267da852156c0190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:47:d0:75:7b:c2:55:15:5d:e0:f8:6c:44:c9: 43:3b:97:32:60:c5:52:8e:af:ae:eb:9c:c6:bb:c7: 6e:3a:5a:9e:79:f3:2c:18:a8:00:0a:13:fd:90:23: 3e:da:3b:fd:f1:db:ff:51:77:60:2f:fb:66:db:75: 02:06:b8:b8:a1:8f:85:9d:c4:d0:06:df:de:3f:86: 34:53:6a:ba:ef:00:13:df:80:fb:74:c6:12:d5:78: d5:1c:e3:17:9d:d3:bf:4a:53:fe:47:5e:4d:bc:23: 42:30:19:c8:cf:fa:5b:b3:b4:a3:cb:f5:14:d3:20: 99:be:07:cf:04:ef:c4:1b:e4:92:05:6c:c7:cc:6e: 23:27:36:d8:2d:65:8e:5e:eb:47:ba:df:35:fd:e3: 9b:64:00:ee:ac:d9:90:19:ee:2d:49:13:3e:2c:b9: d4:78:1a:0c:01:35:e3:ee:ad:ad:c6:79:23:bc:db: 2d:26:7c:a6:b8:d1:8d:f2:79:e1:f2:1c:02:67:7f: cc:a3:e6:9d:7e:76:f3:40:b1:bc:6e:65:af:15:49: 9a:18:09:07:70:89:9f:b3:99:95:21:de:34:08:b5: 4b:19:bc:89:a2:11:6b:f3:63:96:8f:17:66:46:89: f9:11:a6:e8:6d:84:3f:5f:9e:2a:88:83:5b:eb:63: 4c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:4B:E3:BC:CC:29:21:29:BB:9E:6B:A5:26:7D:A8:52:15:6C:01:90 X509v3 Authority Key Identifier: keyid:14:D6:92:7B:5A:75:B7:66:9B:1F:E2:AC:8F:DC:7B:61:37:7C:91:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:49:50:51:fb:78:77:9b:3f:53:ed:af:96:62:80:c6:f7:af: 5c:c8:f1:cd:4e:0b:14:a0:fd:ec:3f:5f:90:90:44:2c:ca:71: e9:bd:c0:b9:5b:a1:84:7f:d1:5a:19:c9:8c:06:bd:02:1f:9d: 0c:9f:b6:11:49:2b:df:1f:99:97:ac:59:cf:be:24:7f:7b:c1: d8:1f:ed:a6:43:97:30:73:20:1b:13:7b:7d:d1:cd:a9:7b:34: 74:1a:e2:bc:b1:35:1a:4b:75:f9:b9:7b:3f:f1:87:17:31:eb: 79:d9:df:46:29:35:d6:b3:33:d9:da:12:6b:2c:11:fb:9b:be: 4b:e6:c5:9d:b3:77:62:60:cc:63:92:a6:4a:b6:fd:7f:de:61: 29:bf:18:75:d8:04:5e:6a:1d:e2:da:fa:6c:e8:37:ee:6f:0a: 00:07:49:ef:18:80:f2:10:b6:ef:c2:6b:28:20:a9:e4:57:08: 86:0d:c0:bc:b2:a5:cc:a7:a0:21:3b:bd:cb:b3:72:15:49:22: ae:9d:98:fa:60:6d:35:0a:1a:52:58:c0:aa:a7:7f:51:95:51: 91:d7:a3:51:b4:86:01:f4:bc:85:29:a2:8b:7e:a5:ba:26:83: f5:d9:54:0b:64:a0:a7:83:e0:1b:ab:85:4a:9d:a9:2c:bf:a5: 31:94:13:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GaZV+gQ9eVflWvI9weLbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0ZDY5MjdiNWE3NWI3NjY5YjFmZTJhYzhmZGM3YjYxMzc3 YzkxMDEwHhcNMjYwMTI1MTcwMDM0WhcNMjYwMTI2MTcwMDM0WjAzMTEwLwYDVQQD Eyg3NDRiZTNiY2NjMjkyMTI5YmI5ZTZiYTUyNjdkYTg1MjE1NmMwMTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0fQdXvCVRVd4PhsRMlDO5cyYMVS jq+u65zGu8duOlqeefMsGKgAChP9kCM+2jv98dv/UXdgL/tm23UCBri4oY+FncTQ Bt/eP4Y0U2q67wAT34D7dMYS1XjVHOMXndO/SlP+R15NvCNCMBnIz/pbs7Sjy/UU 0yCZvgfPBO/EG+SSBWzHzG4jJzbYLWWOXutHut81/eObZADurNmQGe4tSRM+LLnU eBoMATXj7q2txnkjvNstJnymuNGN8nnh8hwCZ3/Mo+adfnbzQLG8bmWvFUmaGAkH cImfs5mVId40CLVLGbyJohFr82OWjxdmRon5EabobYQ/X54qiINb62NMMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHRL47zMKSEpu55rpSZ9qFIVbAGQMB8GA1UdIwQY MBaAFBTWkntadbdmmx/irI/ce2E3fJEBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRk5hU2UxcDF0MmFiSC1Lc2o5eDdZVGQ4a1FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9hM2Q4NWUtNDMzNS00MjVhLWIwZjYt OGY1NGFiMTM0ZDgzLzEvRk5hU2UxcDF0MmFiSC1Lc2o5eDdZVGQ4a1FFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9hM2Q4NWUtNDMzNS00MjVhLWIwZjYtOGY1NGFiMTM0ZDgz LzEvRk5hU2UxcDF0MmFiSC1Lc2o5eDdZVGQ4a1FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMUlQUft4 d5s/U+2vlmKAxvevXMjxzU4LFKD97D9fkJBELMpx6b3AuVuhhH/RWhnJjAa9Ah+d DJ+2EUkr3x+Zl6xZz74kf3vB2B/tpkOXMHMgGxN7fdHNqXs0dBrivLE1Gkt1+bl7 P/GHFzHrednfRik11rMz2doSaywR+5u+S+bFnbN3YmDMY5KmSrb9f95hKb8YddgE Xmod4tr6bOg37m8KAAdJ7xiA8hC278JrKCCp5FcIhg3AvLKlzKegITu9y7NyFUki rp2Y+mBtNQoaUljAqqd/UZVRkdejUbSGAfS8hSmii36luiaD9dlUC2Sgp4PgG6uF Sp2pLL+lMZQTOw== -----END CERTIFICATE-----Generated at Sun Jan 25 21:10:19 2026 by rpki-client