This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/FTJBXDGfrWWHW9GqA1pViIzrcz4.mft File: FTJBXDGfrWWHW9GqA1pViIzrcz4.mft (raw, json) Hash identifier: AoSUHsvDpRuoFK5YXj6wlKVfEe9sWa2DLOsGH2u+qfg= Subject key identifier: 49:23:B6:79:B7:F9:27:DE:03:21:32:51:0C:43:60:4A:B3:ED:D0:47 Authority key identifier: 15:32:41:5C:31:9F:AD:65:87:5B:D1:AA:03:5A:55:88:8C:EB:73:3E Certificate issuer: /CN=1532415c319fad65875bd1aa035a55888ceb733e Certificate serial: 019BF2AAEB43FAC08EE55DA94D55C83B7CEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTJBXDGfrWWHW9GqA1pViIzrcz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/FTJBXDGfrWWHW9GqA1pViIzrcz4.mft Manifest number: 17C1 Signing time: Sun 25 Jan 2026 01:00:46 +0000 Manifest this update: Sun 25 Jan 2026 01:00:46 +0000 Manifest next update: Mon 26 Jan 2026 01:00:46 +0000 Files and hashes: 1: FTJBXDGfrWWHW9GqA1pViIzrcz4.crl (hash: IRNfMYcBYyOg7d3zWbrYZpe3jsOPSWM/BEwNStmvWnk=) 2: gAwSKHbFYp1R0rXy4HL7BwP5ZEk.roa (hash: MyfIsufvzyrn5zaFEUf1MX96j9I2a+9VKXg9iJpm1hM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/FTJBXDGfrWWHW9GqA1pViIzrcz4.crl rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/FTJBXDGfrWWHW9GqA1pViIzrcz4.mft rsync://rpki.ripe.net/repository/DEFAULT/FTJBXDGfrWWHW9GqA1pViIzrcz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:aa:eb:43:fa:c0:8e:e5:5d:a9:4d:55:c8:3b:7c:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1532415c319fad65875bd1aa035a55888ceb733e Validity Not Before: Jan 25 01:00:46 2026 GMT Not After : Jan 26 01:00:46 2026 GMT Subject: CN=4923b679b7f927de032132510c43604ab3edd047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:a2:2a:dd:ca:4f:0f:f9:7c:60:e8:78:66:88: 93:f4:e6:71:49:5c:16:f2:a4:c3:e8:91:e0:6a:f5: 1c:85:b3:3e:b4:f3:2c:5b:b6:66:8a:b1:db:3e:fd: 73:3e:35:15:19:ec:2f:b8:e2:c3:19:eb:ad:6f:e5: 89:22:dc:71:2e:12:a6:0e:c4:16:b6:e2:61:24:3b: 5b:c4:94:23:67:1a:70:76:59:a6:de:53:a1:67:60: fa:21:53:9b:10:de:4d:58:01:9b:5a:60:13:50:88: 97:79:7e:60:6e:81:55:84:f0:14:b4:63:ce:b7:d9: 8f:cc:be:f7:3e:af:cd:50:3a:17:ba:c9:27:5f:65: eb:19:d6:6d:12:e4:86:6a:89:69:d2:09:7c:98:3a: c7:94:30:8c:a8:2a:83:86:bb:e1:8f:f5:60:d9:e2: 98:5d:73:c8:7b:6a:14:36:d4:2e:50:4f:2e:79:d1: d2:45:ef:72:dc:ab:73:00:ba:d6:57:df:69:2b:4d: 27:02:70:e5:fa:07:4a:c1:f9:91:10:35:aa:bf:d4: c4:d1:f9:1a:ae:26:33:77:a8:95:e3:0b:bd:e7:85: ae:be:9f:97:ca:cc:fb:fb:d0:85:65:ae:05:bc:47: 96:5a:1c:24:4f:d7:6a:03:2b:bc:12:b8:e6:31:79: 84:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:23:B6:79:B7:F9:27:DE:03:21:32:51:0C:43:60:4A:B3:ED:D0:47 X509v3 Authority Key Identifier: keyid:15:32:41:5C:31:9F:AD:65:87:5B:D1:AA:03:5A:55:88:8C:EB:73:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTJBXDGfrWWHW9GqA1pViIzrcz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/FTJBXDGfrWWHW9GqA1pViIzrcz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/FTJBXDGfrWWHW9GqA1pViIzrcz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:47:0f:b5:7f:d1:c1:e7:d7:c4:3b:2c:da:76:d9:96:67:83: 44:74:b4:4e:7e:92:dd:f8:a6:78:cb:29:f3:3d:38:94:38:54: 66:61:b7:50:0f:e1:54:99:51:c7:c3:f2:45:08:20:16:a0:a3: 3c:de:8a:35:0a:c8:a4:1b:cb:52:a7:5a:35:1d:73:c6:97:6d: 93:be:5a:c5:2a:9d:0c:ca:d6:d6:14:63:e3:a4:92:62:8f:5a: da:e2:1a:a8:6d:87:fd:b3:62:2d:63:4d:f5:82:c6:db:a0:4e: fd:fb:0e:bf:dd:8b:ab:37:da:a2:18:42:4d:b0:07:54:25:1f: 8e:2c:f7:3b:fb:5d:ea:5b:c6:b1:5c:97:76:66:02:34:6f:5f: 25:8b:7c:73:92:45:59:5e:41:74:bf:7f:46:23:57:5c:3e:d5: 90:76:9a:c5:f9:d1:c8:b5:27:60:38:2a:cd:2b:73:7c:ae:d1: 52:b9:af:6c:77:47:ba:6c:24:c6:54:d5:74:fa:b9:5c:bd:e2: 36:dc:d4:8c:1f:9f:97:cc:ed:c3:3b:ad:16:82:90:8f:7e:37: df:70:c8:a2:d7:98:2f:a4:af:ec:f8:5a:6b:31:d2:c2:1f:a3: 40:00:fd:cb:a4:8e:6d:99:b5:90:29:d7:fc:47:7a:15:8b:eb: b1:84:d4:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvyqutD+sCO5V2pTVXIO3zrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1MzI0MTVjMzE5ZmFkNjU4NzViZDFhYTAzNWE1NTg4OGNl YjczM2UwHhcNMjYwMTI1MDEwMDQ2WhcNMjYwMTI2MDEwMDQ2WjAzMTEwLwYDVQQD Eyg0OTIzYjY3OWI3ZjkyN2RlMDMyMTMyNTEwYzQzNjA0YWIzZWRkMDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9aIq3cpPD/l8YOh4ZoiT9OZxSVwW 8qTD6JHgavUchbM+tPMsW7ZmirHbPv1zPjUVGewvuOLDGeutb+WJItxxLhKmDsQW tuJhJDtbxJQjZxpwdlmm3lOhZ2D6IVObEN5NWAGbWmATUIiXeX5gboFVhPAUtGPO t9mPzL73Pq/NUDoXusknX2XrGdZtEuSGaolp0gl8mDrHlDCMqCqDhrvhj/Vg2eKY XXPIe2oUNtQuUE8uedHSRe9y3KtzALrWV99pK00nAnDl+gdKwfmREDWqv9TE0fka riYzd6iV4wu954Wuvp+Xysz7+9CFZa4FvEeWWhwkT9dqAyu8ErjmMXmEUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEkjtnm3+SfeAyEyUQxDYEqz7dBHMB8GA1UdIwQY MBaAFBUyQVwxn61lh1vRqgNaVYiM63M+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlRKQlhER2ZyV1dIVzlHcUExcFZpSXpyY3o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS81ZDVkNDItZTg0My00NDExLTkwZjkt MDE1Zjc2NjRiOWQ3LzEvRlRKQlhER2ZyV1dIVzlHcUExcFZpSXpyY3o0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS81ZDVkNDItZTg0My00NDExLTkwZjktMDE1Zjc2NjRiOWQ3 LzEvRlRKQlhER2ZyV1dIVzlHcUExcFZpSXpyY3o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWUcPtX/R wefXxDss2nbZlmeDRHS0Tn6S3fimeMsp8z04lDhUZmG3UA/hVJlRx8PyRQggFqCj PN6KNQrIpBvLUqdaNR1zxpdtk75axSqdDMrW1hRj46SSYo9a2uIaqG2H/bNiLWNN 9YLG26BO/fsOv92LqzfaohhCTbAHVCUfjiz3O/td6lvGsVyXdmYCNG9fJYt8c5JF WV5BdL9/RiNXXD7VkHaaxfnRyLUnYDgqzStzfK7RUrmvbHdHumwkxlTVdPq5XL3i NtzUjB+fl8ztwzutFoKQj34333DIoteYL6Sv7PhaazHSwh+jQAD9y6SObZm1kCnX /Ed6FYvrsYTUjw== -----END CERTIFICATE-----Generated at Sun Jan 25 11:46:30 2026 by rpki-client