This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft File: FQKvcT425SxxhmyKnr2s89him2g.mft (raw, json) Hash identifier: a5gUsYuiMKiCnUnZu1jjMbBh3pCQ12yeVK1xslbGPsk= Subject key identifier: 97:74:FE:C5:72:3D:AC:52:1C:93:04:FA:2D:67:7A:77:2D:AB:8C:61 Authority key identifier: 15:02:AF:71:3E:36:E5:2C:71:86:6C:8A:9E:BD:AC:F3:D8:62:9B:68 Certificate issuer: /CN=1502af713e36e52c71866c8a9ebdacf3d8629b68 Certificate serial: 019BF6BEF6ACB8E01274121DE585D1F1334F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft Manifest number: 17ED Signing time: Sun 25 Jan 2026 20:01:08 +0000 Manifest this update: Sun 25 Jan 2026 20:01:08 +0000 Manifest next update: Mon 26 Jan 2026 20:01:08 +0000 Files and hashes: 1: FQKvcT425SxxhmyKnr2s89him2g.crl (hash: R+6uIH43K019Lr/vk1TwtwFC9EAsA5/hIblIxD3Bgms=) 2: P1yj3gjDhxChJcFO8Skm9pkXt48.roa (hash: xfZq4sva3XVYvdr878z0V/BBEkb+f01RPeig0MyhrEo=) 3: ocI1Tj5xjc77HCxaih4HTT8zJWQ.roa (hash: 7GTm6dNpL+1aKtBHlqS15Lk5zVrRS8hQJ81O+NY5Eh4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.crl rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:f6:ac:b8:e0:12:74:12:1d:e5:85:d1:f1:33:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1502af713e36e52c71866c8a9ebdacf3d8629b68 Validity Not Before: Jan 25 20:01:08 2026 GMT Not After : Jan 26 20:01:08 2026 GMT Subject: CN=9774fec5723dac521c9304fa2d677a772dab8c61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:49:28:21:58:6e:4a:75:2f:50:5d:d8:7a:7f: 6a:2a:1e:08:09:3c:b9:e5:43:51:b4:de:d7:50:4f: bd:4b:1c:4d:f0:83:d1:9d:87:57:cc:b5:26:f1:95: 0c:26:2d:d3:9a:27:83:b4:74:35:8e:44:04:01:29: dc:2a:1b:70:7f:d6:c4:13:d7:f0:94:81:f1:4d:16: 5a:89:32:1e:9d:0f:1f:7e:2b:a7:88:53:e9:5c:b5: 05:22:05:d8:70:28:5d:84:5f:8a:a3:0b:4a:68:32: 5f:cf:be:f7:45:e3:4a:37:06:a5:29:5f:8d:0e:90: 67:67:b1:bc:02:1d:4f:31:99:b4:65:79:e7:83:83: bc:c0:aa:aa:c4:e2:d3:ed:40:16:77:34:68:a8:ee: 5b:c5:76:f1:6d:31:9d:bf:91:ba:b4:fd:eb:39:04: a5:e7:ec:25:37:90:35:ff:fd:8e:6f:b5:1a:16:e0: 71:7c:93:b9:3c:52:a9:b7:00:48:57:af:20:6c:a6: 2d:23:e9:71:87:81:15:d5:ae:df:b6:cf:2a:2b:06: bd:a8:f9:0d:91:8e:a7:92:35:b2:b1:54:42:6d:9f: 89:81:f2:91:4a:a4:0c:c4:ac:b7:60:4b:1b:f7:f3: e9:7f:a8:06:02:c2:b2:d6:28:40:0a:41:61:e5:cf: 6e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:74:FE:C5:72:3D:AC:52:1C:93:04:FA:2D:67:7A:77:2D:AB:8C:61 X509v3 Authority Key Identifier: keyid:15:02:AF:71:3E:36:E5:2C:71:86:6C:8A:9E:BD:AC:F3:D8:62:9B:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:90:a5:c2:93:ad:24:8a:34:df:29:03:60:8c:10:34:04:2d: de:4d:fc:7c:da:c8:59:00:4b:a0:5d:51:20:ad:20:e1:b5:cb: 9c:55:ba:18:dd:17:a3:9a:4c:13:d5:88:00:ec:6b:53:98:c0: a5:a7:73:08:f6:62:d4:29:68:0e:dc:3f:4e:42:1c:d1:3c:ba: 11:2e:4a:4e:e7:a9:87:c2:4b:9d:d5:fd:f7:cf:ed:26:82:a3: 51:81:2f:0c:6b:5a:0b:41:5a:94:b5:a6:c5:23:1c:cf:29:ef: 71:e8:a3:e0:3f:09:42:f6:fa:7a:6b:97:4f:f2:0f:44:5b:d7: 2a:39:cd:7b:a1:9b:10:f0:f9:1c:d4:ff:40:cd:d7:16:52:4b: ab:e1:fc:39:d0:cb:af:92:7f:1f:96:d6:95:80:2b:eb:1a:f1: 1c:f2:7f:4c:ec:1c:5f:0b:92:8e:04:0b:c9:69:95:c8:2d:95: b8:2b:d1:5a:7c:f3:dd:6c:3b:56:b6:8d:f4:15:c9:b2:d7:91: 32:e5:5c:b6:b2:a1:4f:e2:df:0d:a7:25:57:eb:fb:f4:53:c9: f3:4a:ac:d5:60:f3:44:c1:73:17:fb:92:a0:e3:48:7a:c9:4d: d3:d8:88:03:fd:45:cf:b0:ee:4c:b1:9f:a3:3b:43:95:00:f3: 25:c1:3d:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vvasuOASdBId5YXR8TNPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1MDJhZjcxM2UzNmU1MmM3MTg2NmM4YTllYmRhY2YzZDg2 MjliNjgwHhcNMjYwMTI1MjAwMTA4WhcNMjYwMTI2MjAwMTA4WjAzMTEwLwYDVQQD Eyg5Nzc0ZmVjNTcyM2RhYzUyMWM5MzA0ZmEyZDY3N2E3NzJkYWI4YzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7EkoIVhuSnUvUF3Yen9qKh4ICTy5 5UNRtN7XUE+9SxxN8IPRnYdXzLUm8ZUMJi3TmieDtHQ1jkQEASncKhtwf9bEE9fw lIHxTRZaiTIenQ8ffiuniFPpXLUFIgXYcChdhF+KowtKaDJfz773ReNKNwalKV+N DpBnZ7G8Ah1PMZm0ZXnng4O8wKqqxOLT7UAWdzRoqO5bxXbxbTGdv5G6tP3rOQSl 5+wlN5A1//2Ob7UaFuBxfJO5PFKptwBIV68gbKYtI+lxh4EV1a7fts8qKwa9qPkN kY6nkjWysVRCbZ+JgfKRSqQMxKy3YEsb9/Ppf6gGAsKy1ihACkFh5c9uTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJd0/sVyPaxSHJME+i1nenctq4xhMB8GA1UdIwQY MBaAFBUCr3E+NuUscYZsip69rPPYYptoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlFLdmNUNDI1U3h4aG15S25yMnM4OWhpbTJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS85ZGNjMjUtNWIwYS00YzNlLTkxNDkt NWE4MjMwZTc2NDNhLzEvRlFLdmNUNDI1U3h4aG15S25yMnM4OWhpbTJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS85ZGNjMjUtNWIwYS00YzNlLTkxNDktNWE4MjMwZTc2NDNh LzEvRlFLdmNUNDI1U3h4aG15S25yMnM4OWhpbTJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeZClwpOt JIo03ykDYIwQNAQt3k38fNrIWQBLoF1RIK0g4bXLnFW6GN0Xo5pME9WIAOxrU5jA padzCPZi1CloDtw/TkIc0Ty6ES5KTueph8JLndX998/tJoKjUYEvDGtaC0FalLWm xSMczynvceij4D8JQvb6emuXT/IPRFvXKjnNe6GbEPD5HNT/QM3XFlJLq+H8OdDL r5J/H5bWlYAr6xrxHPJ/TOwcXwuSjgQLyWmVyC2VuCvRWnzz3Ww7VraN9BXJsteR MuVctrKhT+LfDaclV+v79FPJ80qs1WDzRMFzF/uSoONIeslN09iIA/1Fz7DuTLGf oztDlQDzJcE9PA== -----END CERTIFICATE-----Generated at Mon Jan 26 00:20:30 2026 by rpki-client