This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.mft File: FO-9HV4axzX28jUJzyoOtKH5tOk.mft (raw, json) Hash identifier: 5HdlSau84spncuZPHVSoplFZ2u3dctk0FiTlBIgtvZg= Subject key identifier: 3A:EF:92:BA:89:2C:1E:F8:F4:16:CB:14:DC:11:F7:CC:CB:A7:28:AE Authority key identifier: 14:EF:BD:1D:5E:1A:C7:35:F6:F2:35:09:CF:2A:0E:B4:A1:F9:B4:E9 Certificate issuer: /CN=14efbd1d5e1ac735f6f23509cf2a0eb4a1f9b4e9 Certificate serial: 019BF72CCE3B3FE3CEDEE8CF3798C03C3C20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FO-9HV4axzX28jUJzyoOtKH5tOk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.mft Manifest number: 1778 Signing time: Sun 25 Jan 2026 22:01:07 +0000 Manifest this update: Sun 25 Jan 2026 22:01:07 +0000 Manifest next update: Mon 26 Jan 2026 22:01:07 +0000 Files and hashes: 1: FO-9HV4axzX28jUJzyoOtKH5tOk.crl (hash: gdf05zN6RSAT1yipaLFXiygsAwaCl9uMiLO11/xDccU=) 2: i34QcCXHBTz4i7dARxhxMvU6cMI.roa (hash: cLmYe2PhCggVytEcDwfmBz/hTRq+Jq4kQ9LDTbCEPVs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.crl rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.mft rsync://rpki.ripe.net/repository/DEFAULT/FO-9HV4axzX28jUJzyoOtKH5tOk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:ce:3b:3f:e3:ce:de:e8:cf:37:98:c0:3c:3c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14efbd1d5e1ac735f6f23509cf2a0eb4a1f9b4e9 Validity Not Before: Jan 25 22:01:07 2026 GMT Not After : Jan 26 22:01:07 2026 GMT Subject: CN=3aef92ba892c1ef8f416cb14dc11f7cccba728ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f9:06:8d:6c:e9:3c:7b:ac:97:de:9b:03:df: 15:73:4e:6d:64:c0:c5:bd:6e:fd:e7:5f:42:cd:35: 62:1b:93:f2:94:33:4e:22:35:e1:0e:a8:03:4d:79: 3b:c4:07:bf:31:ad:ba:f9:b8:d0:aa:e2:07:2c:6e: be:41:82:d4:cc:20:83:de:6d:90:04:ef:2b:32:75: 25:b0:98:2f:c3:97:56:9f:26:53:7d:9b:bb:45:e5: 02:1f:ad:a4:9e:13:31:0c:ba:31:39:cd:94:d3:91: 29:cd:c9:e1:61:99:09:da:49:a7:57:61:11:21:4f: 92:1a:b5:e1:15:7b:a5:0e:4e:2a:50:e8:a5:69:ee: 72:93:a4:fb:f1:da:ce:52:c1:95:b4:04:f6:03:c2: 37:91:75:28:9b:8e:64:08:98:32:38:98:28:9b:80: 93:82:9c:ba:10:3b:70:5d:36:d4:b5:3e:64:f5:ce: 24:25:4d:4e:42:5c:3c:40:56:47:97:45:bd:47:a9: 17:98:9c:8b:3f:d3:e9:d2:11:43:64:c0:f4:bb:e3: 40:81:c7:b5:62:bb:42:d5:a8:b1:56:da:63:2a:8f: 7c:db:27:1e:15:58:5f:c0:de:9f:88:a9:71:6a:96: c3:45:44:2c:27:9b:9d:cc:8b:d7:c0:2a:13:69:08: 45:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:EF:92:BA:89:2C:1E:F8:F4:16:CB:14:DC:11:F7:CC:CB:A7:28:AE X509v3 Authority Key Identifier: keyid:14:EF:BD:1D:5E:1A:C7:35:F6:F2:35:09:CF:2A:0E:B4:A1:F9:B4:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FO-9HV4axzX28jUJzyoOtKH5tOk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:cc:3a:02:6a:fa:23:69:93:4f:0c:8a:97:66:7b:5a:27:eb: 99:5f:13:e0:7f:3c:d3:82:7e:ec:e5:e4:ec:ac:e4:a6:03:13: 4a:c6:7a:da:04:fc:4b:3c:75:ca:a4:fe:ac:fa:0a:ec:53:0d: 26:d8:23:1e:14:c0:67:00:3b:96:9b:da:e8:13:56:58:e3:1f: 56:35:63:b8:e7:b0:6d:74:97:e4:ce:77:e2:31:cd:69:74:01: e7:43:24:62:0f:df:33:d3:51:f8:9a:d4:4d:49:4d:9f:83:8e: 36:0c:1f:5e:14:06:5a:10:ed:9b:03:5e:f6:82:3b:44:83:4e: 89:0c:b8:a0:d5:db:37:f2:64:fe:70:05:20:51:21:7d:e7:97: 08:aa:1b:de:35:0b:1e:18:38:47:4b:63:ef:50:92:7b:9f:3a: 4d:7b:a8:1b:77:d2:91:d2:8b:ca:c8:6d:a9:ce:be:4b:f1:c2: f3:24:f8:fc:71:5b:bc:ee:3b:cc:9c:31:29:e2:fb:22:9b:0e: fc:b9:78:9e:c9:33:6f:be:cc:d7:95:b8:fc:30:fb:c3:c0:16: ee:31:00:15:69:90:df:cb:96:c0:55:70:28:92:11:b8:c9:6d: 5e:c4:2e:49:be:8b:01:2d:64:fe:7c:19:83:91:22:7e:83:fb: 0c:f4:70:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LM47P+PO3ujPN5jAPDwgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0ZWZiZDFkNWUxYWM3MzVmNmYyMzUwOWNmMmEwZWI0YTFm OWI0ZTkwHhcNMjYwMTI1MjIwMTA3WhcNMjYwMTI2MjIwMTA3WjAzMTEwLwYDVQQD EygzYWVmOTJiYTg5MmMxZWY4ZjQxNmNiMTRkYzExZjdjY2NiYTcyOGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/kGjWzpPHusl96bA98Vc05tZMDF vW79519CzTViG5PylDNOIjXhDqgDTXk7xAe/Ma26+bjQquIHLG6+QYLUzCCD3m2Q BO8rMnUlsJgvw5dWnyZTfZu7ReUCH62knhMxDLoxOc2U05EpzcnhYZkJ2kmnV2ER IU+SGrXhFXulDk4qUOilae5yk6T78drOUsGVtAT2A8I3kXUom45kCJgyOJgom4CT gpy6EDtwXTbUtT5k9c4kJU1OQlw8QFZHl0W9R6kXmJyLP9Pp0hFDZMD0u+NAgce1 YrtC1aixVtpjKo982yceFVhfwN6fiKlxapbDRUQsJ5udzIvXwCoTaQhF3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDrvkrqJLB749BbLFNwR98zLpyiuMB8GA1UdIwQY MBaAFBTvvR1eGsc19vI1Cc8qDrSh+bTpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRk8tOUhWNGF4elgyOGpVSnp5b090S0g1dE9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8zOGVjNzYtZTZhOS00MzI3LWIzMjIt NTBmMWE4NTg1ZjA5LzEvRk8tOUhWNGF4elgyOGpVSnp5b090S0g1dE9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS8zOGVjNzYtZTZhOS00MzI3LWIzMjItNTBmMWE4NTg1ZjA5 LzEvRk8tOUhWNGF4elgyOGpVSnp5b090S0g1dE9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcMw6Amr6 I2mTTwyKl2Z7WifrmV8T4H8804J+7OXk7KzkpgMTSsZ62gT8Szx1yqT+rPoK7FMN JtgjHhTAZwA7lpva6BNWWOMfVjVjuOewbXSX5M534jHNaXQB50MkYg/fM9NR+JrU TUlNn4OONgwfXhQGWhDtmwNe9oI7RINOiQy4oNXbN/Jk/nAFIFEhfeeXCKob3jUL Hhg4R0tj71CSe586TXuoG3fSkdKLyshtqc6+S/HC8yT4/HFbvO47zJwxKeL7IpsO /Ll4nskzb77M15W4/DD7w8AW7jEAFWmQ38uWwFVwKJIRuMltXsQuSb6LAS1k/nwZ g5EifoP7DPRw6w== -----END CERTIFICATE-----Generated at Mon Jan 26 06:24:08 2026 by rpki-client