This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft File: FNlKazCSDR96LRUXG1CPkiZkduM.mft (raw, json) Hash identifier: EYmBFjd5dFAZ439GXbOdpf+YtBnq9CfheQJ3MXqAqDA= Subject key identifier: 68:6A:60:94:3F:7D:1E:08:3C:49:8F:96:BF:73:6F:F5:08:CF:6B:C5 Authority key identifier: 14:D9:4A:6B:30:92:0D:1F:7A:2D:15:17:1B:50:8F:92:26:64:76:E3 Certificate issuer: /CN=14d94a6b30920d1f7a2d15171b508f92266476e3 Certificate serial: 019BF72CEE467240EAA66B2DE6DFBE079294 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft Manifest number: 177A Signing time: Sun 25 Jan 2026 22:01:15 +0000 Manifest this update: Sun 25 Jan 2026 22:01:15 +0000 Manifest next update: Mon 26 Jan 2026 22:01:15 +0000 Files and hashes: 1: FNlKazCSDR96LRUXG1CPkiZkduM.crl (hash: NMzunxQRXo13Ut+JVDs3+JHsN07Jkn8KCpJAFWIW4OY=) 2: LYeebYhXQ4ozTkOxDiNrlwHyTZs.roa (hash: l6hu36oMQogqFFPGyf6pGKkrBP0BChtip7eb8I8e7yY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:ee:46:72:40:ea:a6:6b:2d:e6:df:be:07:92:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14d94a6b30920d1f7a2d15171b508f92266476e3 Validity Not Before: Jan 25 22:01:15 2026 GMT Not After : Jan 26 22:01:15 2026 GMT Subject: CN=686a60943f7d1e083c498f96bf736ff508cf6bc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:14:36:7e:d2:64:37:09:57:51:a5:bf:d8:71: 34:85:dd:46:ad:c8:50:94:82:bb:29:84:ca:54:83: 27:34:67:fa:87:21:f3:51:f5:66:4d:c5:6a:aa:1f: 06:bd:4b:8e:86:84:b9:ec:81:4e:b3:58:d9:a5:4a: 77:17:af:47:94:58:1e:7a:7e:b2:13:d4:29:04:2e: 64:4c:b2:05:38:3b:f9:6a:f1:7e:68:a3:a7:e8:a9: 8c:d9:f8:4d:fb:dc:82:2a:0c:eb:6f:ec:74:bd:88: 6a:85:11:8d:66:c4:2c:a6:a9:95:9f:51:47:e6:9b: 41:0c:c5:95:22:5e:43:3f:f9:3b:f3:11:eb:58:60: e3:a5:a0:d5:a3:95:85:7e:3b:cd:a5:2d:5e:56:07: 9e:e6:79:f0:5b:49:fd:4e:38:ca:43:ba:1f:bd:41: 7c:32:ac:6b:b3:a1:63:e6:fd:16:83:98:8b:54:17: d2:99:75:b2:d6:6c:20:92:d6:78:c8:e8:6b:0b:fc: 57:84:81:08:80:aa:16:28:7f:8c:b5:ad:a7:03:46: 8d:ff:fd:09:c2:54:5e:0e:e8:70:70:89:f1:3f:7e: b5:09:e6:d5:af:e1:ad:c1:2f:55:6a:6d:fe:71:d9: a7:b5:57:64:48:09:6b:17:9b:27:94:aa:91:08:e5: 1c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:6A:60:94:3F:7D:1E:08:3C:49:8F:96:BF:73:6F:F5:08:CF:6B:C5 X509v3 Authority Key Identifier: keyid:14:D9:4A:6B:30:92:0D:1F:7A:2D:15:17:1B:50:8F:92:26:64:76:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:32:9e:56:71:60:bc:b6:aa:b3:23:90:f8:0a:10:b1:56:54: 41:7f:5d:89:b9:12:92:ef:79:eb:40:09:20:1b:ff:c6:68:0d: a2:3a:ed:c9:fc:f3:c7:a2:1f:26:4a:ba:ab:71:25:6d:17:31: ef:dc:5e:e6:f9:78:3a:fd:b6:d6:72:76:79:5a:89:ae:4b:ef: 92:73:93:bb:75:e8:cf:87:f5:dd:e9:18:98:4d:20:c2:5d:1c: a7:31:bc:79:2d:43:f0:2d:63:f6:e3:40:43:6e:4f:45:c6:b7: 40:c0:2a:30:b1:7e:b4:37:04:e0:df:03:c2:8a:40:56:da:ba: 3b:b5:9d:a6:e5:a6:a1:7a:06:e8:01:b2:0c:d4:30:67:1e:9c: 03:50:d7:7f:b1:b2:b6:dd:3f:fe:ce:c6:c9:43:dc:c9:e9:ce: 2e:d0:d5:ec:6d:cd:43:72:6b:47:b6:ac:d6:3e:19:72:3d:01: 81:94:57:c8:15:86:85:71:d5:29:e3:2a:3a:d1:a5:d8:ff:4a: 96:46:1c:6b:19:72:eb:57:af:9e:98:9c:94:fd:17:c7:2e:5a: 2f:cf:ff:63:4d:2c:3d:61:3f:7c:39:cd:a1:0b:8f:67:ef:c2: d8:0c:38:b5:36:e2:9d:d8:ee:51:4b:66:ae:50:75:ba:80:9a: 99:68:49:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LO5GckDqpmst5t++B5KUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0ZDk0YTZiMzA5MjBkMWY3YTJkMTUxNzFiNTA4ZjkyMjY2 NDc2ZTMwHhcNMjYwMTI1MjIwMTE1WhcNMjYwMTI2MjIwMTE1WjAzMTEwLwYDVQQD Eyg2ODZhNjA5NDNmN2QxZTA4M2M0OThmOTZiZjczNmZmNTA4Y2Y2YmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RQ2ftJkNwlXUaW/2HE0hd1GrchQ lIK7KYTKVIMnNGf6hyHzUfVmTcVqqh8GvUuOhoS57IFOs1jZpUp3F69HlFgeen6y E9QpBC5kTLIFODv5avF+aKOn6KmM2fhN+9yCKgzrb+x0vYhqhRGNZsQspqmVn1FH 5ptBDMWVIl5DP/k78xHrWGDjpaDVo5WFfjvNpS1eVgee5nnwW0n9TjjKQ7ofvUF8 Mqxrs6Fj5v0Wg5iLVBfSmXWy1mwgktZ4yOhrC/xXhIEIgKoWKH+Mta2nA0aN//0J wlReDuhwcInxP361CebVr+GtwS9Vam3+cdmntVdkSAlrF5snlKqRCOUcqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGhqYJQ/fR4IPEmPlr9zb/UIz2vFMB8GA1UdIwQY MBaAFBTZSmswkg0fei0VFxtQj5ImZHbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRk5sS2F6Q1NEUjk2TFJVWEcxQ1BraVprZHVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9lNWQ1ZWItYWRhMC00ZDVjLTg2NjQt ZjJiMjJjNjlkNWZjLzEvRk5sS2F6Q1NEUjk2TFJVWEcxQ1BraVprZHVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9lNWQ1ZWItYWRhMC00ZDVjLTg2NjQtZjJiMjJjNjlkNWZj LzEvRk5sS2F6Q1NEUjk2TFJVWEcxQ1BraVprZHVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJDKeVnFg vLaqsyOQ+AoQsVZUQX9dibkSku9560AJIBv/xmgNojrtyfzzx6IfJkq6q3ElbRcx 79xe5vl4Ov221nJ2eVqJrkvvknOTu3Xoz4f13ekYmE0gwl0cpzG8eS1D8C1j9uNA Q25PRca3QMAqMLF+tDcE4N8DwopAVtq6O7WdpuWmoXoG6AGyDNQwZx6cA1DXf7Gy tt0//s7GyUPcyenOLtDV7G3NQ3JrR7as1j4Zcj0BgZRXyBWGhXHVKeMqOtGl2P9K lkYcaxly61evnpiclP0Xxy5aL8//Y00sPWE/fDnNoQuPZ+/C2Aw4tTbindjuUUtm rlB1uoCamWhJLQ== -----END CERTIFICATE-----Generated at Mon Jan 26 05:52:27 2026 by rpki-client