This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft File: FJD8Fzgt1gZqOOQjutstihjRwEU.mft (raw, json) Hash identifier: 1Em88OsOKclDHwploBHtmFyi/KFovdc51/B9l+lC59E= Subject key identifier: AA:17:C8:8C:F4:7B:7B:B5:2B:97:B3:90:C4:65:2F:DC:41:84:EC:5A Authority key identifier: 14:90:FC:17:38:2D:D6:06:6A:38:E4:23:BA:DB:2D:8A:18:D1:C0:45 Certificate issuer: /CN=1490fc17382dd6066a38e423badb2d8a18d1c045 Certificate serial: 019BF687CD5B29E749673CD391C466B4E1BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJD8Fzgt1gZqOOQjutstihjRwEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft Manifest number: 156B Signing time: Sun 25 Jan 2026 19:00:53 +0000 Manifest this update: Sun 25 Jan 2026 19:00:53 +0000 Manifest next update: Mon 26 Jan 2026 19:00:53 +0000 Files and hashes: 1: FJD8Fzgt1gZqOOQjutstihjRwEU.crl (hash: 2C5QUsDLuzkiad9/xh+MPt8Bsd1L+GBmNsILZqduCdc=) 2: jfn31bWoPt5u8J8dk_jaDuYtKVY.roa (hash: KodCP7xC+csniIon7z4178+lNkYaP00De8YC+4THaAc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.crl rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft rsync://rpki.ripe.net/repository/DEFAULT/FJD8Fzgt1gZqOOQjutstihjRwEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:cd:5b:29:e7:49:67:3c:d3:91:c4:66:b4:e1:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1490fc17382dd6066a38e423badb2d8a18d1c045 Validity Not Before: Jan 25 19:00:53 2026 GMT Not After : Jan 26 19:00:53 2026 GMT Subject: CN=aa17c88cf47b7bb52b97b390c4652fdc4184ec5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:89:5d:db:c3:f0:63:7e:14:26:dd:f9:93:1a: 3a:74:d6:af:f5:5a:6d:9b:3d:1c:c1:bd:3f:1b:7a: 81:fb:c4:be:fd:47:1b:e9:ab:4c:af:18:a0:b6:9e: 7b:e9:8b:0c:a5:ca:55:83:15:25:50:96:55:44:da: 34:d2:37:17:82:8b:83:b4:65:05:8f:d5:bb:f9:ec: f7:38:37:eb:92:53:0f:2d:19:68:9f:fd:c5:05:43: 91:be:07:24:c3:68:d0:75:3c:0f:7d:a7:16:d5:ac: aa:fa:07:6f:2a:65:5f:df:23:27:73:1a:e9:e5:4d: 3e:fe:79:7c:7c:59:ac:45:76:a9:ed:11:35:26:5b: cd:80:f3:e2:6e:d1:c1:73:5f:28:7e:0c:62:76:ca: 84:29:ff:0b:5b:4f:9c:7b:b8:c4:5a:54:48:5d:2a: 50:97:e5:6b:c4:60:78:08:37:12:39:ea:0c:f8:55: ec:c5:ee:9a:78:8e:d7:54:24:84:37:0b:8a:54:91: 9a:15:5f:db:8a:99:ba:c8:5e:1e:6a:ad:2d:78:93: 83:3b:cf:35:c1:00:88:92:9e:ce:ff:a2:eb:26:8f: b4:c2:9e:be:0c:4f:22:6a:94:5b:88:85:0c:05:7b: 04:07:c5:b2:c5:3a:57:ac:69:42:fb:f5:1e:dc:07: ba:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:17:C8:8C:F4:7B:7B:B5:2B:97:B3:90:C4:65:2F:DC:41:84:EC:5A X509v3 Authority Key Identifier: keyid:14:90:FC:17:38:2D:D6:06:6A:38:E4:23:BA:DB:2D:8A:18:D1:C0:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJD8Fzgt1gZqOOQjutstihjRwEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:71:33:da:ff:1c:77:6c:7d:04:83:a1:89:fc:e2:a1:47:e1: a0:7b:24:22:d7:7b:73:63:df:c9:d3:2a:56:ac:12:ec:a2:ac: ce:f3:2a:aa:40:57:d7:91:64:2f:1a:48:7d:f6:8a:b5:20:e5: ea:c4:3c:c9:6f:47:86:72:55:ab:85:e9:9a:7c:02:f3:72:fe: 22:b8:bf:f0:f1:69:de:be:fb:c8:87:85:b8:7b:15:f5:35:4d: cb:7e:9e:f7:b0:32:af:e4:0d:d5:24:81:35:ed:c1:57:09:65: 59:cb:1c:e7:6e:7d:9a:6a:de:40:f1:72:af:7a:bc:ee:e6:9e: 18:48:db:56:06:9f:5d:18:d8:6f:74:0c:fc:81:da:29:d2:b1: 96:62:de:26:f6:ef:31:c2:bc:a8:1b:92:81:33:5f:48:7e:b3: f6:4e:c2:dd:1d:08:ab:1e:86:dd:1c:76:82:a6:52:97:e9:e5: e1:b8:73:2f:8e:67:f4:c8:aa:62:b6:39:03:d3:7a:55:49:b0: 37:cf:e6:47:a0:0f:73:e7:5e:c1:99:68:8b:0d:d5:9f:4c:f4: 89:5a:b9:bd:91:52:96:43:30:11:e7:93:50:7e:d6:18:e9:72: c0:e8:9f:34:8a:ac:b1:49:ec:7e:47:fe:20:19:5d:a5:68:48: bf:7d:f4:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h81bKedJZzzTkcRmtOG8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0OTBmYzE3MzgyZGQ2MDY2YTM4ZTQyM2JhZGIyZDhhMThk MWMwNDUwHhcNMjYwMTI1MTkwMDUzWhcNMjYwMTI2MTkwMDUzWjAzMTEwLwYDVQQD EyhhYTE3Yzg4Y2Y0N2I3YmI1MmI5N2IzOTBjNDY1MmZkYzQxODRlYzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4ld28PwY34UJt35kxo6dNav9Vpt mz0cwb0/G3qB+8S+/Ucb6atMrxigtp576YsMpcpVgxUlUJZVRNo00jcXgouDtGUF j9W7+ez3ODfrklMPLRlon/3FBUORvgckw2jQdTwPfacW1ayq+gdvKmVf3yMncxrp 5U0+/nl8fFmsRXap7RE1JlvNgPPibtHBc18ofgxidsqEKf8LW0+ce7jEWlRIXSpQ l+VrxGB4CDcSOeoM+FXsxe6aeI7XVCSENwuKVJGaFV/bipm6yF4eaq0teJODO881 wQCIkp7O/6LrJo+0wp6+DE8iapRbiIUMBXsEB8WyxTpXrGlC+/Ue3Ae6oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKoXyIz0e3u1K5ezkMRlL9xBhOxaMB8GA1UdIwQY MBaAFBSQ/Bc4LdYGajjkI7rbLYoY0cBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkpEOEZ6Z3QxZ1pxT09RanV0c3RpaGpSd0VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS85NmViNzAtMGQwNC00NzZmLTgyNWUt NTU2Y2MyZTA3MWRjLzEvRkpEOEZ6Z3QxZ1pxT09RanV0c3RpaGpSd0VVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS85NmViNzAtMGQwNC00NzZmLTgyNWUtNTU2Y2MyZTA3MWRj LzEvRkpEOEZ6Z3QxZ1pxT09RanV0c3RpaGpSd0VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY3Ez2v8c d2x9BIOhifzioUfhoHskItd7c2PfydMqVqwS7KKszvMqqkBX15FkLxpIffaKtSDl 6sQ8yW9HhnJVq4XpmnwC83L+Iri/8PFp3r77yIeFuHsV9TVNy36e97Ayr+QN1SSB Ne3BVwllWcsc5259mmreQPFyr3q87uaeGEjbVgafXRjYb3QM/IHaKdKxlmLeJvbv McK8qBuSgTNfSH6z9k7C3R0Iqx6G3Rx2gqZSl+nl4bhzL45n9MiqYrY5A9N6VUmw N8/mR6APc+dewZloiw3Vn0z0iVq5vZFSlkMwEeeTUH7WGOlywOifNIqssUnsfkf+ IBldpWhIv330jA== -----END CERTIFICATE-----Generated at Sun Jan 25 21:35:50 2026 by rpki-client