This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft File: FNQhCjRMmZST5hz53XNWd9OLwF0.mft (raw, json) Hash identifier: Fm1l6taAS2VVHv96Ort9OhKptMGNf2JphAw9FZZ+oB0= Subject key identifier: 30:34:2D:F1:A8:6E:6E:27:AB:17:99:E7:AE:B1:A8:A2:58:E6:AC:44 Authority key identifier: 14:D4:21:0A:34:4C:99:94:93:E6:1C:F9:DD:73:56:77:D3:8B:C0:5D Certificate issuer: /CN=14d4210a344c999493e61cf9dd735677d38bc05d Certificate serial: 019BF79A2EBE7A0ABF8E94DA35906714AE83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft Manifest number: 096D Signing time: Mon 26 Jan 2026 00:00:35 +0000 Manifest this update: Mon 26 Jan 2026 00:00:35 +0000 Manifest next update: Tue 27 Jan 2026 00:00:35 +0000 Files and hashes: 1: 3Ar2XyUYMweTk8EKwl8UseYrYE0.roa (hash: e5PBA+QHrdK8UegyVXOovBxHSL9kzq5+vsNWxUzz/VA=) 2: FNQhCjRMmZST5hz53XNWd9OLwF0.crl (hash: d3WX7sbILFCqAcUV05NEA/wpVwN6rcyfV+RlT2fyW/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:2e:be:7a:0a:bf:8e:94:da:35:90:67:14:ae:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14d4210a344c999493e61cf9dd735677d38bc05d Validity Not Before: Jan 26 00:00:35 2026 GMT Not After : Jan 27 00:00:35 2026 GMT Subject: CN=30342df1a86e6e27ab1799e7aeb1a8a258e6ac44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ce:a5:f9:84:b3:59:90:19:88:12:8b:72:46: 88:6b:6b:8d:7b:55:a5:79:66:98:5e:8c:25:47:06: eb:7e:eb:5a:75:c3:36:d9:de:ef:9b:0c:e3:16:2d: d3:3d:ba:8a:64:55:62:cc:5e:e6:8c:bc:fa:36:ef: 4d:2a:51:6e:a5:82:66:66:76:8e:78:83:f3:d5:07: 6e:bf:b7:ff:2b:79:a9:57:fd:c6:54:40:69:39:e2: 72:df:b2:6f:2d:c3:4d:b5:57:d0:7b:c7:51:f1:53: 9a:3c:13:db:a4:95:0c:3e:23:aa:ee:a8:93:6f:c4: 48:82:b7:f4:95:79:55:c2:8a:7c:ce:46:a5:45:ac: d7:f7:bc:58:6f:a2:f5:8a:73:8d:24:2b:da:21:8f: fd:56:df:17:91:7f:15:a2:d6:86:2e:cd:b3:a4:53: 9d:0a:6d:61:c1:1d:17:f7:a8:26:f5:03:45:96:3c: 87:7c:2c:a8:2d:78:cc:a4:e8:17:bc:29:60:0a:e8: b2:47:b8:13:f4:7d:ca:31:3e:92:33:88:f8:98:60: b0:43:fd:e7:55:ba:11:30:ea:8e:48:56:80:fe:04: 0e:56:f8:16:cb:14:e5:4c:a9:37:41:98:35:60:bb: ca:01:95:2f:e0:ae:d2:07:ee:c6:f1:e0:41:b5:e8: a0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:34:2D:F1:A8:6E:6E:27:AB:17:99:E7:AE:B1:A8:A2:58:E6:AC:44 X509v3 Authority Key Identifier: keyid:14:D4:21:0A:34:4C:99:94:93:E6:1C:F9:DD:73:56:77:D3:8B:C0:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:da:bb:c5:1d:74:2a:c8:5c:ac:20:b4:03:5a:0d:23:f3:80: 3e:6a:5c:ae:ed:99:9d:df:c9:2f:bf:be:64:da:f9:7a:fa:76: 47:28:af:30:d2:83:63:7b:ef:fc:aa:46:37:a5:58:c9:a9:de: e2:1d:91:59:bb:fe:7c:21:35:73:5b:0b:ae:d8:65:03:1e:70: bb:3e:5a:40:75:c7:d4:4a:1d:ab:6d:79:75:ae:53:1a:c8:b2: 8d:af:2d:eb:2a:ea:d5:32:50:00:8f:e2:e6:9b:fb:20:e3:bb: b6:15:42:1f:a1:ab:34:63:00:d4:94:6e:83:b4:16:7e:3c:fb: 95:95:d3:32:8b:e9:7e:b9:6c:3a:0c:9d:74:eb:b3:d0:35:cf: 2e:d5:03:a8:22:64:72:9a:67:d7:04:93:c3:2e:18:6d:1a:ae: 07:73:69:ab:76:87:ce:b6:44:02:39:53:02:c9:6d:22:32:f4: e1:1e:0d:74:2e:cf:83:8a:25:e2:b1:3e:a9:eb:fe:2d:ed:42: 71:dc:77:1d:6f:f1:d5:84:52:fc:d7:ff:bc:8c:1f:73:ee:b6: 76:f7:73:b4:95:5c:e5:c9:9a:67:6b:da:11:4f:e7:2d:21:9b: 69:5d:c5:94:4f:6f:de:b9:30:47:0e:22:71:5a:0a:85:34:35: 39:46:bc:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mi6+egq/jpTaNZBnFK6DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0ZDQyMTBhMzQ0Yzk5OTQ5M2U2MWNmOWRkNzM1Njc3ZDM4 YmMwNWQwHhcNMjYwMTI2MDAwMDM1WhcNMjYwMTI3MDAwMDM1WjAzMTEwLwYDVQQD EygzMDM0MmRmMWE4NmU2ZTI3YWIxNzk5ZTdhZWIxYThhMjU4ZTZhYzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAus6l+YSzWZAZiBKLckaIa2uNe1Wl eWaYXowlRwbrfutadcM22d7vmwzjFi3TPbqKZFVizF7mjLz6Nu9NKlFupYJmZnaO eIPz1Qduv7f/K3mpV/3GVEBpOeJy37JvLcNNtVfQe8dR8VOaPBPbpJUMPiOq7qiT b8RIgrf0lXlVwop8zkalRazX97xYb6L1inONJCvaIY/9Vt8XkX8VotaGLs2zpFOd Cm1hwR0X96gm9QNFljyHfCyoLXjMpOgXvClgCuiyR7gT9H3KMT6SM4j4mGCwQ/3n VboRMOqOSFaA/gQOVvgWyxTlTKk3QZg1YLvKAZUv4K7SB+7G8eBBteignQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDA0LfGobm4nqxeZ566xqKJY5qxEMB8GA1UdIwQY MBaAFBTUIQo0TJmUk+Yc+d1zVnfTi8BdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRk5RaENqUk1tWlNUNWh6NTNYTldkOU9Md0YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9jM2VmNTQtNjdmYS00OTM5LWI2NTgt Mzg1NDRjMmE4N2JiLzEvRk5RaENqUk1tWlNUNWh6NTNYTldkOU9Md0YwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9jM2VmNTQtNjdmYS00OTM5LWI2NTgtMzg1NDRjMmE4N2Ji LzEvRk5RaENqUk1tWlNUNWh6NTNYTldkOU9Md0YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAddq7xR10 KshcrCC0A1oNI/OAPmpcru2Znd/JL7++ZNr5evp2RyivMNKDY3vv/KpGN6VYyane 4h2RWbv+fCE1c1sLrthlAx5wuz5aQHXH1Eodq215da5TGsiyja8t6yrq1TJQAI/i 5pv7IOO7thVCH6GrNGMA1JRug7QWfjz7lZXTMovpfrlsOgyddOuz0DXPLtUDqCJk cppn1wSTwy4YbRquB3Npq3aHzrZEAjlTAsltIjL04R4NdC7Pg4ol4rE+qev+Le1C cdx3HW/x1YRS/Nf/vIwfc+62dvdztJVc5cmaZ2vaEU/nLSGbaV3FlE9v3rkwRw4i cVoKhTQ1OUa8Tw== -----END CERTIFICATE-----Generated at Mon Jan 26 05:56:41 2026 by rpki-client