This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.mft File: FJ-m1P4O0OAS6zvP_fK_nh90eXI.mft (raw, json) Hash identifier: PKK97UH61it6+fzlxvjTNqJWEHO+kR7MPna7ZmFBatw= Subject key identifier: AD:13:B2:C1:0C:8B:E3:D9:29:9B:6B:EB:AE:FD:E7:18:8E:CB:90:C7 Authority key identifier: 14:9F:A6:D4:FE:0E:D0:E0:12:EB:3B:CF:FD:F2:BF:9E:1F:74:79:72 Certificate issuer: /CN=149fa6d4fe0ed0e012eb3bcffdf2bf9e1f747972 Certificate serial: 019BADCA6BE83C095E3EE0929F6B2B227DC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJ-m1P4O0OAS6zvP_fK_nh90eXI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.mft Manifest number: 05F8 Signing time: Sun 11 Jan 2026 16:01:22 +0000 Manifest this update: Sun 11 Jan 2026 16:01:22 +0000 Manifest next update: Mon 12 Jan 2026 16:01:22 +0000 Files and hashes: 1: FJ-m1P4O0OAS6zvP_fK_nh90eXI.crl (hash: z6Pn4p/Nzi5AaM0vyPzjmNFYP84miHZqXWwKu0tIkLc=) 2: mE4gEFE8H9rF7W6JWQAwOeLazZU.roa (hash: i7rQ4LKM4wDGAKDMgvP7khSLa1cSADizdSi/LHDMiE4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.mft rsync://rpki.ripe.net/repository/DEFAULT/FJ-m1P4O0OAS6zvP_fK_nh90eXI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 16:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ad:ca:6b:e8:3c:09:5e:3e:e0:92:9f:6b:2b:22:7d:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=149fa6d4fe0ed0e012eb3bcffdf2bf9e1f747972 Validity Not Before: Jan 11 16:01:22 2026 GMT Not After : Jan 12 16:01:22 2026 GMT Subject: CN=ad13b2c10c8be3d9299b6bebaefde7188ecb90c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:03:1e:a8:b7:09:af:89:e0:77:f5:e8:e4:6d: 15:cd:0d:bc:cd:e3:bc:7e:5a:1b:81:19:7f:7a:bd: 89:c9:d2:e5:62:ac:42:e8:21:b9:1d:cb:c0:6a:46: e0:ec:88:e9:e4:30:8d:a0:61:d5:8c:f9:f2:fb:f3: ee:72:1a:1a:0c:16:6a:4b:d1:e1:3c:db:2c:48:31: e0:5b:5a:e0:00:df:1a:19:97:3f:bc:80:59:52:fb: 68:9a:d6:df:3c:64:00:9d:af:eb:5c:e3:0e:6c:db: 98:47:cc:0a:14:91:c1:d3:1e:f6:46:5f:18:45:d9: eb:8b:c5:83:2e:11:87:54:32:df:1e:f8:ba:d5:c3: 55:3f:c6:a5:ec:1b:72:3b:41:e0:b7:19:d1:59:b0: 52:07:90:3d:29:a0:07:af:17:08:7f:a8:d7:8e:f1: ca:3c:ea:46:86:4b:18:33:eb:1f:98:05:0f:51:eb: f1:63:4f:3d:c5:48:a8:64:ce:15:30:aa:10:4d:91: 62:9e:b6:f3:f8:57:87:bb:4a:1d:b5:84:82:ab:d0: b9:c5:1a:02:90:98:e4:83:0e:c2:09:57:40:87:67: 6a:04:cb:2f:58:f5:54:6c:49:b2:73:32:a2:7c:81: aa:90:74:98:db:5b:08:9d:83:bf:ef:fe:4c:8e:00: 25:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:13:B2:C1:0C:8B:E3:D9:29:9B:6B:EB:AE:FD:E7:18:8E:CB:90:C7 X509v3 Authority Key Identifier: keyid:14:9F:A6:D4:FE:0E:D0:E0:12:EB:3B:CF:FD:F2:BF:9E:1F:74:79:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJ-m1P4O0OAS6zvP_fK_nh90eXI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:9b:9a:81:6e:f6:e0:06:29:a2:f1:39:53:f1:4a:ba:c4:53: 4e:1f:f0:de:82:e8:8e:fc:d2:46:61:94:6d:c7:cf:a3:f7:50: 80:80:43:ea:41:dd:c5:8a:6e:13:15:dc:21:08:15:f3:d6:0a: 42:98:f4:76:b2:9d:80:70:67:bb:46:a1:b9:97:87:72:6b:c7: e5:de:46:f5:a7:3a:49:1c:8f:1e:20:c3:91:e3:85:7e:cb:4f: 0a:4a:1f:62:c8:f1:56:fd:b5:e4:39:71:d8:53:9f:aa:3e:a7: 94:17:7b:c5:c0:40:b3:94:06:b5:a8:2e:f1:09:7b:ab:a3:cf: 25:a3:2c:16:2e:bc:34:7f:d9:13:75:9e:db:4c:4f:8f:0c:d8: 57:24:15:3f:cc:69:50:6a:c2:ed:32:e1:88:c0:40:08:b3:5a: 24:c9:59:8c:35:df:f9:67:39:49:0a:e6:65:56:89:f8:8c:3e: 9f:cf:39:45:2d:7a:11:99:b2:19:40:a6:38:1f:c8:7a:92:35: 34:63:b4:b3:2c:2d:fe:96:36:5c:13:db:0d:30:54:8a:8c:62: a9:bb:c4:fa:c3:b6:16:d0:c5:d5:a3:83:5c:bb:17:ee:1f:a9: 97:ec:70:07:c0:b6:18:ed:ec:f4:39:22:32:10:8f:ab:88:4c: cf:37:b7:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZutymvoPAlePuCSn2srIn3JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0OWZhNmQ0ZmUwZWQwZTAxMmViM2JjZmZkZjJiZjllMWY3 NDc5NzIwHhcNMjYwMTExMTYwMTIyWhcNMjYwMTEyMTYwMTIyWjAzMTEwLwYDVQQD EyhhZDEzYjJjMTBjOGJlM2Q5Mjk5YjZiZWJhZWZkZTcxODhlY2I5MGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5AMeqLcJr4ngd/Xo5G0VzQ28zeO8 flobgRl/er2JydLlYqxC6CG5HcvAakbg7Ijp5DCNoGHVjPny+/PuchoaDBZqS9Hh PNssSDHgW1rgAN8aGZc/vIBZUvtomtbfPGQAna/rXOMObNuYR8wKFJHB0x72Rl8Y Rdnri8WDLhGHVDLfHvi61cNVP8al7BtyO0HgtxnRWbBSB5A9KaAHrxcIf6jXjvHK POpGhksYM+sfmAUPUevxY089xUioZM4VMKoQTZFinrbz+FeHu0odtYSCq9C5xRoC kJjkgw7CCVdAh2dqBMsvWPVUbEmyczKifIGqkHSY21sInYO/7/5MjgAljQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK0TssEMi+PZKZtr66795xiOy5DHMB8GA1UdIwQY MBaAFBSfptT+DtDgEus7z/3yv54fdHlyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkotbTFQNE8wT0FTNnp2UF9mS19uaDkwZVhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS81Njg1NmEtYmU4OC00YTdkLTllMDEt NzM3ODQwZTI3ZWE2LzEvRkotbTFQNE8wT0FTNnp2UF9mS19uaDkwZVhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS81Njg1NmEtYmU4OC00YTdkLTllMDEtNzM3ODQwZTI3ZWE2 LzEvRkotbTFQNE8wT0FTNnp2UF9mS19uaDkwZVhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzpuagW72 4AYpovE5U/FKusRTTh/w3oLojvzSRmGUbcfPo/dQgIBD6kHdxYpuExXcIQgV89YK Qpj0drKdgHBnu0ahuZeHcmvH5d5G9ac6SRyPHiDDkeOFfstPCkofYsjxVv215Dlx 2FOfqj6nlBd7xcBAs5QGtagu8Ql7q6PPJaMsFi68NH/ZE3We20xPjwzYVyQVP8xp UGrC7TLhiMBACLNaJMlZjDXf+Wc5SQrmZVaJ+Iw+n885RS16EZmyGUCmOB/IepI1 NGO0sywt/pY2XBPbDTBUioxiqbvE+sO2FtDF1aODXLsX7h+pl+xwB8C2GO3s9Dki MhCPq4hMzze3Dw== -----END CERTIFICATE-----Generated at Sun Jan 11 23:55:17 2026 by rpki-client