This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft File: FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft (raw, json) Hash identifier: PzXoHBFJ46Crtl1N0ioDWidrGAJkMQoX+dd22/HatVA= Subject key identifier: 61:21:B4:7A:9B:33:CA:F1:C7:BF:4D:38:C5:24:CC:31:71:FF:6D:3A Authority key identifier: 15:71:E6:68:43:06:B7:48:15:6C:2A:E3:F4:20:BB:36:6B:2E:FC:EE Certificate issuer: /CN=1571e6684306b748156c2ae3f420bb366b2efcee Certificate serial: 019B79EDCC650FFDCD13B9A89294E711D3E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft Manifest number: 0967 Signing time: Thu 01 Jan 2026 14:19:46 +0000 Manifest this update: Thu 01 Jan 2026 14:19:46 +0000 Manifest next update: Fri 02 Jan 2026 14:19:46 +0000 Files and hashes: 1: FXHmaEMGt0gVbCrj9CC7Nmsu_O4.crl (hash: c00RjjIQaX3qh5q3L7F6nPpwbryJhkczHniE7cuG0DU=) 2: GFZcD-SiqJlzeu5I4CSkb1OREjw.roa (hash: XxnmUWyfzPzcdobUtDhD16hiBtaiKFeoObHAgaQYHmk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft rsync://rpki.ripe.net/repository/DEFAULT/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 14:19:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:cc:65:0f:fd:cd:13:b9:a8:92:94:e7:11:d3:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1571e6684306b748156c2ae3f420bb366b2efcee Validity Not Before: Jan 1 14:19:46 2026 GMT Not After : Jan 2 14:19:46 2026 GMT Subject: CN=6121b47a9b33caf1c7bf4d38c524cc3171ff6d3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:cf:58:aa:a5:b7:f4:a2:8f:0d:b6:de:46:49: 7e:23:f7:69:d0:06:30:be:06:3f:52:48:b7:dc:0e: d2:28:dc:cd:57:00:f0:a0:66:08:7d:d0:66:34:17: dc:28:ac:2f:95:a7:1d:36:1b:96:19:04:16:d8:8e: e9:69:b2:71:d8:b7:8d:ea:7c:f0:e7:ee:84:42:7d: 57:fa:43:47:c0:0f:d0:09:ef:ef:0d:51:da:bc:05: 35:b8:4f:2c:71:32:3d:2d:4d:89:64:ba:23:dd:67: 1e:fa:26:5e:df:fc:66:95:ed:7d:5c:ee:0c:93:f5: 2a:ed:68:40:9f:1d:90:e7:b8:72:2a:4f:e0:03:3b: f3:9e:6a:70:6e:0a:ae:24:a4:0a:dd:e0:cd:86:4a: c1:e6:9a:c9:af:6d:ec:37:08:cc:b6:fb:6c:b5:b2: f4:c6:35:8e:28:1c:9e:cc:fc:8f:86:2f:33:d5:b1: e8:a7:52:b6:94:b5:58:f5:17:1f:cf:f7:8d:7e:2a: 24:36:95:44:8d:db:ab:a6:1a:00:f5:23:e3:9c:b4: f1:5f:12:bd:f0:a8:4b:80:c0:b6:66:45:0c:93:95: 3b:9a:7a:21:30:8d:51:84:e1:9c:4b:74:5e:19:54: 8d:1c:3e:0b:66:52:fe:77:df:63:3c:6f:6b:03:b3: 28:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:21:B4:7A:9B:33:CA:F1:C7:BF:4D:38:C5:24:CC:31:71:FF:6D:3A X509v3 Authority Key Identifier: keyid:15:71:E6:68:43:06:B7:48:15:6C:2A:E3:F4:20:BB:36:6B:2E:FC:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:c4:93:fe:40:df:9e:36:72:12:d0:9d:20:37:51:9f:61:90: 97:9f:e8:28:a6:7c:40:9b:a6:ef:9a:7e:3f:88:6c:34:cd:4d: 50:e6:01:79:96:57:af:12:35:dc:23:d1:7e:28:28:09:67:a9: 4b:f5:e1:6f:ee:96:3c:5e:25:4e:f9:8c:c1:ca:c3:4f:fd:77: af:64:1c:54:b6:a1:50:dd:d5:b7:a0:c6:f2:e1:d3:b9:bf:3c: 43:fe:5f:73:7a:cf:f2:02:83:10:73:97:e2:1b:a5:b6:a1:b8: c1:7c:b7:96:8b:d5:84:bc:80:dd:b2:d7:2f:f9:83:07:93:4d: 2c:4c:ef:98:18:f2:5c:ad:ea:ed:5d:a3:44:c4:c2:a6:44:71: 7b:79:bf:25:34:f0:99:7c:20:0b:04:7b:22:17:a7:f4:19:9a: 3e:34:b8:c3:6f:f1:98:a4:9f:9b:da:cb:81:7e:d2:ee:59:18: 9a:28:ea:fd:b1:2f:c6:f9:2b:67:4d:b8:08:a7:65:1b:bc:58: 06:ca:23:5d:60:43:75:b5:14:7a:01:43:fc:c7:b0:c2:e7:25: be:37:cd:ad:e4:2f:01:5f:c1:b4:36:ba:57:5c:30:22:67:c4: 4a:1e:cc:ea:0f:15:5a:f2:9a:77:cf:50:b8:64:8e:b0:29:15: db:41:9a:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt57cxlD/3NE7mokpTnEdPhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1NzFlNjY4NDMwNmI3NDgxNTZjMmFlM2Y0MjBiYjM2NmIy ZWZjZWUwHhcNMjYwMTAxMTQxOTQ2WhcNMjYwMTAyMTQxOTQ2WjAzMTEwLwYDVQQD Eyg2MTIxYjQ3YTliMzNjYWYxYzdiZjRkMzhjNTI0Y2MzMTcxZmY2ZDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi89YqqW39KKPDbbeRkl+I/dp0AYw vgY/Uki33A7SKNzNVwDwoGYIfdBmNBfcKKwvlacdNhuWGQQW2I7pabJx2LeN6nzw 5+6EQn1X+kNHwA/QCe/vDVHavAU1uE8scTI9LU2JZLoj3Wce+iZe3/xmle19XO4M k/Uq7WhAnx2Q57hyKk/gAzvznmpwbgquJKQK3eDNhkrB5prJr23sNwjMtvtstbL0 xjWOKByezPyPhi8z1bHop1K2lLVY9Rcfz/eNfiokNpVEjdurphoA9SPjnLTxXxK9 8KhLgMC2ZkUMk5U7mnohMI1RhOGcS3ReGVSNHD4LZlL+d99jPG9rA7MoZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGEhtHqbM8rxx79NOMUkzDFx/206MB8GA1UdIwQY MBaAFBVx5mhDBrdIFWwq4/QguzZrLvzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlhIbWFFTUd0MGdWYkNyajlDQzdObXN1X080LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC81MDZmMmEtNzI0Ni00MTkwLTk2ZmYt NzM4YzBiZjhlYTk4LzEvRlhIbWFFTUd0MGdWYkNyajlDQzdObXN1X080Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC81MDZmMmEtNzI0Ni00MTkwLTk2ZmYtNzM4YzBiZjhlYTk4 LzEvRlhIbWFFTUd0MGdWYkNyajlDQzdObXN1X080LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApcST/kDf njZyEtCdIDdRn2GQl5/oKKZ8QJum75p+P4hsNM1NUOYBeZZXrxI13CPRfigoCWep S/Xhb+6WPF4lTvmMwcrDT/13r2QcVLahUN3Vt6DG8uHTub88Q/5fc3rP8gKDEHOX 4hultqG4wXy3lovVhLyA3bLXL/mDB5NNLEzvmBjyXK3q7V2jRMTCpkRxe3m/JTTw mXwgCwR7Ihen9BmaPjS4w2/xmKSfm9rLgX7S7lkYmijq/bEvxvkrZ024CKdlG7xY BsojXWBDdbUUegFD/MewwuclvjfNreQvAV/BtDa6V1wwImfESh7M6g8VWvKad89Q uGSOsCkV20GaiQ== -----END CERTIFICATE-----Generated at Thu Jan 1 21:22:19 2026 by rpki-client