This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft File: FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft (raw, json) Hash identifier: CXRb73RrPMxJhZ+BBA6ZFWcCJtVDFfcRi1t4sdlSHGg= Subject key identifier: 89:A6:29:08:80:56:20:14:34:64:CC:4F:A3:B5:69:B1:2D:9B:D5:03 Authority key identifier: 14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95 Certificate issuer: /CN=1492a20754c9a7650b8279b9390689c469d73595 Certificate serial: 019B7900B513B9B5B9F880BAD55B55223C21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft Manifest number: 17AA Signing time: Thu 01 Jan 2026 10:00:47 +0000 Manifest this update: Thu 01 Jan 2026 10:00:47 +0000 Manifest next update: Fri 02 Jan 2026 10:00:47 +0000 Files and hashes: 1: FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl (hash: jiyNjKVDdMdcPdWGtnC1+3JdVaObFjM/fMVhm3jrzNE=) 2: wFxMftMrQqOgNqLanUvVrEPuk0E.roa (hash: Kt7E8p9gxrWDn7h3MqNJ+mao+upazAnAmbSkQF2stto=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:00:b5:13:b9:b5:b9:f8:80:ba:d5:5b:55:22:3c:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1492a20754c9a7650b8279b9390689c469d73595 Validity Not Before: Jan 1 10:00:47 2026 GMT Not After : Jan 2 10:00:47 2026 GMT Subject: CN=89a62908805620143464cc4fa3b569b12d9bd503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d1:61:de:4f:a9:77:e1:43:68:57:a1:04:57: 9d:ca:e8:6f:d8:5e:95:68:ec:1b:f8:0d:04:d8:4d: cf:bd:4c:63:b1:ae:36:a4:3d:0d:c2:4a:cd:08:d7: 69:74:0d:df:29:a8:2a:5d:1f:b4:c9:60:20:71:48: 69:7f:5b:6f:2b:86:4a:74:48:c7:c9:34:70:1e:59: cf:c1:c5:6a:be:e7:30:32:44:77:66:24:fb:58:16: bd:df:40:b1:2b:4f:54:09:2a:c7:26:ab:f3:45:2e: ea:bd:44:58:87:cc:82:d2:17:5b:25:ee:ba:de:bf: 32:2a:70:76:25:d8:51:8e:73:9b:ff:6d:a6:60:88: 7a:04:ad:51:9e:7a:af:5e:27:a4:a3:d8:9a:d3:07: d6:8b:4f:01:57:c2:d6:89:08:3c:92:d7:a8:9c:a4: 9e:ff:6a:05:f8:ee:47:0e:a7:fb:35:7d:29:76:c8: a7:50:12:54:6d:f0:e2:47:7a:b4:52:35:8c:f0:77: 00:e5:0f:73:2a:54:15:be:f0:43:e4:30:2d:b9:17: 83:cf:3c:d4:26:83:3e:98:58:60:c3:60:f1:a9:31: 52:3c:2b:29:21:69:94:c1:d7:f6:19:7c:43:9b:e6: 14:f1:ad:b7:77:1f:37:3d:ad:2f:fd:5e:f9:9c:ef: c1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A6:29:08:80:56:20:14:34:64:CC:4F:A3:B5:69:B1:2D:9B:D5:03 X509v3 Authority Key Identifier: keyid:14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:fb:5e:fa:9c:f4:1b:65:5f:93:88:06:84:9c:bb:ae:09:dc: 7b:02:22:eb:ad:2e:90:6d:eb:34:05:86:bf:07:0c:a3:c7:82: 37:cd:ec:f0:52:54:7b:4d:7b:4b:4d:55:04:77:3a:f5:ac:b7: 00:31:9e:6d:27:39:e5:db:5c:3c:0f:21:27:30:2a:f3:ab:c3: 14:51:34:9a:ed:a8:49:9f:1a:ac:07:32:1b:06:ff:43:b8:b9: 5b:58:73:cb:ab:70:4c:7c:f0:26:5e:d5:de:6f:2b:f6:90:81: 7b:1d:06:19:b9:bd:dd:53:f4:dc:45:8c:1c:3a:c9:c5:cd:75: 86:f7:fb:99:36:43:45:8e:cf:a2:e6:76:6f:78:22:d2:ab:cc: 94:d2:8a:b3:19:00:2c:f2:7a:48:71:85:3c:25:18:8d:14:c4: 51:b5:81:4a:f4:3f:3a:24:a6:09:ee:17:8e:a1:ea:c9:d4:78: f1:a8:c7:fe:3c:db:56:39:a6:79:ae:80:33:a3:01:10:5a:38: 8c:57:3f:97:ad:2e:d5:18:d0:a0:6a:89:9d:92:16:8d:e9:22: f7:b8:e1:9e:57:3b:97:ae:4b:75:fe:7e:c6:09:d5:1d:90:3d: 2e:f7:3a:e0:08:85:72:3d:84:12:24:ee:df:1f:3c:4f:c8:65: 90:36:dc:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt5ALUTubW5+IC61VtVIjwhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0OTJhMjA3NTRjOWE3NjUwYjgyNzliOTM5MDY4OWM0Njlk NzM1OTUwHhcNMjYwMTAxMTAwMDQ3WhcNMjYwMTAyMTAwMDQ3WjAzMTEwLwYDVQQD Eyg4OWE2MjkwODgwNTYyMDE0MzQ2NGNjNGZhM2I1NjliMTJkOWJkNTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutFh3k+pd+FDaFehBFedyuhv2F6V aOwb+A0E2E3PvUxjsa42pD0NwkrNCNdpdA3fKagqXR+0yWAgcUhpf1tvK4ZKdEjH yTRwHlnPwcVqvucwMkR3ZiT7WBa930CxK09UCSrHJqvzRS7qvURYh8yC0hdbJe66 3r8yKnB2JdhRjnOb/22mYIh6BK1RnnqvXieko9ia0wfWi08BV8LWiQg8kteonKSe /2oF+O5HDqf7NX0pdsinUBJUbfDiR3q0UjWM8HcA5Q9zKlQVvvBD5DAtuReDzzzU JoM+mFhgw2DxqTFSPCspIWmUwdf2GXxDm+YU8a23dx83Pa0v/V75nO/BdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFImmKQiAViAUNGTMT6O1abEtm9UDMB8GA1UdIwQY MBaAFBSSogdUyadlC4J5uTkGicRp1zWVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkpLaUIxVEpwMlVMZ25tNU9RYUp4R25YTlpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS82MzFlNmEtN2QwNi00ZmExLWJmZDkt Y2E3NGEwNjdmZWJmLzEvRkpLaUIxVEpwMlVMZ25tNU9RYUp4R25YTlpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS82MzFlNmEtN2QwNi00ZmExLWJmZDktY2E3NGEwNjdmZWJm LzEvRkpLaUIxVEpwMlVMZ25tNU9RYUp4R25YTlpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS/te+pz0 G2Vfk4gGhJy7rgncewIi660ukG3rNAWGvwcMo8eCN83s8FJUe017S01VBHc69ay3 ADGebSc55dtcPA8hJzAq86vDFFE0mu2oSZ8arAcyGwb/Q7i5W1hzy6twTHzwJl7V 3m8r9pCBex0GGbm93VP03EWMHDrJxc11hvf7mTZDRY7PouZ2b3gi0qvMlNKKsxkA LPJ6SHGFPCUYjRTEUbWBSvQ/OiSmCe4XjqHqydR48ajH/jzbVjmmea6AM6MBEFo4 jFc/l60u1RjQoGqJnZIWjeki97jhnlc7l65Ldf5+xgnVHZA9Lvc64AiFcj2EEiTu 3x88T8hlkDbcVA== -----END CERTIFICATE-----Generated at Thu Jan 1 14:25:02 2026 by rpki-client