This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft File: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft (raw, json) Hash identifier: wjmDIpt/obpea5oSfaL1/NoukrHdDRbh8A4PUkg1IEo= Subject key identifier: C0:FB:C7:F1:97:EE:E2:75:18:82:90:74:83:02:3A:B6:D9:E1:EE:B8 Authority key identifier: F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08 Certificate issuer: /CN=f8d40a2a1389f54c23e7871b5ae87f653f659008 Certificate serial: 019BF8ADC348ED3B0EEA6148FFED5788CD1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft Manifest number: 0FDF Signing time: Mon 26 Jan 2026 05:01:35 +0000 Manifest this update: Mon 26 Jan 2026 05:01:35 +0000 Manifest next update: Tue 27 Jan 2026 05:01:35 +0000 Files and hashes: 1: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl (hash: 1SJ72A3D9dJFttUlazs/rPXLzDxToKwcSrXG9gFa35w=) 2: KSM6-j7ZQdjUgo726e0-fcqcUhY.roa (hash: rShuWm/fiDs8a4GU2RfscjwEG1UcXC9a2zYTRv4DxMo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:c3:48:ed:3b:0e:ea:61:48:ff:ed:57:88:cd:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8d40a2a1389f54c23e7871b5ae87f653f659008 Validity Not Before: Jan 26 05:01:35 2026 GMT Not After : Jan 27 05:01:35 2026 GMT Subject: CN=c0fbc7f197eee2751882907483023ab6d9e1eeb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f1:7e:56:9b:0b:2d:cc:97:57:33:37:b5:9f: 38:81:05:6f:ec:d6:61:f9:cb:19:a4:0b:1a:88:f4: 91:31:36:58:0d:15:e9:4c:bd:6e:b4:c7:ac:a0:39: 98:cd:31:d8:73:9c:3f:03:95:6e:c6:9b:c2:c7:8b: b3:3b:72:e6:93:74:11:b4:6b:7f:32:8b:e5:43:47: e4:68:47:a4:54:6b:04:bc:c9:57:7d:36:d9:23:78: a9:c3:2a:99:86:e7:8f:12:a3:19:ea:ce:8b:81:98: d1:94:cb:63:0c:55:33:85:d0:99:18:24:66:0f:47: 17:2a:00:24:d6:87:05:28:86:17:19:1e:1b:2d:d0: b2:02:74:0e:f5:f4:8a:f2:2f:19:85:12:2e:76:2a: 82:d5:bb:75:28:d7:64:ee:62:b9:39:48:e8:97:7b: d7:b3:2f:b4:48:4f:a1:62:fa:db:46:ec:0f:09:d7: 72:2a:b6:4a:42:c7:05:22:eb:5b:bc:c4:30:3c:8a: 8b:34:df:a5:fc:99:13:31:2b:51:3a:38:11:c3:2f: a8:75:a2:4a:b6:a2:fe:a8:e6:09:72:ba:b0:6f:1d: d9:5d:4f:f6:3d:fd:bc:6c:04:00:d5:52:c1:21:ff: 4c:22:8a:79:bf:ea:ff:ae:59:02:ba:55:87:27:c7: 5b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:FB:C7:F1:97:EE:E2:75:18:82:90:74:83:02:3A:B6:D9:E1:EE:B8 X509v3 Authority Key Identifier: keyid:F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:b1:f0:0e:b9:17:28:53:07:b9:9a:94:c3:7e:f5:0f:35:13: 34:4f:77:10:84:03:8c:69:21:15:c8:6e:14:5d:80:4f:a0:af: 2e:fb:4b:7c:7e:9a:4d:99:49:f5:3b:9b:66:0d:56:05:40:08: ee:5d:cf:26:60:d0:fc:63:54:02:98:10:07:4e:e4:ef:89:e1: ec:08:eb:3d:24:d3:4a:7c:ce:84:ba:da:e8:47:52:3d:db:45: d3:39:6a:18:a8:22:02:a7:0c:f2:ab:a6:54:3b:2e:c8:3a:33: a5:7a:ca:55:bf:9a:4b:34:ed:93:03:06:52:30:b6:58:67:af: be:03:bc:75:75:ac:0a:22:c1:a4:95:7f:51:05:d5:02:9a:f5: 1c:78:b3:57:74:7e:9d:76:a9:5d:ac:a3:bc:85:87:ff:83:ef: 37:4b:97:3d:0a:de:90:bc:fe:d8:49:fe:db:bf:c2:01:4a:f9: 39:a1:5e:54:75:33:7a:94:61:0b:29:fb:ef:c1:d3:55:74:cb: 9e:51:14:52:0d:da:cd:d3:a6:e4:d9:67:9d:63:2e:e4:fb:2f: 6e:00:67:03:cb:f5:8d:c4:c2:ee:98:a0:a2:75:d1:75:91:67: 0e:33:e5:66:c0:75:0c:87:34:0d:95:09:07:02:29:97:49:e9: c3:ff:85:ca -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZv4rcNI7TsO6mFI/+1XiM0aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZDQwYTJhMTM4OWY1NGMyM2U3ODcxYjVhZTg3ZjY1M2Y2 NTkwMDgwHhcNMjYwMTI2MDUwMTM1WhcNMjYwMTI3MDUwMTM1WjAzMTEwLwYDVQQD EyhjMGZiYzdmMTk3ZWVlMjc1MTg4MjkwNzQ4MzAyM2FiNmQ5ZTFlZWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfF+VpsLLcyXVzM3tZ84gQVv7NZh +csZpAsaiPSRMTZYDRXpTL1utMesoDmYzTHYc5w/A5VuxpvCx4uzO3Lmk3QRtGt/ MovlQ0fkaEekVGsEvMlXfTbZI3ipwyqZhuePEqMZ6s6LgZjRlMtjDFUzhdCZGCRm D0cXKgAk1ocFKIYXGR4bLdCyAnQO9fSK8i8ZhRIudiqC1bt1KNdk7mK5OUjol3vX sy+0SE+hYvrbRuwPCddyKrZKQscFIutbvMQwPIqLNN+l/JkTMStROjgRwy+odaJK tqL+qOYJcrqwbx3ZXU/2Pf28bAQA1VLBIf9MIop5v+r/rlkCulWHJ8db9QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFMD7x/GX7uJ1GIKQdIMCOrbZ4e64MB8GA1UdIwQY MBaAFPjUCioTifVMI+eHG1rof2U/ZZAIMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1OUUtLaE9KOVV3ajU0Y2JXdWhfWlQ5bGtBZy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDQvN2JjNWYwLWUyMWItNDIzZS1iZTFj LTJkNDYwZTA3MjZmYS8xLzEtTlFLS2hPSjlVd2o1NGNiV3VoX1pUOWxrQWcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzA0LzdiYzVmMC1lMjFiLTQyM2UtYmUxYy0yZDQ2MGUwNzI2 ZmEvMS8xLU5RS0toT0o5VXdqNTRjYld1aF9aVDlsa0FnLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc7Hw DrkXKFMHuZqUw371DzUTNE93EIQDjGkhFchuFF2AT6CvLvtLfH6aTZlJ9TubZg1W BUAI7l3PJmDQ/GNUApgQB07k74nh7AjrPSTTSnzOhLra6EdSPdtF0zlqGKgiAqcM 8qumVDsuyDozpXrKVb+aSzTtkwMGUjC2WGevvgO8dXWsCiLBpJV/UQXVApr1HHiz V3R+nXapXayjvIWH/4PvN0uXPQrekLz+2En+27/CAUr5OaFeVHUzepRhCyn778HT VXTLnlEUUg3azdOm5NlnnWMu5PsvbgBnA8v1jcTC7pigonXRdZFnDjPlZsB1DIc0 DZUJBwIpl0npw/+Fyg== -----END CERTIFICATE-----Generated at Mon Jan 26 10:58:14 2026 by rpki-client