This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft File: 1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft (raw, json) Hash identifier: PN8aBitJziE3YnrQs9t1hZRgVWj8ChaP8n1sLs0NF74= Subject key identifier: 7F:42:81:D3:E9:0C:6D:6D:3D:13:2B:38:8F:C6:79:A3:43:B8:EE:13 Authority key identifier: F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7 Certificate issuer: /CN=f879988e0f49971a326f419e5cfacbfddcc993e7 Certificate serial: 019BF2E22A5ABB96677C5B6C5FCB3947D014 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft Manifest number: 13AF Signing time: Sun 25 Jan 2026 02:01:06 +0000 Manifest this update: Sun 25 Jan 2026 02:01:06 +0000 Manifest next update: Mon 26 Jan 2026 02:01:06 +0000 Files and hashes: 1: 1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl (hash: m5cekgRO25qhRtcLxQISIzBhSr8uyFLyr8Ha1dmbUlM=) 2: 4-2PHy4BbqBG4XIZeUFJyecMDB0.roa (hash: LT7qoUHsyJ1W7OMNJpNL1fgI1yxHMTvsp6/LRnCoi0Q=) 3: I-etTiyhzk_oS0jiw4MSDZk_e9Y.roa (hash: wSnumKCGcKJNe5X3ET8w/3ULT8RzVLmJW0letJCd4tQ=) 4: UcCqMTHisbto-8lkUT_tLgAeR84.roa (hash: MKKos7zvQxC3AHlxEIyIz2TorbEhj+M5Gg1Z5qYM5Vw=) 5: dKrxZh5eXZLlr4ulHUj3rX7iLKw.roa (hash: 3Y0TgUH+fONslolgRyWTVgCSVHlc4/LZlKQTJy+uJA8=) 6: rL-iVMHxtGo5kWiOEpOPkt5AYVk.roa (hash: gBSDL3GaTKepMFy7vrD/4/ZtzbB+iloDhAFlQ3Xiouc=) 7: zNwZgS-KWr_tdZQlJYw7r-bncj4.roa (hash: bFzYQzvtRgyI5Sf4GLvJJ0QPWEhrGxWF/aPyki12aFQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:e2:2a:5a:bb:96:67:7c:5b:6c:5f:cb:39:47:d0:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f879988e0f49971a326f419e5cfacbfddcc993e7 Validity Not Before: Jan 25 02:01:06 2026 GMT Not After : Jan 26 02:01:06 2026 GMT Subject: CN=7f4281d3e90c6d6d3d132b388fc679a343b8ee13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:39:3a:5b:81:38:cc:87:f8:31:fa:46:14:62: eb:fb:05:c1:98:84:f9:ac:21:1a:50:c1:dd:a2:5f: 1b:40:12:02:99:4a:2e:4c:6e:0a:7d:6e:c5:3b:0d: 4c:09:2f:14:3c:6e:e5:41:2b:e5:81:4b:b1:b7:e6: ed:f8:36:82:1c:6f:94:15:c0:9b:c7:92:fc:40:89: 63:42:8c:84:e6:9a:d7:46:96:e8:7b:03:f5:cc:b6: 37:f7:52:39:ae:09:cc:55:8c:46:f7:83:f7:c9:2d: ea:00:e3:88:d2:86:39:ae:96:71:25:df:39:a8:b3: 58:ee:c9:ac:2a:be:72:da:01:38:66:2f:70:7b:01: ec:49:c7:c2:1c:ca:71:c8:10:f7:f0:2c:4f:35:e4: 47:2e:48:de:b2:25:e6:df:48:fa:a6:51:79:20:87: 95:21:94:9f:47:25:f0:85:05:29:07:10:51:33:f7: 96:39:46:af:c2:68:3d:9f:d7:37:8c:49:bb:5b:1c: 26:92:03:68:b0:d9:59:6c:dd:eb:9f:de:38:12:7c: ae:48:14:f8:cf:f4:df:6f:d0:fa:37:4f:6d:12:ac: ee:b4:75:ad:f4:75:9b:37:86:47:1c:45:e0:bf:c0: a7:28:5a:58:29:b7:e7:88:13:5f:e2:c7:6e:8e:33: 03:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:42:81:D3:E9:0C:6D:6D:3D:13:2B:38:8F:C6:79:A3:43:B8:EE:13 X509v3 Authority Key Identifier: keyid:F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:fe:23:86:4e:00:2f:a4:13:29:25:3f:8e:c9:f0:5a:0e:54: 74:5a:6e:37:cb:17:ae:1f:79:93:d5:71:eb:a5:10:87:3a:ba: 89:95:be:11:c4:7b:c0:bc:b8:54:37:b7:ca:10:99:78:b6:ae: 2c:dd:c7:c0:49:33:6b:c3:c5:aa:59:38:9b:4d:7f:61:60:54: 58:e4:82:69:9a:88:6f:c5:79:0d:c0:4d:74:f0:f9:e0:f5:98: 5b:d4:d7:09:f8:43:73:ff:88:a2:30:f1:17:42:3e:ff:ad:ce: 9d:5c:30:63:56:bb:cc:16:a0:06:ee:7c:05:ce:75:8b:b3:71: 39:82:25:d0:9c:64:32:2e:b1:9e:23:90:c6:91:a3:c7:f5:bb: 3d:44:38:6d:f8:71:d2:73:f9:c5:7c:67:a2:07:ce:61:87:83: 13:e7:1a:d8:fc:7f:dc:10:95:13:7a:85:4c:64:fc:c4:d8:a5: 55:7a:82:39:db:f4:2c:89:db:9d:1c:46:6a:b1:fe:58:6c:59: 65:45:f5:fa:02:35:b5:af:86:bc:3a:61:e0:18:72:1f:85:60: 28:bb:dd:26:8f:72:9f:ef:34:6a:5f:0b:8b:ef:20:a6:bf:eb: cc:4e:99:36:79:a3:81:e3:91:da:cc:ee:d5:3f:55:52:bf:56: 3f:c9:47:48 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZvy4ipau5ZnfFtsX8s5R9AUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4Nzk5ODhlMGY0OTk3MWEzMjZmNDE5ZTVjZmFjYmZkZGNj OTkzZTcwHhcNMjYwMTI1MDIwMTA2WhcNMjYwMTI2MDIwMTA2WjAzMTEwLwYDVQQD Eyg3ZjQyODFkM2U5MGM2ZDZkM2QxMzJiMzg4ZmM2NzlhMzQzYjhlZTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTk6W4E4zIf4MfpGFGLr+wXBmIT5 rCEaUMHdol8bQBICmUouTG4KfW7FOw1MCS8UPG7lQSvlgUuxt+bt+DaCHG+UFcCb x5L8QIljQoyE5prXRpboewP1zLY391I5rgnMVYxG94P3yS3qAOOI0oY5rpZxJd85 qLNY7smsKr5y2gE4Zi9wewHsScfCHMpxyBD38CxPNeRHLkjesiXm30j6plF5IIeV IZSfRyXwhQUpBxBRM/eWOUavwmg9n9c3jEm7WxwmkgNosNlZbN3rn944EnyuSBT4 z/Tfb9D6N09tEqzutHWt9HWbN4ZHHEXgv8CnKFpYKbfniBNf4sdujjMDIwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFH9CgdPpDG1tPRMrOI/GeaNDuO4TMB8GA1UdIwQY MBaAFPh5mI4PSZcaMm9Bnlz6y/3cyZPnMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1IbVlqZzlKbHhveWIwR2VYUHJMX2R6SmstYy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvYWYzZDgxLTAwNDctNDEzYy05MWY0 LTA0NzBiNGJiMzBkYi8xLzEtSG1Zamc5Smx4b3liMEdlWFByTF9kekprLWMubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzA1L2FmM2Q4MS0wMDQ3LTQxM2MtOTFmNC0wNDcwYjRiYjMw ZGIvMS8xLUhtWWpnOUpseG95YjBHZVhQckxfZHpKay1jLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj/4j hk4AL6QTKSU/jsnwWg5UdFpuN8sXrh95k9Vx66UQhzq6iZW+EcR7wLy4VDe3yhCZ eLauLN3HwEkza8PFqlk4m01/YWBUWOSCaZqIb8V5DcBNdPD54PWYW9TXCfhDc/+I ojDxF0I+/63OnVwwY1a7zBagBu58Bc51i7NxOYIl0JxkMi6xniOQxpGjx/W7PUQ4 bfhx0nP5xXxnogfOYYeDE+ca2Px/3BCVE3qFTGT8xNilVXqCOdv0LInbnRxGarH+ WGxZZUX1+gI1ta+GvDph4BhyH4VgKLvdJo9yn+80al8Li+8gpr/rzE6ZNnmjgeOR 2szu1T9VUr9WP8lHSA== -----END CERTIFICATE-----Generated at Sun Jan 25 10:57:15 2026 by rpki-client