This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft File: 1fD0usX5pQIvwty8Sj20zGsRZkQ.mft (raw, json) Hash identifier: vb8uozSvdoPhE6H8S8/p5ctw4uVg4YimbxY1FrsOIgg= Subject key identifier: D4:15:AC:04:15:BA:A4:88:3C:3E:05:F6:83:24:39:E8:11:82:3F:6D Authority key identifier: D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44 Certificate issuer: /CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644 Certificate serial: 019BF6F5CE858FC49E258E2BEBBE53F0CB42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft Manifest number: 16D0 Signing time: Sun 25 Jan 2026 21:01:02 +0000 Manifest this update: Sun 25 Jan 2026 21:01:02 +0000 Manifest next update: Mon 26 Jan 2026 21:01:02 +0000 Files and hashes: 1: 1fD0usX5pQIvwty8Sj20zGsRZkQ.crl (hash: vQ838Z6bfJBbBSK//vDHBX4HKW16fL95BIsJJGJH7HU=) 2: 37hbQJ7zVxzVagSbASxlGNa7rGQ.roa (hash: ZiPWwSin+eQu8Naroa7jWI6Yudz7OyFOeo7L1bmKWLo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:ce:85:8f:c4:9e:25:8e:2b:eb:be:53:f0:cb:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644 Validity Not Before: Jan 25 21:01:02 2026 GMT Not After : Jan 26 21:01:02 2026 GMT Subject: CN=d415ac0415baa4883c3e05f6832439e811823f6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d3:ee:ec:98:48:ff:56:1a:e8:94:7d:23:fd: 83:a1:7e:43:a1:84:0d:e7:1e:d8:67:bc:32:65:b8: 87:2b:94:c7:a4:41:e2:ac:0f:ba:d2:b7:52:e1:ae: 71:c0:5e:65:f6:c0:e3:b0:be:fe:a5:42:74:86:6b: 24:0e:9f:c1:28:ac:62:f6:6f:c4:9f:b0:13:c3:93: 56:e0:30:59:5f:cd:e1:e2:fe:09:97:70:63:db:58: 1e:79:aa:71:76:bd:b7:1d:7b:ea:4a:78:34:c3:3c: 07:d3:24:35:bc:ba:af:63:b6:74:2e:a5:91:35:7e: 53:80:5f:a2:fe:a4:61:86:19:4d:da:9c:f1:3d:30: 05:37:38:78:06:70:b8:7f:39:ef:07:8f:e6:f3:a7: f4:de:df:bb:d1:70:2f:e8:04:2b:f0:c0:3f:7c:61: 12:52:a3:e3:3d:86:92:e8:85:53:dd:fc:96:7e:f4: a3:be:e8:7e:52:e3:fd:f9:08:a3:15:37:13:c0:7b: 0f:8a:30:98:41:f7:c2:0f:a5:f4:11:db:e0:37:2c: 77:ea:9e:49:61:bd:8b:1f:24:72:21:2a:ce:11:ac: 8f:ff:06:11:0e:8f:dc:bc:e7:6e:b3:88:ed:80:ff: 00:67:e1:9c:60:a8:5f:32:bd:d1:58:9a:f8:92:99: db:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:15:AC:04:15:BA:A4:88:3C:3E:05:F6:83:24:39:E8:11:82:3F:6D X509v3 Authority Key Identifier: keyid:D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:a9:3c:ea:97:f6:61:57:00:e7:8d:77:a9:1e:fe:b2:ff:fe: f4:c4:0e:b5:9a:ae:4c:31:3b:a2:fb:a4:76:bd:d8:ff:5d:ef: 6a:a1:0c:22:8d:db:c1:6b:c4:a1:17:57:0e:2f:c3:22:4d:29: 62:db:ef:f1:f8:84:7b:01:a7:30:73:ed:d7:a6:6a:2a:1c:ef: 64:52:4b:cb:98:f8:4e:d0:7f:8b:22:72:bf:98:45:64:a4:31: 03:94:45:4c:7d:ce:f9:f4:0c:03:91:1c:75:19:41:cf:47:56: af:10:bf:fb:f7:54:a0:44:1f:f7:62:bc:d4:61:75:ea:a4:a8: 5d:38:68:cd:5f:da:95:e1:f3:dc:7d:4f:8b:a8:fe:4f:b0:55: 6b:b2:98:99:b7:80:c3:7a:a4:c7:73:9e:a3:c0:83:ee:ee:9d: 7b:b7:26:a2:e7:a3:6b:b9:74:c9:a0:2d:34:e8:33:e0:be:b5: 18:2e:5f:14:f1:3b:e4:e9:5e:ab:e4:f4:eb:57:ab:70:d9:04: 20:98:0c:7b:2f:7a:0d:71:1a:e5:d5:c6:84:d0:9d:cd:2b:92: 1b:05:7e:46:09:c6:45:34:a1:92:34:f9:c9:b0:7c:20:19:49: 51:0d:ef:20:36:31:69:96:4a:73:64:0e:94:03:ef:ed:98:55: b3:19:84:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29c6Fj8SeJY4r675T8MtCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZjBmNGJhYzVmOWE1MDIyZmMyZGNiYzRhM2RiNGNjNmIx MTY2NDQwHhcNMjYwMTI1MjEwMTAyWhcNMjYwMTI2MjEwMTAyWjAzMTEwLwYDVQQD EyhkNDE1YWMwNDE1YmFhNDg4M2MzZTA1ZjY4MzI0MzllODExODIzZjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutPu7JhI/1Ya6JR9I/2DoX5DoYQN 5x7YZ7wyZbiHK5THpEHirA+60rdS4a5xwF5l9sDjsL7+pUJ0hmskDp/BKKxi9m/E n7ATw5NW4DBZX83h4v4Jl3Bj21geeapxdr23HXvqSng0wzwH0yQ1vLqvY7Z0LqWR NX5TgF+i/qRhhhlN2pzxPTAFNzh4BnC4fznvB4/m86f03t+70XAv6AQr8MA/fGES UqPjPYaS6IVT3fyWfvSjvuh+UuP9+QijFTcTwHsPijCYQffCD6X0EdvgNyx36p5J Yb2LHyRyISrOEayP/wYRDo/cvOdus4jtgP8AZ+GcYKhfMr3RWJr4kpnbKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNQVrAQVuqSIPD4F9oMkOegRgj9tMB8GA1UdIwQY MBaAFNXw9LrF+aUCL8LcvEo9tMxrEWZEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWZEMHVzWDVwUUl2d3R5OFNqMjB6R3NSWmtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9hNmQ1NzItMzA0My00ZDE5LTkxNDAt OTkyNTQxZmRlYmVhLzEvMWZEMHVzWDVwUUl2d3R5OFNqMjB6R3NSWmtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9hNmQ1NzItMzA0My00ZDE5LTkxNDAtOTkyNTQxZmRlYmVh LzEvMWZEMHVzWDVwUUl2d3R5OFNqMjB6R3NSWmtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhqk86pf2 YVcA5413qR7+sv/+9MQOtZquTDE7ovukdr3Y/13vaqEMIo3bwWvEoRdXDi/DIk0p Ytvv8fiEewGnMHPt16ZqKhzvZFJLy5j4TtB/iyJyv5hFZKQxA5RFTH3O+fQMA5Ec dRlBz0dWrxC/+/dUoEQf92K81GF16qSoXThozV/aleHz3H1Pi6j+T7BVa7KYmbeA w3qkx3Oeo8CD7u6de7cmoueja7l0yaAtNOgz4L61GC5fFPE75Oleq+T061ercNkE IJgMey96DXEa5dXGhNCdzSuSGwV+RgnGRTShkjT5ybB8IBlJUQ3vIDYxaZZKc2QO lAPv7ZhVsxmElA== -----END CERTIFICATE-----Generated at Mon Jan 26 03:11:52 2026 by rpki-client