This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft File: 1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft (raw, json) Hash identifier: E1HYJCWCXfdk8NFKX9LC/VTIsSf+s9UbhE0lFU9YMJQ= Subject key identifier: D1:86:83:3C:16:FC:5C:BB:C9:FE:54:C6:AE:E3:23:70:DB:70:63:15 Authority key identifier: F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73 Certificate issuer: /CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473 Certificate serial: 019BF619CA684A523D6EB0E5F8D0D912E955 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft Manifest number: 1816 Signing time: Sun 25 Jan 2026 17:00:43 +0000 Manifest this update: Sun 25 Jan 2026 17:00:43 +0000 Manifest next update: Mon 26 Jan 2026 17:00:43 +0000 Files and hashes: 1: 1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl (hash: 3HiuayHz8F/YiGemWzkBKBqOQHElPotJKHuJ7nMms+o=) 2: FHwGNHrCl9ZDaI5iHSATgi0eQI4.roa (hash: Ry8wkccjRDgFgOO1ND+5XAwtEK69W7guaqIyY6Z98Uk=) 3: GgM8OW03SnTWQN6a4-JcJuboxRQ.roa (hash: PcNLLvc5YaEzAxnanxM9AExzd2bC6OppQmgQXDF3KdM=) 4: HbEx7H1JLwPBlmcAN-xpDopPNGM.roa (hash: YJcx1ed3tK16bbLzRe+E+u16eoX0vPPKSbeVN78fzcs=) 5: KnpLhbBEufmPsTr4rfzt358Z5NA.roa (hash: spWQWP4oc84BPT4Abbm0x2lE5bf02yTSVRuZE9yCBqk=) 6: O01AHTz126xddYBIHOgu7hjWpTQ.roa (hash: wUbmS1l2rNfhauG9wUd4dDdjVRn6lpjxrfwiwa8yNYQ=) 7: paJ_DE2H42zvRaO-PkfsPRsWcgo.roa (hash: ZLCNlkkwSoN76l5ZmTEE4VyXeJGMvWwQpQVxOZQbfbA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:ca:68:4a:52:3d:6e:b0:e5:f8:d0:d9:12:e9:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473 Validity Not Before: Jan 25 17:00:43 2026 GMT Not After : Jan 26 17:00:43 2026 GMT Subject: CN=d186833c16fc5cbbc9fe54c6aee32370db706315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:74:3c:cc:d3:f7:a0:a5:7e:51:9e:de:6a:a6: 99:dc:a9:20:aa:3a:c4:6a:b5:0d:bf:42:0f:5c:7e: 4e:29:69:65:9e:bc:0c:a0:fd:19:ab:30:33:c8:fa: 05:ea:1d:87:62:13:4f:d8:bc:a3:5e:d7:0a:e0:eb: 4c:0f:ba:a3:e2:36:26:ef:d7:50:2d:1f:60:4f:7e: ac:30:40:7d:94:15:c3:54:5a:f6:35:a8:9d:13:c4: ce:9c:3f:b9:9b:ac:51:9a:dd:50:de:a3:be:c4:7c: d1:c0:e2:84:d6:9e:f8:d6:97:d8:fb:26:35:93:55: f4:c5:df:6d:92:e5:aa:75:45:e2:68:57:92:ae:a1: 74:df:c5:f9:f4:78:d0:c3:1a:80:8f:d7:6b:b7:61: 32:ff:96:68:9e:83:af:bb:78:65:b2:72:d3:49:c0: 7e:83:33:74:b5:b6:5c:24:87:09:1e:0f:d5:49:c4: b8:04:bf:34:a3:eb:0c:cb:b1:4d:0d:8d:18:59:85: e5:cb:67:dd:40:11:7e:ed:34:fc:55:90:c8:e1:92: 26:ee:6e:a3:6f:dd:01:5d:fa:1e:8c:2f:ca:8e:55: a1:3a:e0:9e:53:69:0a:9d:a8:87:45:3a:d5:42:35: 60:2a:8c:46:66:a4:9f:e5:34:dd:4c:58:3e:4b:30: a9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:86:83:3C:16:FC:5C:BB:C9:FE:54:C6:AE:E3:23:70:DB:70:63:15 X509v3 Authority Key Identifier: keyid:F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:a4:4f:fc:89:80:4b:83:9e:66:69:4e:b9:1e:3d:54:20:41: f0:66:d3:c1:db:a1:6c:a6:28:f3:e7:ee:43:59:ec:97:5e:53: d6:cd:94:91:60:3d:c9:d5:34:31:7a:2f:3f:c0:88:0e:2b:ae: d9:d6:d8:dc:3c:4c:6b:24:53:5a:4b:e4:5e:3a:9e:e4:ec:3e: 6a:35:31:a0:17:27:be:16:e8:25:58:21:a3:5f:74:a7:a2:8d: 2b:07:4f:27:4c:a9:0a:c3:46:97:da:cc:83:3d:b2:6e:9c:cc: 0f:d3:14:18:5c:f6:95:eb:15:3a:07:21:f6:ad:98:8a:9a:6d: 19:4f:a9:ec:6e:59:98:34:27:af:93:18:f9:1f:00:a5:20:1c: a1:0a:9f:33:27:6f:e9:ce:7f:85:37:de:84:17:ca:d6:a8:a9: ef:57:98:7b:53:4a:3e:87:69:fe:a3:c2:72:d5:c4:61:97:5b: ce:08:80:38:a4:fd:68:c3:c0:81:22:ff:17:ca:b1:02:30:bb: 68:00:d2:96:71:7e:74:1a:7a:69:2a:2c:e6:7d:96:85:50:f8: 34:9f:1b:91:d9:c3:fe:0c:1e:87:3c:55:e8:db:73:ef:b3:66: 1a:f8:3e:2e:cf:fc:3c:85:e2:03:ac:b0:d1:bd:d5:36:d7:3d: d0:23:1d:e0 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZv2GcpoSlI9brDl+NDZEulVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5ODU2ZDY3NGYwZTlkYmY2MDEyZDViNWQzZDk2YjQzYWZk NzY0NzMwHhcNMjYwMTI1MTcwMDQzWhcNMjYwMTI2MTcwMDQzWjAzMTEwLwYDVQQD EyhkMTg2ODMzYzE2ZmM1Y2JiYzlmZTU0YzZhZWUzMjM3MGRiNzA2MzE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXQ8zNP3oKV+UZ7eaqaZ3KkgqjrE arUNv0IPXH5OKWllnrwMoP0ZqzAzyPoF6h2HYhNP2LyjXtcK4OtMD7qj4jYm79dQ LR9gT36sMEB9lBXDVFr2NaidE8TOnD+5m6xRmt1Q3qO+xHzRwOKE1p741pfY+yY1 k1X0xd9tkuWqdUXiaFeSrqF038X59HjQwxqAj9drt2Ey/5ZonoOvu3hlsnLTScB+ gzN0tbZcJIcJHg/VScS4BL80o+sMy7FNDY0YWYXly2fdQBF+7TT8VZDI4ZIm7m6j b90BXfoejC/KjlWhOuCeU2kKnaiHRTrVQjVgKoxGZqSf5TTdTFg+SzCpRwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFNGGgzwW/Fy7yf5Uxq7jI3DbcGMVMB8GA1UdIwQY MBaAFPmFbWdPDp2/YBLVtdPZa0Ov12RzMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1ZVnRaMDhPbmI5Z0V0VzEwOWxyUTZfWFpITS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvOWY5NTkwLTdmMGEtNDFiMy1hYzRm LWVmZDE0ZGI5NTdmYi8xLzEtWVZ0WjA4T25iOWdFdFcxMDlsclE2X1haSE0ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzBhLzlmOTU5MC03ZjBhLTQxYjMtYWM0Zi1lZmQxNGRiOTU3 ZmIvMS8xLVlWdFowOE9uYjlnRXRXMTA5bHJRNl9YWkhNLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg6RP /ImAS4OeZmlOuR49VCBB8GbTwduhbKYo8+fuQ1nsl15T1s2UkWA9ydU0MXovP8CI Diuu2dbY3DxMayRTWkvkXjqe5Ow+ajUxoBcnvhboJVgho190p6KNKwdPJ0ypCsNG l9rMgz2ybpzMD9MUGFz2lesVOgch9q2YipptGU+p7G5ZmDQnr5MY+R8ApSAcoQqf Mydv6c5/hTfehBfK1qip71eYe1NKPodp/qPCctXEYZdbzgiAOKT9aMPAgSL/F8qx AjC7aADSlnF+dBp6aSos5n2WhVD4NJ8bkdnD/gwehzxV6Ntz77NmGvg+Ls/8PIXi A6yw0b3VNtc90CMd4A== -----END CERTIFICATE-----Generated at Mon Jan 26 01:47:50 2026 by rpki-client