This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft File: 1zCimUHvvHp5J_ApSB4scloaZxE.mft (raw, json) Hash identifier: BtgCjNl6fgtWANYVcCNL98o6Orhzk3kmC4LFDucfIOg= Subject key identifier: 7E:5B:8C:00:C0:2B:68:B5:EF:B2:7A:C8:E3:01:17:6E:44:12:03:BA Authority key identifier: D7:30:A2:99:41:EF:BC:7A:79:27:F0:29:48:1E:2C:72:5A:1A:67:11 Certificate issuer: /CN=d730a29941efbc7a7927f029481e2c725a1a6711 Certificate serial: 019BF6BF473683B8036641B9FBE9D785B3F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zCimUHvvHp5J_ApSB4scloaZxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 20:01:29 +0000 Manifest this update: Sun 25 Jan 2026 20:01:29 +0000 Manifest next update: Mon 26 Jan 2026 20:01:29 +0000 Files and hashes: 1: 1zCimUHvvHp5J_ApSB4scloaZxE.crl (hash: TWov48ViO+qmWgaUT902B6vJWS7M/e3BvSm5V5EcV70=) 2: YsrfKZUom0hhdvtAbQlQ31S1LpI.roa (hash: QER6EJFTVwn6uMFElRbueTl9ramohyi1r1R/wDUOkjQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft rsync://rpki.ripe.net/repository/DEFAULT/1zCimUHvvHp5J_ApSB4scloaZxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:47:36:83:b8:03:66:41:b9:fb:e9:d7:85:b3:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d730a29941efbc7a7927f029481e2c725a1a6711 Validity Not Before: Jan 25 20:01:29 2026 GMT Not After : Jan 26 20:01:29 2026 GMT Subject: CN=7e5b8c00c02b68b5efb27ac8e301176e441203ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2d:bd:bb:90:e1:ba:3b:07:fb:55:ae:73:2a: 58:7e:34:36:07:87:2d:da:02:40:37:dd:e1:33:d1: ef:41:db:97:37:af:04:41:a5:d6:cd:56:d7:a1:90: f8:c2:4b:f9:40:50:9e:47:6e:65:79:92:14:31:b9: 28:f7:73:ba:44:9c:ad:1b:30:fd:20:29:bd:4f:94: 31:08:d6:ed:b0:f5:00:07:f8:cc:06:f4:b5:35:b2: 55:53:c2:27:0b:f1:b7:98:dc:4c:6f:aa:99:43:97: 07:9a:1c:3f:cf:0b:3f:aa:6b:07:4f:32:3b:f3:1d: af:a8:08:d0:73:98:09:5e:95:39:8a:27:cc:48:37: 8a:51:3c:a3:9f:ef:cf:28:cc:b0:c9:bb:4e:e6:a4: 72:df:50:40:1e:76:28:ca:a9:11:b9:86:89:4f:57: 64:a5:0b:93:e5:ca:a1:f4:44:8b:38:e8:83:ba:ca: 11:93:85:0a:ee:31:88:56:ea:68:c6:2a:0f:b1:03: 58:85:f6:ec:ff:6d:8a:a9:20:2f:8c:a7:68:a3:17: bd:37:17:a8:22:34:92:6f:94:0c:e7:87:6c:b1:83: cb:7d:88:0a:df:62:0e:df:e5:df:a3:6d:bd:b8:4e: c1:fa:dc:a4:c1:5c:3b:b6:96:59:4d:63:2a:a3:95: f4:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:5B:8C:00:C0:2B:68:B5:EF:B2:7A:C8:E3:01:17:6E:44:12:03:BA X509v3 Authority Key Identifier: keyid:D7:30:A2:99:41:EF:BC:7A:79:27:F0:29:48:1E:2C:72:5A:1A:67:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zCimUHvvHp5J_ApSB4scloaZxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:a0:bf:81:25:1a:a7:ce:ac:b9:85:a9:59:64:a7:ed:9b:8a: b2:c4:5e:ff:ee:06:32:9d:58:10:14:70:4b:a2:62:fe:79:b6: f9:df:87:72:04:22:09:f3:59:d1:a4:e8:3f:87:21:33:7e:cf: 00:15:59:a6:8f:6a:ef:7e:4a:ba:73:24:d9:20:44:0e:1c:4a: 9e:15:af:71:bb:02:bf:b9:0b:f6:8d:d1:60:5c:cd:43:78:04: 37:84:de:72:6e:a9:26:2a:37:d4:b5:9b:0f:c7:7a:a0:ca:ae: 0a:38:6a:16:53:07:e4:df:a6:87:ca:67:1c:2b:31:4a:7b:17: b9:00:3a:31:5c:60:26:c6:b6:ca:25:ae:10:0a:f9:4e:11:42: 00:73:4a:37:bf:b5:76:66:bb:b5:f6:63:e9:65:12:80:55:51: 8b:cb:8d:34:ad:9d:14:ac:0e:a2:9a:96:80:14:f8:1a:5e:87: cc:37:71:e3:90:a0:2e:47:d8:b1:06:e9:8c:d5:85:8a:b0:94: 67:8b:e2:48:72:53:b4:dc:b1:cc:bc:ef:65:06:75:8f:d2:03: d7:0b:43:3b:73:74:9e:a5:bd:9a:b8:87:65:15:ed:d8:90:14: 22:a4:10:9f:4a:c9:83:1a:bc:00:b1:e0:33:cd:b6:11:7c:0d: 9f:cb:4e:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2v0c2g7gDZkG5++nXhbP0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MzBhMjk5NDFlZmJjN2E3OTI3ZjAyOTQ4MWUyYzcyNWEx YTY3MTEwHhcNMjYwMTI1MjAwMTI5WhcNMjYwMTI2MjAwMTI5WjAzMTEwLwYDVQQD Eyg3ZTViOGMwMGMwMmI2OGI1ZWZiMjdhYzhlMzAxMTc2ZTQ0MTIwM2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAui29u5DhujsH+1WucypYfjQ2B4ct 2gJAN93hM9HvQduXN68EQaXWzVbXoZD4wkv5QFCeR25leZIUMbko93O6RJytGzD9 ICm9T5QxCNbtsPUAB/jMBvS1NbJVU8InC/G3mNxMb6qZQ5cHmhw/zws/qmsHTzI7 8x2vqAjQc5gJXpU5iifMSDeKUTyjn+/PKMywybtO5qRy31BAHnYoyqkRuYaJT1dk pQuT5cqh9ESLOOiDusoRk4UK7jGIVupoxioPsQNYhfbs/22KqSAvjKdooxe9Nxeo IjSSb5QM54dssYPLfYgK32IO3+Xfo229uE7B+tykwVw7tpZZTWMqo5X0lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH5bjADAK2i177J6yOMBF25EEgO6MB8GA1UdIwQY MBaAFNcwoplB77x6eSfwKUgeLHJaGmcRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXpDaW1VSHZ2SHA1Sl9BcFNCNHNjbG9hWnhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi82NGM1YTktYjM3OS00OTk5LWFmN2Et M2MwZmExOGM1OGNiLzEvMXpDaW1VSHZ2SHA1Sl9BcFNCNHNjbG9hWnhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi82NGM1YTktYjM3OS00OTk5LWFmN2EtM2MwZmExOGM1OGNi LzEvMXpDaW1VSHZ2SHA1Sl9BcFNCNHNjbG9hWnhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcaC/gSUa p86suYWpWWSn7ZuKssRe/+4GMp1YEBRwS6Ji/nm2+d+HcgQiCfNZ0aToP4chM37P ABVZpo9q735KunMk2SBEDhxKnhWvcbsCv7kL9o3RYFzNQ3gEN4Tecm6pJio31LWb D8d6oMquCjhqFlMH5N+mh8pnHCsxSnsXuQA6MVxgJsa2yiWuEAr5ThFCAHNKN7+1 dma7tfZj6WUSgFVRi8uNNK2dFKwOopqWgBT4Gl6HzDdx45CgLkfYsQbpjNWFirCU Z4viSHJTtNyxzLzvZQZ1j9ID1wtDO3N0nqW9mriHZRXt2JAUIqQQn0rJgxq8ALHg M822EXwNn8tOTw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:12:30 2026 by rpki-client