This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft File: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft (raw, json) Hash identifier: jICY6LHEA70QA6txVByKyzFUu+kwVVp/A1w0IO7Ru+A= Subject key identifier: 05:84:06:DC:1A:39:27:DA:71:39:A7:99:49:1C:E3:3E:95:A0:30:93 Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Certificate serial: 019BF350362756E0DF4E12CAEFE71081C376 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft Manifest number: 04A6 Signing time: Sun 25 Jan 2026 04:01:18 +0000 Manifest this update: Sun 25 Jan 2026 04:01:18 +0000 Manifest next update: Mon 26 Jan 2026 04:01:18 +0000 Files and hashes: 1: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl (hash: OFkXPPDWjNGlVpsR1e+T5PBQmOtirrEy2jp3Y5iJAgI=) 2: 8VR_70lIhmbfQBWM0i8fejstj38.roa (hash: Vj2s6dE2P9YyRs2ziRnc2lYG3zxZVM5Ki2i2rLNZoPU=) 3: IBFPVg1WuDm65Jw2m_fVJAyOedk.roa (hash: tJKvOE2WhOZh+G+P3u4BKzx6sTkBmdWFGnRM26n0+zU=) 4: Js0D1dKcCRCyaMS4X9qvQh8BEYU.roa (hash: dexsbuxyvdOI74SuhajyHOcLTDp1qWzKLhChO62hrlM=) 5: NKqrv9sDZ1nAU7J1HrXdGMdmfec.roa (hash: 9v6YxW8qyH+sqKsdab1x1A8WsrkKuelVETBIelHHSR8=) 6: QAp6yJwPuhUvd9i3Kzl_JEzAJVg.roa (hash: Jys9YgG9ppmSQvYF69uVgiEGyzFWr92qTU99vvfDxys=) 7: XuHYtXTJlwVBCGN3yungnO5pdQI.roa (hash: gSbsrnpOJSy2l2TUoL9bEjo+iLtH7tQ6JWbYBCOLZio=) 8: ZVUX-ukmxmMuSmBaOHN4VXarmdk.roa (hash: v4YUjhuoNj8kXmli1Rh7WdYmfXPmnvN9UdaKmw/4lRw=) 9: pChNr3xOwGeIYeWfyjrB2pRGT1k.roa (hash: TuBrbJECgEzxz9W1Y1v2rvBjPMA5ppOrlaAsyOWhGos=) 10: wur7LoBXGPmpSWYqNcKF64RczZc.roa (hash: bPE+qqedOgayQ6lK7PZoR7nqIaBzdYhDVn214fqUaAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:50:36:27:56:e0:df:4e:12:ca:ef:e7:10:81:c3:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Validity Not Before: Jan 25 04:01:18 2026 GMT Not After : Jan 26 04:01:18 2026 GMT Subject: CN=058406dc1a3927da7139a799491ce33e95a03093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0b:23:b6:5e:85:5f:bd:d1:67:38:7b:45:de: 7c:61:db:7e:bd:39:b3:db:67:5f:e9:a6:37:53:28: 0a:78:de:02:65:a3:00:bb:e7:8d:81:85:ca:d6:1f: b2:13:6d:7c:3b:9b:77:ab:05:f7:71:21:21:15:27: 7a:de:06:dc:ab:1e:e8:48:fb:bf:a9:5b:94:0d:9c: 8b:65:85:f7:96:9e:63:f7:25:d6:f2:01:9b:0e:68: 58:16:83:10:d3:b4:e7:95:4f:b8:a1:05:65:00:ce: 06:af:0f:15:0b:c4:21:a4:02:62:a6:1d:72:0f:a6: 12:16:e1:e8:b8:90:2a:11:8f:2b:3e:b8:e6:63:2b: 25:52:ec:87:28:44:e0:18:e8:0a:dc:fc:3f:14:59: b3:57:f3:1c:cb:ae:7b:55:7b:36:1b:52:c3:78:c9: 35:4a:ad:9f:82:4d:f3:bd:f3:70:28:0e:62:28:53: c4:04:0e:a2:d8:9d:19:91:15:9e:1e:5f:dc:13:2f: 71:85:7e:b0:3a:71:cf:67:00:d9:f9:84:5c:98:f7: 5c:87:b7:31:31:70:b2:0a:c3:c2:fd:cd:9e:f5:cb: 8a:5f:d5:37:d9:38:36:9c:07:69:7f:7f:87:65:07: 60:9e:27:8e:74:f2:9a:f7:5e:10:f8:25:af:44:44: 7e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:84:06:DC:1A:39:27:DA:71:39:A7:99:49:1C:E3:3E:95:A0:30:93 X509v3 Authority Key Identifier: keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:51:83:cd:aa:fb:93:36:d4:77:af:2a:9d:b6:50:3e:c3:9e: d8:54:23:e2:94:f6:c2:b6:12:0c:b5:f5:8c:2c:8e:7a:95:17: 04:05:b5:03:11:7b:bf:d1:57:83:64:34:b6:04:7f:e6:4d:d5: 35:9d:64:29:06:91:1c:ad:71:65:55:86:38:e5:83:50:23:70: 0c:c7:a8:74:c5:d7:94:91:b9:48:be:c6:15:7b:57:91:d5:48: 88:6e:d9:5d:bc:d5:59:09:ac:5d:d7:cb:09:04:ce:f8:be:1a: 22:f5:3d:b9:c2:8a:88:19:14:b1:cd:a8:91:84:6e:b8:0b:5c: 72:db:6e:09:36:2d:10:27:3c:50:1d:23:ab:9e:c0:22:82:b2: 30:c7:a2:28:2b:ce:f3:4a:dc:a7:54:ef:ca:23:c6:3e:f7:9b: 6b:e1:84:65:8b:1f:25:1b:62:b3:c7:16:c9:fb:4c:5b:b0:12: 39:1e:6a:2d:9a:15:97:b2:e2:5e:25:f8:5b:00:42:0d:48:70: bf:91:47:20:bf:d4:6a:3c:8e:24:fe:a5:66:5b:ef:07:4d:fc: c4:e3:b4:b9:d4:2b:e3:97:07:31:36:8d:89:c5:01:8c:46:97: 7c:e2:60:36:64:1e:a1:00:35:7d:ee:7a:03:97:d4:22:e6:ae: 5b:25:69:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzUDYnVuDfThLK7+cQgcN2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Y2UyYmYwMDAxY2Q0MzBlOTI3N2ZiMDBlZDFhYmU1MWMw YjVjN2MwHhcNMjYwMTI1MDQwMTE4WhcNMjYwMTI2MDQwMTE4WjAzMTEwLwYDVQQD EygwNTg0MDZkYzFhMzkyN2RhNzEzOWE3OTk0OTFjZTMzZTk1YTAzMDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygsjtl6FX73RZzh7Rd58Ydt+vTmz 22df6aY3UygKeN4CZaMAu+eNgYXK1h+yE218O5t3qwX3cSEhFSd63gbcqx7oSPu/ qVuUDZyLZYX3lp5j9yXW8gGbDmhYFoMQ07TnlU+4oQVlAM4Grw8VC8QhpAJiph1y D6YSFuHouJAqEY8rPrjmYyslUuyHKETgGOgK3Pw/FFmzV/Mcy657VXs2G1LDeMk1 Sq2fgk3zvfNwKA5iKFPEBA6i2J0ZkRWeHl/cEy9xhX6wOnHPZwDZ+YRcmPdch7cx MXCyCsPC/c2e9cuKX9U32Tg2nAdpf3+HZQdgnieOdPKa914Q+CWvRER+jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAWEBtwaOSfacTmnmUkc4z6VoDCTMB8GA1UdIwQY MBaAFNTOK/AAHNQw6Sd/sA7Rq+UcC1x8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEt MWY1NDMxZTJhNWFmLzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEtMWY1NDMxZTJhNWFm LzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXVGDzar7 kzbUd68qnbZQPsOe2FQj4pT2wrYSDLX1jCyOepUXBAW1AxF7v9FXg2Q0tgR/5k3V NZ1kKQaRHK1xZVWGOOWDUCNwDMeodMXXlJG5SL7GFXtXkdVIiG7ZXbzVWQmsXdfL CQTO+L4aIvU9ucKKiBkUsc2okYRuuAtccttuCTYtECc8UB0jq57AIoKyMMeiKCvO 80rcp1TvyiPGPveba+GEZYsfJRtis8cWyftMW7ASOR5qLZoVl7LiXiX4WwBCDUhw v5FHIL/UajyOJP6lZlvvB038xOO0udQr45cHMTaNicUBjEaXfOJgNmQeoQA1fe56 A5fUIuauWyVpnw== -----END CERTIFICATE-----Generated at Sun Jan 25 16:18:42 2026 by rpki-client