This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft File: 1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft (raw, json) Hash identifier: 9h2wRef6tXIuLAGhiAp+Tm8aQ25sSOhLmOna4/u+aKw= Subject key identifier: 5A:5C:8C:FF:2D:71:AF:F2:73:BB:22:4C:12:96:21:72:9D:59:9E:89 Authority key identifier: FB:1F:CE:9A:A7:2C:83:84:96:F4:BD:EF:9C:1F:0B:8E:89:4F:C9:8E Certificate issuer: /CN=fb1fce9aa72c838496f4bdef9c1f0b8e894fc98e Certificate serial: 019BF5ABDD6FCDC425A778A975046DF76A7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft Manifest number: 158A Signing time: Sun 25 Jan 2026 15:00:39 +0000 Manifest this update: Sun 25 Jan 2026 15:00:39 +0000 Manifest next update: Mon 26 Jan 2026 15:00:39 +0000 Files and hashes: 1: 1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl (hash: xeDcdHIkvZ8HufhdC1oy95b9+3jAHpjQn7CfBt+qyVg=) 2: DIEeHXr-sg72w8tBgzQ5nqnQ7go.roa (hash: EtH8YkhhVk7GVyIh/CoOOspQ4bbxWgxf9R15/OkaX/M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ab:dd:6f:cd:c4:25:a7:78:a9:75:04:6d:f7:6a:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb1fce9aa72c838496f4bdef9c1f0b8e894fc98e Validity Not Before: Jan 25 15:00:39 2026 GMT Not After : Jan 26 15:00:39 2026 GMT Subject: CN=5a5c8cff2d71aff273bb224c129621729d599e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8c:1a:7b:ed:a2:25:e0:47:48:f0:19:02:74: 54:82:d0:cc:78:18:42:fd:b4:76:ba:11:32:35:5c: 83:99:68:3b:41:bc:ff:d0:c1:92:1c:4d:47:e2:11: 8c:23:ea:b9:34:c9:61:5e:10:92:7b:19:fd:cd:e2: 33:dc:f4:04:2d:fa:79:2b:54:88:1c:5f:9e:3e:e0: 2b:bc:76:36:cf:9c:bf:0a:cd:01:82:0d:8c:55:b1: 3d:cb:ea:2e:fe:b4:94:28:8b:e2:9f:bd:45:8f:56: 1c:13:5a:3c:4c:95:b6:6b:04:11:62:47:9d:b8:67: 21:2a:b8:0a:a4:64:42:cd:a8:c9:4f:12:49:18:3f: 86:2b:4a:b1:f5:df:97:85:53:b7:b5:a3:2d:c1:45: 95:b9:f0:c8:57:00:89:8e:dd:c1:27:17:cd:0e:0b: aa:62:18:1c:94:59:8f:b2:32:8a:21:72:8d:ec:02: 64:f3:bf:8a:ba:47:80:5e:99:f8:05:cc:f0:30:70: 21:da:93:82:4f:3b:35:05:76:48:f1:fc:5f:04:00: cf:b2:50:19:81:e4:64:2c:72:e6:2b:a0:a4:83:aa: 89:ad:c7:0e:9e:ed:d0:d7:c1:61:40:61:d9:d4:d3: fb:2d:25:5a:91:41:fc:6e:14:97:fd:80:11:eb:df: ec:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:5C:8C:FF:2D:71:AF:F2:73:BB:22:4C:12:96:21:72:9D:59:9E:89 X509v3 Authority Key Identifier: keyid:FB:1F:CE:9A:A7:2C:83:84:96:F4:BD:EF:9C:1F:0B:8E:89:4F:C9:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:46:2f:12:f5:ea:e4:30:38:ac:d1:05:4d:6d:c0:36:d0:38: ac:6d:fe:49:7f:fc:ba:10:11:77:ab:1c:33:4a:9c:3e:7c:6d: de:36:d8:db:ab:9e:4a:aa:88:98:d9:a2:40:43:1c:d1:a7:21: 53:43:a9:eb:a2:ef:e9:43:56:fc:aa:b7:24:a8:b2:c9:a1:1b: 51:51:0e:77:5d:07:c7:25:5f:d5:9c:d7:f9:67:dd:f7:0d:72: f3:2d:85:0e:46:92:55:6c:bb:72:2f:3f:68:30:2f:4b:f5:14: 90:31:99:37:6c:d5:87:8f:b4:42:64:b8:0c:f0:eb:65:37:7b: 90:8c:a4:95:2c:84:4a:ea:05:fc:ab:e4:4d:6c:24:26:45:a7: 01:7c:8d:b8:fb:42:df:6f:0b:17:ae:e7:21:4e:6d:b6:6c:9e: fd:03:12:5d:b7:4a:ef:1a:21:c7:3f:bf:46:11:9e:f4:89:4d: bc:9a:7f:6a:c9:16:63:e8:9e:c9:1a:86:83:8f:8d:8f:25:d8: 46:8d:18:d7:7e:45:65:26:6f:8b:4d:f8:f6:7a:30:d3:53:84: b9:aa:2a:60:31:1c:2b:e5:0a:30:b5:c5:91:5e:08:b0:ca:9c: 26:34:72:7c:b2:73:00:42:7c:c6:5e:75:74:fe:94:b6:1b:fa: c4:7f:73:cd -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZv1q91vzcQlp3ipdQRt92p9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiMWZjZTlhYTcyYzgzODQ5NmY0YmRlZjljMWYwYjhlODk0 ZmM5OGUwHhcNMjYwMTI1MTUwMDM5WhcNMjYwMTI2MTUwMDM5WjAzMTEwLwYDVQQD Eyg1YTVjOGNmZjJkNzFhZmYyNzNiYjIyNGMxMjk2MjE3MjlkNTk5ZTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4wae+2iJeBHSPAZAnRUgtDMeBhC /bR2uhEyNVyDmWg7Qbz/0MGSHE1H4hGMI+q5NMlhXhCSexn9zeIz3PQELfp5K1SI HF+ePuArvHY2z5y/Cs0Bgg2MVbE9y+ou/rSUKIvin71Fj1YcE1o8TJW2awQRYked uGchKrgKpGRCzajJTxJJGD+GK0qx9d+XhVO3taMtwUWVufDIVwCJjt3BJxfNDguq YhgclFmPsjKKIXKN7AJk87+KukeAXpn4BczwMHAh2pOCTzs1BXZI8fxfBADPslAZ geRkLHLmK6Ckg6qJrccOnu3Q18FhQGHZ1NP7LSVakUH8bhSX/YAR69/sbwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFFpcjP8tca/yc7siTBKWIXKdWZ6JMB8GA1UdIwQY MBaAFPsfzpqnLIOElvS975wfC46JT8mOMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS14X09tcWNzZzRTVzlMM3ZuQjhMam9sUHlZNC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQvNTY1NWY1LTAxNDEtNGYzZC1hNTBj LWI1OTk4NjgwZDkxNC8xLzEteF9PbXFjc2c0U1c5TDN2bkI4TGpvbFB5WTQubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzE0LzU2NTVmNS0wMTQxLTRmM2QtYTUwYy1iNTk5ODY4MGQ5 MTQvMS8xLXhfT21xY3NnNFNXOUwzdm5COExqb2xQeVk0LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV0Yv EvXq5DA4rNEFTW3ANtA4rG3+SX/8uhARd6scM0qcPnxt3jbY26ueSqqImNmiQEMc 0achU0Op66Lv6UNW/Kq3JKiyyaEbUVEOd10HxyVf1ZzX+Wfd9w1y8y2FDkaSVWy7 ci8/aDAvS/UUkDGZN2zVh4+0QmS4DPDrZTd7kIyklSyESuoF/KvkTWwkJkWnAXyN uPtC328LF67nIU5ttmye/QMSXbdK7xohxz+/RhGe9IlNvJp/askWY+ieyRqGg4+N jyXYRo0Y135FZSZvi0349now01OEuaoqYDEcK+UKMLXFkV4IsMqcJjRyfLJzAEJ8 xl51dP6Uthv6xH9zzQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:56:50 2026 by rpki-client