This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft File: 1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft (raw, json) Hash identifier: iR+0pFYJvqwS0ezyh31x5lkqbthNACMkd50/7N+tc3M= Subject key identifier: 09:2A:4E:EF:36:96:A9:42:BB:B4:FE:F2:8E:46:B4:C0:12:D3:92:A3 Authority key identifier: D4:7E:62:CB:F5:FE:F3:37:7F:9E:7C:D5:85:58:F4:4E:2E:EA:9B:CE Certificate issuer: /CN=d47e62cbf5fef3377f9e7cd58558f44e2eea9bce Certificate serial: 019BF83F31E576708C09770F110DA03BF9C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft Manifest number: 077D Signing time: Mon 26 Jan 2026 03:00:49 +0000 Manifest this update: Mon 26 Jan 2026 03:00:49 +0000 Manifest next update: Tue 27 Jan 2026 03:00:49 +0000 Files and hashes: 1: 1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl (hash: /AsAmwlgUa6zGLnPDQ7cpaO00VKpMUyJ3nhXO6nx6+A=) 2: HvbqYPMAVepvi6ZtkrW2fUxUxMM.roa (hash: kj2P3vyd4ShtsXAZbQsRTziSHIgT6QC6RQY8zqv9EFQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:31:e5:76:70:8c:09:77:0f:11:0d:a0:3b:f9:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d47e62cbf5fef3377f9e7cd58558f44e2eea9bce Validity Not Before: Jan 26 03:00:49 2026 GMT Not After : Jan 27 03:00:49 2026 GMT Subject: CN=092a4eef3696a942bbb4fef28e46b4c012d392a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fa:36:a4:d7:4b:4b:6c:f9:c0:80:a3:c9:76: 17:a1:99:ab:73:1d:81:64:4d:78:e4:31:d3:9d:34: 6f:73:fa:46:d2:b7:ef:04:bb:01:9d:bd:f8:87:3d: 7c:c1:6b:de:c3:7e:eb:1f:72:e1:5f:37:49:2d:57: d2:be:fe:c2:97:d8:e4:01:52:98:da:4d:75:10:36: 6b:d7:82:a7:89:90:21:b9:eb:52:4d:d3:b4:86:ef: de:c0:92:b4:12:79:c7:3d:8c:bf:e4:9c:98:f0:e5: fe:8d:57:f7:e0:f0:56:35:f0:f9:be:49:f7:08:bd: 04:c0:2c:90:87:50:ae:10:3d:36:90:4a:99:82:c4: 10:66:6b:ec:b6:91:0a:85:5d:76:a6:99:22:1f:95: 70:fc:e5:bd:69:a1:72:06:d9:1c:81:09:d7:f2:48: 10:52:28:9f:f4:2f:5a:d4:92:f3:6c:1f:ef:c5:06: 1b:45:3f:82:0e:c8:ed:88:66:1c:a9:37:45:5a:ca: d0:14:78:59:3f:21:be:61:0f:17:79:64:3b:0a:b9: 43:e2:49:04:de:b8:83:a0:12:23:15:0e:bf:26:94: 68:d0:ff:01:dd:ec:b5:7d:ca:2c:4f:37:00:ca:31: 45:5d:04:ea:be:1a:28:9d:1a:eb:31:e0:e7:17:a1: 66:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:2A:4E:EF:36:96:A9:42:BB:B4:FE:F2:8E:46:B4:C0:12:D3:92:A3 X509v3 Authority Key Identifier: keyid:D4:7E:62:CB:F5:FE:F3:37:7F:9E:7C:D5:85:58:F4:4E:2E:EA:9B:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:7f:27:04:7c:42:e3:d1:7e:97:ce:7f:5b:4a:20:a2:84:b0: 97:8b:e4:31:5a:35:0d:58:d6:70:dc:11:0a:09:1a:42:93:13: 51:0b:96:e7:73:c5:1c:fd:4e:13:f3:d8:d4:03:a0:43:b6:11: fd:15:cd:22:7c:0e:1d:13:41:58:7e:57:7d:df:bf:f5:ac:03: 1a:62:44:62:c9:e1:e2:ba:04:38:d9:e7:3e:58:4d:42:4a:0a: 2c:5f:ad:8c:9f:b7:0a:8d:45:45:66:ae:76:34:0c:89:83:ad: 76:16:68:75:48:53:cf:a8:33:1e:57:cf:c7:21:dd:d9:49:2a: d1:8c:55:f6:e7:73:f5:22:95:53:d6:eb:09:7e:63:f5:da:12: 8a:9a:7e:5c:22:9c:17:84:12:36:1a:a5:81:7b:6c:0b:27:5d: d8:1f:2b:00:d9:11:e2:14:fe:60:2d:c7:c9:fe:12:1f:a7:70: 23:72:88:19:db:f7:64:35:48:74:d7:c8:d6:48:e2:17:c4:eb: d1:15:8a:60:df:24:1b:5c:d5:2d:69:3a:b9:5f:24:c9:59:fa: b0:a3:43:1a:c2:b2:2c:56:a3:0d:c7:2e:dc:0d:ce:56:c6:38: 89:18:05:9a:88:fc:0e:ce:d2:50:e9:ba:94:25:98:b2:39:f0: 09:22:90:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4PzHldnCMCXcPEQ2gO/nFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0N2U2MmNiZjVmZWYzMzc3ZjllN2NkNTg1NThmNDRlMmVl YTliY2UwHhcNMjYwMTI2MDMwMDQ5WhcNMjYwMTI3MDMwMDQ5WjAzMTEwLwYDVQQD EygwOTJhNGVlZjM2OTZhOTQyYmJiNGZlZjI4ZTQ2YjRjMDEyZDM5MmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/o2pNdLS2z5wICjyXYXoZmrcx2B ZE145DHTnTRvc/pG0rfvBLsBnb34hz18wWvew37rH3LhXzdJLVfSvv7Cl9jkAVKY 2k11EDZr14KniZAhuetSTdO0hu/ewJK0EnnHPYy/5JyY8OX+jVf34PBWNfD5vkn3 CL0EwCyQh1CuED02kEqZgsQQZmvstpEKhV12ppkiH5Vw/OW9aaFyBtkcgQnX8kgQ Uiif9C9a1JLzbB/vxQYbRT+CDsjtiGYcqTdFWsrQFHhZPyG+YQ8XeWQ7CrlD4kkE 3riDoBIjFQ6/JpRo0P8B3ey1fcosTzcAyjFFXQTqvhoonRrrMeDnF6Fm3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAkqTu82lqlCu7T+8o5GtMAS05KjMB8GA1UdIwQY MBaAFNR+Ysv1/vM3f5581YVY9E4u6pvOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUg1aXlfWC04emRfbm56VmhWajBUaTdxbTg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9hYTlkNGUtMTIyNi00MGU3LWE5YzEt NDY5ZDNhNTFkNDdkLzEvMUg1aXlfWC04emRfbm56VmhWajBUaTdxbTg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9hYTlkNGUtMTIyNi00MGU3LWE5YzEtNDY5ZDNhNTFkNDdk LzEvMUg1aXlfWC04emRfbm56VmhWajBUaTdxbTg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV38nBHxC 49F+l85/W0ogooSwl4vkMVo1DVjWcNwRCgkaQpMTUQuW53PFHP1OE/PY1AOgQ7YR /RXNInwOHRNBWH5Xfd+/9awDGmJEYsnh4roEONnnPlhNQkoKLF+tjJ+3Co1FRWau djQMiYOtdhZodUhTz6gzHlfPxyHd2Ukq0YxV9udz9SKVU9brCX5j9doSipp+XCKc F4QSNhqlgXtsCydd2B8rANkR4hT+YC3Hyf4SH6dwI3KIGdv3ZDVIdNfI1kjiF8Tr 0RWKYN8kG1zVLWk6uV8kyVn6sKNDGsKyLFajDccu3A3OVsY4iRgFmoj8Ds7SUOm6 lCWYsjnwCSKQUg== -----END CERTIFICATE-----Generated at Mon Jan 26 07:12:01 2026 by rpki-client