This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft File: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft (raw, json) Hash identifier: QPd0HIOMNEx8wX7+mASKLVIL9bfGU8LPoFxFIzktFuA= Subject key identifier: 1E:1F:14:6E:BA:16:40:A1:7F:81:35:FC:CF:3D:9D:9F:82:1D:43:54 Authority key identifier: F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9 Certificate issuer: /CN=f815e02bda7a9071487837d31558b5e0221d3cf9 Certificate serial: 019BF6F593BB641678523B11DB7AE7F38B39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft Manifest number: 071A Signing time: Sun 25 Jan 2026 21:00:47 +0000 Manifest this update: Sun 25 Jan 2026 21:00:47 +0000 Manifest next update: Mon 26 Jan 2026 21:00:47 +0000 Files and hashes: 1: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl (hash: uRB97lasGjJsZ/jzJkJtMY1H6w1qtNja8TyEw2Tz9Bw=) 2: 8Hgg7PrGAUqoQ2u3DLHM2X1ZtEo.roa (hash: ZCvbYnwhk97Csz5gtNwxvItsTIFKupRDzbGZu2sLnLA=) 3: zQQNz1XdF3zAZxj1XnIP4uPqT3E.roa (hash: RvUin8cxUdArlkfl04+0a6IY+YkgiDeNAV0KF42kT1Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:93:bb:64:16:78:52:3b:11:db:7a:e7:f3:8b:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f815e02bda7a9071487837d31558b5e0221d3cf9 Validity Not Before: Jan 25 21:00:47 2026 GMT Not After : Jan 26 21:00:47 2026 GMT Subject: CN=1e1f146eba1640a17f8135fccf3d9d9f821d4354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5f:a1:81:75:06:ec:a0:ce:aa:8b:89:98:1a: e1:4c:ef:07:32:66:a7:51:d4:75:64:0b:57:7d:33: 28:ae:9f:a4:87:f2:c8:ab:13:ea:55:58:61:52:0f: 5d:ee:3a:e1:cf:7e:f1:c8:14:cd:32:e9:f5:c2:5f: 88:35:f0:e7:a7:83:49:f8:28:7c:43:6c:f9:ff:e6: 88:31:9e:9c:b1:b1:79:8b:3c:aa:f6:e6:a5:df:4d: 8b:2b:cf:c7:16:18:c1:3b:59:d4:61:f3:ad:04:cd: 9a:1f:71:b4:06:5b:ef:fb:e4:03:7d:a6:bf:c8:8d: 14:6e:b6:d4:65:df:59:52:42:aa:c5:06:49:a0:df: 65:eb:5b:a1:6a:fa:67:56:87:82:3c:48:3a:7d:6b: 7a:56:30:12:49:29:7a:1e:f9:c0:74:bd:1d:65:f8: ca:8f:3a:12:d8:59:47:36:68:6f:46:20:9b:55:ef: 84:b8:5c:35:b0:2f:88:ee:15:9c:6f:9e:b0:ab:a2: 26:39:7b:ab:3a:ee:48:88:93:72:e4:67:98:40:7a: 9a:9e:79:46:b5:35:44:e8:7a:21:9b:a1:5a:0b:bf: 2e:12:9f:7f:fc:63:0b:46:17:cb:8a:de:6e:a9:4a: ff:89:b9:40:2b:36:3a:bd:1d:2e:0a:40:2a:77:97: 31:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:1F:14:6E:BA:16:40:A1:7F:81:35:FC:CF:3D:9D:9F:82:1D:43:54 X509v3 Authority Key Identifier: keyid:F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:c3:b6:88:10:86:82:e1:bb:9e:86:74:d0:9b:00:b7:95:40: 88:13:4b:66:b9:11:d7:f2:6c:31:2f:07:70:93:bf:c7:aa:86: e6:de:48:cd:43:df:48:57:69:7f:f2:32:83:7b:87:02:ff:b9: 38:03:52:06:37:c7:7f:9f:62:4b:77:5c:30:95:ad:e1:86:69: da:d2:3e:78:fe:ad:e9:13:77:a7:82:16:71:38:15:fc:ef:5c: 76:06:db:8d:b1:6e:87:9e:2d:30:e1:9f:c1:ad:c6:fe:f3:a9: a8:e6:24:d7:40:c5:95:4b:4f:28:c4:a1:5a:89:5d:aa:da:06: d7:40:91:a3:0a:9a:5e:6d:ed:7d:f1:3d:d5:02:ba:01:16:8f: 61:1d:ac:cd:a0:15:53:84:03:e6:59:a2:a1:9f:3f:25:52:49: a5:9f:b6:7b:d6:c3:64:7c:9f:ff:2c:c6:dc:b2:23:f8:fa:23: 98:11:67:ae:97:6f:b0:1c:3f:6d:d3:2d:28:be:f9:0b:9f:43: e0:0f:d4:27:d5:3f:f1:58:bf:a1:27:5e:d2:16:4b:5a:aa:8d: 31:57:b8:a3:e6:f7:17:2c:f2:74:09:4e:67:00:71:ee:e4:26: 00:25:e5:8e:44:2c:7a:d4:85:69:b2:a9:a6:50:0b:d9:7f:ba: fc:d9:7d:d0 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZv29ZO7ZBZ4UjsR23rn84s5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MTVlMDJiZGE3YTkwNzE0ODc4MzdkMzE1NThiNWUwMjIx ZDNjZjkwHhcNMjYwMTI1MjEwMDQ3WhcNMjYwMTI2MjEwMDQ3WjAzMTEwLwYDVQQD EygxZTFmMTQ2ZWJhMTY0MGExN2Y4MTM1ZmNjZjNkOWQ5ZjgyMWQ0MzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvl+hgXUG7KDOqouJmBrhTO8HMman UdR1ZAtXfTMorp+kh/LIqxPqVVhhUg9d7jrhz37xyBTNMun1wl+INfDnp4NJ+Ch8 Q2z5/+aIMZ6csbF5izyq9ual302LK8/HFhjBO1nUYfOtBM2aH3G0Blvv++QDfaa/ yI0UbrbUZd9ZUkKqxQZJoN9l61uhavpnVoeCPEg6fWt6VjASSSl6HvnAdL0dZfjK jzoS2FlHNmhvRiCbVe+EuFw1sC+I7hWcb56wq6ImOXurOu5IiJNy5GeYQHqannlG tTVE6Hohm6FaC78uEp9//GMLRhfLit5uqUr/iblAKzY6vR0uCkAqd5cxMQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFB4fFG66FkChf4E1/M89nZ+CHUNUMB8GA1UdIwQY MBaAFPgV4CvaepBxSHg30xVYteAiHTz5MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1CWGdLOXA2a0hGSWVEZlRGVmkxNENJZFBQay5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgvY2Q0NzJjLTQyNTYtNDBmZi05OGUy LWQ5ODM4NDM5NzkyOS8xLzEtQlhnSzlwNmtIRkllRGZURlZpMTRDSWRQUGsubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzI4L2NkNDcyYy00MjU2LTQwZmYtOThlMi1kOTgzODQzOTc5 MjkvMS8xLUJYZ0s5cDZrSEZJZURmVEZWaTE0Q0lkUFBrLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ8O2 iBCGguG7noZ00JsAt5VAiBNLZrkR1/JsMS8HcJO/x6qG5t5IzUPfSFdpf/Iyg3uH Av+5OANSBjfHf59iS3dcMJWt4YZp2tI+eP6t6RN3p4IWcTgV/O9cdgbbjbFuh54t MOGfwa3G/vOpqOYk10DFlUtPKMShWoldqtoG10CRowqaXm3tffE91QK6ARaPYR2s zaAVU4QD5lmioZ8/JVJJpZ+2e9bDZHyf/yzG3LIj+PojmBFnrpdvsBw/bdMtKL75 C59D4A/UJ9U/8Vi/oSde0hZLWqqNMVe4o+b3FyzydAlOZwBx7uQmACXljkQsetSF abKpplAL2X+6/Nl90A== -----END CERTIFICATE-----Generated at Mon Jan 26 04:24:36 2026 by rpki-client