This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft File: 1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft (raw, json) Hash identifier: ydx+1hrIVbwIOQ2SnEjsya3Fcva6q/gi2YIIyrjQR1E= Subject key identifier: C8:F2:9D:13:F6:06:40:B1:57:C2:B5:72:71:A2:93:63:DC:4E:11:1F Authority key identifier: D5:15:F2:E9:14:9C:E1:B4:28:C8:F1:ED:FC:00:92:15:E2:84:7F:55 Certificate issuer: /CN=d515f2e9149ce1b428c8f1edfc009215e2847f55 Certificate serial: 019BF34F8C7EB01FFE38D2A75F2A9230F364 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1RXy6RSc4bQoyPHt_ACSFeKEf1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft Manifest number: 0589 Signing time: Sun 25 Jan 2026 04:00:35 +0000 Manifest this update: Sun 25 Jan 2026 04:00:35 +0000 Manifest next update: Mon 26 Jan 2026 04:00:35 +0000 Files and hashes: 1: 1RXy6RSc4bQoyPHt_ACSFeKEf1U.crl (hash: 5BGGI2Gj6va/xprf1Zxz007At05eLPxmjHXTjqYJ4fY=) 2: Fv3FN4kr698bVDao3o9XOjr8Tz4.roa (hash: 6rB82aXUm+Tn4n4wm/0OKr0aMTrP2YtkhF371pF2g1s=) 3: eG9ktSTPi_rXKJ8zS7Jb6PQXGnc.roa (hash: QNLHJqr8ttA6xtAj36HlfXnNbTxSaTW1D7qSizduEGo=) 4: qjNimTETtLh1inCnrKPLmHgkunQ.roa (hash: kUIDVTcUU2FFx3V4rmksKlF4Rs1SMVdSsMNg5i2JJXw=) 5: senb-C18gcGExQFrNYa_dSp5lQU.roa (hash: dHLGbFqeRIn/SGnKt0AOge5jG5f2ooeFK9x3p3nUrvM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft rsync://rpki.ripe.net/repository/DEFAULT/1RXy6RSc4bQoyPHt_ACSFeKEf1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:4f:8c:7e:b0:1f:fe:38:d2:a7:5f:2a:92:30:f3:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d515f2e9149ce1b428c8f1edfc009215e2847f55 Validity Not Before: Jan 25 04:00:35 2026 GMT Not After : Jan 26 04:00:35 2026 GMT Subject: CN=c8f29d13f60640b157c2b57271a29363dc4e111f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5d:e5:09:c9:fc:80:b0:06:72:d6:70:fb:f3: e2:e0:d5:fc:98:08:9d:8f:ac:55:d5:e7:79:35:1b: 46:e1:5c:c5:0b:80:56:b9:22:22:c4:e9:6b:65:8f: c8:b9:63:50:68:71:38:71:c8:2e:7d:bc:d0:6e:02: 05:e8:c7:38:5a:1c:f9:b4:58:e0:59:a7:07:62:8b: da:51:3b:ad:04:da:b5:a1:ba:c2:dc:0b:5f:bf:d8: fe:85:8c:10:b6:a2:07:56:10:14:34:8a:68:86:03: 9a:9e:a5:f7:c1:40:76:e1:34:2f:76:bd:bc:35:88: a4:07:9c:73:b9:a6:0b:cc:09:93:b3:50:37:27:63: 95:f6:9d:0a:3a:e5:7e:bd:70:8a:0f:eb:04:aa:00: 83:61:c3:55:10:39:65:18:3e:41:79:04:93:3a:f3: 67:24:8d:2e:ef:a7:5d:96:bd:49:c7:c2:78:f5:85: 3b:77:ab:39:7b:8a:a3:70:8c:44:69:01:c9:41:80: 1a:c5:68:fa:a3:5f:5e:5a:8d:49:9d:7e:75:dd:9e: ec:8f:9f:27:27:c2:1a:0b:8d:4b:b7:2b:80:f3:99: 25:6a:ce:5c:13:e8:f9:82:c1:e1:05:48:a6:2f:ee: 29:67:b7:69:06:d9:63:ac:4f:30:e1:85:9c:d4:65: 3b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F2:9D:13:F6:06:40:B1:57:C2:B5:72:71:A2:93:63:DC:4E:11:1F X509v3 Authority Key Identifier: keyid:D5:15:F2:E9:14:9C:E1:B4:28:C8:F1:ED:FC:00:92:15:E2:84:7F:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1RXy6RSc4bQoyPHt_ACSFeKEf1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:d3:71:3f:39:cc:14:e5:e0:1a:79:e1:ae:18:7a:bf:0b:73: f0:55:1f:2a:59:f1:4f:9a:71:1b:74:4d:76:cd:50:59:02:d7: bf:b0:30:b6:63:20:6a:df:c8:4f:3a:bd:59:b8:76:b0:67:ed: cd:cf:33:52:0d:ba:7e:37:ea:45:8d:cd:56:08:e2:72:fd:c2: ca:83:8d:32:07:41:38:b7:49:d0:dd:9d:a9:b5:b8:ac:89:98: cf:55:98:e0:b7:a6:7f:5b:dc:c7:5a:f8:b0:83:f5:b9:69:46: 49:2d:c5:e7:38:80:b8:d6:38:e6:80:59:a6:68:44:bb:2e:f8: d7:01:6d:a5:05:2d:8c:b6:da:2e:31:b3:8e:6c:05:3d:79:6c: 21:35:12:aa:bf:c9:3c:33:91:76:6e:23:69:7b:f3:8d:7f:cd: 73:bd:dc:b9:2d:71:fc:84:e2:4f:6f:11:67:c6:ad:61:d5:a0: 32:b5:fa:52:df:57:48:ec:ec:0e:8f:96:e5:04:b0:c1:c3:ad: 7e:f5:37:2a:eb:a5:aa:01:19:d1:98:53:02:67:22:cd:10:69: 7f:4a:ec:19:ec:a7:4e:3e:04:9a:e1:d2:62:aa:8c:de:06:f5: ce:46:57:57:07:68:a0:11:d1:dd:a6:c0:63:69:95:ef:84:34: c9:4f:48:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzT4x+sB/+ONKnXyqSMPNkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MTVmMmU5MTQ5Y2UxYjQyOGM4ZjFlZGZjMDA5MjE1ZTI4 NDdmNTUwHhcNMjYwMTI1MDQwMDM1WhcNMjYwMTI2MDQwMDM1WjAzMTEwLwYDVQQD EyhjOGYyOWQxM2Y2MDY0MGIxNTdjMmI1NzI3MWEyOTM2M2RjNGUxMTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzF3lCcn8gLAGctZw+/Pi4NX8mAid j6xV1ed5NRtG4VzFC4BWuSIixOlrZY/IuWNQaHE4ccgufbzQbgIF6Mc4Whz5tFjg WacHYovaUTutBNq1obrC3Atfv9j+hYwQtqIHVhAUNIpohgOanqX3wUB24TQvdr28 NYikB5xzuaYLzAmTs1A3J2OV9p0KOuV+vXCKD+sEqgCDYcNVEDllGD5BeQSTOvNn JI0u76ddlr1Jx8J49YU7d6s5e4qjcIxEaQHJQYAaxWj6o19eWo1JnX513Z7sj58n J8IaC41LtyuA85klas5cE+j5gsHhBUimL+4pZ7dpBtljrE8w4YWc1GU7BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMjynRP2BkCxV8K1cnGik2PcThEfMB8GA1UdIwQY MBaAFNUV8ukUnOG0KMjx7fwAkhXihH9VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVJYeTZSU2M0YlFveVBIdF9BQ1NGZUtFZjFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84MzY2YWUtNTc1ZC00ZmRlLThlOTIt MDA4OTk0NDk4MGNhLzEvMVJYeTZSU2M0YlFveVBIdF9BQ1NGZUtFZjFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS84MzY2YWUtNTc1ZC00ZmRlLThlOTItMDA4OTk0NDk4MGNh LzEvMVJYeTZSU2M0YlFveVBIdF9BQ1NGZUtFZjFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEtNxPznM FOXgGnnhrhh6vwtz8FUfKlnxT5pxG3RNds1QWQLXv7AwtmMgat/ITzq9Wbh2sGft zc8zUg26fjfqRY3NVgjicv3CyoONMgdBOLdJ0N2dqbW4rImYz1WY4Lemf1vcx1r4 sIP1uWlGSS3F5ziAuNY45oBZpmhEuy741wFtpQUtjLbaLjGzjmwFPXlsITUSqr/J PDORdm4jaXvzjX/Nc73cuS1x/ITiT28RZ8atYdWgMrX6Ut9XSOzsDo+W5QSwwcOt fvU3KuulqgEZ0ZhTAmcizRBpf0rsGeynTj4EmuHSYqqM3gb1zkZXVwdooBHR3abA Y2mV74Q0yU9I0w== -----END CERTIFICATE-----Generated at Sun Jan 25 11:46:32 2026 by rpki-client