This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft File: 1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft (raw, json) Hash identifier: 72AAh4NeJsbobczvjGpSCdmTLBPo5IWjpZoOZkaVktE= Subject key identifier: 9A:71:10:B7:FE:2F:AB:9B:78:38:4A:9D:84:3D:7C:12:F3:E2:E5:4D Authority key identifier: F8:3E:BE:2A:90:6D:D5:87:01:25:99:20:9C:31:CE:10:F2:9D:57:85 Certificate issuer: /CN=f83ebe2a906dd587012599209c31ce10f29d5785 Certificate serial: 019BF72CAC0A0CC10CF57D588D15BDB9525A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft Manifest number: 032D Signing time: Sun 25 Jan 2026 22:00:58 +0000 Manifest this update: Sun 25 Jan 2026 22:00:58 +0000 Manifest next update: Mon 26 Jan 2026 22:00:58 +0000 Files and hashes: 1: 1-D6-KpBt1YcBJZkgnDHOEPKdV4U.crl (hash: 6xDiPM5bvlTc9mK4QKGJ8hQUR82n2MFl2Ua5gJj6G4c=) 2: HORWGw6AaqSSM12H6ipwx55-oWY.roa (hash: G83S9Vamz90/aaDzeWNDK3Mb1c9FRLQyr+F0Xgj6z8g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft rsync://rpki.ripe.net/repository/DEFAULT/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:ac:0a:0c:c1:0c:f5:7d:58:8d:15:bd:b9:52:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f83ebe2a906dd587012599209c31ce10f29d5785 Validity Not Before: Jan 25 22:00:58 2026 GMT Not After : Jan 26 22:00:58 2026 GMT Subject: CN=9a7110b7fe2fab9b78384a9d843d7c12f3e2e54d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:76:80:56:d1:66:84:0b:fd:99:11:23:81:b7: bc:33:28:0b:aa:d7:22:63:e2:56:9c:df:33:b7:51: 05:06:a0:54:6e:29:54:d6:19:9b:cb:d5:ce:50:84: e7:1e:50:3f:a4:ae:6b:57:61:5d:34:24:b3:65:4c: 32:22:f0:d7:1f:00:fe:78:01:9d:20:0d:55:de:f4: 79:a7:ab:43:e9:0e:9c:82:cb:1f:e9:f3:d8:b5:37: 56:a8:e0:e7:55:3c:9d:9b:35:65:ea:ba:8b:05:b1: d0:de:59:aa:5f:4b:9f:0e:99:76:82:31:cf:18:90: 32:5d:bd:c0:9d:7b:40:e3:33:08:35:03:c0:d7:9d: 95:53:31:28:77:76:8e:01:af:4d:71:67:de:0b:9e: 9a:54:c9:6a:53:be:10:e1:66:6e:48:3c:ea:07:bc: 1c:ac:cf:d2:6d:ca:19:93:cf:91:d2:21:cd:cd:70: d0:23:9f:01:da:2f:6f:a9:ee:c7:02:4a:b1:f9:44: 33:96:92:09:f8:3b:75:65:62:a6:01:ee:3e:e0:64: 89:26:16:57:c1:58:14:7e:d1:0b:92:05:f0:d7:2f: 87:76:02:66:4b:6e:9b:1e:05:21:be:28:47:27:61: 5c:d3:6c:c8:d9:69:76:d2:36:de:e6:55:3b:b2:38: 35:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:71:10:B7:FE:2F:AB:9B:78:38:4A:9D:84:3D:7C:12:F3:E2:E5:4D X509v3 Authority Key Identifier: keyid:F8:3E:BE:2A:90:6D:D5:87:01:25:99:20:9C:31:CE:10:F2:9D:57:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:32:3d:fb:06:ca:36:04:57:a1:49:0a:9b:2e:67:b4:c0:a9: 41:fb:1f:49:88:14:d0:b5:ca:f9:44:4e:50:9b:f6:f5:cd:4c: f9:5b:29:05:48:18:ce:e4:55:7e:0e:7d:d5:49:71:8f:f0:d0: c0:38:d9:56:ba:4b:0a:4c:f0:af:96:be:2b:51:04:ff:7d:56: ad:ed:eb:66:b1:29:3b:74:f1:62:ed:e0:a0:de:1c:20:49:57: c0:53:b4:25:b3:1e:b6:f0:7d:d5:63:24:fa:4f:84:ef:c9:21: e3:66:38:4d:ed:14:03:b1:68:70:c9:b4:a3:f6:9c:e0:b2:cd: dd:7e:5b:dc:43:88:b7:22:11:2f:a2:75:3a:43:39:04:28:d7: d8:89:ab:63:5f:c1:6d:7b:c0:6d:fd:0f:88:1a:ea:29:be:00: c6:ae:47:f2:8b:2c:b3:41:69:d9:32:62:fd:d5:47:e1:69:dc: 44:6f:88:52:b3:b9:75:6d:0b:3d:2c:68:eb:3d:fe:58:6d:34: a4:df:33:78:d9:9b:c3:f0:49:36:71:c8:35:9f:ad:99:68:ab: 14:90:45:7e:bd:18:14:9b:ab:94:5e:b7:38:5d:f6:f9:17:c2: 3c:14:4a:9f:2b:72:c0:a1:d1:13:95:48:cf:0e:2a:6a:ac:b6: ad:78:a8:a2 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZv3LKwKDMEM9X1YjRW9uVJaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4M2ViZTJhOTA2ZGQ1ODcwMTI1OTkyMDljMzFjZTEwZjI5 ZDU3ODUwHhcNMjYwMTI1MjIwMDU4WhcNMjYwMTI2MjIwMDU4WjAzMTEwLwYDVQQD Eyg5YTcxMTBiN2ZlMmZhYjliNzgzODRhOWQ4NDNkN2MxMmYzZTJlNTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XaAVtFmhAv9mREjgbe8MygLqtci Y+JWnN8zt1EFBqBUbilU1hmby9XOUITnHlA/pK5rV2FdNCSzZUwyIvDXHwD+eAGd IA1V3vR5p6tD6Q6cgssf6fPYtTdWqODnVTydmzVl6rqLBbHQ3lmqX0ufDpl2gjHP GJAyXb3AnXtA4zMINQPA152VUzEod3aOAa9NcWfeC56aVMlqU74Q4WZuSDzqB7wc rM/SbcoZk8+R0iHNzXDQI58B2i9vqe7HAkqx+UQzlpIJ+Dt1ZWKmAe4+4GSJJhZX wVgUftELkgXw1y+HdgJmS26bHgUhvihHJ2Fc02zI2Wl20jbe5lU7sjg1tQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFJpxELf+L6ubeDhKnYQ9fBLz4uVNMB8GA1UdIwQY MBaAFPg+viqQbdWHASWZIJwxzhDynVeFMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1ENi1LcEJ0MVljQkpaa2duREhPRVBLZFY0VS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmYvMWY2MWFjLTAyZmUtNGU0Yy04NTJl LTQ1MjNhMGUyYjg0NC8xLzEtRDYtS3BCdDFZY0JKWmtnbkRIT0VQS2RWNFUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzJmLzFmNjFhYy0wMmZlLTRlNGMtODUyZS00NTIzYTBlMmI4 NDQvMS8xLUQ2LUtwQnQxWWNCSlprZ25ESE9FUEtkVjRVLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFjI9 +wbKNgRXoUkKmy5ntMCpQfsfSYgU0LXK+UROUJv29c1M+VspBUgYzuRVfg591Ulx j/DQwDjZVrpLCkzwr5a+K1EE/31Wre3rZrEpO3TxYu3goN4cIElXwFO0JbMetvB9 1WMk+k+E78kh42Y4Te0UA7FocMm0o/ac4LLN3X5b3EOItyIRL6J1OkM5BCjX2Imr Y1/BbXvAbf0PiBrqKb4Axq5H8osss0Fp2TJi/dVH4WncRG+IUrO5dW0LPSxo6z3+ WG00pN8zeNmbw/BJNnHINZ+tmWirFJBFfr0YFJurlF63OF32+RfCPBRKnytywKHR E5VIzw4qaqy2rXioog== -----END CERTIFICATE-----Generated at Mon Jan 26 01:32:13 2026 by rpki-client