This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft File: 1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft (raw, json) Hash identifier: BA9Vzdb2gOhTSkylFS7l685zfWVAF+R43O4ak8ZjfyI= Subject key identifier: FF:E3:97:88:58:68:85:F7:D0:A5:F7:34:E5:D5:D5:0A:F3:A7:5E:73 Authority key identifier: FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57 Certificate issuer: /CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57 Certificate serial: 019BF651C87FAE0FDD9A457B4C0E7317A5E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft Manifest number: 0377 Signing time: Sun 25 Jan 2026 18:01:53 +0000 Manifest this update: Sun 25 Jan 2026 18:01:53 +0000 Manifest next update: Mon 26 Jan 2026 18:01:53 +0000 Files and hashes: 1: 01o9QMK5i2W56VtXZmgzP-ILrQ0.roa (hash: LXimHsOHFBMbCTOin8TpUsouIX59ySFRAHVGtSHFCUU=) 2: 1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl (hash: QCIt7kIE5+aAFdpK7v+Auh9kt/AEJqIlOrugFFnIN84=) 3: 56DqMz97HUtongb-LYKLfwuTWh4.roa (hash: ogBhrs4GCRrendagpUDedYundQuUrPiR+N6SxNY/RzM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:c8:7f:ae:0f:dd:9a:45:7b:4c:0e:73:17:a5:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57 Validity Not Before: Jan 25 18:01:53 2026 GMT Not After : Jan 26 18:01:53 2026 GMT Subject: CN=ffe39788586885f7d0a5f734e5d5d50af3a75e73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:89:96:fb:bd:2d:ce:d4:9c:36:99:ba:a7:d8: 99:1a:94:4b:df:32:1e:ea:ab:f1:37:96:5b:a6:27: 6d:6b:bf:b0:2c:85:f4:96:90:be:29:d9:87:0b:77: 81:f4:d6:b0:60:b3:5f:f5:32:f1:e4:b6:1c:d5:cc: 43:01:60:79:23:de:73:02:b7:7e:56:f9:fe:84:34: e7:b3:4a:a0:a0:ea:df:ab:5a:1c:c1:a7:4b:9e:8c: f7:9e:9b:62:aa:4e:07:12:44:11:31:65:5b:29:f8: 1e:00:6f:39:37:01:08:9b:49:85:ad:eb:ce:9e:14: 34:17:1c:e8:3e:2f:6f:af:65:35:e4:a0:e3:92:41: 9f:5d:98:77:69:3d:12:54:f6:9f:38:97:92:75:55: eb:ba:1b:46:c6:ca:71:bf:8e:a6:65:64:a4:a7:a3: a6:ba:19:eb:5f:55:3c:7d:0d:5c:a9:b7:30:3e:7a: c6:ba:84:2e:99:3a:8d:a2:72:14:69:81:84:ff:a7: 7b:16:2f:e8:77:85:f3:6b:54:e7:4d:ff:82:2a:9f: f0:29:1d:da:da:18:fb:7b:43:86:c2:68:d1:b5:5c: 37:59:fd:a3:db:83:7d:75:96:4f:58:60:a5:cf:ee: 0c:66:40:66:ce:9a:b1:bb:a0:a3:78:1c:50:b5:62: 65:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:E3:97:88:58:68:85:F7:D0:A5:F7:34:E5:D5:D5:0A:F3:A7:5E:73 X509v3 Authority Key Identifier: keyid:FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:aa:bb:55:d5:8e:84:24:8f:23:2b:21:ed:95:7c:15:17:e6: 2e:9c:f0:2e:33:3c:05:b7:56:79:65:08:7d:30:d3:7a:26:2d: 91:d2:59:53:5d:87:62:11:39:fc:9a:1a:84:b4:41:da:f6:83: 81:55:ce:a1:66:62:db:4c:97:df:6a:e1:46:ab:b0:2f:c0:9a: c5:ca:42:ab:c9:f3:c4:f8:de:da:4d:b9:e0:a1:92:f0:28:ca: 84:6b:ec:29:41:b2:27:1c:06:e7:b4:ca:a9:86:fd:7d:58:46: 04:2c:e5:41:aa:fa:9c:b1:51:b1:68:f2:8a:d8:22:2a:e8:c2: 20:86:79:e2:a1:4b:77:91:eb:03:6a:e7:ec:e2:90:bc:9e:ff: 72:85:92:79:b4:1d:46:e4:5e:db:95:34:97:c1:a9:ab:90:9c: fe:33:04:ae:e1:00:a7:61:25:80:a8:8c:d1:c3:72:b5:e6:1f: 9b:2e:fe:b0:6a:9e:8e:16:ae:a7:1b:df:58:03:6c:b0:a7:b9: e5:9f:0a:c9:14:3b:95:dc:5e:9f:54:74:e7:be:06:fa:08:bc: e3:87:51:ae:f2:3a:a0:54:22:67:68:34:6f:05:03:e1:7b:0d: b2:eb:00:13:82:b1:25:d1:67:9e:09:3d:34:b4:73:cc:9e:7b: 76:80:fe:0a -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZv2Uch/rg/dmkV7TA5zF6XkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhOGNiOTQ2ZmU4NjAxYTBmZDJhMWIzZTQzODJiNmIxZGMw NDRmNTcwHhcNMjYwMTI1MTgwMTUzWhcNMjYwMTI2MTgwMTUzWjAzMTEwLwYDVQQD EyhmZmUzOTc4ODU4Njg4NWY3ZDBhNWY3MzRlNWQ1ZDUwYWYzYTc1ZTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ImW+70tztScNpm6p9iZGpRL3zIe 6qvxN5Zbpidta7+wLIX0lpC+KdmHC3eB9NawYLNf9TLx5LYc1cxDAWB5I95zArd+ Vvn+hDTns0qgoOrfq1ocwadLnoz3nptiqk4HEkQRMWVbKfgeAG85NwEIm0mFrevO nhQ0FxzoPi9vr2U15KDjkkGfXZh3aT0SVPafOJeSdVXruhtGxspxv46mZWSkp6Om uhnrX1U8fQ1cqbcwPnrGuoQumTqNonIUaYGE/6d7Fi/od4Xza1TnTf+CKp/wKR3a 2hj7e0OGwmjRtVw3Wf2j24N9dZZPWGClz+4MZkBmzpqxu6CjeBxQtWJlSwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFP/jl4hYaIX30KX3NOXV1Qrzp15zMB8GA1UdIwQY MBaAFPqMuUb+hgGg/SobPkOCtrHcBE9XMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1veTVSdjZHQWFEOUtocy1RNEsyc2R3RVQxYy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMvMGQyMjcwLTVjNmYtNDJjZi1hNTYw LTk0YTZlZjAxZDA0Ny8xLzEtb3k1UnY2R0FhRDlLaHMtUTRLMnNkd0VUMWMubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzMzLzBkMjI3MC01YzZmLTQyY2YtYTU2MC05NGE2ZWYwMWQw NDcvMS8xLW95NVJ2NkdBYUQ5S2hzLVE0SzJzZHdFVDFjLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHaq7 VdWOhCSPIysh7ZV8FRfmLpzwLjM8BbdWeWUIfTDTeiYtkdJZU12HYhE5/JoahLRB 2vaDgVXOoWZi20yX32rhRquwL8CaxcpCq8nzxPje2k254KGS8CjKhGvsKUGyJxwG 57TKqYb9fVhGBCzlQar6nLFRsWjyitgiKujCIIZ54qFLd5HrA2rn7OKQvJ7/coWS ebQdRuRe25U0l8Gpq5Cc/jMEruEAp2ElgKiM0cNyteYfmy7+sGqejhaupxvfWANs sKe55Z8KyRQ7ldxen1R0574G+gi844dRrvI6oFQiZ2g0bwUD4XsNsusAE4KxJdFn ngk9NLRzzJ57doD+Cg== -----END CERTIFICATE-----Generated at Mon Jan 26 04:24:27 2026 by rpki-client