This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/1VhaLgj-RDzn_Qy_QG97mtoqfMU.mft File: 1VhaLgj-RDzn_Qy_QG97mtoqfMU.mft (raw, json) Hash identifier: ySH5N1V6cYmjoZQvaMCY/Gz/37m4qCpqjpPzbYKZ0Pw= Subject key identifier: D5:B8:5D:F9:38:8D:60:99:96:8F:A2:5E:7E:2F:03:AD:D7:01:8E:9C Authority key identifier: D5:58:5A:2E:08:FE:44:3C:E7:FD:0C:BF:40:6F:7B:9A:DA:2A:7C:C5 Certificate issuer: /CN=d5585a2e08fe443ce7fd0cbf406f7b9ada2a7cc5 Certificate serial: 019BF7D146BFAD86549B774E0737EE268FFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1VhaLgj-RDzn_Qy_QG97mtoqfMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/1VhaLgj-RDzn_Qy_QG97mtoqfMU.mft Manifest number: 02E4 Signing time: Mon 26 Jan 2026 01:00:45 +0000 Manifest this update: Mon 26 Jan 2026 01:00:45 +0000 Manifest next update: Tue 27 Jan 2026 01:00:45 +0000 Files and hashes: 1: 1VhaLgj-RDzn_Qy_QG97mtoqfMU.crl (hash: 2rU1h1R/iGDJWLt8Q3G2duovc2V1+OCoQWXskfZaWbs=) 2: pdSStO6DCaJYyS956WyXq-lA8KU.roa (hash: pWxBYjsjh5LvNjhkNSAagaIsoVy58B8SoqT9s1TYRxw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/1VhaLgj-RDzn_Qy_QG97mtoqfMU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/1VhaLgj-RDzn_Qy_QG97mtoqfMU.mft rsync://rpki.ripe.net/repository/DEFAULT/1VhaLgj-RDzn_Qy_QG97mtoqfMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d1:46:bf:ad:86:54:9b:77:4e:07:37:ee:26:8f:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5585a2e08fe443ce7fd0cbf406f7b9ada2a7cc5 Validity Not Before: Jan 26 01:00:45 2026 GMT Not After : Jan 27 01:00:45 2026 GMT Subject: CN=d5b85df9388d6099968fa25e7e2f03add7018e9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:bb:86:0c:5b:cd:78:be:00:fa:7c:a6:eb:05: 9f:a6:01:46:4d:80:1d:53:69:83:36:5b:b6:4d:09: 91:55:d5:8b:9f:1e:1e:78:3f:69:43:c6:84:2c:38: 86:5e:49:17:4c:51:bc:fb:bc:9a:a7:53:77:00:18: 11:0f:2a:63:5d:fd:07:4e:6b:70:bb:a4:a5:29:82: 9a:21:a7:2d:d9:5b:b3:a6:4a:dc:d2:0e:44:9f:87: d5:28:01:28:de:44:99:00:d2:42:99:af:eb:57:83: 5f:b3:89:81:1d:0f:d9:b3:88:29:a4:cc:3a:ff:f0: 1f:7f:a2:8f:b1:ff:66:b4:69:06:c9:52:bd:19:0b: 69:57:1f:d0:56:e3:ea:64:a5:c0:1f:a9:38:a5:dd: 65:5c:b0:12:4e:fa:44:7f:17:dd:4e:02:4b:c7:8b: 31:01:64:88:26:c5:8b:79:c4:90:78:c8:52:b2:89: 04:7e:11:4c:4b:91:fe:a8:d3:6c:64:4b:8f:da:8e: d6:2c:1a:09:a3:0e:45:3b:0b:0b:64:45:79:48:e3: 2f:75:57:15:2e:6a:71:5f:eb:3c:58:94:da:0a:d8: b9:ba:7b:ef:2c:84:24:a6:ca:a6:27:f9:83:04:8e: d0:7f:aa:ca:85:e2:f5:20:e3:53:5c:02:b1:2d:f7: da:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B8:5D:F9:38:8D:60:99:96:8F:A2:5E:7E:2F:03:AD:D7:01:8E:9C X509v3 Authority Key Identifier: keyid:D5:58:5A:2E:08:FE:44:3C:E7:FD:0C:BF:40:6F:7B:9A:DA:2A:7C:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1VhaLgj-RDzn_Qy_QG97mtoqfMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/1VhaLgj-RDzn_Qy_QG97mtoqfMU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/1VhaLgj-RDzn_Qy_QG97mtoqfMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:27:ce:e2:6d:59:bf:44:af:c7:cc:7b:9b:49:30:25:d2:f8: ac:13:41:f8:34:c7:83:84:3e:00:d9:99:dc:13:b9:b3:30:bb: 3a:8e:f2:8c:cb:c0:bd:50:b7:03:e0:f7:29:23:39:d2:7e:7c: 67:ad:5f:7f:db:bc:0b:fe:f2:a6:8f:17:cb:c2:a4:28:a6:85: 19:a4:e8:59:df:95:4d:eb:70:6b:a2:66:a2:06:2a:0a:da:7a: 3e:0c:b9:00:18:c8:87:7a:79:83:a4:f4:9a:d9:98:d9:da:a1: dc:ee:00:33:03:af:30:b5:0d:5f:cd:52:a4:94:51:9e:fb:65: b4:e6:60:56:5a:c3:22:47:2e:53:80:91:e1:f9:aa:ca:88:bd: 6c:cf:12:ce:1b:12:01:1e:8f:dd:f9:c0:cd:39:53:b1:f8:aa: 74:77:a0:f2:7a:3f:95:0f:7d:aa:72:1a:83:8e:0b:5a:a4:18: 44:1a:03:2a:e4:5e:6f:ba:23:92:59:e7:de:ec:63:a1:27:fb: fa:19:ba:d4:b7:7d:88:b7:ff:9a:e6:d2:d6:b4:55:e7:82:74: 62:80:9a:80:8b:95:0a:a6:73:50:99:7d:49:ee:4a:e5:b7:dc: 9d:3b:42:2d:5d:1d:02:16:e0:71:4d:b6:25:7d:ca:21:be:02: 29:d0:2d:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30Ua/rYZUm3dOBzfuJo/+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1NTg1YTJlMDhmZTQ0M2NlN2ZkMGNiZjQwNmY3YjlhZGEy YTdjYzUwHhcNMjYwMTI2MDEwMDQ1WhcNMjYwMTI3MDEwMDQ1WjAzMTEwLwYDVQQD EyhkNWI4NWRmOTM4OGQ2MDk5OTY4ZmEyNWU3ZTJmMDNhZGQ3MDE4ZTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnruGDFvNeL4A+nym6wWfpgFGTYAd U2mDNlu2TQmRVdWLnx4eeD9pQ8aELDiGXkkXTFG8+7yap1N3ABgRDypjXf0HTmtw u6SlKYKaIact2Vuzpkrc0g5En4fVKAEo3kSZANJCma/rV4Nfs4mBHQ/Zs4gppMw6 //Aff6KPsf9mtGkGyVK9GQtpVx/QVuPqZKXAH6k4pd1lXLASTvpEfxfdTgJLx4sx AWSIJsWLecSQeMhSsokEfhFMS5H+qNNsZEuP2o7WLBoJow5FOwsLZEV5SOMvdVcV LmpxX+s8WJTaCti5unvvLIQkpsqmJ/mDBI7Qf6rKheL1IONTXAKxLffa9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNW4Xfk4jWCZlo+iXn4vA63XAY6cMB8GA1UdIwQY MBaAFNVYWi4I/kQ85/0Mv0Bve5raKnzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVZoYUxnai1SRHpuX1F5X1FHOTdtdG9xZk1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xMzU2Y2YtYWI3OS00YzY5LTllNTUt NjI4NDAwNjcxZDBlLzEvMVZoYUxnai1SRHpuX1F5X1FHOTdtdG9xZk1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8xMzU2Y2YtYWI3OS00YzY5LTllNTUtNjI4NDAwNjcxZDBl LzEvMVZoYUxnai1SRHpuX1F5X1FHOTdtdG9xZk1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVyfO4m1Z v0Svx8x7m0kwJdL4rBNB+DTHg4Q+ANmZ3BO5szC7Oo7yjMvAvVC3A+D3KSM50n58 Z61ff9u8C/7ypo8Xy8KkKKaFGaToWd+VTetwa6JmogYqCtp6Pgy5ABjIh3p5g6T0 mtmY2dqh3O4AMwOvMLUNX81SpJRRnvtltOZgVlrDIkcuU4CR4fmqyoi9bM8SzhsS AR6P3fnAzTlTsfiqdHeg8no/lQ99qnIag44LWqQYRBoDKuReb7ojklnn3uxjoSf7 +hm61Ld9iLf/mubS1rRV54J0YoCagIuVCqZzUJl9Se5K5bfcnTtCLV0dAhbgcU22 JX3KIb4CKdAtpQ== -----END CERTIFICATE-----Generated at Mon Jan 26 05:38:55 2026 by rpki-client