This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft File: 1dHNR6U-9X67VnvIgq0phvqsXw0.mft (raw, json) Hash identifier: TSQJvUP+kmWZhdhDW5dKgwYoVs+smiDHjcGRMpysVUU= Subject key identifier: 9B:E5:B3:54:22:CB:2C:88:9C:7C:6C:5F:C5:10:65:FC:39:8B:58:A7 Authority key identifier: D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D Certificate issuer: /CN=d5d1cd47a53ef57ebb567bc882ad2986faac5f0d Certificate serial: 019BF34F7CF711E27C788A0A844265A76A97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft Manifest number: 1534 Signing time: Sun 25 Jan 2026 04:00:31 +0000 Manifest this update: Sun 25 Jan 2026 04:00:31 +0000 Manifest next update: Mon 26 Jan 2026 04:00:31 +0000 Files and hashes: 1: 1dHNR6U-9X67VnvIgq0phvqsXw0.crl (hash: HoVtKcBL8wvDc7Gs7l087mTIyIAN2Eoio3n3pe5UUYo=) 2: GwHZp-kEEMMSmgcidpvuauk-EA0.roa (hash: Xjp5Kh43d0lOVK+MDX99KJIgb/gfu211S8//K3ogwuU=) 3: X-4V7xzl5bM1v7YWDyF_SZW5lrc.roa (hash: I3o7rUH/RKJK5k980x+148YLL5ZlqYblJvTvhEFHuDU=) 4: g9skLhoTngKF84leEtNBNhGZn9Q.roa (hash: hqQ3HiFBUbLIXn6t3JB+mw0UlnMpWW49qnJ3ApgTu0E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.crl rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:4f:7c:f7:11:e2:7c:78:8a:0a:84:42:65:a7:6a:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5d1cd47a53ef57ebb567bc882ad2986faac5f0d Validity Not Before: Jan 25 04:00:31 2026 GMT Not After : Jan 26 04:00:31 2026 GMT Subject: CN=9be5b35422cb2c889c7c6c5fc51065fc398b58a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2a:a6:ba:a6:b7:d0:4a:7b:6a:b6:66:92:28: 37:b5:e6:cf:4d:d7:04:68:37:55:c4:15:df:f1:6e: 35:bf:c9:cb:3b:5f:2d:72:d8:65:c9:fe:fb:98:78: fa:1d:ac:c0:23:2c:df:6f:ac:39:98:63:d5:e4:13: 2f:d6:99:27:b3:af:ef:b5:b8:f3:a9:fe:ac:b6:bd: fd:cc:bf:f2:21:d5:23:68:7c:38:bf:32:d1:44:d4: 87:e4:bc:49:1a:8d:25:a0:fa:c0:b3:c9:21:e5:a6: 55:45:35:ea:ed:55:df:74:96:78:62:d2:bd:6e:45: 50:9a:be:92:b9:ae:fb:11:9b:ec:dc:63:b7:35:cd: 82:c6:b1:fc:ab:e1:b4:b9:fc:48:57:c3:76:8f:50: 63:72:0e:b6:1a:f8:a8:5d:7b:57:66:08:81:7c:3f: d2:d3:56:e1:98:3b:cd:21:1c:18:6c:c2:13:f8:6d: 3b:b0:81:8f:e9:4d:04:f0:c3:5c:50:f1:fd:9a:55: 0d:cc:bf:c9:5a:83:54:4f:0e:50:ba:31:1b:36:d5: f8:de:a4:91:b7:b5:28:92:0a:b8:12:04:c0:c1:f4: 1a:ee:ec:91:91:5d:70:da:ef:dc:bd:7b:1d:ae:e4: 9c:c1:cb:b4:bd:5a:19:21:71:d7:fc:06:b7:92:5d: b4:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:E5:B3:54:22:CB:2C:88:9C:7C:6C:5F:C5:10:65:FC:39:8B:58:A7 X509v3 Authority Key Identifier: keyid:D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:fc:8c:31:6e:98:fd:14:61:e0:b7:4b:9b:77:ea:27:d1:a5: 5c:5e:8c:ba:4b:e9:38:b2:42:10:81:39:f6:6b:c8:d4:f6:0f: 47:72:e0:0d:e6:10:39:67:ef:3f:32:38:3d:7d:ef:c1:54:6f: 80:19:28:45:b8:24:62:1a:59:3a:25:50:e8:26:5c:40:53:ed: 2c:04:c3:84:d7:fd:f5:e6:ce:03:ea:48:27:2f:ed:54:19:b5: e3:1b:a4:f2:1a:80:6a:d7:11:5d:7d:ac:00:4c:28:af:9e:29: a7:20:2e:45:6c:55:99:db:dd:70:6e:ba:f7:b3:3d:50:71:58: 19:55:c4:ca:f5:de:a4:bf:f9:e1:f2:36:71:72:60:c1:9c:11: fd:2e:f3:a4:11:f3:d4:f8:c2:0d:8b:bb:53:66:a0:06:d4:be: 63:85:03:4b:5b:23:a4:e4:b4:87:cf:3a:77:2a:2b:5e:c9:cf: 65:e2:87:30:19:be:df:14:76:ae:d5:31:15:b3:7c:67:39:fe: 54:71:2b:c6:13:b5:f2:a1:31:99:5d:55:ef:3e:57:2f:9a:85: 16:0a:0a:c2:4c:32:85:fc:41:e1:2e:bc:67:3f:d3:68:bd:48: 9f:d2:8f:59:28:f1:4f:b9:11:86:93:c8:0b:6f:03:34:c2:f7: 96:fc:f7:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzT3z3EeJ8eIoKhEJlp2qXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZDFjZDQ3YTUzZWY1N2ViYjU2N2JjODgyYWQyOTg2ZmFh YzVmMGQwHhcNMjYwMTI1MDQwMDMxWhcNMjYwMTI2MDQwMDMxWjAzMTEwLwYDVQQD Eyg5YmU1YjM1NDIyY2IyYzg4OWM3YzZjNWZjNTEwNjVmYzM5OGI1OGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyqmuqa30Ep7arZmkig3tebPTdcE aDdVxBXf8W41v8nLO18tcthlyf77mHj6HazAIyzfb6w5mGPV5BMv1pkns6/vtbjz qf6str39zL/yIdUjaHw4vzLRRNSH5LxJGo0loPrAs8kh5aZVRTXq7VXfdJZ4YtK9 bkVQmr6Sua77EZvs3GO3Nc2CxrH8q+G0ufxIV8N2j1Bjcg62GvioXXtXZgiBfD/S 01bhmDvNIRwYbMIT+G07sIGP6U0E8MNcUPH9mlUNzL/JWoNUTw5QujEbNtX43qSR t7Uokgq4EgTAwfQa7uyRkV1w2u/cvXsdruScwcu0vVoZIXHX/Aa3kl20FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJvls1QiyyyInHxsX8UQZfw5i1inMB8GA1UdIwQY MBaAFNXRzUelPvV+u1Z7yIKtKYb6rF8NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWRITlI2VS05WDY3Vm52SWdxMHBodnFzWHcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS84NjE5NTMtNWY2NS00NDY1LTkwNDYt ZjRkMDcxZjUwZjFkLzEvMWRITlI2VS05WDY3Vm52SWdxMHBodnFzWHcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS84NjE5NTMtNWY2NS00NDY1LTkwNDYtZjRkMDcxZjUwZjFk LzEvMWRITlI2VS05WDY3Vm52SWdxMHBodnFzWHcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZfyMMW6Y /RRh4LdLm3fqJ9GlXF6MukvpOLJCEIE59mvI1PYPR3LgDeYQOWfvPzI4PX3vwVRv gBkoRbgkYhpZOiVQ6CZcQFPtLATDhNf99ebOA+pIJy/tVBm14xuk8hqAatcRXX2s AEwor54ppyAuRWxVmdvdcG6697M9UHFYGVXEyvXepL/54fI2cXJgwZwR/S7zpBHz 1PjCDYu7U2agBtS+Y4UDS1sjpOS0h886dyorXsnPZeKHMBm+3xR2rtUxFbN8Zzn+ VHErxhO18qExmV1V7z5XL5qFFgoKwkwyhfxB4S68Zz/TaL1In9KPWSjxT7kRhpPI C28DNML3lvz3Vg== -----END CERTIFICATE-----Generated at Sun Jan 25 16:05:52 2026 by rpki-client