This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft File: 1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft (raw, json) Hash identifier: bqPPCe/yfAq+LY0GtUAvjm9KOY00Wf9ZRSeLvaA99hc= Subject key identifier: 86:50:50:43:82:2F:91:1F:85:5B:C5:14:2A:7E:BB:35:0C:1E:14:82 Authority key identifier: D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE Certificate issuer: /CN=d4afe3f0c9e555e52d3505d6163278df3da18cee Certificate serial: 019BF3503E60F0D2F73D8543C20DAF205E80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft Manifest number: 030B Signing time: Sun 25 Jan 2026 04:01:20 +0000 Manifest this update: Sun 25 Jan 2026 04:01:20 +0000 Manifest next update: Mon 26 Jan 2026 04:01:20 +0000 Files and hashes: 1: 1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl (hash: EeT79SSNd0pWGt0ICnKL/xTRSgZbhxof/6gqO3op2Us=) 2: 5Qv7t_ADQOb6Y00SIFPxywPS8ro.roa (hash: OvUzcgXdun7e7rJvnWGXK1KokOo+inejKBUGCGEtOjc=) 3: 8pXCuBWrEvdy2wZTlEp32tqPYW8.roa (hash: uGUL/if0f5ws0TqXiUCRr04ljVZ6Fve+sjfhpDCgGM4=) 4: Hl64XGbhjDhXSK_RP_lVJRGK17Q.roa (hash: jQK1etd719NMqRMk4bSxLL+vsw1/OQyKrvCRPSvnFfI=) 5: nHHN0WPLlHYApdgpFpnFyF7FXNo.roa (hash: xucnQbWZYtMeJ0bkGPwNcpkM2rdQLkCGv8+6HH3/d1M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:50:3e:60:f0:d2:f7:3d:85:43:c2:0d:af:20:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4afe3f0c9e555e52d3505d6163278df3da18cee Validity Not Before: Jan 25 04:01:20 2026 GMT Not After : Jan 26 04:01:20 2026 GMT Subject: CN=86505043822f911f855bc5142a7ebb350c1e1482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c1:6a:cf:d2:ec:e3:48:19:eb:25:d8:20:9e: cb:f2:4f:4d:33:f2:c1:1e:17:dc:ec:ab:03:87:cd: b3:c6:75:f5:75:b5:33:39:96:37:24:e7:be:ea:b2: 49:ce:fc:7a:96:55:31:9c:71:bf:d9:79:46:e4:04: 2f:14:1d:50:5b:99:14:dc:a1:32:e8:a2:a4:18:21: d9:35:97:43:72:f4:98:6f:a1:f1:b5:5f:1e:f2:1c: 3e:d5:0f:43:6f:56:c9:d7:d5:74:ab:7c:76:ca:63: 58:8a:f7:7a:3f:84:d7:d3:64:ff:20:75:bf:b0:43: 30:7e:fc:a9:0c:a2:56:78:39:5a:1f:30:1d:65:54: 3f:a4:c7:33:e2:84:80:3a:66:a4:b8:6c:cc:cb:71: af:55:c6:4c:7c:b1:0b:95:32:01:21:53:78:f2:50: 01:7c:d3:ad:f0:2a:5f:5f:6d:97:02:4a:f6:96:d6: 2d:9c:49:45:76:70:e1:9b:0d:43:ce:ef:70:19:2a: 41:59:af:46:c0:6d:38:36:f7:65:43:e7:a9:e7:18: 1d:75:3f:a0:37:37:f2:b2:7a:e8:4d:fa:ce:87:c6: 19:06:a0:f2:78:53:46:68:63:b6:b3:fb:c3:f7:9b: 6a:b4:54:d2:d2:64:4e:38:eb:53:71:35:bf:71:cc: 30:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:50:50:43:82:2F:91:1F:85:5B:C5:14:2A:7E:BB:35:0C:1E:14:82 X509v3 Authority Key Identifier: keyid:D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:bb:ec:e9:88:60:66:a9:44:e5:af:f2:69:0d:31:ba:fd:b0: 3f:ea:05:4b:83:e7:2f:28:14:d3:7e:3f:9a:0b:a2:c8:1a:f1: 6a:18:dc:d7:4c:ca:f2:b0:dc:ff:b6:38:d0:ed:f1:99:3f:8b: 51:85:e5:e0:8a:9d:b2:6e:43:bc:25:4c:a2:74:cb:bb:86:74: 0d:c9:10:8d:35:4c:71:a5:db:23:30:3b:b8:07:a4:0e:df:ec: 47:20:7e:26:b8:79:08:08:a4:1a:56:f9:b2:7c:38:c2:90:95: 15:e3:57:10:c8:a0:58:39:9c:60:f3:7e:f5:af:9b:6a:96:3a: d9:02:0f:c4:c8:0c:bb:78:fc:10:e1:93:91:b1:bb:80:97:55: e6:d8:58:52:64:5f:56:55:45:4f:65:ad:8d:76:02:4c:18:d4: 6e:00:c1:55:e4:94:d1:27:ce:68:1d:98:8a:07:09:a3:69:81: c1:c5:1b:bd:8e:33:ef:89:c1:5e:18:bb:c4:74:e4:56:4b:00: 01:ff:d6:26:60:8f:79:1d:22:87:57:8a:38:4e:71:19:91:37: 1c:8a:c6:b6:53:a5:4b:3d:c9:21:fe:9b:41:aa:6c:dc:4b:68: 2a:78:79:f2:5d:9c:7b:06:f9:fd:23:75:b7:13:ce:ea:37:18: f5:9c:da:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzUD5g8NL3PYVDwg2vIF6AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0YWZlM2YwYzllNTU1ZTUyZDM1MDVkNjE2MzI3OGRmM2Rh MThjZWUwHhcNMjYwMTI1MDQwMTIwWhcNMjYwMTI2MDQwMTIwWjAzMTEwLwYDVQQD Eyg4NjUwNTA0MzgyMmY5MTFmODU1YmM1MTQyYTdlYmIzNTBjMWUxNDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8Fqz9Ls40gZ6yXYIJ7L8k9NM/LB Hhfc7KsDh82zxnX1dbUzOZY3JOe+6rJJzvx6llUxnHG/2XlG5AQvFB1QW5kU3KEy 6KKkGCHZNZdDcvSYb6HxtV8e8hw+1Q9Db1bJ19V0q3x2ymNYivd6P4TX02T/IHW/ sEMwfvypDKJWeDlaHzAdZVQ/pMcz4oSAOmakuGzMy3GvVcZMfLELlTIBIVN48lAB fNOt8CpfX22XAkr2ltYtnElFdnDhmw1Dzu9wGSpBWa9GwG04NvdlQ+ep5xgddT+g NzfysnroTfrOh8YZBqDyeFNGaGO2s/vD95tqtFTS0mROOOtTcTW/ccwwnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIZQUEOCL5EfhVvFFCp+uzUMHhSCMB8GA1UdIwQY MBaAFNSv4/DJ5VXlLTUF1hYyeN89oYzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUtfajhNbmxWZVV0TlFYV0ZqSjQzejJoak80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xYzY3ZWYtZTgzZC00NDI3LTg2NGIt YzU5ODI1YmJjYjMyLzEvMUtfajhNbmxWZVV0TlFYV0ZqSjQzejJoak80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8xYzY3ZWYtZTgzZC00NDI3LTg2NGItYzU5ODI1YmJjYjMy LzEvMUtfajhNbmxWZVV0TlFYV0ZqSjQzejJoak80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAObvs6Yhg ZqlE5a/yaQ0xuv2wP+oFS4PnLygU034/mguiyBrxahjc10zK8rDc/7Y40O3xmT+L UYXl4Iqdsm5DvCVMonTLu4Z0DckQjTVMcaXbIzA7uAekDt/sRyB+Jrh5CAikGlb5 snw4wpCVFeNXEMigWDmcYPN+9a+bapY62QIPxMgMu3j8EOGTkbG7gJdV5thYUmRf VlVFT2WtjXYCTBjUbgDBVeSU0SfOaB2YigcJo2mBwcUbvY4z74nBXhi7xHTkVksA Af/WJmCPeR0ih1eKOE5xGZE3HIrGtlOlSz3JIf6bQaps3EtoKnh58l2cewb5/SN1 txPO6jcY9ZzaUA== -----END CERTIFICATE-----Generated at Sun Jan 25 11:45:49 2026 by rpki-client