This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft File: 1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft (raw, json) Hash identifier: dUgOHI84EPGKhRDSOmUFWwSQ5fGOOXk8pQCXfWAJw18= Subject key identifier: 1A:E0:06:FC:9C:53:C4:DB:5D:61:67:AD:2F:1F:88:4F:B5:CC:46:A0 Authority key identifier: FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B Certificate issuer: /CN=fad7100e77ed9119d66e2321bb6711d7e760982b Certificate serial: 019BF42B986BC0BB080CD4C44D68C4D2D72F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft Manifest number: 17FA Signing time: Sun 25 Jan 2026 08:00:56 +0000 Manifest this update: Sun 25 Jan 2026 08:00:56 +0000 Manifest next update: Mon 26 Jan 2026 08:00:56 +0000 Files and hashes: 1: 1--f8TOFOHJxy913_bnxbbB_I8Ps.roa (hash: wDKAE8eJy4a/Xju9oL+J32sQIgyfZxer9kQNnDKALh8=) 2: 1-jH0g_JDLp_7206NgV5uijHSTJE.roa (hash: LRjP11l8Yg7jbG4bbfhfNEvQDZIpDubQ+TvWhkwjrcQ=) 3: 1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl (hash: tXJI0EaQXGnYEiVBkRfvGloeWYUtzSj/9EfyuS+Blyc=) 4: 3GG8eWEP0AsTR5hlJBndfjSVqXE.roa (hash: OqQ6t5k1StJuUPb2wymY353zmLAJ5m9iQ1cfSGHhatc=) 5: Ew6t29Ei1xqX6fCJJvzPjV0QQx8.roa (hash: JiMbHLWrOkAjKxV/HgN8hcqfDizA3AaG0pNVT8kgBVI=) 6: JNr-UC5vFynVEDZr9p42nirYUp8.roa (hash: QrXLI/7uzYtPK46SlviW+E2Eaq5t1mr6I/kJpndD+lk=) 7: OS72UUjy1jIbO6SLm4_mGk1QjoA.roa (hash: JCjobLuVUg3x2yIR7Yj0jA3s02kdH2wYADkCYAZAm6M=) 8: hlYcdx1ybU4O_N_wWLe8kEQOPAA.roa (hash: g8sRkVv7AmG02gcDiKwncGvtRS2uuD1b8FmdkJIrmVQ=) 9: iY5E0iZ2YmwSRo1oZbuozkzcREs.roa (hash: XAB0LIhnvafntszSPTz4cfq/KAQxwohiu0F5a96UkOU=) 10: qWmrXkuHj_sWsoWUwUEWOmRpZO0.roa (hash: MHfvuh3eLEasmU8bZ+QtTWQpVIX8pvTM+Puzp/lNHV0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2b:98:6b:c0:bb:08:0c:d4:c4:4d:68:c4:d2:d7:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fad7100e77ed9119d66e2321bb6711d7e760982b Validity Not Before: Jan 25 08:00:56 2026 GMT Not After : Jan 26 08:00:56 2026 GMT Subject: CN=1ae006fc9c53c4db5d6167ad2f1f884fb5cc46a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c7:29:2b:15:38:c3:1e:86:2f:15:8a:4f:e3: 28:f5:99:ff:8b:05:3a:ab:2c:94:3e:77:39:97:0e: d3:c0:c7:2c:56:69:c8:d9:d5:62:8d:a2:31:11:63: 0f:e4:60:d4:ad:f3:d1:01:ee:d1:16:0d:f5:76:69: 85:04:d8:08:81:79:12:cf:b5:a4:c0:fe:5d:8f:cc: cf:01:24:cf:f4:1b:50:99:b8:57:47:9d:f5:a1:e0: 22:d3:fe:f0:63:f3:9c:b7:ec:41:7c:3f:63:25:ba: f0:3b:fb:c3:cd:07:44:00:94:43:c7:bf:96:4b:dc: 3e:10:da:1e:dc:56:c5:9a:6c:12:b5:0e:33:b6:14: 36:76:33:88:16:7a:53:11:78:1f:32:d9:ff:a1:ae: dd:bd:19:cf:06:58:97:07:6e:4c:d6:99:73:71:03: 90:27:ce:84:ab:47:a6:56:d3:19:af:a1:cb:4a:66: 62:42:c9:00:9b:1a:88:a4:ab:9d:3f:08:a7:56:9e: 46:be:8e:73:90:76:28:ea:7c:5f:20:ae:9b:63:28: aa:28:44:cb:e8:01:58:72:4d:ef:e7:de:5b:99:4f: 36:84:b4:47:ae:f5:24:ac:a6:e7:83:b2:d3:a2:1f: 2f:93:aa:36:e4:2e:fc:49:b0:fe:74:49:eb:1e:e9: c8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E0:06:FC:9C:53:C4:DB:5D:61:67:AD:2F:1F:88:4F:B5:CC:46:A0 X509v3 Authority Key Identifier: keyid:FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:1b:d6:6a:54:60:0f:c1:6e:72:ea:9f:18:97:74:d6:bd:7c: 6a:df:e8:13:3e:72:1b:1b:93:e0:11:7f:10:cd:ba:b0:d6:b8: 58:21:b4:f2:12:08:f5:5b:98:70:cf:dc:d3:84:55:e4:03:6c: 94:d5:23:9f:3b:bd:8e:23:57:f8:2c:16:c1:9a:e8:bb:8a:45: 53:64:c3:ec:3f:e0:81:6a:09:fa:b7:3b:cd:5f:34:be:e0:bb: 57:98:71:6c:35:93:13:fd:d2:c0:96:bb:0e:e6:b1:5d:93:ce: 8c:e3:be:f4:b4:dc:e9:e1:b7:c4:87:ca:e9:73:18:ca:b9:d7: ae:49:98:c4:0b:a7:af:34:2a:fa:a5:27:66:94:8c:5d:b5:f4: bb:89:fc:77:60:b9:04:4b:92:d6:47:25:4a:aa:46:d7:65:60: d0:1b:83:06:15:b9:5b:78:c1:b0:8c:be:57:7c:9d:44:32:96: ab:ef:6c:f2:97:8b:07:3a:d8:05:99:cf:63:38:65:c3:8c:c5: 72:31:76:a7:b0:57:da:ff:0b:43:78:cf:3a:68:fd:6c:6d:9d: c9:9c:75:71:72:ec:2f:04:78:13:d9:5d:82:cc:01:ca:cb:d8: 4d:62:0a:ba:03:56:67:e5:64:f5:a2:72:81:b1:1b:71:e7:34: 0e:8e:74:d8 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZv0K5hrwLsIDNTETWjE0tcvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZDcxMDBlNzdlZDkxMTlkNjZlMjMyMWJiNjcxMWQ3ZTc2 MDk4MmIwHhcNMjYwMTI1MDgwMDU2WhcNMjYwMTI2MDgwMDU2WjAzMTEwLwYDVQQD EygxYWUwMDZmYzljNTNjNGRiNWQ2MTY3YWQyZjFmODg0ZmI1Y2M0NmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMcpKxU4wx6GLxWKT+Mo9Zn/iwU6 qyyUPnc5lw7TwMcsVmnI2dVijaIxEWMP5GDUrfPRAe7RFg31dmmFBNgIgXkSz7Wk wP5dj8zPASTP9BtQmbhXR531oeAi0/7wY/Oct+xBfD9jJbrwO/vDzQdEAJRDx7+W S9w+ENoe3FbFmmwStQ4zthQ2djOIFnpTEXgfMtn/oa7dvRnPBliXB25M1plzcQOQ J86Eq0emVtMZr6HLSmZiQskAmxqIpKudPwinVp5Gvo5zkHYo6nxfIK6bYyiqKETL 6AFYck3v595bmU82hLRHrvUkrKbng7LToh8vk6o25C78SbD+dEnrHunI5QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBrgBvycU8TbXWFnrS8fiE+1zEagMB8GA1UdIwQY MBaAFPrXEA537ZEZ1m4jIbtnEdfnYJgrMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS10Y1FEbmZ0a1JuV2JpTWh1MmNSMS1kZ21Dcy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2UvMDFkNDExLWQ5MTUtNDI3Ny04ZmUy LTc2YjBkZGEyYmYzZS8xLzEtdGNRRG5mdGtSbldiaU1odTJjUjEtZGdtQ3MubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzNlLzAxZDQxMS1kOTE1LTQyNzctOGZlMi03NmIwZGRhMmJm M2UvMS8xLXRjUURuZnRrUm5XYmlNaHUyY1IxLWRnbUNzLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALBvW alRgD8FucuqfGJd01r18at/oEz5yGxuT4BF/EM26sNa4WCG08hII9VuYcM/c04RV 5ANslNUjnzu9jiNX+CwWwZrou4pFU2TD7D/ggWoJ+rc7zV80vuC7V5hxbDWTE/3S wJa7DuaxXZPOjOO+9LTc6eG3xIfK6XMYyrnXrkmYxAunrzQq+qUnZpSMXbX0u4n8 d2C5BEuS1kclSqpG12Vg0BuDBhW5W3jBsIy+V3ydRDKWq+9s8peLBzrYBZnPYzhl w4zFcjF2p7BX2v8LQ3jPOmj9bG2dyZx1cXLsLwR4E9ldgswBysvYTWIKugNWZ+Vk 9aJygbEbcec0Do502A== -----END CERTIFICATE-----Generated at Sun Jan 25 16:45:26 2026 by rpki-client