This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft File: 1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft (raw, json) Hash identifier: ATBjR0/kyPV52VUxDxDf8GiwWzYfGDOEow0u7aXtT2I= Subject key identifier: 0A:B6:0B:2E:03:5E:61:6A:B2:E1:FB:1A:39:F6:2D:C8:9A:4F:6D:42 Authority key identifier: FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4 Certificate issuer: /CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4 Certificate serial: 019BF23D1E303AB289C07E283AA39A905CDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft Manifest number: 1488 Signing time: Sat 24 Jan 2026 23:00:50 +0000 Manifest this update: Sat 24 Jan 2026 23:00:50 +0000 Manifest next update: Sun 25 Jan 2026 23:00:50 +0000 Files and hashes: 1: 1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl (hash: IgeS61j5pN+MPR9jN4r7LTg30QO6o+3t8+Dr3buqMLg=) 2: 293BcvVjzkXiUZsqwiLACL0z-hE.roa (hash: lBHeVwqbKpyKukeM+uJaAwqMulYLmIJGLcoZE6FBlwQ=) 3: Y6t_kCbEk6ais70K_hKBXp4Quro.roa (hash: l5cSwhwlEaGXCsl3EbJ8zLczFkFkA8pweq2SNrMzPq8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:3d:1e:30:3a:b2:89:c0:7e:28:3a:a3:9a:90:5c:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4 Validity Not Before: Jan 24 23:00:50 2026 GMT Not After : Jan 25 23:00:50 2026 GMT Subject: CN=0ab60b2e035e616ab2e1fb1a39f62dc89a4f6d42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:97:29:ab:58:6d:7b:c9:9b:75:d0:25:9a:98: 64:11:ce:d5:70:cf:5b:bf:6e:0e:36:cd:e9:0c:76: 62:89:04:a8:a7:6b:6e:c3:c3:bb:12:95:b8:a2:c1: 6d:fc:d3:33:c5:f3:6e:2b:dc:26:66:0e:5c:09:4a: 6d:4a:0d:8e:b8:dd:49:bc:30:38:ff:6e:55:02:f6: 5e:d7:1e:f2:b6:93:fb:4d:87:c4:b1:ae:aa:df:39: 20:88:95:b0:9b:6c:88:47:5c:dd:c3:70:cb:0b:7c: f5:27:a0:26:35:4a:88:90:6a:1d:bd:13:76:a1:de: dc:30:9a:53:f6:97:d5:89:93:da:72:3e:30:43:2a: 13:05:94:e1:eb:a3:15:fb:a6:44:d0:d2:4c:08:3d: b7:f0:1a:0a:56:2a:a1:3d:d6:15:1d:80:bb:dc:c4: 86:15:3c:b3:5d:71:69:dc:42:f2:e4:a7:3e:d7:33: 66:3a:6c:70:f0:5d:f4:e9:45:95:14:94:21:ac:64: 9a:96:13:c5:c6:72:bc:48:b2:e8:a1:49:56:b0:b4: 0f:44:09:e0:2b:48:85:2d:7e:30:cf:02:fb:f2:fc: 30:6f:bf:ed:af:51:2a:bf:73:60:c9:2d:57:a9:f9: 39:cf:f7:a4:62:1f:c1:0e:1c:fd:f2:10:e6:ec:71: 91:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:B6:0B:2E:03:5E:61:6A:B2:E1:FB:1A:39:F6:2D:C8:9A:4F:6D:42 X509v3 Authority Key Identifier: keyid:FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:91:1b:82:98:84:56:f0:99:84:fa:b1:93:24:d8:1a:78:d3: b0:81:22:f6:c5:05:68:2f:16:d1:06:f4:15:ae:c0:6b:e6:74: 5c:23:7d:39:ee:4a:5b:5a:fa:b5:64:1a:71:6f:02:21:42:3d: 7c:50:c2:04:ab:93:a7:cf:7f:04:0b:b3:7a:c9:cf:b9:0f:e9: 59:f7:fa:ec:a1:b6:8c:0a:40:b2:d6:18:74:28:d6:e1:27:b1: 91:ea:58:ac:41:78:61:4a:f5:39:e5:c7:fa:d6:bc:ee:9a:1d: 4b:45:eb:1a:e6:1c:13:b6:2a:b2:ab:5b:cf:0d:15:f0:40:94: 06:d5:ef:69:b5:25:fd:53:b6:7f:bd:f8:5d:d7:31:cb:e9:4a: b4:4f:cc:97:0c:bb:32:9e:78:38:42:11:21:1e:ae:90:79:97: aa:ed:cb:75:6e:7a:c9:cd:ae:68:60:e9:bb:d0:22:f3:23:a9: 95:0c:09:7f:ad:77:a2:b7:cd:87:71:b4:a4:12:3e:4d:5c:2d: 9c:22:b0:4f:c0:43:58:25:16:e4:4a:c7:2a:8d:08:21:4a:3b: f1:5b:2c:44:b3:33:4b:57:d1:2d:9b:2a:fd:7e:76:09:24:4a: 47:a3:20:e0:67:e2:f1:f3:78:28:63:16:f7:b9:f6:1e:31:68: e0:da:63:b5 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZvyPR4wOrKJwH4oOqOakFzdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNjRhMWY3Y2E0MGI1ODExNmU2YmM4MzhlMDYyZjljNzEy MjI4YTQwHhcNMjYwMTI0MjMwMDUwWhcNMjYwMTI1MjMwMDUwWjAzMTEwLwYDVQQD EygwYWI2MGIyZTAzNWU2MTZhYjJlMWZiMWEzOWY2MmRjODlhNGY2ZDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpcpq1hte8mbddAlmphkEc7VcM9b v24ONs3pDHZiiQSop2tuw8O7EpW4osFt/NMzxfNuK9wmZg5cCUptSg2OuN1JvDA4 /25VAvZe1x7ytpP7TYfEsa6q3zkgiJWwm2yIR1zdw3DLC3z1J6AmNUqIkGodvRN2 od7cMJpT9pfViZPacj4wQyoTBZTh66MV+6ZE0NJMCD238BoKViqhPdYVHYC73MSG FTyzXXFp3ELy5Kc+1zNmOmxw8F306UWVFJQhrGSalhPFxnK8SLLooUlWsLQPRAng K0iFLX4wzwL78vwwb7/tr1Eqv3NgyS1Xqfk5z/ekYh/BDhz98hDm7HGRQwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFAq2Cy4DXmFqsuH7Gjn2LciaT21CMB8GA1UdIwQY MBaAFPpkoffKQLWBFua8g44GL5xxIiikMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1tU2g5OHBBdFlFVzVyeURqZ1l2bkhFaUtLUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2YvYmEyN2ZiLTI1NTAtNDlhZC1iMGVm LTViODNkMGU5NjAxMi8xLzEtbVNoOThwQXRZRVc1cnlEamdZdm5IRWlLS1EubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzNmL2JhMjdmYi0yNTUwLTQ5YWQtYjBlZi01YjgzZDBlOTYw MTIvMS8xLW1TaDk4cEF0WUVXNXJ5RGpnWXZuSEVpS0tRLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQJEb gpiEVvCZhPqxkyTYGnjTsIEi9sUFaC8W0Qb0Fa7Aa+Z0XCN9Oe5KW1r6tWQacW8C IUI9fFDCBKuTp89/BAuzesnPuQ/pWff67KG2jApAstYYdCjW4SexkepYrEF4YUr1 OeXH+ta87podS0XrGuYcE7Yqsqtbzw0V8ECUBtXvabUl/VO2f734Xdcxy+lKtE/M lwy7Mp54OEIRIR6ukHmXqu3LdW56yc2uaGDpu9Ai8yOplQwJf613orfNh3G0pBI+ TVwtnCKwT8BDWCUW5ErHKo0IIUo78VssRLMzS1fRLZsq/X52CSRKR6Mg4Gfi8fN4 KGMW97n2HjFo4NpjtQ== -----END CERTIFICATE-----Generated at Sun Jan 25 07:37:47 2026 by rpki-client