This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft File: 1P9RiRrUTBZt7roTFZZsmh2DkJc.mft (raw, json) Hash identifier: LGIpyT0wBkBakMeMa+oFaNCq6LfDLzRONeY3PyYOAKc= Subject key identifier: 74:2F:3E:7F:DE:3D:0D:17:53:87:A1:CE:B5:49:14:2F:AA:93:B4:07 Authority key identifier: D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97 Certificate issuer: /CN=d4ff51891ad44c166deeba1315966c9a1d839097 Certificate serial: 019BF499D256457AF87E7991111F82CC63B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft Manifest number: 0473 Signing time: Sun 25 Jan 2026 10:01:20 +0000 Manifest this update: Sun 25 Jan 2026 10:01:20 +0000 Manifest next update: Mon 26 Jan 2026 10:01:20 +0000 Files and hashes: 1: 1P9RiRrUTBZt7roTFZZsmh2DkJc.crl (hash: zjZ1iEUwkfSvuSSp7WwmOX3O+8UvX0XmeAv1L6e57r4=) 2: Z41uijNFQ0G-iZW7PiDpJ2EAmv0.roa (hash: AfUXmqvyv0xkNeTqOicnT0Mi5qeFfpzbGMDou/p87aU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.crl rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:d2:56:45:7a:f8:7e:79:91:11:1f:82:cc:63:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4ff51891ad44c166deeba1315966c9a1d839097 Validity Not Before: Jan 25 10:01:20 2026 GMT Not After : Jan 26 10:01:20 2026 GMT Subject: CN=742f3e7fde3d0d175387a1ceb549142faa93b407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b0:eb:8c:81:1f:50:1e:dd:4d:a3:71:c3:a4: 00:77:b9:31:8e:e1:71:d7:93:2b:c4:42:7d:e7:fb: af:3d:08:2a:cf:41:9d:d7:e2:30:18:08:e8:21:30: b4:83:64:82:27:ad:18:da:f8:a5:8a:82:10:73:6a: 73:eb:79:94:25:3d:89:0c:18:f1:7e:2e:8c:1d:cc: 50:a9:88:14:5d:f4:2b:87:08:b2:42:71:04:91:37: d1:f7:1e:e1:33:67:5f:c1:c2:cb:36:24:50:cd:33: d4:0a:d6:22:da:bc:24:3a:da:97:ba:51:9f:61:64: 6a:bd:66:81:b8:26:20:19:d6:d7:c8:78:f5:22:99: 31:5c:f0:c3:79:1d:c8:a2:4d:55:ef:4f:42:28:65: a3:bd:6f:83:a3:19:b5:ce:bf:e9:91:d7:28:ba:96: 6a:04:97:0b:fc:93:b2:71:bd:96:4c:10:a7:6b:22: 51:f0:c7:36:9e:c8:c9:20:2d:86:c0:0b:2a:32:13: f7:ad:9b:4f:ee:40:c8:16:dc:80:27:6c:f9:fc:2a: c1:33:e7:22:3c:bf:95:e6:81:ec:b1:72:35:5e:cb: 5f:94:03:fb:35:de:de:72:a1:6d:de:b4:c7:51:5c: e6:1d:81:87:de:99:d3:ed:dd:3c:4b:94:7f:1d:01: 49:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:2F:3E:7F:DE:3D:0D:17:53:87:A1:CE:B5:49:14:2F:AA:93:B4:07 X509v3 Authority Key Identifier: keyid:D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:b3:cd:af:ec:c4:d3:06:27:3c:21:94:be:d5:c3:86:75:2d: 26:b6:6d:f7:27:26:4d:5f:e8:ed:e4:c6:e0:2e:fa:71:ce:3b: 15:1e:2a:41:0b:6b:22:27:3a:86:48:8b:7f:78:5d:8f:7e:6c: 37:30:7c:fb:57:41:a2:4b:96:76:a3:a4:e7:3e:ff:d3:bc:f0: 1c:e3:a4:c6:be:16:e7:91:8b:9e:9f:77:ff:82:ba:60:92:65: 43:0f:5d:d9:ea:91:42:7f:43:49:b9:7a:42:fd:df:20:c4:9d: 44:81:c9:9d:99:ca:07:7a:70:6b:5f:20:64:de:3d:9e:ce:02: 1f:89:9b:08:e5:e8:50:a8:a4:5a:98:e0:cc:a8:57:80:d2:d7: 58:4f:97:8c:d9:93:bf:90:5d:25:50:bf:d4:48:c8:5e:d7:9c: c5:13:d8:d8:92:ca:56:89:1b:67:82:1b:9d:2e:81:f8:da:8c: 17:3e:e9:5d:9d:3e:58:10:cc:f2:46:d8:a7:65:dd:80:c1:65: 07:20:57:2a:c3:37:a1:fb:8a:7a:fc:59:dc:3f:64:4a:64:4d: 08:db:d7:cc:a6:68:24:64:ee:65:9e:d0:df:29:68:92:45:8a: b7:c9:c4:67:ac:10:71:91:b7:e2:04:32:1c:f3:e2:e2:67:25: c6:64:e5:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0mdJWRXr4fnmRER+CzGO3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ZmY1MTg5MWFkNDRjMTY2ZGVlYmExMzE1OTY2YzlhMWQ4 MzkwOTcwHhcNMjYwMTI1MTAwMTIwWhcNMjYwMTI2MTAwMTIwWjAzMTEwLwYDVQQD Eyg3NDJmM2U3ZmRlM2QwZDE3NTM4N2ExY2ViNTQ5MTQyZmFhOTNiNDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLDrjIEfUB7dTaNxw6QAd7kxjuFx 15MrxEJ95/uvPQgqz0Gd1+IwGAjoITC0g2SCJ60Y2vilioIQc2pz63mUJT2JDBjx fi6MHcxQqYgUXfQrhwiyQnEEkTfR9x7hM2dfwcLLNiRQzTPUCtYi2rwkOtqXulGf YWRqvWaBuCYgGdbXyHj1IpkxXPDDeR3Iok1V709CKGWjvW+Doxm1zr/pkdcoupZq BJcL/JOycb2WTBCnayJR8Mc2nsjJIC2GwAsqMhP3rZtP7kDIFtyAJ2z5/CrBM+ci PL+V5oHssXI1XstflAP7Nd7ecqFt3rTHUVzmHYGH3pnT7d08S5R/HQFJUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHQvPn/ePQ0XU4ehzrVJFC+qk7QHMB8GA1UdIwQY MBaAFNT/UYka1EwWbe66ExWWbJodg5CXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVA5UmlSclVUQlp0N3JvVEZaWnNtaDJEa0pjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8xOTk1ZTAtZjQ1MC00OTU4LThhMmQt Y2E4MGJhZGQ3OWJmLzEvMVA5UmlSclVUQlp0N3JvVEZaWnNtaDJEa0pjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8xOTk1ZTAtZjQ1MC00OTU4LThhMmQtY2E4MGJhZGQ3OWJm LzEvMVA5UmlSclVUQlp0N3JvVEZaWnNtaDJEa0pjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjrPNr+zE 0wYnPCGUvtXDhnUtJrZt9ycmTV/o7eTG4C76cc47FR4qQQtrIic6hkiLf3hdj35s NzB8+1dBokuWdqOk5z7/07zwHOOkxr4W55GLnp93/4K6YJJlQw9d2eqRQn9DSbl6 Qv3fIMSdRIHJnZnKB3pwa18gZN49ns4CH4mbCOXoUKikWpjgzKhXgNLXWE+XjNmT v5BdJVC/1EjIXtecxRPY2JLKVokbZ4IbnS6B+NqMFz7pXZ0+WBDM8kbYp2XdgMFl ByBXKsM3ofuKevxZ3D9kSmRNCNvXzKZoJGTuZZ7Q3ylokkWKt8nEZ6wQcZG34gQy HPPi4mclxmTl7g== -----END CERTIFICATE-----Generated at Sun Jan 25 19:46:41 2026 by rpki-client