This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft File: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft (raw, json) Hash identifier: dErK1aoJfq/qGaU+kIUePC43A8qS07W46CwiIU+YnpU= Subject key identifier: 7A:EA:96:EE:8F:C1:93:5F:6A:6E:48:67:10:00:21:8B:5C:D2:C1:3B Authority key identifier: F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E Certificate issuer: /CN=f8a966664ec96edbd12e8e82e940bfb9faec105e Certificate serial: 019BF763DE2A33D5279C6F1ECCE17D225B25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft Manifest number: 17F0 Signing time: Sun 25 Jan 2026 23:01:15 +0000 Manifest this update: Sun 25 Jan 2026 23:01:15 +0000 Manifest next update: Mon 26 Jan 2026 23:01:15 +0000 Files and hashes: 1: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl (hash: cKl8NSexdJCP9gz4P0mx5wHqrKzQYWWqBucI7mFTaAM=) 2: Ao4MbaZG9c-QguWfgi3_65omXS8.roa (hash: S3ppKNcefv9jQMNAYTBjG6T2ZcBIubvshiWmN6cEp/8=) 3: IaHDBU7cqXMsetfiX2V98tBbzQ0.roa (hash: aSIfbQJ1s+03WYJQC/BEFCyDvq1e4lEKVIPKT8xRj5U=) 4: cyPt3U8MJxx2O8Gu_nAjxme3veM.roa (hash: dV2szaez9MAXq7GDDnq9o/U1fwaDRDnU84jID4xsjVg=) 5: f6Ax4OW8pptafrcB2Q3m_1jzDBI.roa (hash: egPj0/WWhG1KzeeOZW9kIeKIxG162Clkej5fleUo7YA=) 6: k1kjtWhfi3liyX8iFQRZl2D24O8.roa (hash: FnHmLVNImgUYL2pZsEuxgg3wkTC9/TTxiO/Pam+ZNU0=) 7: kPF9QYImDQ8SjVCJLj3L6j0wQQI.roa (hash: waaiuuNITP+3U2hyTT1tilYciSOM0S3B84ifw1ZVvyc=) 8: pTwEVEq8lsnikbVPE7gddvIm5IY.asa (hash: LWjHycnNu+2zFdDZjCo9dzUAFT1k8vR2dW8r+7ivikA=) 9: p_2QswK0tfCmIfiQf4KGVocaP0k.roa (hash: yu/G9KWpPBYXD0gOpNQ+e9+3i6QBlbxRYQF7XZvUA6E=) 10: qZFCiUxell2FKSjDa_U0AngZipY.asa (hash: 9ILwTknvcVjTEi7mBGnm8X+aT4WlXd+eb3GpaxquWNg=) 11: xnIV9lSRlUBIwsXt0rhBAj2FpKc.roa (hash: cvHuJPxiNYfhnN5IvufGhGrZKzw6FzUojqlP7L5juw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:de:2a:33:d5:27:9c:6f:1e:cc:e1:7d:22:5b:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8a966664ec96edbd12e8e82e940bfb9faec105e Validity Not Before: Jan 25 23:01:15 2026 GMT Not After : Jan 26 23:01:15 2026 GMT Subject: CN=7aea96ee8fc1935f6a6e48671000218b5cd2c13b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:de:24:24:1e:9e:a1:bb:08:3e:b3:cf:a6:6b: 0b:f8:b4:1d:6e:f8:34:97:d2:7e:9d:c6:4e:98:a1: b5:77:0c:d2:a6:a5:e7:f3:49:9a:ad:a4:bc:b8:49: cf:2c:69:f6:55:17:39:bc:c8:60:dc:ad:ec:9a:87: 92:08:c4:99:20:5f:59:50:aa:a0:19:a7:45:08:21: 73:20:63:0e:8b:5f:92:d6:b0:d8:4f:87:0c:c6:db: 4f:8d:4b:83:65:8b:b0:7a:81:19:c4:e8:f1:fc:93: b5:d1:65:8f:74:87:74:03:2c:90:2c:17:3f:14:dc: 3f:84:4a:cd:29:c9:7a:8d:19:af:ae:3c:19:48:27: 51:20:5c:84:7a:0d:50:1b:26:44:46:7f:2f:5d:aa: aa:a0:ec:6d:0e:4e:57:26:c8:4f:e6:45:4f:85:4d: b8:33:86:de:c0:c9:0f:1b:47:0a:29:86:a3:6c:8e: d8:4d:53:54:ec:6c:9a:44:03:79:49:8b:f2:6d:fe: 90:09:8a:05:57:1b:06:bd:45:9c:7a:00:94:dc:ac: fd:6e:55:e0:71:68:18:d4:a1:95:d9:21:9e:12:25: 00:8d:2e:f1:d1:98:6e:59:4a:5b:39:4a:37:76:7f: 0d:aa:40:76:23:c1:b2:36:90:88:7c:88:79:28:4f: 64:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:EA:96:EE:8F:C1:93:5F:6A:6E:48:67:10:00:21:8B:5C:D2:C1:3B X509v3 Authority Key Identifier: keyid:F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:b2:24:40:44:c0:00:c5:ac:f5:3e:fc:b5:c1:8a:ab:a6:10: 5d:22:f7:c5:cf:28:7b:b0:f1:6f:46:98:f2:df:ea:2d:ba:52: 36:62:27:fa:93:96:1a:6f:42:e7:ed:75:8a:68:ca:7e:45:9c: 6f:94:bc:d0:84:08:3e:16:75:33:06:a8:ff:d9:60:d9:d3:c7: 7c:16:c9:bb:5d:75:03:e7:ec:21:75:3a:ef:35:c5:17:02:85: 99:31:70:1b:b7:67:02:5d:9e:75:ef:8b:27:3e:32:ec:92:11: 90:ce:8d:2d:aa:49:9e:ae:ca:f3:2d:5d:24:81:d3:70:2a:e0: cf:e5:5a:3e:aa:46:d3:6c:c8:cc:d5:95:47:0e:51:8a:99:7e: 81:c1:af:af:88:50:0b:e9:a7:1f:f4:8a:bc:30:bb:53:c8:5a: 02:0f:cf:ae:cf:43:7c:8f:d6:5c:98:a5:df:83:42:02:97:89: 45:bc:1b:f4:28:74:e3:bc:8b:1d:e7:46:d5:f1:ef:84:df:5a: 11:29:f6:aa:39:3f:0a:34:b0:26:82:81:80:ff:b8:42:fa:0f: 6b:87:99:27:2d:74:70:f0:cd:0b:d8:53:68:e3:bb:8b:ed:1e: b0:84:8b:b7:9b:75:0b:12:bf:36:4e:a2:73:60:d8:03:5e:ee: de:2e:6a:80 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZv3Y94qM9UnnG8ezOF9IlslMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YTk2NjY2NGVjOTZlZGJkMTJlOGU4MmU5NDBiZmI5ZmFl YzEwNWUwHhcNMjYwMTI1MjMwMTE1WhcNMjYwMTI2MjMwMTE1WjAzMTEwLwYDVQQD Eyg3YWVhOTZlZThmYzE5MzVmNmE2ZTQ4NjcxMDAwMjE4YjVjZDJjMTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvd4kJB6eobsIPrPPpmsL+LQdbvg0 l9J+ncZOmKG1dwzSpqXn80maraS8uEnPLGn2VRc5vMhg3K3smoeSCMSZIF9ZUKqg GadFCCFzIGMOi1+S1rDYT4cMxttPjUuDZYuweoEZxOjx/JO10WWPdId0AyyQLBc/ FNw/hErNKcl6jRmvrjwZSCdRIFyEeg1QGyZERn8vXaqqoOxtDk5XJshP5kVPhU24 M4bewMkPG0cKKYajbI7YTVNU7GyaRAN5SYvybf6QCYoFVxsGvUWcegCU3Kz9blXg cWgY1KGV2SGeEiUAjS7x0ZhuWUpbOUo3dn8NqkB2I8GyNpCIfIh5KE9kzQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFHrqlu6PwZNfam5IZxAAIYtc0sE7MB8GA1UdIwQY MBaAFPipZmZOyW7b0S6OgulAv7n67BBeMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LbG1aazdKYnR2UkxvNkM2VUNfdWZyc0VGNC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUvNjRhYjk5LTQ5YWEtNGFhZS04ZGQ1 LTM4MjM1NWZjMmZmMS8xLzEtS2xtWms3SmJ0dlJMbzZDNlVDX3VmcnNFRjQubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQ1LzY0YWI5OS00OWFhLTRhYWUtOGRkNS0zODIzNTVmYzJm ZjEvMS8xLUtsbVprN0pidHZSTG82QzZVQ191ZnJzRUY0LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkrIk QETAAMWs9T78tcGKq6YQXSL3xc8oe7Dxb0aY8t/qLbpSNmIn+pOWGm9C5+11imjK fkWcb5S80IQIPhZ1Mwao/9lg2dPHfBbJu111A+fsIXU67zXFFwKFmTFwG7dnAl2e de+LJz4y7JIRkM6NLapJnq7K8y1dJIHTcCrgz+VaPqpG02zIzNWVRw5Ripl+gcGv r4hQC+mnH/SKvDC7U8haAg/Prs9DfI/WXJil34NCApeJRbwb9Ch047yLHedG1fHv hN9aESn2qjk/CjSwJoKBgP+4QvoPa4eZJy10cPDNC9hTaOO7i+0esISLt5t1CxK/ Nk6ic2DYA17u3i5qgA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:32:53 2026 by rpki-client