This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft File: 1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft (raw, json) Hash identifier: qsTHmREfiERKyqadybZvRUAhJuLH3oRieES9ifxp3BI= Subject key identifier: 1D:FA:FC:0D:91:46:34:85:93:11:B1:5C:1E:D6:C9:90:1E:DB:1F:C9 Authority key identifier: F8:99:AE:A5:6F:50:FF:8F:43:42:CB:EE:2A:F2:F2:88:A1:68:C9:30 Certificate issuer: /CN=f899aea56f50ff8f4342cbee2af2f288a168c930 Certificate serial: 019BF6510200FD9AB65595DE26D60BB780D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JmupW9Q_49DQsvuKvLyiKFoyTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 18:01:02 +0000 Manifest this update: Sun 25 Jan 2026 18:01:02 +0000 Manifest next update: Mon 26 Jan 2026 18:01:02 +0000 Files and hashes: 1: 1-JmupW9Q_49DQsvuKvLyiKFoyTA.crl (hash: NTYuiMLlRsQjp9ry3EdyRi7cjk578xlR/OACIejob5Q=) 2: DLBww-zqIhQllewFuiQa1fvj4RM.roa (hash: O1Alk3RK+8x7vbkqLEwNAkJ0vv3sx/hGXGgnO73ZNcA=) 3: jpaX1eyUa61M1zUPWJaz-yxNJGQ.roa (hash: 2Zm1F358Ktx90HgZPnWlbKxHuyZ65L4VlWk0sdk1YM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.crl rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft rsync://rpki.ripe.net/repository/DEFAULT/1-JmupW9Q_49DQsvuKvLyiKFoyTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:02:00:fd:9a:b6:55:95:de:26:d6:0b:b7:80:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f899aea56f50ff8f4342cbee2af2f288a168c930 Validity Not Before: Jan 25 18:01:02 2026 GMT Not After : Jan 26 18:01:02 2026 GMT Subject: CN=1dfafc0d914634859311b15c1ed6c9901edb1fc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:41:d5:62:db:9c:fc:a1:a9:6f:ef:fa:98:23: 52:45:f8:83:0d:be:e3:13:87:9c:92:0f:16:ff:44: 7c:7e:6d:88:3f:4e:f8:d1:35:6e:03:07:fd:df:c4: 8a:58:7a:48:52:45:3d:b8:ba:01:32:74:a9:a9:42: 0f:13:b4:05:ca:1f:ef:d3:bd:80:a5:e6:b3:a7:67: b9:bc:a8:f3:3b:d1:e3:ff:6f:54:74:a9:18:19:05: a0:f0:9a:49:16:ca:90:95:63:d4:fe:ec:f2:59:f9: b3:ff:96:c4:b9:dd:07:c0:2c:11:d4:43:0f:45:73: ac:c6:7f:ba:bf:ca:81:11:87:3f:8a:e4:0c:4a:13: e5:29:64:e6:85:f3:18:10:7d:9a:24:0d:ee:73:5d: ea:5f:76:b0:1a:8d:29:c1:12:31:95:9a:e5:d8:57: 95:1e:ec:73:12:00:74:9e:7a:fb:8a:b0:50:75:7e: 38:2a:ef:05:fa:90:bc:cb:20:67:54:10:a8:7e:f8: 45:47:35:ca:f5:1b:6b:8b:4a:c0:a5:14:ea:03:14: c8:18:15:56:fa:9c:6b:81:6a:c8:f3:04:28:9a:b9: 92:55:90:0f:24:42:3c:db:88:bd:d3:82:22:11:ce: a7:79:6e:4d:fe:ea:4b:12:79:33:9e:11:9e:69:aa: 32:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:FA:FC:0D:91:46:34:85:93:11:B1:5C:1E:D6:C9:90:1E:DB:1F:C9 X509v3 Authority Key Identifier: keyid:F8:99:AE:A5:6F:50:FF:8F:43:42:CB:EE:2A:F2:F2:88:A1:68:C9:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JmupW9Q_49DQsvuKvLyiKFoyTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:0d:0b:9a:dd:de:2c:42:11:55:66:e1:63:7a:e4:34:64:b6: 1c:ac:7a:7a:83:08:a7:06:ab:b8:4c:28:5a:c5:66:41:9d:27: ae:8a:2e:3a:e1:1f:ff:77:c3:e1:90:d7:41:2b:3f:2a:db:5b: b6:cf:df:b2:e5:cb:e6:1f:f4:a1:88:e9:ab:82:5a:d7:53:23: b6:c9:0b:49:a0:c2:3e:31:65:6a:fe:21:38:1a:fd:4c:7d:f2: 57:4c:d2:6c:01:64:ce:ec:15:f1:13:ea:35:24:61:69:97:f9: 7f:71:4d:5b:d8:a5:bf:db:08:c3:7f:2c:64:42:27:96:8d:a0: 00:2f:4a:0d:58:40:34:4e:0f:f6:f5:9c:49:10:11:d9:2c:21: dc:b8:f6:09:aa:f6:40:0d:2c:12:98:61:75:1e:48:10:92:47: fe:00:a6:5b:4e:15:45:bc:b5:e9:5d:f7:13:e0:74:50:4d:4b: 3e:8e:b0:f1:12:3d:0f:89:91:c9:8e:e8:ed:2b:af:c0:6e:e9: 79:84:07:f9:fd:0a:9b:02:f2:75:44:d8:b6:80:08:c2:ff:c1: 14:2e:b6:4c:92:04:7b:60:fa:78:c4:4a:5d:83:db:4d:1c:ff: 7c:8b:9c:ac:c3:84:50:70:2a:41:39:fa:68:71:63:3f:8b:45: b5:b5:74:4e -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZv2UQIA/Zq2VZXeJtYLt4DUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4OTlhZWE1NmY1MGZmOGY0MzQyY2JlZTJhZjJmMjg4YTE2 OGM5MzAwHhcNMjYwMTI1MTgwMTAyWhcNMjYwMTI2MTgwMTAyWjAzMTEwLwYDVQQD EygxZGZhZmMwZDkxNDYzNDg1OTMxMWIxNWMxZWQ2Yzk5MDFlZGIxZmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEHVYtuc/KGpb+/6mCNSRfiDDb7j E4eckg8W/0R8fm2IP0740TVuAwf938SKWHpIUkU9uLoBMnSpqUIPE7QFyh/v072A peazp2e5vKjzO9Hj/29UdKkYGQWg8JpJFsqQlWPU/uzyWfmz/5bEud0HwCwR1EMP RXOsxn+6v8qBEYc/iuQMShPlKWTmhfMYEH2aJA3uc13qX3awGo0pwRIxlZrl2FeV HuxzEgB0nnr7irBQdX44Ku8F+pC8yyBnVBCofvhFRzXK9Rtri0rApRTqAxTIGBVW +pxrgWrI8wQomrmSVZAPJEI824i904IiEc6neW5N/upLEnkznhGeaaoy5wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFB36/A2RRjSFkxGxXB7WyZAe2x/JMB8GA1UdIwQY MBaAFPiZrqVvUP+PQ0LL7iry8oihaMkwMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1KbXVwVzlRXzQ5RFFzdnVLdkx5aUtGb3lUQS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDYvMmMyZTYxLTcyNzktNDgzYy04NDc1 LTliZjE5ZDg0MjIwZi8xLzEtSm11cFc5UV80OURRc3Z1S3ZMeWlLRm95VEEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQ2LzJjMmU2MS03Mjc5LTQ4M2MtODQ3NS05YmYxOWQ4NDIy MGYvMS8xLUptdXBXOVFfNDlEUXN2dUt2THlpS0ZveVRBLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArw0L mt3eLEIRVWbhY3rkNGS2HKx6eoMIpwaruEwoWsVmQZ0nroouOuEf/3fD4ZDXQSs/ Kttbts/fsuXL5h/0oYjpq4Ja11MjtskLSaDCPjFlav4hOBr9TH3yV0zSbAFkzuwV 8RPqNSRhaZf5f3FNW9ilv9sIw38sZEInlo2gAC9KDVhANE4P9vWcSRAR2Swh3Lj2 Car2QA0sEphhdR5IEJJH/gCmW04VRby16V33E+B0UE1LPo6w8RI9D4mRyY7o7Suv wG7peYQH+f0KmwLydUTYtoAIwv/BFC62TJIEe2D6eMRKXYPbTRz/fIucrMOEUHAq QTn6aHFjP4tFtbV0Tg== -----END CERTIFICATE-----Generated at Mon Jan 26 04:02:07 2026 by rpki-client