This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/1-EAlIIyFaM6OWN4a59g--NKydCQ.mft File: 1-EAlIIyFaM6OWN4a59g--NKydCQ.mft (raw, json) Hash identifier: eLlGRyB+P+OUBEbC/tWmCk4UMcC89F2Lv/ZzdKUStBk= Subject key identifier: 25:A4:A1:E2:80:C3:3C:8E:78:51:17:A0:9C:7D:64:6F:FE:09:AC:94 Authority key identifier: F8:40:25:20:8C:85:68:CE:8E:58:DE:1A:E7:D8:3E:F8:D2:B2:74:24 Certificate issuer: /CN=f84025208c8568ce8e58de1ae7d83ef8d2b27424 Certificate serial: 019BF53E48387F6C2BD2503AEE903A5F65CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EAlIIyFaM6OWN4a59g--NKydCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/1-EAlIIyFaM6OWN4a59g--NKydCQ.mft Manifest number: 4D Signing time: Sun 25 Jan 2026 13:00:58 +0000 Manifest this update: Sun 25 Jan 2026 13:00:58 +0000 Manifest next update: Mon 26 Jan 2026 13:00:58 +0000 Files and hashes: 1: 1-EAlIIyFaM6OWN4a59g--NKydCQ.crl (hash: t6cm7Vi0mQ99ypjFAa1XzA1FhQJFbFdACs0bolAy3Lg=) 2: 5nyyp5bJ6BfhfIdrL4euf6g3prs.asa (hash: g/gn9GfPYPRaS6oGfe8vAdejuU161UnFwUAxOE+MHZQ=) 3: BNbYCTwC4UEQcd5nV0lyvO8_FF4.asa (hash: USr7fzmawFWbiL1qC8bzafm2rT8+Rqoc2eBnCHzxDMk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/1-EAlIIyFaM6OWN4a59g--NKydCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/1-EAlIIyFaM6OWN4a59g--NKydCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-EAlIIyFaM6OWN4a59g--NKydCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:48:38:7f:6c:2b:d2:50:3a:ee:90:3a:5f:65:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f84025208c8568ce8e58de1ae7d83ef8d2b27424 Validity Not Before: Jan 25 13:00:58 2026 GMT Not After : Jan 26 13:00:58 2026 GMT Subject: CN=25a4a1e280c33c8e785117a09c7d646ffe09ac94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:46:63:ee:9c:6e:f0:28:75:c3:5a:7c:39:92: 98:06:25:2d:c0:58:71:fd:53:ea:31:32:34:37:1d: 5d:79:cd:c9:fa:ae:c3:ff:0d:b3:b4:7d:24:a5:a0: 18:df:37:54:2a:e4:2c:2f:f0:3f:67:db:43:02:be: e4:f9:28:f0:4c:18:5b:74:f5:28:e9:c3:b7:84:69: 74:be:ec:bb:75:9e:36:bf:68:e0:00:d7:fc:7b:74: 01:1b:64:ce:4e:74:cc:35:0d:7a:cb:45:c3:4d:1f: b7:44:d5:c6:7f:6c:e9:5b:d9:b7:cd:ab:1c:3f:da: a0:c2:56:da:b3:d1:60:bc:ae:05:3d:f2:37:bd:b9: df:c1:1e:b0:12:8c:73:48:de:8e:51:87:fc:7d:d1: 51:83:33:c0:c2:b0:0c:fa:ea:67:e5:f9:c8:87:9c: 85:15:3c:01:d6:e5:6f:53:0a:f4:2e:83:03:79:15: 56:69:9c:85:b5:4b:90:65:68:58:5d:11:b1:86:3b: 0b:30:fc:85:8e:cf:87:a7:c3:8f:fe:af:43:46:e0: da:7b:64:91:45:01:71:a2:bb:47:86:f0:93:e9:d4: 70:17:82:e9:a5:2c:26:8e:2c:9c:db:ca:f8:6d:af: 13:82:37:f1:94:fd:80:72:35:e4:5c:83:0a:a3:dc: f6:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:A4:A1:E2:80:C3:3C:8E:78:51:17:A0:9C:7D:64:6F:FE:09:AC:94 X509v3 Authority Key Identifier: keyid:F8:40:25:20:8C:85:68:CE:8E:58:DE:1A:E7:D8:3E:F8:D2:B2:74:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EAlIIyFaM6OWN4a59g--NKydCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/1-EAlIIyFaM6OWN4a59g--NKydCQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/1-EAlIIyFaM6OWN4a59g--NKydCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:67:c5:2b:97:16:d8:0d:82:90:3a:43:17:5e:fa:7d:1b:49: 99:ec:0e:09:42:c7:25:28:92:bb:81:0e:6e:70:dc:37:0b:aa: 81:2a:59:1f:37:e4:0d:c3:9f:a5:1f:fd:11:eb:f3:18:9c:2e: bb:59:c9:00:a2:38:27:8c:45:3f:e7:6d:01:9d:d5:08:ba:51: cc:2a:dd:2a:ef:df:d2:99:a1:0b:37:7b:5a:0e:af:c5:1f:16: 88:68:c9:e7:e3:3a:cb:87:98:13:12:ea:5a:5a:50:b1:9b:45: fe:89:50:6e:07:29:65:b8:80:fb:05:03:8b:25:55:99:7d:0b: b9:5c:a3:76:03:ca:1b:74:e6:39:e1:63:08:61:20:05:ae:14: 68:7e:7f:8d:80:71:47:88:47:aa:90:07:e7:4b:a0:d4:3e:e8: 58:85:67:fe:9b:cc:40:44:53:51:f1:84:8b:2d:4a:fe:01:56: 97:81:5e:92:3a:23:7a:4b:9b:c0:2f:a1:e6:af:54:17:af:c1: 7e:19:82:6b:f5:c7:ab:c8:22:f4:0b:2d:cb:c7:ae:21:5d:68: d8:5c:e9:ab:b8:ba:e3:b4:e1:d3:2d:e1:c7:a2:99:e4:51:2f: 47:d7:8a:93:ec:68:53:f0:6f:71:0c:6c:ca:dd:98:c5:aa:da: 6b:ac:ee:05 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZv1Pkg4f2wr0lA67pA6X2XPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NDAyNTIwOGM4NTY4Y2U4ZTU4ZGUxYWU3ZDgzZWY4ZDJi Mjc0MjQwHhcNMjYwMTI1MTMwMDU4WhcNMjYwMTI2MTMwMDU4WjAzMTEwLwYDVQQD EygyNWE0YTFlMjgwYzMzYzhlNzg1MTE3YTA5YzdkNjQ2ZmZlMDlhYzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkZj7pxu8Ch1w1p8OZKYBiUtwFhx /VPqMTI0Nx1dec3J+q7D/w2ztH0kpaAY3zdUKuQsL/A/Z9tDAr7k+SjwTBhbdPUo 6cO3hGl0vuy7dZ42v2jgANf8e3QBG2TOTnTMNQ16y0XDTR+3RNXGf2zpW9m3zasc P9qgwlbas9FgvK4FPfI3vbnfwR6wEoxzSN6OUYf8fdFRgzPAwrAM+upn5fnIh5yF FTwB1uVvUwr0LoMDeRVWaZyFtUuQZWhYXRGxhjsLMPyFjs+Hp8OP/q9DRuDae2SR RQFxortHhvCT6dRwF4LppSwmjiyc28r4ba8TgjfxlP2AcjXkXIMKo9z2UwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFCWkoeKAwzyOeFEXoJx9ZG/+CayUMB8GA1UdIwQY MBaAFPhAJSCMhWjOjljeGufYPvjSsnQkMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1FQWxJSXlGYU02T1dONGE1OWctLU5LeWRDUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDYvY2FkZDZlLTY1YzYtNDRkYS05ZWU5 LWVmZWE2NWRjMzAyMC8xLzEtRUFsSUl5RmFNNk9XTjRhNTlnLS1OS3lkQ1EubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQ2L2NhZGQ2ZS02NWM2LTQ0ZGEtOWVlOS1lZmVhNjVkYzMw MjAvMS8xLUVBbElJeUZhTTZPV040YTU5Zy0tTkt5ZENRLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARGfF K5cW2A2CkDpDF176fRtJmewOCULHJSiSu4EObnDcNwuqgSpZHzfkDcOfpR/9Eevz GJwuu1nJAKI4J4xFP+dtAZ3VCLpRzCrdKu/f0pmhCzd7Wg6vxR8WiGjJ5+M6y4eY ExLqWlpQsZtF/olQbgcpZbiA+wUDiyVVmX0LuVyjdgPKG3TmOeFjCGEgBa4UaH5/ jYBxR4hHqpAH50ug1D7oWIVn/pvMQERTUfGEiy1K/gFWl4FekjojekubwC+h5q9U F6/BfhmCa/XHq8gi9Asty8euIV1o2Fzpq7i647Th0y3hx6KZ5FEvR9eKk+xoU/Bv cQxsyt2Yxaraa6zuBQ== -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:42 2026 by rpki-client