This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft File: 1COlvl4hykYHMq5I84Wj6hUKK-E.mft (raw, json) Hash identifier: 51eFrNQq51gKI2L/31P8qNLr0HqmdpGN/8oDttVCPv4= Subject key identifier: 82:B2:B6:80:F6:30:03:15:42:53:90:31:43:6B:BF:7A:BC:3A:A0:B2 Authority key identifier: D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1 Certificate issuer: /CN=d423a5be5e21ca460732ae48f385a3ea150a2be1 Certificate serial: 019BF462C0A26A5B939069C4EDF862E5A263 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft Manifest number: 0AB5 Signing time: Sun 25 Jan 2026 09:01:10 +0000 Manifest this update: Sun 25 Jan 2026 09:01:10 +0000 Manifest next update: Mon 26 Jan 2026 09:01:10 +0000 Files and hashes: 1: 1COlvl4hykYHMq5I84Wj6hUKK-E.crl (hash: 7ObqXe2+LJoo6tG2CCI18Vks8w0GJmtMejsfQoTiIok=) 2: Ac8C988WG2rKoPAyM0PJx2rNaoE.roa (hash: 89LOHLJ7QAy8vGNQbBqFUdTxIH6fXbqoySpOcf8nHiY=) 3: IHsIqdWKW3oXqrv8CC_-_K3HeCM.roa (hash: dZCFigPRpz1prER5FdjelyGWWX2YW17+YhrDgGzAMCw=) 4: URkF_3wWv4caQ7gSHuTsb7r6MGI.roa (hash: Gjnz59P638W/IUVQMIM+Nm7HP3jZwW2uLN6LQ+PZObA=) 5: hnX6AgrOaoGB1pS6d2IohDyU9YY.roa (hash: TyBpxjx7ARYI2/qA9SgTNdxkKgP/znTGEAT9++KH4mc=) 6: vAK4daozNSO59AKfeMnlfBD0uBI.roa (hash: BWOG9qwyAhGR7urMCtstbKhY8qOFr3C+wcw1uSuJqsw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:c0:a2:6a:5b:93:90:69:c4:ed:f8:62:e5:a2:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d423a5be5e21ca460732ae48f385a3ea150a2be1 Validity Not Before: Jan 25 09:01:10 2026 GMT Not After : Jan 26 09:01:10 2026 GMT Subject: CN=82b2b680f630031542539031436bbf7abc3aa0b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:34:c3:64:5f:8a:8f:50:b1:aa:5d:0c:49:f9: 34:12:9a:74:cc:0b:b7:95:fa:3e:7e:33:7a:89:0b: 83:ea:7c:7e:1e:0d:2c:03:d8:8f:c1:e0:90:62:b9: 6b:95:43:36:f4:a8:8f:6d:3b:d7:ec:73:46:78:9e: 05:56:d5:96:e9:06:58:7e:09:a4:1f:0e:0e:62:83: 62:7c:ff:5c:48:99:f1:f1:2a:14:ea:31:8c:c4:1c: 03:46:e0:27:e2:f8:78:b8:da:d6:06:60:19:20:a8: 09:2d:89:27:c3:ae:e8:04:f0:77:dd:8a:4b:92:19: 9d:d5:c2:e0:15:45:e2:2e:12:f1:b8:cc:ee:72:34: 3a:9d:2d:33:2c:cf:e0:e7:6a:52:0b:7e:30:7c:4a: 77:33:85:ee:44:5c:a9:59:5e:06:d2:e5:28:94:73: cb:c7:a8:37:f2:78:63:8d:6a:27:c9:3f:40:b8:0c: ba:82:e1:cf:66:ce:f5:7d:c0:aa:a3:de:0f:29:da: 71:d4:b1:9f:b8:40:54:5a:10:41:56:eb:79:b3:1b: df:e9:c7:dc:f3:1f:cc:c7:19:df:93:ee:62:3e:ce: bc:f9:1f:75:c3:60:49:f4:91:a9:3e:a0:0b:7e:8e: ee:e1:db:c5:47:1f:65:9a:e2:21:e6:b6:ef:6b:34: c6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:B2:B6:80:F6:30:03:15:42:53:90:31:43:6B:BF:7A:BC:3A:A0:B2 X509v3 Authority Key Identifier: keyid:D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:f6:b5:b7:e1:a8:8b:d1:93:27:db:02:2c:03:9f:67:93:d6: 94:56:54:f4:d4:6b:01:f1:d3:74:36:80:80:6c:5d:0c:34:9b: 83:0d:11:65:32:d3:d2:97:aa:d1:fc:f7:64:3f:78:88:0d:fd: 8d:98:96:34:26:f5:2b:3b:20:2a:8a:a2:d8:92:cc:75:28:49: 4d:d2:92:40:e9:f6:93:05:f7:12:28:06:03:05:4a:11:e8:33: 05:8d:53:10:07:8d:d6:94:dc:89:bb:93:e1:84:48:ab:82:36: 8c:51:2c:5a:e5:3d:2a:a1:e9:89:a5:e8:f5:d8:f7:25:ab:0f: 78:63:47:18:7d:ef:e8:02:2e:2b:a8:ab:46:ea:b8:e9:41:d8: 7b:6d:18:31:93:8e:87:8b:d6:18:8a:d2:c3:93:6a:ae:fc:3b: 73:2a:e5:4a:b4:e4:e2:da:78:c9:78:e0:1e:c4:43:80:c6:cf: e1:dc:d1:19:fc:f4:14:d3:a4:a0:35:5c:d2:ec:da:86:1a:06: b8:c6:85:0b:8e:a6:30:44:d1:3a:8e:1c:5e:af:f5:ad:cf:71: 64:80:9e:ca:76:05:b4:90:ce:94:1c:25:8b:d2:d5:31:34:c9: 83:37:de:16:06:94:15:cd:86:b6:38:44:22:df:70:ef:38:8b: f0:dc:ab:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YsCialuTkGnE7fhi5aJjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MjNhNWJlNWUyMWNhNDYwNzMyYWU0OGYzODVhM2VhMTUw YTJiZTEwHhcNMjYwMTI1MDkwMTEwWhcNMjYwMTI2MDkwMTEwWjAzMTEwLwYDVQQD Eyg4MmIyYjY4MGY2MzAwMzE1NDI1MzkwMzE0MzZiYmY3YWJjM2FhMGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zTDZF+Kj1Cxql0MSfk0Epp0zAu3 lfo+fjN6iQuD6nx+Hg0sA9iPweCQYrlrlUM29KiPbTvX7HNGeJ4FVtWW6QZYfgmk Hw4OYoNifP9cSJnx8SoU6jGMxBwDRuAn4vh4uNrWBmAZIKgJLYknw67oBPB33YpL khmd1cLgFUXiLhLxuMzucjQ6nS0zLM/g52pSC34wfEp3M4XuRFypWV4G0uUolHPL x6g38nhjjWonyT9AuAy6guHPZs71fcCqo94PKdpx1LGfuEBUWhBBVut5sxvf6cfc 8x/Mxxnfk+5iPs68+R91w2BJ9JGpPqALfo7u4dvFRx9lmuIh5rbvazTG6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIKytoD2MAMVQlOQMUNrv3q8OqCyMB8GA1UdIwQY MBaAFNQjpb5eIcpGBzKuSPOFo+oVCivhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUNPbHZsNGh5a1lITXE1STg0V2o2aFVLSy1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9hM2UzYmItZmQ5Zi00MDQyLWIyY2It ZDk0NzY2NjU3NTVhLzEvMUNPbHZsNGh5a1lITXE1STg0V2o2aFVLSy1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9hM2UzYmItZmQ5Zi00MDQyLWIyY2ItZDk0NzY2NjU3NTVh LzEvMUNPbHZsNGh5a1lITXE1STg0V2o2aFVLSy1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeva1t+Go i9GTJ9sCLAOfZ5PWlFZU9NRrAfHTdDaAgGxdDDSbgw0RZTLT0peq0fz3ZD94iA39 jZiWNCb1KzsgKoqi2JLMdShJTdKSQOn2kwX3EigGAwVKEegzBY1TEAeN1pTcibuT 4YRIq4I2jFEsWuU9KqHpiaXo9dj3JasPeGNHGH3v6AIuK6irRuq46UHYe20YMZOO h4vWGIrSw5Nqrvw7cyrlSrTk4tp4yXjgHsRDgMbP4dzRGfz0FNOkoDVc0uzahhoG uMaFC46mMETROo4cXq/1rc9xZICeynYFtJDOlBwli9LVMTTJgzfeFgaUFc2GtjhE It9w7ziL8NyrFw== -----END CERTIFICATE-----Generated at Sun Jan 25 17:09:11 2026 by rpki-client