This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft File: 1-uSR_yiWEnzojsukTOx0xj--GrU.mft (raw, json) Hash identifier: YIilZ2CLZG08vgX5WVh0/WtXSKb+Q30GHir4Y0pbNq4= Subject key identifier: DD:82:0D:8C:B1:E3:88:58:DD:5C:6D:B4:EF:7B:96:EE:6F:C6:B4:EB Authority key identifier: FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5 Certificate issuer: /CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5 Certificate serial: 019BF6F570E9CCEAA071DA61236C06CAC442 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft Manifest number: 095A Signing time: Sun 25 Jan 2026 21:00:38 +0000 Manifest this update: Sun 25 Jan 2026 21:00:38 +0000 Manifest next update: Mon 26 Jan 2026 21:00:38 +0000 Files and hashes: 1: 1-uSR_yiWEnzojsukTOx0xj--GrU.crl (hash: 9M4PfyBNF4UiVu2y+anXbmcgt+FFV8ESh7ttGYQ6DnM=) 2: kPmc5sCThKk5h79wmMSU7r2wdGk.roa (hash: cJYgegRXaUwVLkfRCxfZWWQRmJwn/LEk5WOIrzbJK84=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:70:e9:cc:ea:a0:71:da:61:23:6c:06:ca:c4:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5 Validity Not Before: Jan 25 21:00:38 2026 GMT Not After : Jan 26 21:00:38 2026 GMT Subject: CN=dd820d8cb1e38858dd5c6db4ef7b96ee6fc6b4eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:87:60:46:92:d1:00:de:1a:35:1d:ba:fb:59: 37:c6:7c:64:54:c2:9e:9d:ec:03:78:60:fa:72:49: fd:be:68:bd:0d:89:44:7c:7d:65:28:cb:a1:e4:61: c6:21:0e:bf:af:66:79:c6:0d:67:7e:a4:f1:a3:b6: 05:c2:07:50:64:fc:bf:ef:c1:89:d2:dd:26:6c:45: 15:69:c2:d9:30:f2:ca:82:ab:81:a9:14:b4:dc:58: e7:f3:9e:71:16:63:f4:64:fd:4e:23:c3:c3:c5:b7: df:c6:75:dd:2f:52:2f:90:8b:21:88:20:6a:34:75: c3:52:4e:69:93:17:0a:62:90:49:7b:b3:a3:68:ff: e9:e9:20:b5:41:03:95:e9:a8:4e:44:fb:d1:a3:8f: 57:03:f9:46:ab:b0:ef:c0:ad:ec:07:ac:6d:76:90: 37:f0:3c:97:9b:0a:b6:0b:8d:0b:87:1c:c3:cc:54: b4:04:d8:d1:80:af:31:8b:47:f7:cd:a6:e9:af:9e: de:94:e9:17:f0:5f:be:7e:11:1e:1f:74:7b:5d:d1: b5:00:a6:bd:6f:36:60:d6:90:f0:1e:41:21:5f:01: 68:22:4c:3d:17:c9:27:a1:32:9f:b8:e3:1d:4e:c5: c0:2b:c2:82:c4:30:3e:fc:bd:90:8d:57:9f:0a:4f: b4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:82:0D:8C:B1:E3:88:58:DD:5C:6D:B4:EF:7B:96:EE:6F:C6:B4:EB X509v3 Authority Key Identifier: keyid:FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:14:2c:44:da:97:22:46:14:8d:bb:7c:2c:1d:d4:28:b0:7d: df:3d:ac:c0:d2:7c:8b:ec:77:c5:22:a7:e6:2a:ae:5d:b8:b2: c4:da:b4:bd:8b:b8:a1:0e:a0:f5:02:80:bc:f9:fc:8f:57:1f: 22:8f:b2:24:2e:8b:8e:85:0a:b1:1d:81:f3:ed:b4:7c:6f:0e: 56:a8:f1:85:9e:f0:08:0c:41:1b:06:e3:af:f7:f5:65:b6:82: cc:fb:22:dc:bb:21:c4:a5:78:33:85:af:13:46:81:8e:6b:54: b0:f7:81:c3:72:6a:2e:ae:97:1d:28:2c:d7:79:ef:b4:f3:f3: d0:ac:81:a4:f2:fe:df:98:7d:44:2d:43:59:b3:27:43:0b:63: 42:2b:51:76:a2:a2:3b:75:34:5d:0e:d1:47:54:90:6d:85:13: 28:e1:8c:ee:45:5b:fb:d1:ea:0d:6b:14:38:a8:80:8b:74:d0: c5:cb:e6:4b:92:bf:b5:e6:21:5f:a5:bc:54:c1:29:77:9e:8c: d2:fc:13:06:a1:e5:5e:f5:3b:06:09:b9:48:49:94:92:af:25: 30:ce:69:75:95:76:e2:b5:a7:36:01:6a:5e:0f:f5:56:27:a8: a4:2b:46:43:d5:14:e8:ec:05:d6:59:34:5a:67:56:44:51:0a: 6e:fb:3b:0c -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZv29XDpzOqgcdphI2wGysRCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZTQ5MWZmMjg5NjEyN2NlODhlY2JhNDRjZWM3NGM2M2Zi ZTFhYjUwHhcNMjYwMTI1MjEwMDM4WhcNMjYwMTI2MjEwMDM4WjAzMTEwLwYDVQQD EyhkZDgyMGQ4Y2IxZTM4ODU4ZGQ1YzZkYjRlZjdiOTZlZTZmYzZiNGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYdgRpLRAN4aNR26+1k3xnxkVMKe newDeGD6ckn9vmi9DYlEfH1lKMuh5GHGIQ6/r2Z5xg1nfqTxo7YFwgdQZPy/78GJ 0t0mbEUVacLZMPLKgquBqRS03Fjn855xFmP0ZP1OI8PDxbffxnXdL1IvkIshiCBq NHXDUk5pkxcKYpBJe7OjaP/p6SC1QQOV6ahORPvRo49XA/lGq7DvwK3sB6xtdpA3 8DyXmwq2C40LhxzDzFS0BNjRgK8xi0f3zabpr57elOkX8F++fhEeH3R7XdG1AKa9 bzZg1pDwHkEhXwFoIkw9F8knoTKfuOMdTsXAK8KCxDA+/L2QjVefCk+0PQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFN2CDYyx44hY3VxttO97lu5vxrTrMB8GA1UdIwQY MBaAFPrkkf8olhJ86I7LpEzsdMY/vhq1MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS11U1JfeWlXRW56b2pzdWtUT3gweGotLUdyVS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGQvYzQ3Y2UwLWUyOTEtNDJmZS1iM2Y4 LWNlYzE2MzMzZDdmMi8xLzEtdVNSX3lpV0Vuem9qc3VrVE94MHhqLS1HclUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzRkL2M0N2NlMC1lMjkxLTQyZmUtYjNmOC1jZWMxNjMzM2Q3 ZjIvMS8xLXVTUl95aVdFbnpvanN1a1RPeDB4ai0tR3JVLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKBQs RNqXIkYUjbt8LB3UKLB93z2swNJ8i+x3xSKn5iquXbiyxNq0vYu4oQ6g9QKAvPn8 j1cfIo+yJC6LjoUKsR2B8+20fG8OVqjxhZ7wCAxBGwbjr/f1ZbaCzPsi3LshxKV4 M4WvE0aBjmtUsPeBw3JqLq6XHSgs13nvtPPz0KyBpPL+35h9RC1DWbMnQwtjQitR dqKiO3U0XQ7RR1SQbYUTKOGM7kVb+9HqDWsUOKiAi3TQxcvmS5K/teYhX6W8VMEp d56M0vwTBqHlXvU7Bgm5SEmUkq8lMM5pdZV24rWnNgFqXg/1VieopCtGQ9UU6OwF 1lk0WmdWRFEKbvs7DA== -----END CERTIFICATE-----Generated at Mon Jan 26 07:11:25 2026 by rpki-client