This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft File: 1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft (raw, json) Hash identifier: fdUnM7xbH2z0i4ZqIsGjKqwInc0T33Pn9a6/NAfapHo= Subject key identifier: E3:E3:0F:C3:DA:80:93:01:A6:E4:17:43:65:B4:A7:C7:12:9C:2F:D2 Authority key identifier: D6:74:C4:E1:B0:0C:E5:BF:B0:D9:6D:4C:21:EF:D0:58:D3:B5:CA:79 Certificate issuer: /CN=d674c4e1b00ce5bfb0d96d4c21efd058d3b5ca79 Certificate serial: 019BF8AD7C110B8A54A3A7B3A36A67DC2444 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft Manifest number: 0B94 Signing time: Mon 26 Jan 2026 05:01:17 +0000 Manifest this update: Mon 26 Jan 2026 05:01:17 +0000 Manifest next update: Tue 27 Jan 2026 05:01:17 +0000 Files and hashes: 1: 1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl (hash: eph4DmgI8mAvJ3a/jI9FE9aRY//tFWx+x7pFGj0tsrA=) 2: Xe_49qP_RwifxY8lxqIdGWlN9Yo.roa (hash: 0p7ZxsSara0zAMrBMjKosv4Q0grMmOgXjOvvhV5ruz8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:7c:11:0b:8a:54:a3:a7:b3:a3:6a:67:dc:24:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d674c4e1b00ce5bfb0d96d4c21efd058d3b5ca79 Validity Not Before: Jan 26 05:01:17 2026 GMT Not After : Jan 27 05:01:17 2026 GMT Subject: CN=e3e30fc3da809301a6e4174365b4a7c7129c2fd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:33:a0:bd:27:69:f0:79:53:05:e7:95:fb:21: 89:93:c9:45:ff:d4:a1:b7:2c:eb:8f:72:d4:a8:eb: 6f:0e:eb:81:4a:91:bc:a5:b7:4d:c6:e2:df:5f:d2: 14:ef:d8:48:9f:63:8e:70:a8:68:2d:e5:f1:65:84: 42:94:dc:dc:2f:b2:9f:07:a8:a8:17:36:0e:0d:f0: c4:18:e1:7b:75:78:91:2c:ca:c9:b8:37:e3:40:7f: 28:ac:79:09:68:ce:01:99:ce:39:7b:3a:03:3f:76: c4:eb:21:2d:b6:96:49:65:ab:35:4d:87:e2:f2:73: e8:79:a0:8d:42:65:5c:f5:57:14:3b:9a:a7:d2:fe: 51:93:61:c1:35:7e:27:b9:b6:2f:f5:fb:6f:4a:36: 05:ca:77:24:a2:17:db:b8:57:63:8f:0f:44:4c:6d: 50:61:04:4a:4f:c1:19:67:6b:7d:41:0f:5f:0f:c2: 7b:ec:61:7e:e8:ca:bc:8b:61:b4:84:2a:e0:d0:04: 64:3a:1d:af:d9:a4:2f:56:86:16:41:37:21:31:70: ef:52:96:19:ad:3c:cd:2f:d7:e0:e4:42:c9:2a:56: f5:7f:50:4b:0e:02:c1:57:91:f4:e9:f6:92:df:ad: 0a:63:a6:c2:3b:89:39:f8:f7:dc:17:ae:b4:e4:be: 03:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:E3:0F:C3:DA:80:93:01:A6:E4:17:43:65:B4:A7:C7:12:9C:2F:D2 X509v3 Authority Key Identifier: keyid:D6:74:C4:E1:B0:0C:E5:BF:B0:D9:6D:4C:21:EF:D0:58:D3:B5:CA:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:be:95:b0:12:f0:55:4b:0f:76:6a:05:3f:45:28:31:05:a6: 77:76:15:a3:bf:5e:9a:be:f4:19:94:21:b5:b3:e7:42:9a:9e: 37:28:0c:f3:26:5a:c3:44:d7:90:d7:57:40:49:db:8c:d6:a8: 6d:ad:87:d0:b6:87:63:56:ca:59:d9:3b:81:13:2a:a3:64:77: 85:e3:7e:1a:37:11:c4:cc:f8:c6:18:18:94:9f:12:77:21:51: 60:a1:90:f8:53:7d:fc:4e:b9:4c:8b:08:83:8d:93:fd:be:34: c5:3d:c9:f9:19:ba:11:47:d9:ca:cf:a3:ec:87:67:9e:35:74: aa:2c:87:f6:98:aa:ca:c3:6e:94:35:b9:21:18:f1:3e:5d:2b: 59:3a:58:82:ee:52:cc:38:38:2b:ce:4e:e9:be:45:96:89:ed: e7:9c:ac:46:74:aa:4b:55:3e:64:41:ff:38:ad:cd:be:34:dd: f1:a6:2e:2b:fa:50:77:0e:18:49:1d:15:5b:20:74:0d:9d:01: f2:65:77:90:b0:0e:eb:39:1d:13:97:40:16:0a:89:17:a8:c8: 42:b3:94:14:12:01:af:be:ae:35:df:8c:6e:3b:00:55:76:69: 76:c6:10:77:1d:90:5f:9e:23:93:01:1e:96:cf:ea:71:2a:34: dd:68:fb:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rXwRC4pUo6ezo2pn3CREMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NzRjNGUxYjAwY2U1YmZiMGQ5NmQ0YzIxZWZkMDU4ZDNi NWNhNzkwHhcNMjYwMTI2MDUwMTE3WhcNMjYwMTI3MDUwMTE3WjAzMTEwLwYDVQQD EyhlM2UzMGZjM2RhODA5MzAxYTZlNDE3NDM2NWI0YTdjNzEyOWMyZmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTOgvSdp8HlTBeeV+yGJk8lF/9Sh tyzrj3LUqOtvDuuBSpG8pbdNxuLfX9IU79hIn2OOcKhoLeXxZYRClNzcL7KfB6io FzYODfDEGOF7dXiRLMrJuDfjQH8orHkJaM4Bmc45ezoDP3bE6yEttpZJZas1TYfi 8nPoeaCNQmVc9VcUO5qn0v5Rk2HBNX4nubYv9ftvSjYFynckohfbuFdjjw9ETG1Q YQRKT8EZZ2t9QQ9fD8J77GF+6Mq8i2G0hCrg0ARkOh2v2aQvVoYWQTchMXDvUpYZ rTzNL9fg5ELJKlb1f1BLDgLBV5H06faS360KY6bCO4k5+PfcF6605L4DZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOPjD8PagJMBpuQXQ2W0p8cSnC/SMB8GA1UdIwQY MBaAFNZ0xOGwDOW/sNltTCHv0FjTtcp5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW5URTRiQU01Yi13MlcxTUllX1FXTk8xeW5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iYjIxZmMtYjI1Mi00YWIyLTk4Nzgt YmE1NTcyZTc3NGVkLzEvMW5URTRiQU01Yi13MlcxTUllX1FXTk8xeW5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9iYjIxZmMtYjI1Mi00YWIyLTk4NzgtYmE1NTcyZTc3NGVk LzEvMW5URTRiQU01Yi13MlcxTUllX1FXTk8xeW5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa76VsBLw VUsPdmoFP0UoMQWmd3YVo79emr70GZQhtbPnQpqeNygM8yZaw0TXkNdXQEnbjNao ba2H0LaHY1bKWdk7gRMqo2R3heN+GjcRxMz4xhgYlJ8SdyFRYKGQ+FN9/E65TIsI g42T/b40xT3J+Rm6EUfZys+j7IdnnjV0qiyH9piqysNulDW5IRjxPl0rWTpYgu5S zDg4K85O6b5Flont55ysRnSqS1U+ZEH/OK3NvjTd8aYuK/pQdw4YSR0VWyB0DZ0B 8mV3kLAO6zkdE5dAFgqJF6jIQrOUFBIBr76uNd+MbjsAVXZpdsYQdx2QX54jkwEe ls/qcSo03Wj78w== -----END CERTIFICATE-----Generated at Mon Jan 26 06:23:39 2026 by rpki-client