This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft File: 1wNkIHbSfiUvqQvxpClvi82dDPE.mft (raw, json) Hash identifier: /CtlU+ySCTECVcwJDcMa8kMict7bTq6oqKmfunwgcE0= Subject key identifier: 1F:27:12:F8:CA:46:0D:56:5D:ED:7D:35:A2:16:5B:F1:92:43:03:D3 Authority key identifier: D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1 Certificate issuer: /CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1 Certificate serial: 019BF499D5C539BCB59C96BCA5E81C89BFDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft Manifest number: 17F1 Signing time: Sun 25 Jan 2026 10:01:20 +0000 Manifest this update: Sun 25 Jan 2026 10:01:20 +0000 Manifest next update: Mon 26 Jan 2026 10:01:20 +0000 Files and hashes: 1: 1wNkIHbSfiUvqQvxpClvi82dDPE.crl (hash: h2x3m1myHqYYGzM3lDfAbel0y6Y+Iue/YkGsZKIhRV8=) 2: 6mvUdK2sJwETz4cqi4djiQKdMUQ.roa (hash: buR6ykljG7LAqYhxUka9PO0/x3h8cTppZNDgptnhgrU=) 3: GAkBUkP8O44HfA6UaUDucppg-zQ.roa (hash: H7w0TIFmG05ogbUF44/87E8bKqO7AppZ4RVUKMn1LjM=) 4: TqaRlv7nhvg_q1QJfNxKvCz6Es4.roa (hash: gXAZNWfcjeZpPsYrp9FhwN0x/FJK/I6F7O8+Py5tCqI=) 5: Z2dxer3pv4vfqm5c8o0nTL3nVBM.roa (hash: 6BGTwxT9tDZFxElYTEC0kNDTjmEpFbYq1mrVapB2fHk=) 6: gq-wS1-FKcHhFx26F3VsD_Kp72Y.roa (hash: TF4H2aT6JRXNsprJBLWhkIJdEFblvAAuKU3lRYmbao8=) 7: sX1Br24qCtbNCJL4I_c1pDchwkc.roa (hash: VEqEzFdjyTuor8EJZXXTMl1wEKD0Q9Jesc0bkdw7VYg=) 8: vdMRJ5aeJMjPnWdXFF9CeJUbNPU.roa (hash: MD01V65vyHAdTu6f2/Lr5HRyugzVDjKE7/qB7jMnsR4=) 9: zkxMCcGoaYzw6MrkLQogXuC04_I.roa (hash: 7Y4R/zBLEg3xanLWgu8jUnFDOXWl73uX33xCHdArZKE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:d5:c5:39:bc:b5:9c:96:bc:a5:e8:1c:89:bf:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1 Validity Not Before: Jan 25 10:01:20 2026 GMT Not After : Jan 26 10:01:20 2026 GMT Subject: CN=1f2712f8ca460d565ded7d35a2165bf1924303d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:32:0b:ea:e4:3a:82:b2:82:e2:9b:7c:e9:e5: 3a:96:87:1e:ce:63:78:5f:fa:34:16:38:a5:05:95: fa:be:77:4c:18:b3:e4:25:10:f3:9c:b7:b0:4c:07: cc:45:5f:4a:ef:0e:0d:3e:23:2d:12:9f:41:b0:58: c8:1f:ee:5a:1e:3f:7d:08:46:0c:50:8e:75:54:c8: c9:de:fa:bf:c6:dc:8c:90:52:b5:8d:c1:9e:e6:8f: f5:57:97:fa:91:4c:df:e1:20:f7:eb:a8:a1:49:cc: 20:43:89:13:f0:64:63:ea:23:b1:cc:1a:a3:ca:c7: a3:85:c9:2c:8e:52:d9:f4:67:80:08:c9:c3:85:a4: ff:dc:e8:44:55:d5:b4:f6:27:ab:3e:15:c8:50:c4: 6b:c3:03:21:a8:5c:97:e9:7d:1a:62:96:cc:31:ba: 38:3d:43:71:87:5a:cf:55:a7:9e:b7:13:57:cd:dc: 1d:46:05:3d:e4:67:c1:84:17:97:81:a6:e5:fa:66: ee:a7:d5:ff:61:2b:21:59:79:c8:e3:b6:b5:8f:91: 02:a7:6e:fb:ef:8b:be:a8:63:5a:b7:f4:cc:57:7c: 31:ce:b5:18:07:29:e5:8c:11:20:1e:a5:fb:29:a3: 65:d7:4d:4a:a6:90:dc:f0:64:fe:46:64:68:06:fe: 12:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:27:12:F8:CA:46:0D:56:5D:ED:7D:35:A2:16:5B:F1:92:43:03:D3 X509v3 Authority Key Identifier: keyid:D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:4d:6a:39:c5:8f:0a:fa:89:fa:dd:0c:e8:49:5f:ce:46:1a: a6:74:ce:13:e0:3a:f0:00:02:55:55:77:0c:98:ea:fe:04:d2: 33:ed:5b:9c:cb:29:4f:bf:10:be:73:94:f9:0c:48:40:ec:51: 5b:8d:ad:51:08:0c:3d:db:a7:b0:ae:f3:7a:e9:cc:42:65:c4: 7f:c1:1c:e6:e2:5e:f5:de:24:de:ba:45:c8:21:dd:0e:8f:dc: 42:49:b0:9a:3d:e6:78:23:62:41:99:cc:87:4a:14:96:41:82: 34:63:25:64:c2:43:a9:34:9d:dc:98:2c:11:31:e3:60:b9:86: 66:66:bd:72:83:32:ab:ce:ee:9b:05:db:62:58:77:97:a3:3c: 2e:b8:0f:bf:15:60:c7:8d:71:70:04:9c:e8:3b:ad:78:cb:d9: 84:94:d6:73:b4:60:d7:eb:5f:85:79:3d:b7:56:18:11:7f:a7: 37:e2:73:d5:f5:48:29:0c:e4:b6:45:62:ee:3b:26:80:39:79: 2b:5c:af:b5:0f:2d:8a:38:44:63:1c:48:4b:a5:0d:9d:f7:e7: 27:34:12:0c:97:7b:77:cc:a1:4e:70:11:87:f6:d4:99:a1:c6: 29:84:c2:e1:73:46:8b:79:52:71:d4:dc:a1:12:9c:bc:cf:b0: 9f:0b:80:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0mdXFOby1nJa8pegcib/cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MDM2NDIwNzZkMjdlMjUyZmE5MGJmMWE0Mjk2ZjhiY2Q5 ZDBjZjEwHhcNMjYwMTI1MTAwMTIwWhcNMjYwMTI2MTAwMTIwWjAzMTEwLwYDVQQD EygxZjI3MTJmOGNhNDYwZDU2NWRlZDdkMzVhMjE2NWJmMTkyNDMwM2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TIL6uQ6grKC4pt86eU6locezmN4 X/o0FjilBZX6vndMGLPkJRDznLewTAfMRV9K7w4NPiMtEp9BsFjIH+5aHj99CEYM UI51VMjJ3vq/xtyMkFK1jcGe5o/1V5f6kUzf4SD366ihScwgQ4kT8GRj6iOxzBqj ysejhcksjlLZ9GeACMnDhaT/3OhEVdW09ierPhXIUMRrwwMhqFyX6X0aYpbMMbo4 PUNxh1rPVaeetxNXzdwdRgU95GfBhBeXgabl+mbup9X/YSshWXnI47a1j5ECp277 74u+qGNat/TMV3wxzrUYBynljBEgHqX7KaNl101KppDc8GT+RmRoBv4SlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB8nEvjKRg1WXe19NaIWW/GSQwPTMB8GA1UdIwQY MBaAFNcDZCB20n4lL6kL8aQpb4vNnQzxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGIt NjU0NTA1YTJkMDQ1LzEvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGItNjU0NTA1YTJkMDQ1 LzEvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe01qOcWP CvqJ+t0M6ElfzkYapnTOE+A68AACVVV3DJjq/gTSM+1bnMspT78QvnOU+QxIQOxR W42tUQgMPdunsK7zeunMQmXEf8Ec5uJe9d4k3rpFyCHdDo/cQkmwmj3meCNiQZnM h0oUlkGCNGMlZMJDqTSd3JgsETHjYLmGZma9coMyq87umwXbYlh3l6M8LrgPvxVg x41xcASc6DuteMvZhJTWc7Rg1+tfhXk9t1YYEX+nN+Jz1fVIKQzktkVi7jsmgDl5 K1yvtQ8tijhEYxxIS6UNnffnJzQSDJd7d8yhTnARh/bUmaHGKYTC4XNGi3lScdTc oRKcvM+wnwuAig== -----END CERTIFICATE-----Generated at Sun Jan 25 16:21:10 2026 by rpki-client