This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft File: 1lRDbtMkK925b98TmhJT3rmG39A.mft (raw, json) Hash identifier: 9TDZL1kM1Lp0d+Igvp7bp6Tsb3NGp9mucSaOyCt4Fc0= Subject key identifier: 2A:CF:D4:58:E9:6E:93:FC:81:BC:39:C9:52:7E:E3:4C:5B:AB:5E:E6 Authority key identifier: D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0 Certificate issuer: /CN=d654436ed3242bddb96fdf139a1253deb986dfd0 Certificate serial: 019BF6F561C54D151FE3E2574527E261B5E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft Manifest number: 17EE Signing time: Sun 25 Jan 2026 21:00:35 +0000 Manifest this update: Sun 25 Jan 2026 21:00:35 +0000 Manifest next update: Mon 26 Jan 2026 21:00:35 +0000 Files and hashes: 1: 1lRDbtMkK925b98TmhJT3rmG39A.crl (hash: QXHM3Lxb+GXum1PnaB6lOvzbtit9ZKXjebrE6+tOtfE=) 2: gMgy66IeqRUWzHc_Tz_B5xCML94.roa (hash: alaMur7cm6u5buHk6RtnuNKVEJYn50JpsYiMrntsAII=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:61:c5:4d:15:1f:e3:e2:57:45:27:e2:61:b5:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d654436ed3242bddb96fdf139a1253deb986dfd0 Validity Not Before: Jan 25 21:00:35 2026 GMT Not After : Jan 26 21:00:35 2026 GMT Subject: CN=2acfd458e96e93fc81bc39c9527ee34c5bab5ee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2a:0b:f8:78:7d:8a:da:f6:d5:b7:90:93:17: a3:0b:42:5c:aa:fc:ff:e2:3a:0d:bd:36:37:87:ec: 3a:bd:a0:b3:6b:bb:68:49:e0:bf:d1:48:5a:0e:6d: 7e:5e:44:e8:b6:0e:cb:0c:5d:2d:26:b7:ad:f1:68: 49:8a:e4:86:ef:22:7c:76:58:20:1e:bf:ed:dd:84: 38:17:ee:ed:9d:92:3f:8b:ef:0b:fb:da:7f:41:c0: 55:a5:56:fa:9a:18:46:31:0d:47:92:0a:c6:72:cd: 67:c0:7c:f6:24:45:19:e0:05:38:ec:74:3a:61:09: b9:ab:dd:0d:93:ce:bf:5d:12:ef:23:27:a8:04:e5: 1d:23:21:29:fc:a8:a2:fe:c8:7c:33:66:a2:e3:64: 7b:c3:bc:2a:8a:ac:c2:f1:66:be:1f:f0:46:52:f5: 98:04:6a:58:4c:40:df:c2:8b:09:f3:cb:6a:cd:2a: 24:ab:94:c9:4d:8f:a2:dd:f5:76:a2:3d:d0:8b:f3: 8d:48:48:1c:7e:95:cc:8e:1d:d4:e1:af:c5:e3:50: 23:9b:66:28:60:9c:a7:0a:1a:02:10:37:17:2e:ba: 12:5c:76:b1:22:e5:8c:16:b1:26:05:ca:4e:3a:83: d0:57:bf:a2:59:b8:b4:cf:ef:e5:08:6c:b1:ee:c3: 5c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:CF:D4:58:E9:6E:93:FC:81:BC:39:C9:52:7E:E3:4C:5B:AB:5E:E6 X509v3 Authority Key Identifier: keyid:D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:b2:12:b2:f4:03:da:ab:1e:26:95:c0:07:02:18:a4:ca:f7: f0:c9:a6:ea:52:15:ae:92:3c:bb:c4:7f:b1:73:a2:b4:1c:f0: c8:a4:ee:60:55:20:27:a7:73:06:cb:32:8f:7c:ed:a1:a1:4e: e4:5e:ab:aa:0e:d1:d7:ef:6e:55:7b:71:b1:b7:a9:85:3d:94: 69:0c:2f:ab:23:b3:7d:31:e9:9d:1c:11:4a:99:90:fb:6f:99: da:c7:a9:57:5f:e5:e6:f2:eb:b7:b9:20:23:d3:d9:13:1a:fe: 71:1d:8f:91:98:2a:b2:84:3c:ef:c8:62:ad:14:77:30:8c:65: 9e:9e:5e:54:30:99:ab:b3:6f:51:51:b1:55:15:7c:01:73:10: b9:69:3d:3c:af:8a:f4:a3:be:e6:5c:18:d7:da:a1:09:9a:a0: e8:69:49:65:39:c3:c5:44:d8:79:83:93:b2:fa:18:69:52:d5: be:a8:dc:59:9c:11:a7:05:19:0b:27:57:fe:43:95:57:06:7e: c9:cd:84:77:30:74:86:a5:e6:2d:0c:d4:32:f9:bb:29:41:be: 7d:80:a1:13:49:12:11:51:02:c5:84:fc:cf:a3:5a:f8:e3:e3: da:d3:38:e5:e4:15:3a:a3:a0:fc:00:bd:2e:d6:66:c4:a9:27: 0c:a6:fe:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29WHFTRUf4+JXRSfiYbXlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NTQ0MzZlZDMyNDJiZGRiOTZmZGYxMzlhMTI1M2RlYjk4 NmRmZDAwHhcNMjYwMTI1MjEwMDM1WhcNMjYwMTI2MjEwMDM1WjAzMTEwLwYDVQQD EygyYWNmZDQ1OGU5NmU5M2ZjODFiYzM5Yzk1MjdlZTM0YzViYWI1ZWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSoL+Hh9itr21beQkxejC0Jcqvz/ 4joNvTY3h+w6vaCza7toSeC/0UhaDm1+XkTotg7LDF0tJret8WhJiuSG7yJ8dlgg Hr/t3YQ4F+7tnZI/i+8L+9p/QcBVpVb6mhhGMQ1HkgrGcs1nwHz2JEUZ4AU47HQ6 YQm5q90Nk86/XRLvIyeoBOUdIyEp/Kii/sh8M2ai42R7w7wqiqzC8Wa+H/BGUvWY BGpYTEDfwosJ88tqzSokq5TJTY+i3fV2oj3Qi/ONSEgcfpXMjh3U4a/F41Ajm2Yo YJynChoCEDcXLroSXHaxIuWMFrEmBcpOOoPQV7+iWbi0z+/lCGyx7sNcXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCrP1FjpbpP8gbw5yVJ+40xbq17mMB8GA1UdIwQY MBaAFNZUQ27TJCvduW/fE5oSU965ht/QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWxSRGJ0TWtLOTI1Yjk4VG1oSlQzcm1HMzlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zZGU5NGEtMWU2MC00ZWI4LTlhNWUt YTE0MjA4N2NlODkwLzEvMWxSRGJ0TWtLOTI1Yjk4VG1oSlQzcm1HMzlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8zZGU5NGEtMWU2MC00ZWI4LTlhNWUtYTE0MjA4N2NlODkw LzEvMWxSRGJ0TWtLOTI1Yjk4VG1oSlQzcm1HMzlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHLISsvQD 2qseJpXABwIYpMr38Mmm6lIVrpI8u8R/sXOitBzwyKTuYFUgJ6dzBssyj3ztoaFO 5F6rqg7R1+9uVXtxsbephT2UaQwvqyOzfTHpnRwRSpmQ+2+Z2sepV1/l5vLrt7kg I9PZExr+cR2PkZgqsoQ878hirRR3MIxlnp5eVDCZq7NvUVGxVRV8AXMQuWk9PK+K 9KO+5lwY19qhCZqg6GlJZTnDxUTYeYOTsvoYaVLVvqjcWZwRpwUZCydX/kOVVwZ+ yc2EdzB0hqXmLQzUMvm7KUG+fYChE0kSEVECxYT8z6Na+OPj2tM45eQVOqOg/AC9 LtZmxKknDKb+ww== -----END CERTIFICATE-----Generated at Mon Jan 26 02:30:43 2026 by rpki-client