This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.mft File: 1-CA6DAS4H-F2b6Qb0xtztYgYisc.mft (raw, json) Hash identifier: aEQprcVdHjxLclpQ8zDbPr8a8STtDOdSb/5cHZ1CtTY= Subject key identifier: AF:FC:B4:43:11:78:1F:CB:82:B3:E9:D2:32:81:37:97:B5:A1:F5:57 Authority key identifier: F8:20:3A:0C:04:B8:1F:E1:76:6F:A4:1B:D3:1B:73:B5:88:18:8A:C7 Certificate issuer: /CN=f8203a0c04b81fe1766fa41bd31b73b588188ac7 Certificate serial: 019BF507515EBDC4D134F2438D358626BAA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.mft Manifest number: 17F3 Signing time: Sun 25 Jan 2026 12:00:55 +0000 Manifest this update: Sun 25 Jan 2026 12:00:55 +0000 Manifest next update: Mon 26 Jan 2026 12:00:55 +0000 Files and hashes: 1: 1-CA6DAS4H-F2b6Qb0xtztYgYisc.crl (hash: JqrpuVVB2zDH4Q65LkT6kgcUU1y7Wc09rPN2jXfjB2s=) 2: 9hu7fHrkkmjPI3bYCmJsPA9MZh0.roa (hash: bfX4JCPjltuMbEEveKKx9e6WHODIPOLYoUS1Ge5P3uc=) 3: dYmQEZ2cKrbLqpv7XFpbPABN57U.roa (hash: nqNg9aI2+q6RU2gg3GpJIRCOLjZYP8tLEyC2RX+ANpk=) 4: mGPoKnzxQ_AJz3TSNkGDDAdhE78.roa (hash: uRtR0RgLCvCTy0WRec1Dco4dbai9D9t4d5nexRt8H7s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.mft rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:51:5e:bd:c4:d1:34:f2:43:8d:35:86:26:ba:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8203a0c04b81fe1766fa41bd31b73b588188ac7 Validity Not Before: Jan 25 12:00:55 2026 GMT Not After : Jan 26 12:00:55 2026 GMT Subject: CN=affcb44311781fcb82b3e9d232813797b5a1f557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c3:78:bb:c5:2f:5e:3b:c5:a9:5e:fa:c9:96: af:cd:c3:49:d7:03:e4:12:66:c5:e6:21:8a:09:77: 86:19:4e:8a:25:2f:cb:e3:52:0f:20:12:95:c2:0f: 22:6b:60:a4:0e:9d:02:37:19:80:4e:8b:c8:f3:44: db:ee:b3:2a:0c:04:7a:99:fd:ac:27:be:7c:3f:df: e0:26:b8:69:ab:50:b4:4f:73:bb:e2:b5:bb:8f:92: e2:22:d3:1f:56:3a:19:04:d9:de:4c:b9:52:54:60: 34:15:de:f1:5e:3e:c0:7c:1d:63:bc:fe:e0:12:05: 1a:ec:93:47:69:ef:bb:1e:26:34:01:55:33:76:ec: 23:7e:43:fd:a2:0d:1e:3d:6b:29:da:66:3d:5b:d9: bc:33:44:fd:73:25:05:e3:c2:88:c5:e1:83:8f:a4: 95:1a:aa:ba:7f:fd:3d:62:7b:79:97:35:ae:f0:af: ad:44:b8:2c:f8:10:a1:7c:de:09:61:f9:69:1c:2d: 5e:ca:67:ab:15:95:51:2b:cd:be:aa:42:2a:28:86: 06:b8:fc:e5:04:7a:2e:f2:a5:0f:7a:fc:08:11:e8: 96:21:70:d5:86:8d:4a:f5:62:33:8b:5e:21:06:24: 6d:b9:97:67:d7:cd:8e:37:ff:db:da:0a:95:67:b6: 08:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:FC:B4:43:11:78:1F:CB:82:B3:E9:D2:32:81:37:97:B5:A1:F5:57 X509v3 Authority Key Identifier: keyid:F8:20:3A:0C:04:B8:1F:E1:76:6F:A4:1B:D3:1B:73:B5:88:18:8A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:8b:cf:7f:f6:7d:bf:81:0e:10:a5:14:ee:0d:b2:3b:1e:d1: 60:a8:0c:da:94:8f:b6:d9:66:94:f8:50:36:c2:10:fe:91:f3: ed:33:53:bd:d6:f0:10:e8:26:c6:28:78:f4:9d:d4:f4:8f:6c: 69:1e:ef:89:ce:8c:00:e3:2f:3f:f5:bc:ea:57:7b:4e:b9:5e: 9b:97:e7:3e:dc:64:52:75:79:a1:48:b0:62:88:e5:57:23:d6: 08:af:4d:f4:59:b4:7c:97:49:6d:42:e0:c5:bc:ea:24:a8:92: 12:c8:eb:22:41:55:66:7b:b3:44:0c:76:d8:b7:6c:3b:e3:48: e6:93:4c:a1:89:c7:93:f5:48:5a:e1:2e:2b:f8:67:1b:b2:ae: 8c:c2:d6:4f:38:79:0e:28:51:0f:cb:1d:72:10:71:9e:df:1a: a2:e2:67:f8:34:99:f7:55:e2:90:65:05:a1:ed:20:28:f1:81: 33:e9:9c:c8:2f:f2:32:41:e3:46:d7:ad:d9:97:59:12:bc:52: dc:ef:a5:23:ce:64:81:96:12:e0:da:ac:57:de:ae:a8:ec:49: f7:71:76:5c:92:e1:79:5b:7a:69:c2:19:00:d4:6d:36:dc:f6: 5c:72:07:44:df:f3:e3:35:79:7e:0c:2c:d6:82:77:9a:47:44: fb:50:d6:f5 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZv1B1FevcTRNPJDjTWGJrqlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MjAzYTBjMDRiODFmZTE3NjZmYTQxYmQzMWI3M2I1ODgx ODhhYzcwHhcNMjYwMTI1MTIwMDU1WhcNMjYwMTI2MTIwMDU1WjAzMTEwLwYDVQQD EyhhZmZjYjQ0MzExNzgxZmNiODJiM2U5ZDIzMjgxMzc5N2I1YTFmNTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MN4u8UvXjvFqV76yZavzcNJ1wPk EmbF5iGKCXeGGU6KJS/L41IPIBKVwg8ia2CkDp0CNxmATovI80Tb7rMqDAR6mf2s J758P9/gJrhpq1C0T3O74rW7j5LiItMfVjoZBNneTLlSVGA0Fd7xXj7AfB1jvP7g EgUa7JNHae+7HiY0AVUzduwjfkP9og0ePWsp2mY9W9m8M0T9cyUF48KIxeGDj6SV Gqq6f/09Ynt5lzWu8K+tRLgs+BChfN4JYflpHC1eymerFZVRK82+qkIqKIYGuPzl BHou8qUPevwIEeiWIXDVho1K9WIzi14hBiRtuZdn182ON//b2gqVZ7YIKwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFK/8tEMReB/LgrPp0jKBN5e1ofVXMB8GA1UdIwQY MBaAFPggOgwEuB/hdm+kG9Mbc7WIGIrHMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1DQTZEQVM0SC1GMmI2UWIweHR6dFlnWWlzYy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvZTE0Y2EzLWRhOGUtNGI1OC04NjNh LTMzODk2MjBjMWJkNy8xLzEtQ0E2REFTNEgtRjJiNlFiMHh0enRZZ1lpc2MubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzViL2UxNGNhMy1kYThlLTRiNTgtODYzYS0zMzg5NjIwYzFi ZDcvMS8xLUNBNkRBUzRILUYyYjZRYjB4dHp0WWdZaXNjLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARYvP f/Z9v4EOEKUU7g2yOx7RYKgM2pSPttlmlPhQNsIQ/pHz7TNTvdbwEOgmxih49J3U 9I9saR7vic6MAOMvP/W86ld7Trlem5fnPtxkUnV5oUiwYojlVyPWCK9N9Fm0fJdJ bULgxbzqJKiSEsjrIkFVZnuzRAx22LdsO+NI5pNMoYnHk/VIWuEuK/hnG7KujMLW Tzh5DihRD8sdchBxnt8aouJn+DSZ91XikGUFoe0gKPGBM+mcyC/yMkHjRtet2ZdZ ErxS3O+lI85kgZYS4NqsV96uqOxJ93F2XJLheVt6acIZANRtNtz2XHIHRN/z4zV5 fgws1oJ3mkdE+1DW9Q== -----END CERTIFICATE-----Generated at Sun Jan 25 22:35:24 2026 by rpki-client