This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft File: p1f4f4bpOyXvTAQzZku-ctqY-_4.mft (raw, json) Hash identifier: noROCTtgAhw5CyBybfE+VTR8xakYuWaXlAbDnBRaH0c= Subject key identifier: 40:28:D3:B5:47:62:C6:55:AA:8B:2F:2A:BF:4F:A6:DA:70:9A:BB:3C Authority key identifier: A7:57:F8:7F:86:E9:3B:25:EF:4C:04:33:66:4B:BE:72:DA:98:FB:FE Certificate issuer: /CN=a757f87f86e93b25ef4c0433664bbe72da98fbfe Certificate serial: 019BF8E3BF662B43E5C06CC58D25CB908412 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1f4f4bpOyXvTAQzZku-ctqY-_4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft Manifest number: 0601 Signing time: Mon 26 Jan 2026 06:00:33 +0000 Manifest this update: Mon 26 Jan 2026 06:00:33 +0000 Manifest next update: Tue 27 Jan 2026 06:00:33 +0000 Files and hashes: 1: SdRMQSisA3A52kvZfTcOqIZi7WM.roa (hash: FjVPIrI7M5sGkygChCHAIE+8f/f2VPSzrAXNL/N59yU=) 2: p1f4f4bpOyXvTAQzZku-ctqY-_4.crl (hash: jE9cJYiEONsIghj1saNwTvGh+mKQnIzs0kKBn8DroUQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft rsync://rpki.ripe.net/repository/DEFAULT/p1f4f4bpOyXvTAQzZku-ctqY-_4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:e3:bf:66:2b:43:e5:c0:6c:c5:8d:25:cb:90:84:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a757f87f86e93b25ef4c0433664bbe72da98fbfe Validity Not Before: Jan 26 06:00:33 2026 GMT Not After : Jan 27 06:00:33 2026 GMT Subject: CN=4028d3b54762c655aa8b2f2abf4fa6da709abb3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4a:39:1a:9b:e8:b9:45:dd:15:23:67:0a:a1: f5:a1:bf:8c:ae:5c:9b:70:c3:22:d1:83:99:34:86: ef:73:01:b7:71:cf:cc:56:f7:2d:45:f1:54:3f:75: f2:96:81:75:33:8e:5c:ef:ca:5d:32:80:43:4e:72: e3:ba:ab:9e:c4:a2:e5:34:fe:7b:e6:a5:99:bc:09: 01:aa:e3:64:96:dc:4f:c0:66:5e:84:6c:dd:c3:fe: a0:37:77:3a:54:17:e3:2f:40:7f:1e:9f:df:a1:17: e9:15:dd:c3:33:66:62:28:99:59:5c:89:ae:c1:3e: 78:1d:76:41:bb:36:9a:9e:12:12:40:3c:3b:52:fb: 72:1d:2c:5a:ef:b4:8f:c4:f0:c3:1d:66:be:41:45: 57:b6:e0:36:e8:34:a4:48:77:69:3c:c5:a6:23:a4: ed:91:f3:57:51:d0:6b:24:60:ea:58:ad:17:02:7b: ab:91:f1:81:88:85:4f:77:a0:93:32:82:9e:d6:e4: e3:e2:74:91:3c:aa:33:0b:b9:4e:ac:c7:63:fd:7a: 70:31:6c:d7:aa:43:06:6d:1d:dc:ac:ca:11:d0:ef: 4a:77:82:43:73:1e:bb:08:21:d6:33:9e:9b:ba:a9: cd:8c:7a:d5:5a:cb:59:71:37:7c:1e:e6:f2:ee:e4: e7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:28:D3:B5:47:62:C6:55:AA:8B:2F:2A:BF:4F:A6:DA:70:9A:BB:3C X509v3 Authority Key Identifier: keyid:A7:57:F8:7F:86:E9:3B:25:EF:4C:04:33:66:4B:BE:72:DA:98:FB:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1f4f4bpOyXvTAQzZku-ctqY-_4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:a0:bb:1b:c7:ef:42:b1:f2:bf:40:52:36:88:85:70:40:0f: 01:0d:4f:8b:d5:72:37:7f:0f:5c:28:fc:59:10:9b:7d:c0:ca: 1d:df:ab:e9:23:43:54:fe:fd:66:35:1f:74:8d:9f:5a:13:cf: dc:a1:56:ec:9a:c1:8d:ba:b9:41:66:f4:5e:bb:99:8a:d0:ac: 75:3c:7d:f3:50:ac:99:83:37:22:4e:e8:42:43:4d:c5:12:de: d7:d4:69:fd:2b:01:fa:c0:01:2e:fe:6e:10:35:85:33:3b:b2: 4f:2c:b9:eb:72:84:1f:20:4f:cb:71:04:c5:6a:c4:59:17:00: f4:87:5e:2b:87:69:95:84:4f:2b:d9:a9:fe:06:1e:8a:e5:e2: cc:01:34:2f:ef:35:f3:0b:a7:f1:fe:c8:b5:a7:83:83:e2:ca: cb:ee:8b:88:c1:4f:b5:6b:14:94:44:98:75:21:61:77:d5:01: 3f:d6:1e:f8:86:5a:0a:e6:a8:c4:ed:08:ff:7f:be:6c:67:c3: a2:59:53:24:eb:98:18:45:d3:e7:04:cb:9c:04:6a:51:68:dd: f1:1d:e9:2a:7d:4e:71:01:dc:f0:77:f6:97:dd:b2:b4:66:e0: 16:c8:53:2b:32:ce:39:2e:70:20:85:59:7a:26:f4:de:5d:f8: 44:d2:b7:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4479mK0PlwGzFjSXLkIQSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NTdmODdmODZlOTNiMjVlZjRjMDQzMzY2NGJiZTcyZGE5 OGZiZmUwHhcNMjYwMTI2MDYwMDMzWhcNMjYwMTI3MDYwMDMzWjAzMTEwLwYDVQQD Eyg0MDI4ZDNiNTQ3NjJjNjU1YWE4YjJmMmFiZjRmYTZkYTcwOWFiYjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqko5GpvouUXdFSNnCqH1ob+Mrlyb cMMi0YOZNIbvcwG3cc/MVvctRfFUP3XyloF1M45c78pdMoBDTnLjuquexKLlNP57 5qWZvAkBquNkltxPwGZehGzdw/6gN3c6VBfjL0B/Hp/foRfpFd3DM2ZiKJlZXImu wT54HXZBuzaanhISQDw7UvtyHSxa77SPxPDDHWa+QUVXtuA26DSkSHdpPMWmI6Tt kfNXUdBrJGDqWK0XAnurkfGBiIVPd6CTMoKe1uTj4nSRPKozC7lOrMdj/XpwMWzX qkMGbR3crMoR0O9Kd4JDcx67CCHWM56buqnNjHrVWstZcTd8Huby7uTn7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEAo07VHYsZVqosvKr9Pptpwmrs8MB8GA1UdIwQY MBaAFKdX+H+G6Tsl70wEM2ZLvnLamPv+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDFmNGY0YnBPeVh2VEFRelprdS1jdHFZLV80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy84NmU0MGMtMTU2My00MGVhLThmNGUt YTE3ODMzMjUzM2UwLzEvcDFmNGY0YnBPeVh2VEFRelprdS1jdHFZLV80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy84NmU0MGMtMTU2My00MGVhLThmNGUtYTE3ODMzMjUzM2Uw LzEvcDFmNGY0YnBPeVh2VEFRelprdS1jdHFZLV80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiaC7G8fv QrHyv0BSNoiFcEAPAQ1Pi9VyN38PXCj8WRCbfcDKHd+r6SNDVP79ZjUfdI2fWhPP 3KFW7JrBjbq5QWb0XruZitCsdTx981CsmYM3Ik7oQkNNxRLe19Rp/SsB+sABLv5u EDWFMzuyTyy563KEHyBPy3EExWrEWRcA9IdeK4dplYRPK9mp/gYeiuXizAE0L+81 8wun8f7ItaeDg+LKy+6LiMFPtWsUlESYdSFhd9UBP9Ye+IZaCuaoxO0I/3++bGfD ollTJOuYGEXT5wTLnARqUWjd8R3pKn1OcQHc8Hf2l92ytGbgFshTKzLOOS5wIIVZ eib03l34RNK3Vg== -----END CERTIFICATE-----Generated at Mon Jan 26 11:47:53 2026 by rpki-client