This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft File: 1fJk44BaPRBFNzV6FP-SasApWZw.mft (raw, json) Hash identifier: KMeJQCua6zADcuyHi68hu9Et00OqRdi0soirbyWw+wQ= Subject key identifier: 10:2A:CB:07:9D:AD:94:B7:D3:0D:3E:08:A6:F8:0F:A6:6B:E3:6A:04 Authority key identifier: D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C Certificate issuer: /CN=d5f264e3805a3d104537357a14ff926ac029599c Certificate serial: 019BF574E6209557C16930AD78B6E3772ACC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft Manifest number: 07C9 Signing time: Sun 25 Jan 2026 14:00:37 +0000 Manifest this update: Sun 25 Jan 2026 14:00:37 +0000 Manifest next update: Mon 26 Jan 2026 14:00:37 +0000 Files and hashes: 1: 1fJk44BaPRBFNzV6FP-SasApWZw.crl (hash: jdK6dott2BiFKT3SK2+nhdy9wm4uwYFNrGeCVagG8e8=) 2: rMIMTjbHaNV7xR9gPtw0A_pkuLU.roa (hash: NFH0+DidyU00k9B3v8wVAxHBrFD7dy/UWv2YYeeqFAo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:74:e6:20:95:57:c1:69:30:ad:78:b6:e3:77:2a:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5f264e3805a3d104537357a14ff926ac029599c Validity Not Before: Jan 25 14:00:37 2026 GMT Not After : Jan 26 14:00:37 2026 GMT Subject: CN=102acb079dad94b7d30d3e08a6f80fa66be36a04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b4:93:2b:25:5c:76:9b:c9:57:cf:cb:9f:df: 39:57:a5:21:3c:f0:ef:ab:b2:0c:0b:cc:09:73:ec: a2:4e:0d:6d:2b:91:7f:20:c8:92:a7:8f:6c:12:8f: 5c:a0:41:cd:89:0d:0a:df:28:01:45:67:0c:4d:c0: 94:33:97:cc:8e:e7:d8:0e:f5:eb:2b:9b:5c:e5:c1: 1b:d6:bf:18:d9:ee:80:48:fe:88:bb:f1:4c:64:02: f2:2c:76:f0:63:0e:62:89:f2:da:13:7d:58:c7:8e: 00:fd:55:16:e3:92:da:0e:9d:23:1b:25:59:63:f2: 52:29:60:29:75:df:71:0f:9f:7d:9f:b6:84:9a:a6: 5e:c2:ad:f5:ce:ee:08:01:56:2e:66:cc:c2:e2:d8: b4:fb:89:1b:c7:be:0a:4a:7c:92:0d:30:0e:3c:f4: c2:0d:19:2d:8a:e2:e1:1f:92:b3:c5:84:24:d5:80: 21:ca:db:e4:68:af:b0:b1:17:d6:cf:fc:f3:22:e1: b1:1b:22:56:20:a2:03:f9:19:cb:78:25:16:ac:86: 69:0b:53:dc:9c:7d:1b:51:d8:f0:1a:10:0b:46:f6: a1:3e:7c:d5:1f:7c:f1:52:cd:1e:d2:d3:62:ee:85: 2e:79:70:b3:bf:11:d7:a7:c3:9a:4c:db:3b:2f:25: af:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:2A:CB:07:9D:AD:94:B7:D3:0D:3E:08:A6:F8:0F:A6:6B:E3:6A:04 X509v3 Authority Key Identifier: keyid:D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:2f:d0:dc:27:4f:17:ef:e4:67:c3:66:2d:c2:2e:69:d7:c3: cb:c3:ac:cb:87:16:dd:ff:0e:87:e5:d5:c9:1c:a9:80:46:69: 66:17:39:f5:e1:bc:cf:14:4c:36:64:3d:d8:f7:66:6e:e8:30: 5f:7d:11:dd:19:16:bd:ce:83:be:f8:4e:4a:c2:f7:44:53:c1: 71:1e:90:bf:c6:e8:b3:d8:8e:9b:11:93:15:a2:71:2f:04:c2: f4:34:a0:04:27:65:eb:d4:c0:5f:b0:23:8e:bb:5a:1f:e4:a7: a4:6f:c5:2f:8e:d5:0f:eb:4e:7b:e1:90:74:ad:99:a0:c5:97: 2f:c4:c4:ef:8d:6a:f4:df:b1:09:35:44:db:12:f0:de:00:5c: 4c:b1:35:a3:2b:89:f7:6c:a0:39:7e:26:45:8c:5e:3c:68:ac: e9:7a:dc:45:56:5a:22:c4:8f:3e:c9:4a:f0:4e:7d:8f:d7:c4: 12:b6:3f:95:40:65:68:6b:e7:19:a9:a4:25:98:93:38:0d:97: d0:fc:a5:80:7b:1d:10:70:cd:69:a2:24:5c:51:aa:8a:08:62: 00:07:f2:b6:6a:eb:0c:5a:4d:2f:f9:13:ef:d6:16:40:8f:49: c8:a4:08:b2:7a:6d:4d:54:fe:3e:98:d6:6c:ce:dc:53:36:43: 75:11:cc:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dOYglVfBaTCteLbjdyrMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZjI2NGUzODA1YTNkMTA0NTM3MzU3YTE0ZmY5MjZhYzAy OTU5OWMwHhcNMjYwMTI1MTQwMDM3WhcNMjYwMTI2MTQwMDM3WjAzMTEwLwYDVQQD EygxMDJhY2IwNzlkYWQ5NGI3ZDMwZDNlMDhhNmY4MGZhNjZiZTM2YTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLSTKyVcdpvJV8/Ln985V6UhPPDv q7IMC8wJc+yiTg1tK5F/IMiSp49sEo9coEHNiQ0K3ygBRWcMTcCUM5fMjufYDvXr K5tc5cEb1r8Y2e6ASP6Iu/FMZALyLHbwYw5iifLaE31Yx44A/VUW45LaDp0jGyVZ Y/JSKWApdd9xD599n7aEmqZewq31zu4IAVYuZszC4ti0+4kbx74KSnySDTAOPPTC DRktiuLhH5KzxYQk1YAhytvkaK+wsRfWz/zzIuGxGyJWIKID+RnLeCUWrIZpC1Pc nH0bUdjwGhALRvahPnzVH3zxUs0e0tNi7oUueXCzvxHXp8OaTNs7LyWvSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBAqywedrZS30w0+CKb4D6Zr42oEMB8GA1UdIwQY MBaAFNXyZOOAWj0QRTc1ehT/kmrAKVmcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWZKazQ0QmFQUkJGTnpWNkZQLVNhc0FwV1p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81ZDYzMmEtZTQ1My00MmE1LTgwNWYt M2RjZWNiY2EzNzAyLzEvMWZKazQ0QmFQUkJGTnpWNkZQLVNhc0FwV1p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC81ZDYzMmEtZTQ1My00MmE1LTgwNWYtM2RjZWNiY2EzNzAy LzEvMWZKazQ0QmFQUkJGTnpWNkZQLVNhc0FwV1p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUS/Q3CdP F+/kZ8NmLcIuadfDy8Osy4cW3f8Oh+XVyRypgEZpZhc59eG8zxRMNmQ92Pdmbugw X30R3RkWvc6DvvhOSsL3RFPBcR6Qv8bos9iOmxGTFaJxLwTC9DSgBCdl69TAX7Aj jrtaH+SnpG/FL47VD+tOe+GQdK2ZoMWXL8TE741q9N+xCTVE2xLw3gBcTLE1oyuJ 92ygOX4mRYxePGis6XrcRVZaIsSPPslK8E59j9fEErY/lUBlaGvnGamkJZiTOA2X 0PylgHsdEHDNaaIkXFGqighiAAfytmrrDFpNL/kT79YWQI9JyKQIsnptTVT+PpjW bM7cUzZDdRHMbQ== -----END CERTIFICATE-----Generated at Sun Jan 25 23:08:22 2026 by rpki-client