This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft File: 1-jDy9nL7VLpJd8bhpronExwjH_I.mft (raw, json) Hash identifier: DQGkRoM+C5xqOrs+3zQeAY2iK3yxgn/Od8x4nEu3Xr4= Subject key identifier: 32:3A:9D:45:78:62:5A:6B:D7:7E:21:8A:02:C2:63:DA:62:5A:8F:29 Authority key identifier: FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2 Certificate issuer: /CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2 Certificate serial: 019BF83F7D87D27FDAC9A38E8D36A9E4AF59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft Manifest number: 0632 Signing time: Mon 26 Jan 2026 03:01:09 +0000 Manifest this update: Mon 26 Jan 2026 03:01:09 +0000 Manifest next update: Tue 27 Jan 2026 03:01:09 +0000 Files and hashes: 1: 1-jDy9nL7VLpJd8bhpronExwjH_I.crl (hash: xcoMFIsEU00dCFoc+DV39pXYasi4PTJy7uKs90vV+G8=) 2: Ip878u9pBQi9g89YkISpQa7bCf0.roa (hash: 5w9cx6mrV87FtSruYjnPB/haPzCFoJHrmqiObhlSqk0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:7d:87:d2:7f:da:c9:a3:8e:8d:36:a9:e4:af:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2 Validity Not Before: Jan 26 03:01:09 2026 GMT Not After : Jan 27 03:01:09 2026 GMT Subject: CN=323a9d4578625a6bd77e218a02c263da625a8f29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:45:0f:fb:20:7e:b3:35:ed:79:56:3e:20:4e: b6:86:36:6d:93:c4:d0:0e:7b:bd:f1:64:4a:b0:bd: 74:b4:a2:c0:3f:45:9a:a6:23:a1:3a:65:9b:3e:eb: fb:fb:b9:15:4d:4d:ab:9a:6a:57:44:29:e5:b1:4a: 81:dc:0b:07:1f:3c:15:c6:cc:9f:12:78:d1:4d:ff: d4:fe:f7:af:71:d6:a5:41:db:6b:66:37:cc:d1:a0: a9:14:7f:f7:2d:9e:5f:88:59:bb:db:d0:ea:7a:2f: 05:4f:28:64:ba:51:6f:a4:0c:8d:2b:b4:d6:37:c1: 3b:3c:12:49:cb:4a:5c:cf:a0:6f:01:1b:5a:8d:a7: df:67:16:18:f8:4e:0d:ad:5a:57:d7:aa:0d:6a:bd: 38:de:7d:20:6f:8e:51:ee:f3:11:d4:94:1a:54:9b: 74:52:c0:6f:1d:4f:6a:79:43:d7:8b:af:5d:9b:05: cd:c7:90:9e:70:fb:26:96:83:29:8e:7c:36:f5:ce: 14:9f:7a:e3:5a:89:ae:87:46:97:f7:9d:8e:2f:a8: 64:d7:47:23:e3:90:e2:d0:c6:04:77:84:76:a0:6d: 85:c5:ba:a3:31:b2:0c:13:0e:22:cc:d7:46:32:b0: 63:c8:ac:6a:7b:45:35:2d:c0:7e:fd:84:49:31:bc: 49:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:3A:9D:45:78:62:5A:6B:D7:7E:21:8A:02:C2:63:DA:62:5A:8F:29 X509v3 Authority Key Identifier: keyid:FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:1c:be:48:da:a2:b7:d1:40:9c:76:88:2f:8d:c9:8f:03:3f: 6f:6f:55:d6:56:35:6e:cb:8c:7c:12:1b:c6:e3:23:2b:11:a0: fd:7a:dc:fc:b7:13:f8:c2:3d:60:e4:a7:2b:fc:a3:57:2b:20: 02:0e:43:10:38:b3:2b:fb:9a:29:9e:7d:4f:a9:52:4f:4c:9b: 6b:6b:07:17:a8:ac:cd:d9:a4:0b:c2:5d:a3:94:7e:c8:3f:90: 4d:80:59:ec:6c:e7:1b:64:64:86:fc:07:d3:82:4c:9e:57:45: 3e:f3:4a:9c:ef:7d:6b:ec:11:5b:e5:b2:75:8d:43:d1:20:73: 84:e4:02:96:8a:b2:a6:32:8c:90:ff:3c:67:72:eb:f0:7d:7a: ff:d3:c6:53:0c:00:22:e8:24:b0:6f:9a:2b:a9:7c:73:ec:4c: ff:51:d6:25:b4:a8:70:d5:a3:f3:c5:5a:79:cc:08:96:92:12: 0b:a8:fc:45:2e:59:ab:29:58:31:ed:0e:87:5a:28:ca:fb:35: 1d:7f:37:c1:7f:db:2d:e6:ae:f4:c5:1c:78:ad:e4:a4:1a:4f: 42:09:1c:f4:ce:98:9c:65:f5:0d:d7:3d:d0:0e:f9:82:ff:49: ad:1f:62:4c:08:79:d1:f5:75:9c:30:1c:ee:bc:4b:fe:cd:62: bc:fe:7b:8c -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZv4P32H0n/ayaOOjTap5K9ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMzBmMmY2NzJmYjU0YmE0OTc3YzZlMWE2YmEyNzEzMWMy MzFmZjIwHhcNMjYwMTI2MDMwMTA5WhcNMjYwMTI3MDMwMTA5WjAzMTEwLwYDVQQD EygzMjNhOWQ0NTc4NjI1YTZiZDc3ZTIxOGEwMmMyNjNkYTYyNWE4ZjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokUP+yB+szXteVY+IE62hjZtk8TQ Dnu98WRKsL10tKLAP0WapiOhOmWbPuv7+7kVTU2rmmpXRCnlsUqB3AsHHzwVxsyf EnjRTf/U/vevcdalQdtrZjfM0aCpFH/3LZ5fiFm729Dqei8FTyhkulFvpAyNK7TW N8E7PBJJy0pcz6BvARtajaffZxYY+E4NrVpX16oNar043n0gb45R7vMR1JQaVJt0 UsBvHU9qeUPXi69dmwXNx5CecPsmloMpjnw29c4Un3rjWomuh0aX952OL6hk10cj 45Di0MYEd4R2oG2FxbqjMbIMEw4izNdGMrBjyKxqe0U1LcB+/YRJMbxJwQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFDI6nUV4Ylpr134higLCY9piWo8pMB8GA1UdIwQY MBaAFPow8vZy+1S6SXfG4aa6JxMcIx/yMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1qRHk5bkw3VkxwSmQ4Ymhwcm9uRXh3akhfSS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjEvMTk2OGQwLWZhZjEtNGUzNy1hYzg4 LWQ0MDRiNDgwYzU2Ny8xLzEtakR5OW5MN1ZMcEpkOGJocHJvbkV4d2pIX0kubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzYxLzE5NjhkMC1mYWYxLTRlMzctYWM4OC1kNDA0YjQ4MGM1 NjcvMS8xLWpEeTluTDdWTHBKZDhiaHByb25FeHdqSF9JLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAURy+ SNqit9FAnHaIL43JjwM/b29V1lY1bsuMfBIbxuMjKxGg/Xrc/LcT+MI9YOSnK/yj VysgAg5DEDizK/uaKZ59T6lST0yba2sHF6iszdmkC8Jdo5R+yD+QTYBZ7GznG2Rk hvwH04JMnldFPvNKnO99a+wRW+WydY1D0SBzhOQCloqypjKMkP88Z3Lr8H16/9PG UwwAIugksG+aK6l8c+xM/1HWJbSocNWj88VaecwIlpISC6j8RS5ZqylYMe0Oh1oo yvs1HX83wX/bLeau9MUceK3kpBpPQgkc9M6YnGX1Ddc90A75gv9JrR9iTAh50fV1 nDAc7rxL/s1ivP57jA== -----END CERTIFICATE-----Generated at Mon Jan 26 08:42:29 2026 by rpki-client