This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft File: 1-BjewyV4QBB3SCAJDo4KCD3d29w.mft (raw, json) Hash identifier: ab2mv8jTsJvv2ir+bU89l11vRSWsst0sw1GEtvprK3I= Subject key identifier: A9:61:84:3F:9F:C2:E9:27:B3:0E:DA:8C:85:05:CB:92:79:38:E4:ED Authority key identifier: F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC Certificate issuer: /CN=f818dec325784010774820090e8e0a083ddddbdc Certificate serial: 019BF72DA276CA31BE379618C42A97309C1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft Manifest number: 14EE Signing time: Sun 25 Jan 2026 22:02:01 +0000 Manifest this update: Sun 25 Jan 2026 22:02:01 +0000 Manifest next update: Mon 26 Jan 2026 22:02:01 +0000 Files and hashes: 1: 1-BjewyV4QBB3SCAJDo4KCD3d29w.crl (hash: GuPGeraqfbr4Yzfptpkb6Q0AGRF5739yVT2uM5OpFHU=) 2: 81F_eaaYYwg-TBBVI21_-TaNtg8.roa (hash: JIil97IYlVS9Me8r6kdazWxkET1WTS6YlZIPPN8PnVc=) 3: lbOnHNG0FresIDmGPUuzesyYT-o.roa (hash: b+2ke50tajYGGpfMuZhD+Z3HQLQKW1cFa2Jp2QUJP2s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.crl rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:a2:76:ca:31:be:37:96:18:c4:2a:97:30:9c:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f818dec325784010774820090e8e0a083ddddbdc Validity Not Before: Jan 25 22:02:01 2026 GMT Not After : Jan 26 22:02:01 2026 GMT Subject: CN=a961843f9fc2e927b30eda8c8505cb927938e4ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4f:94:8d:ae:60:e1:72:6e:0c:33:2f:0b:b1: 16:50:c8:e4:19:47:c5:b7:d8:d6:8a:5d:72:5f:c3: 22:10:19:61:b7:ed:cb:eb:ae:1c:da:5c:8b:9f:f0: 98:4f:e1:36:e9:1a:5d:78:e4:b8:fc:95:d3:ad:40: ae:cc:94:ea:3d:fd:14:ef:1b:c8:35:f0:a6:61:73: f3:f8:48:0f:f7:7f:05:b6:32:39:4c:bd:9e:1f:84: dd:0c:7d:7a:a0:da:91:7a:10:07:a4:c7:c0:2d:e3: 4d:8b:d5:09:1d:31:fc:28:6d:f1:35:dd:3c:62:d0: 9c:78:60:79:db:e9:a5:97:11:87:f3:a5:a3:12:a1: 28:45:ae:2b:af:07:a0:81:0b:41:6d:25:74:03:2b: 2a:b8:97:d5:fd:35:67:3c:bc:62:b2:7f:17:37:0d: 46:d0:d5:40:0d:f9:68:e7:58:3e:80:a7:c9:ed:32: 80:50:85:8c:9a:6d:9f:5a:3d:38:7c:80:64:0b:17: ef:79:05:39:6f:39:f8:bd:2d:2e:3f:0d:69:8a:75: 95:b6:62:c2:0b:71:f9:ed:4d:62:5e:d4:bd:a2:bb: 9e:35:c4:0a:77:34:9c:4b:99:e5:4f:22:cc:17:b3: ed:a2:7c:14:42:1a:a5:fc:3a:bf:73:6e:54:4f:6d: ab:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:61:84:3F:9F:C2:E9:27:B3:0E:DA:8C:85:05:CB:92:79:38:E4:ED X509v3 Authority Key Identifier: keyid:F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:92:33:d6:20:35:62:be:3d:51:ac:3a:22:e5:87:93:30:cf: 27:5a:38:bf:8e:7d:00:d2:d3:cb:c8:b5:9f:48:e0:0f:4a:ec: 46:cc:63:e0:67:36:72:ee:07:1f:c2:b8:d6:6f:ed:72:12:1e: bd:ee:6a:c6:dc:22:3a:0d:29:1b:03:00:2b:6a:e9:9d:9a:87: 46:f0:c6:49:01:19:ab:51:cb:88:33:8f:c6:85:59:7a:8a:7a: d3:c3:26:1b:c1:51:8a:07:4e:a8:51:89:57:67:eb:ea:67:6d: 0b:c2:2b:0d:a2:84:2b:f7:0b:e3:4b:c7:a2:31:aa:34:13:46: 51:08:8a:29:83:55:28:ad:09:e8:1a:e4:c4:00:9d:a9:9c:ce: 1f:f1:e3:9a:be:1c:51:7d:8c:68:8e:e0:6c:f5:1b:f5:b9:c8: 14:59:10:87:0b:aa:07:7d:52:52:92:55:0f:82:2b:cf:e5:d1: 85:d2:66:3a:58:91:a8:c1:81:02:2a:61:1c:ac:0d:e5:c7:f9: 84:4c:98:68:45:04:bf:2b:74:8f:69:c6:31:1e:2a:c7:69:9a: ff:8d:c7:ff:ef:c9:cf:b4:80:c7:39:7a:1e:a5:22:55:14:c1: 56:69:7e:1e:95:1c:17:95:8f:36:9a:5c:be:5c:69:a9:8b:6b: 2f:c9:3e:4c -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZv3LaJ2yjG+N5YYxCqXMJweMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MThkZWMzMjU3ODQwMTA3NzQ4MjAwOTBlOGUwYTA4M2Rk ZGRiZGMwHhcNMjYwMTI1MjIwMjAxWhcNMjYwMTI2MjIwMjAxWjAzMTEwLwYDVQQD EyhhOTYxODQzZjlmYzJlOTI3YjMwZWRhOGM4NTA1Y2I5Mjc5MzhlNGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3E+Uja5g4XJuDDMvC7EWUMjkGUfF t9jWil1yX8MiEBlht+3L664c2lyLn/CYT+E26RpdeOS4/JXTrUCuzJTqPf0U7xvI NfCmYXPz+EgP938FtjI5TL2eH4TdDH16oNqRehAHpMfALeNNi9UJHTH8KG3xNd08 YtCceGB52+mllxGH86WjEqEoRa4rrweggQtBbSV0AysquJfV/TVnPLxisn8XNw1G 0NVADflo51g+gKfJ7TKAUIWMmm2fWj04fIBkCxfveQU5bzn4vS0uPw1pinWVtmLC C3H57U1iXtS9orueNcQKdzScS5nlTyLMF7PtonwUQhql/Dq/c25UT22rMwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFKlhhD+fwuknsw7ajIUFy5J5OOTtMB8GA1UdIwQY MBaAFPgY3sMleEAQd0ggCQ6OCgg93dvcMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1CamV3eVY0UUJCM1NDQUpEbzRLQ0QzZDI5dy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkvMjk1OWZiLTg4ZjYtNDliNS1iYjAw LTgzYTBkOWVmZWMyZC8xLzEtQmpld3lWNFFCQjNTQ0FKRG80S0NEM2QyOXcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzY5LzI5NTlmYi04OGY2LTQ5YjUtYmIwMC04M2EwZDllZmVj MmQvMS8xLUJqZXd5VjRRQkIzU0NBSkRvNEtDRDNkMjl3LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKJIz 1iA1Yr49Uaw6IuWHkzDPJ1o4v459ANLTy8i1n0jgD0rsRsxj4Gc2cu4HH8K41m/t chIeve5qxtwiOg0pGwMAK2rpnZqHRvDGSQEZq1HLiDOPxoVZeop608MmG8FRigdO qFGJV2fr6mdtC8IrDaKEK/cL40vHojGqNBNGUQiKKYNVKK0J6BrkxACdqZzOH/Hj mr4cUX2MaI7gbPUb9bnIFFkQhwuqB31SUpJVD4Irz+XRhdJmOliRqMGBAiphHKwN 5cf5hEyYaEUEvyt0j2nGMR4qx2ma/43H/+/Jz7SAxzl6HqUiVRTBVml+HpUcF5WP NppcvlxpqYtrL8k+TA== -----END CERTIFICATE-----Generated at Mon Jan 26 02:32:41 2026 by rpki-client