This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft File: 1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft (raw, json) Hash identifier: uMN36dl6BNWPV9gfoX5cgUP0yU9dkLH1z8D2Ym3NJ54= Subject key identifier: 21:FA:39:E7:ED:E0:55:10:C2:83:03:D5:76:7A:F5:0B:95:B0:A0:62 Authority key identifier: F9:E2:0F:7D:3A:2C:C9:5D:9D:E6:F4:E3:34:CB:4B:67:92:2E:70:F5 Certificate issuer: /CN=f9e20f7d3a2cc95d9de6f4e334cb4b67922e70f5 Certificate serial: 019BF763C43CA8B84B6D51C3417DB37BFD74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eIPfTosyV2d5vTjNMtLZ5IucPU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft Manifest number: 09FD Signing time: Sun 25 Jan 2026 23:01:09 +0000 Manifest this update: Sun 25 Jan 2026 23:01:09 +0000 Manifest next update: Mon 26 Jan 2026 23:01:09 +0000 Files and hashes: 1: 1-eIPfTosyV2d5vTjNMtLZ5IucPU.crl (hash: grn3XX4qg28FcCig6ntuXbOUHzy0nhhHHAWKIIilOpY=) 2: dIklPH6MQVoi4FKEgOv-ZNvLOdQ.roa (hash: 8vf5FWodBfFQuv37hN2+e65ZSB5TlTHJUcgDUZ0ExBM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft rsync://rpki.ripe.net/repository/DEFAULT/1-eIPfTosyV2d5vTjNMtLZ5IucPU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:c4:3c:a8:b8:4b:6d:51:c3:41:7d:b3:7b:fd:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9e20f7d3a2cc95d9de6f4e334cb4b67922e70f5 Validity Not Before: Jan 25 23:01:09 2026 GMT Not After : Jan 26 23:01:09 2026 GMT Subject: CN=21fa39e7ede05510c28303d5767af50b95b0a062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a5:ed:47:da:4e:33:54:7b:f8:b5:34:13:66: 99:1f:d0:56:50:3c:17:9a:41:18:8e:0d:3e:42:6c: c0:78:15:7b:33:c7:6b:a7:4d:dc:10:2d:19:d6:f1: 1f:20:8c:c0:7b:3e:05:e2:3d:d7:1d:c2:5f:b6:e8: dc:7b:cb:ca:b4:69:64:d2:b5:91:0a:c0:e5:d1:6a: 6c:fb:b5:1a:7c:be:ef:c8:7a:ea:a5:f5:08:7a:ef: f8:e7:20:bd:5f:6b:20:4f:b8:42:a4:04:6d:82:0c: 74:b3:51:c1:69:13:22:4e:5f:6d:77:a4:2b:fe:e0: 45:87:83:87:3b:e1:35:51:cf:fd:be:49:c5:d6:3c: dc:e5:f4:24:e4:fb:aa:73:17:05:ba:71:c8:fb:ef: a7:d4:81:fb:c8:f6:c0:bd:8f:04:46:b0:5a:c8:d6: ac:ef:74:1d:a0:80:4c:87:04:80:2c:1c:a0:0a:32: 55:f6:f2:bc:3b:d7:bd:f3:c6:06:50:b7:f5:b9:b1: bc:f9:9c:0c:0f:3f:bb:2a:e3:d5:ce:e2:cc:c6:24: 25:24:7d:7d:b2:2d:f3:59:7b:5f:6c:04:11:c0:0a: 69:96:75:29:27:f5:45:07:29:77:70:58:2e:5e:bb: 1c:98:89:8f:a9:c4:f0:3e:5c:04:aa:dd:0b:cb:b4: 6a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:FA:39:E7:ED:E0:55:10:C2:83:03:D5:76:7A:F5:0B:95:B0:A0:62 X509v3 Authority Key Identifier: keyid:F9:E2:0F:7D:3A:2C:C9:5D:9D:E6:F4:E3:34:CB:4B:67:92:2E:70:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eIPfTosyV2d5vTjNMtLZ5IucPU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:3d:22:1d:eb:cf:04:5e:f6:fb:b4:3e:51:73:b3:8e:67:04: 1c:87:33:3e:12:96:de:46:f4:7d:fb:c1:26:1b:29:0d:16:de: 16:6d:04:19:0d:7b:2b:3d:4b:3f:c6:11:2c:4f:73:df:d4:6f: 58:3e:e6:12:3f:ca:b1:ee:5c:43:59:3a:4f:15:15:16:77:5b: 38:e3:89:91:b0:fa:2e:28:6a:aa:b6:1e:ec:d1:48:82:68:f7: dd:24:17:fa:33:1d:9a:60:4c:e0:fb:62:fe:d7:16:d6:a0:ce: 99:07:c8:86:d4:fb:43:9d:8a:13:19:32:bc:c2:f5:df:5b:58: 4c:4b:70:79:51:0b:fb:89:14:83:4a:66:bf:d4:43:f2:9b:89: 26:0a:55:8d:cf:9d:bd:77:84:ac:47:0b:fc:ea:7c:1d:66:f0: ce:7f:07:ba:4f:1d:5d:f1:35:a6:8d:a9:b4:24:bc:a5:c0:a8: 0e:e8:ce:4a:d3:c3:af:0c:a8:bf:40:01:3a:a3:3e:69:b6:83: 50:32:cb:13:2f:bf:47:d1:03:d0:a1:a4:5c:90:1e:a3:7f:c0: 73:5d:50:cc:97:7d:44:12:c9:57:58:35:d4:d4:f2:c8:b2:83: 7a:a0:be:9f:41:62:92:2d:b8:22:15:4d:74:a8:b0:1a:56:6d: 66:82:da:81 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZv3Y8Q8qLhLbVHDQX2ze/10MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5ZTIwZjdkM2EyY2M5NWQ5ZGU2ZjRlMzM0Y2I0YjY3OTIy ZTcwZjUwHhcNMjYwMTI1MjMwMTA5WhcNMjYwMTI2MjMwMTA5WjAzMTEwLwYDVQQD EygyMWZhMzllN2VkZTA1NTEwYzI4MzAzZDU3NjdhZjUwYjk1YjBhMDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaXtR9pOM1R7+LU0E2aZH9BWUDwX mkEYjg0+QmzAeBV7M8drp03cEC0Z1vEfIIzAez4F4j3XHcJftujce8vKtGlk0rWR CsDl0Wps+7UafL7vyHrqpfUIeu/45yC9X2sgT7hCpARtggx0s1HBaRMiTl9td6Qr /uBFh4OHO+E1Uc/9vknF1jzc5fQk5PuqcxcFunHI+++n1IH7yPbAvY8ERrBayNas 73QdoIBMhwSALBygCjJV9vK8O9e988YGULf1ubG8+ZwMDz+7KuPVzuLMxiQlJH19 si3zWXtfbAQRwApplnUpJ/VFByl3cFguXrscmImPqcTwPlwEqt0Ly7Rq8QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFCH6Oeft4FUQwoMD1XZ69QuVsKBiMB8GA1UdIwQY MBaAFPniD306LMldneb04zTLS2eSLnD1MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1lSVBmVG9zeVYyZDV2VGpOTXRMWjVJdWNQVS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEvN2U3ZmNlLTQ4NDEtNDc2Yi04NGMw LWE1NGViODU2NmJlZi8xLzEtZUlQZlRvc3lWMmQ1dlRqTk10TFo1SXVjUFUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzZhLzdlN2ZjZS00ODQxLTQ3NmItODRjMC1hNTRlYjg1NjZi ZWYvMS8xLWVJUGZUb3N5VjJkNXZUak5NdExaNUl1Y1BVLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMD0i HevPBF72+7Q+UXOzjmcEHIczPhKW3kb0ffvBJhspDRbeFm0EGQ17Kz1LP8YRLE9z 39RvWD7mEj/Kse5cQ1k6TxUVFndbOOOJkbD6LihqqrYe7NFIgmj33SQX+jMdmmBM 4Pti/tcW1qDOmQfIhtT7Q52KExkyvML131tYTEtweVEL+4kUg0pmv9RD8puJJgpV jc+dvXeErEcL/Op8HWbwzn8Huk8dXfE1po2ptCS8pcCoDujOStPDrwyov0ABOqM+ abaDUDLLEy+/R9ED0KGkXJAeo3/Ac11QzJd9RBLJV1g11NTyyLKDeqC+n0Fiki24 IhVNdKiwGlZtZoLagQ== -----END CERTIFICATE-----Generated at Mon Jan 26 07:11:33 2026 by rpki-client