This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft File: 1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft (raw, json) Hash identifier: mhsiUqSEWzLZW8oh68lg4OrhV+veJMgXAke1rRgzk/M= Subject key identifier: B9:A5:1C:76:2D:C7:ED:69:21:7B:FA:32:16:E3:98:0D:84:EC:F5:CF Authority key identifier: FA:70:B4:2D:7A:F6:AD:78:22:2B:30:F0:5F:2B:79:13:F8:06:35:70 Certificate issuer: /CN=fa70b42d7af6ad78222b30f05f2b7913f8063570 Certificate serial: 019BF619AAC4146D75DA25F19F9A6AA23B94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 17:00:35 +0000 Manifest this update: Sun 25 Jan 2026 17:00:35 +0000 Manifest next update: Mon 26 Jan 2026 17:00:35 +0000 Files and hashes: 1: 1-nC0LXr2rXgiKzDwXyt5E_gGNXA.crl (hash: zVTTfwRDsez+5XsrUFIP3e/4KHvZ9jNyiUMtV3eSnGk=) 2: B3jjvlnWK_ho4oeQ7H-8m6t4uX8.roa (hash: iNRcPuAK86hIo1jsy7oarAHxhqJd5nCDCcCEDbaTlTQ=) 3: IwISPZAq_lfMVYJDL-7wMWue3aU.roa (hash: z6+EXeevPDa78xk3kdWEbfuhp5KcLTsL2G6IDYHQCnA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 17:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:aa:c4:14:6d:75:da:25:f1:9f:9a:6a:a2:3b:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa70b42d7af6ad78222b30f05f2b7913f8063570 Validity Not Before: Jan 25 17:00:35 2026 GMT Not After : Jan 26 17:00:35 2026 GMT Subject: CN=b9a51c762dc7ed69217bfa3216e3980d84ecf5cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b5:f1:21:eb:a3:dc:2b:47:74:0d:5e:b2:45: 3d:99:2a:08:2a:f9:48:66:9a:05:57:06:e0:c6:6e: 89:dd:b3:d1:18:08:90:11:92:9f:e2:40:d8:41:72: df:1b:59:bd:d9:00:52:51:5d:74:fa:b7:2c:8d:e1: 93:75:f6:c8:92:08:35:a9:b5:4b:08:c1:eb:5f:23: 69:b3:ad:3b:dc:00:9e:30:b4:31:7f:ee:ff:40:b9: 34:62:26:c6:be:6c:66:20:ff:de:d2:b1:76:6b:a6: 71:d1:b0:78:14:53:9f:f3:d6:5f:65:cc:30:59:fd: 9e:af:d3:80:95:44:11:ab:29:d6:6e:a2:05:8c:0e: 3e:0b:96:13:8f:2c:9e:f8:39:e2:5c:af:80:e3:35: 6f:e7:33:27:3b:5f:fb:11:5f:9d:78:0e:2c:b9:35: ff:14:73:87:09:94:d9:d2:a9:f5:31:dc:e3:21:56: 1e:8e:33:6b:21:3a:57:8d:11:dd:21:54:8a:e8:d3: 3d:47:75:28:3d:49:9f:3c:29:22:37:9f:7f:ec:72: ba:26:45:36:95:57:68:e6:42:19:a1:5f:95:f5:91: ef:a2:08:5e:b0:93:09:da:e1:c8:b2:34:93:f2:24: 80:74:8a:fd:1b:b6:86:a5:05:bd:f6:ae:03:e3:41: ea:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A5:1C:76:2D:C7:ED:69:21:7B:FA:32:16:E3:98:0D:84:EC:F5:CF X509v3 Authority Key Identifier: keyid:FA:70:B4:2D:7A:F6:AD:78:22:2B:30:F0:5F:2B:79:13:F8:06:35:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:b9:e8:a1:52:1c:d4:c4:fc:2a:2c:11:bc:87:8c:15:1c:62: 64:43:ed:6b:08:18:2e:02:f0:2f:dd:9b:27:2c:70:2a:34:63: 68:cc:b9:be:c3:fc:23:ec:0c:c8:f2:6d:0a:a3:09:a6:0d:41: 3e:c0:68:b4:2f:cf:e3:ac:21:ea:77:e3:7c:cc:a2:99:f7:3f: e2:3c:5a:ad:86:71:dc:38:05:8f:74:6d:87:0a:fc:56:f2:9d: be:9e:31:af:f0:59:41:11:58:eb:dd:66:a2:2d:4e:52:2d:9e: ef:63:e2:a3:f0:cc:81:4a:4c:61:49:e9:c2:57:7a:a2:dc:1f: 92:15:ac:14:c0:ee:d4:63:40:ed:7d:c4:5c:9c:73:8d:c4:17: 46:d7:d6:2b:e0:8a:aa:73:59:86:74:bb:91:ee:5b:03:85:45: 90:0d:cf:60:3e:47:79:aa:28:fe:5e:d1:a2:fa:51:69:ab:40: 32:0d:28:bf:5a:36:d2:a2:b2:92:97:50:19:61:68:e5:09:9b: 5d:cf:59:84:cd:97:e3:93:3e:8b:c8:bc:fe:02:f8:79:6e:8f: d1:5e:c1:fe:5f:fc:74:ae:b4:85:52:9c:67:20:ea:fe:4c:50: a2:b4:70:09:66:ea:40:db:3e:69:90:86:f7:81:58:e0:be:b1: 1f:fc:37:bd -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZv2GarEFG112iXxn5pqojuUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNzBiNDJkN2FmNmFkNzgyMjJiMzBmMDVmMmI3OTEzZjgw NjM1NzAwHhcNMjYwMTI1MTcwMDM1WhcNMjYwMTI2MTcwMDM1WjAzMTEwLwYDVQQD EyhiOWE1MWM3NjJkYzdlZDY5MjE3YmZhMzIxNmUzOTgwZDg0ZWNmNWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbXxIeuj3CtHdA1eskU9mSoIKvlI ZpoFVwbgxm6J3bPRGAiQEZKf4kDYQXLfG1m92QBSUV10+rcsjeGTdfbIkgg1qbVL CMHrXyNps6073ACeMLQxf+7/QLk0YibGvmxmIP/e0rF2a6Zx0bB4FFOf89ZfZcww Wf2er9OAlUQRqynWbqIFjA4+C5YTjyye+DniXK+A4zVv5zMnO1/7EV+deA4suTX/ FHOHCZTZ0qn1MdzjIVYejjNrITpXjRHdIVSK6NM9R3UoPUmfPCkiN59/7HK6JkU2 lVdo5kIZoV+V9ZHvoghesJMJ2uHIsjST8iSAdIr9G7aGpQW99q4D40HqowIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFLmlHHYtx+1pIXv6MhbjmA2E7PXPMB8GA1UdIwQY MBaAFPpwtC169q14Iisw8F8reRP4BjVwMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1uQzBMWHIyclhnaUt6RHdYeXQ1RV9nR05YQS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEvZDNiZmU2LTc4YjUtNDM3Yi05OGU5 LWI5MTQxNTliYThhZC8xLzEtbkMwTFhyMnJYZ2lLekR3WHl0NUVfZ0dOWEEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzZhL2QzYmZlNi03OGI1LTQzN2ItOThlOS1iOTE0MTU5YmE4 YWQvMS8xLW5DMExYcjJyWGdpS3pEd1h5dDVFX2dHTlhBLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYLno oVIc1MT8KiwRvIeMFRxiZEPtawgYLgLwL92bJyxwKjRjaMy5vsP8I+wMyPJtCqMJ pg1BPsBotC/P46wh6nfjfMyimfc/4jxarYZx3DgFj3Rthwr8VvKdvp4xr/BZQRFY 691moi1OUi2e72Pio/DMgUpMYUnpwld6otwfkhWsFMDu1GNA7X3EXJxzjcQXRtfW K+CKqnNZhnS7ke5bA4VFkA3PYD5Heaoo/l7RovpRaatAMg0ov1o20qKykpdQGWFo 5QmbXc9ZhM2X45M+i8i8/gL4eW6P0V7B/l/8dK60hVKcZyDq/kxQorRwCWbqQNs+ aZCG94FY4L6xH/w3vQ== -----END CERTIFICATE-----Generated at Mon Jan 26 03:11:33 2026 by rpki-client