This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft File: 1QzaSMNeVOuAJXWqpAjM5XmSchY.mft (raw, json) Hash identifier: bFsIr5ckOVzgqB+olMCwNZhrmg7uCrpFYg5jhoN4JFY= Subject key identifier: BC:19:3B:65:45:F7:7F:11:8A:F1:B1:76:40:AA:1B:7B:81:90:E9:CD Authority key identifier: D5:0C:DA:48:C3:5E:54:EB:80:25:75:AA:A4:08:CC:E5:79:92:72:16 Certificate issuer: /CN=d50cda48c35e54eb802575aaa408cce579927216 Certificate serial: 019BF46261943D41844E96D7FB8A86903A80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft Manifest number: 0826 Signing time: Sun 25 Jan 2026 09:00:46 +0000 Manifest this update: Sun 25 Jan 2026 09:00:46 +0000 Manifest next update: Mon 26 Jan 2026 09:00:46 +0000 Files and hashes: 1: 1QzaSMNeVOuAJXWqpAjM5XmSchY.crl (hash: IkBGXGw5e6LfbeGBz5taeUq9vwDh0ZS3UpLGVUR95vo=) 2: NBMICGxDjswxMBcIkL6TWpVgug4.roa (hash: SDiHoGR3hyxD5P9xq7VGB+HgvxZFXXwsXaz8vMU9je8=) 3: flkFMntj216ik-1RHE5z8QkiuF4.roa (hash: Gx/ViUGq+C6Lf+xKNlRvkXnmfpj7mqFvEpimMEsP3EM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:61:94:3d:41:84:4e:96:d7:fb:8a:86:90:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d50cda48c35e54eb802575aaa408cce579927216 Validity Not Before: Jan 25 09:00:46 2026 GMT Not After : Jan 26 09:00:46 2026 GMT Subject: CN=bc193b6545f77f118af1b17640aa1b7b8190e9cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d6:59:67:e4:4c:40:96:79:5c:0f:85:33:14: 55:62:de:d2:1d:34:fe:fe:3d:44:9b:03:f6:df:f9: b3:55:59:a2:09:e3:3b:d7:d8:d7:0f:d8:8a:f7:72: 06:f9:12:4d:d9:13:01:e9:80:91:fb:40:18:f3:79: 8c:70:83:84:57:c0:eb:94:e7:6d:01:4f:fc:af:5f: 1f:7c:30:ca:5f:d4:18:1c:4e:c0:a0:ca:0b:fd:fa: 70:e2:d4:f5:46:8f:29:d1:06:76:1a:dd:11:69:bc: 1e:9f:ac:b2:c8:4b:6a:55:58:c5:fe:57:fc:bb:f5: aa:ca:c5:60:09:e9:82:9f:ad:97:d2:b0:0c:d7:e6: 9f:59:42:e8:51:67:49:22:f8:fa:1c:c2:12:dd:cf: 0c:ae:32:d0:dd:b8:74:29:ef:3b:ea:43:85:84:16: ca:c4:f3:04:93:b6:56:cf:52:fc:24:cc:0b:34:6a: ad:d7:be:a7:54:b0:38:3a:08:26:7a:49:a5:92:a5: 16:20:7f:fd:5a:e4:90:9d:90:6d:83:e8:09:72:e9: 53:ee:73:8e:d1:d0:ca:f8:64:ec:db:de:42:3b:94: 22:45:d2:b9:22:3d:44:6d:50:5a:09:69:d5:3c:c0: 30:54:a2:2d:16:d0:8b:cf:40:9b:75:51:22:5e:63: d1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:19:3B:65:45:F7:7F:11:8A:F1:B1:76:40:AA:1B:7B:81:90:E9:CD X509v3 Authority Key Identifier: keyid:D5:0C:DA:48:C3:5E:54:EB:80:25:75:AA:A4:08:CC:E5:79:92:72:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:a9:b8:f5:8a:58:0b:68:6b:cb:f6:b4:3e:87:71:fb:56:1f: c9:38:54:4d:55:b3:24:1a:da:89:b7:4f:7a:b7:cb:c1:b6:13: c3:8b:b3:0f:ab:ca:82:8a:ce:36:8d:a6:7b:a6:15:a1:8a:e8: 68:1e:9f:4a:ff:a8:20:df:b6:88:13:7e:4d:cd:67:6c:48:6c: 2e:98:d0:65:d6:22:ad:42:45:64:0b:fd:3a:14:77:e7:8e:21: 71:f4:08:ce:f0:3d:c4:7b:e5:f2:d3:ec:93:d7:7f:a3:a9:25: 29:2e:27:e1:fa:59:e1:6b:60:82:d0:40:de:b7:5e:74:d7:64: 91:d2:b9:b5:ff:29:a6:2a:8e:0e:c3:17:72:e2:ee:49:85:ff: e3:37:8a:ed:07:24:9a:21:56:7d:7e:ab:93:b7:e3:1b:c7:f5: af:fd:48:08:15:cd:ec:28:5a:ca:26:ec:eb:1f:e2:13:e1:7e: 96:93:c4:b7:60:8a:d4:f1:16:e8:a2:32:13:51:5d:98:10:7e: 0b:e9:8f:d9:67:51:c6:37:7a:6c:1c:4f:81:f9:09:e6:32:92: bf:e7:90:41:7a:93:5c:67:3e:bb:80:67:bd:45:d2:2e:56:9c: fc:ed:dd:d8:ec:8d:0e:e6:b9:b5:f3:3c:1c:ea:56:76:06:bc: c3:ee:2c:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YmGUPUGETpbX+4qGkDqAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MGNkYTQ4YzM1ZTU0ZWI4MDI1NzVhYWE0MDhjY2U1Nzk5 MjcyMTYwHhcNMjYwMTI1MDkwMDQ2WhcNMjYwMTI2MDkwMDQ2WjAzMTEwLwYDVQQD EyhiYzE5M2I2NTQ1Zjc3ZjExOGFmMWIxNzY0MGFhMWI3YjgxOTBlOWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tZZZ+RMQJZ5XA+FMxRVYt7SHTT+ /j1EmwP23/mzVVmiCeM719jXD9iK93IG+RJN2RMB6YCR+0AY83mMcIOEV8DrlOdt AU/8r18ffDDKX9QYHE7AoMoL/fpw4tT1Ro8p0QZ2Gt0Rabwen6yyyEtqVVjF/lf8 u/WqysVgCemCn62X0rAM1+afWULoUWdJIvj6HMIS3c8MrjLQ3bh0Ke876kOFhBbK xPMEk7ZWz1L8JMwLNGqt176nVLA4OggmekmlkqUWIH/9WuSQnZBtg+gJculT7nOO 0dDK+GTs295CO5QiRdK5Ij1EbVBaCWnVPMAwVKItFtCLz0CbdVEiXmPRfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLwZO2VF938RivGxdkCqG3uBkOnNMB8GA1UdIwQY MBaAFNUM2kjDXlTrgCV1qqQIzOV5knIWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVF6YVNNTmVWT3VBSlhXcXBBak01WG1TY2hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zNTg3ZWItZWJkNC00MGFiLWExOWIt MjI5MjA1NjVjZGE0LzEvMVF6YVNNTmVWT3VBSlhXcXBBak01WG1TY2hZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8zNTg3ZWItZWJkNC00MGFiLWExOWItMjI5MjA1NjVjZGE0 LzEvMVF6YVNNTmVWT3VBSlhXcXBBak01WG1TY2hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi6m49YpY C2hry/a0Podx+1YfyThUTVWzJBraibdPerfLwbYTw4uzD6vKgorONo2me6YVoYro aB6fSv+oIN+2iBN+Tc1nbEhsLpjQZdYirUJFZAv9OhR3544hcfQIzvA9xHvl8tPs k9d/o6klKS4n4fpZ4WtggtBA3rdedNdkkdK5tf8ppiqODsMXcuLuSYX/4zeK7Qck miFWfX6rk7fjG8f1r/1ICBXN7Chayibs6x/iE+F+lpPEt2CK1PEW6KIyE1FdmBB+ C+mP2WdRxjd6bBxPgfkJ5jKSv+eQQXqTXGc+u4BnvUXSLlac/O3d2OyNDua5tfM8 HOpWdga8w+4swA== -----END CERTIFICATE-----Generated at Sun Jan 25 19:46:31 2026 by rpki-client