This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft File: 1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft (raw, json) Hash identifier: 70D9cCIw7+PdQDYH0now54MJdNYJxcnnoX9pgHSH/Y8= Subject key identifier: 2B:CB:1E:7B:29:34:3C:03:58:83:F4:28:14:B2:D1:64:92:F2:0C:F9 Authority key identifier: D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E Certificate issuer: /CN=d716209d7def98a2bb34977f65009b3520da256e Certificate serial: 019BF6BEBA4A38B9080373436BCCC3F5459B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft Manifest number: 05D8 Signing time: Sun 25 Jan 2026 20:00:53 +0000 Manifest this update: Sun 25 Jan 2026 20:00:53 +0000 Manifest next update: Mon 26 Jan 2026 20:00:53 +0000 Files and hashes: 1: 1-h29TFu81qQRwRTQtKfc7V6oGgw.roa (hash: j/GCQjpdQOAVMzUdmUHPipCJ4VSAK8zR3xsINI1wkiE=) 2: 1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl (hash: 67wNc7/X6inZYUDWFMPb9Y5c3eK3PDN0YJpJG0XfL4I=) 3: fDS7MOeqWVkf_MZC1cBqega7bos.roa (hash: oGglharYMXofAaOW6y3s52Ro1I7ZLJZ3QYHig9NqoGo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:ba:4a:38:b9:08:03:73:43:6b:cc:c3:f5:45:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d716209d7def98a2bb34977f65009b3520da256e Validity Not Before: Jan 25 20:00:53 2026 GMT Not After : Jan 26 20:00:53 2026 GMT Subject: CN=2bcb1e7b29343c035883f42814b2d16492f20cf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:23:95:ab:d5:07:42:59:53:28:ca:a3:72:7b: 15:1d:07:e6:1d:b8:a3:22:0b:a9:16:85:7f:f1:67: 91:aa:98:6a:65:60:03:fb:60:6d:4e:b4:64:c0:8d: 30:bd:da:a7:ed:02:2a:d3:49:2e:10:9d:8c:7a:b5: 67:9f:1d:03:82:c8:15:f3:50:4b:96:12:40:d0:35: a8:28:f2:6f:56:96:10:82:34:77:c2:08:f8:0e:64: ac:75:e6:8a:e2:9c:46:b1:20:79:a9:31:42:63:61: e9:b3:c0:06:23:23:05:fa:c9:42:7f:cc:0f:01:3d: 14:05:7a:4c:ec:13:a2:c4:02:3e:37:79:c8:01:31: db:e4:4e:7f:6d:a2:9c:75:43:7d:59:ec:39:18:3a: 8d:ce:4c:3e:05:87:ce:fb:71:ae:35:36:4f:85:77: 9a:f1:79:5d:e4:84:f5:15:81:d3:d8:47:35:0a:09: e3:1a:cb:5e:ff:d6:51:0b:fd:68:79:79:38:3c:ea: 31:0d:7d:dd:a7:b7:b8:20:da:fd:69:77:d4:dd:2b: 0d:63:c7:15:13:ea:23:c0:01:98:41:3f:36:cc:60: 27:0b:d5:ea:79:4f:d7:ae:19:3f:7f:b3:c0:e7:61: aa:9c:1a:35:28:3f:15:79:6a:5c:fc:2c:f9:b2:03: 7b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:CB:1E:7B:29:34:3C:03:58:83:F4:28:14:B2:D1:64:92:F2:0C:F9 X509v3 Authority Key Identifier: keyid:D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:b5:31:c8:71:9d:74:d1:0a:aa:75:41:4d:a0:4c:ce:ce:ac: e7:16:d1:a1:cc:85:bf:42:f9:32:4d:91:19:2f:5f:a7:e7:d1: d3:13:bc:d6:dd:98:52:76:ec:21:fa:0a:76:a6:37:91:2a:38: b8:cc:9c:a7:75:3d:db:47:17:a5:c3:00:da:f8:75:49:cb:50: 7f:46:03:79:bc:e6:6d:de:bb:49:88:7c:9f:c8:70:ac:57:56: 68:ee:79:e9:d1:cd:da:ac:2b:4f:f2:36:b3:b2:a8:c1:28:43: e5:a2:51:e0:6a:08:ee:f7:4f:22:42:d7:3b:5a:34:d4:23:59: e7:a2:4b:77:31:a3:2b:cb:ab:25:32:22:fa:d1:55:16:83:77: 18:48:70:f3:52:b2:70:4b:b3:a0:87:92:eb:04:73:71:d8:7a: 75:d4:0a:f6:3c:29:be:5c:0b:22:36:2d:fe:fe:98:24:f5:25: d5:76:6a:7a:77:c5:ed:7b:94:53:ba:0c:8c:0d:92:86:6e:09: 94:43:a7:1f:35:c1:61:76:ad:20:4e:23:8c:e0:43:7b:4a:01: 18:34:a0:f0:aa:8a:bf:b2:8b:e4:b6:17:a4:24:ef:f9:ed:79: 9e:d4:f4:0d:2a:ac:cb:62:85:90:8e:ce:bd:86:2e:36:f7:fb: 8e:8e:60:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vrpKOLkIA3NDa8zD9UWbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MTYyMDlkN2RlZjk4YTJiYjM0OTc3ZjY1MDA5YjM1MjBk YTI1NmUwHhcNMjYwMTI1MjAwMDUzWhcNMjYwMTI2MjAwMDUzWjAzMTEwLwYDVQQD EygyYmNiMWU3YjI5MzQzYzAzNTg4M2Y0MjgxNGIyZDE2NDkyZjIwY2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyOVq9UHQllTKMqjcnsVHQfmHbij IgupFoV/8WeRqphqZWAD+2BtTrRkwI0wvdqn7QIq00kuEJ2MerVnnx0DgsgV81BL lhJA0DWoKPJvVpYQgjR3wgj4DmSsdeaK4pxGsSB5qTFCY2Hps8AGIyMF+slCf8wP AT0UBXpM7BOixAI+N3nIATHb5E5/baKcdUN9Wew5GDqNzkw+BYfO+3GuNTZPhXea 8Xld5IT1FYHT2Ec1CgnjGste/9ZRC/1oeXk4POoxDX3dp7e4INr9aXfU3SsNY8cV E+ojwAGYQT82zGAnC9XqeU/Xrhk/f7PA52GqnBo1KD8VeWpc/Cz5sgN7VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCvLHnspNDwDWIP0KBSy0WSS8gz5MB8GA1UdIwQY MBaAFNcWIJ1975iiuzSXf2UAmzUg2iVuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXhZZ25YM3ZtS0s3TkpkX1pRQ2JOU0RhSlc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9iNTJlMDItM2FmOC00ZWJiLTk5ZDMt ODUxZDljMDQ0ZTcwLzEvMXhZZ25YM3ZtS0s3TkpkX1pRQ2JOU0RhSlc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9iNTJlMDItM2FmOC00ZWJiLTk5ZDMtODUxZDljMDQ0ZTcw LzEvMXhZZ25YM3ZtS0s3TkpkX1pRQ2JOU0RhSlc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPbUxyHGd dNEKqnVBTaBMzs6s5xbRocyFv0L5Mk2RGS9fp+fR0xO81t2YUnbsIfoKdqY3kSo4 uMycp3U920cXpcMA2vh1SctQf0YDebzmbd67SYh8n8hwrFdWaO556dHN2qwrT/I2 s7KowShD5aJR4GoI7vdPIkLXO1o01CNZ56JLdzGjK8urJTIi+tFVFoN3GEhw81Ky cEuzoIeS6wRzcdh6ddQK9jwpvlwLIjYt/v6YJPUl1XZqenfF7XuUU7oMjA2Shm4J lEOnHzXBYXatIE4jjOBDe0oBGDSg8KqKv7KL5LYXpCTv+e15ntT0DSqsy2KFkI7O vYYuNvf7jo5gbg== -----END CERTIFICATE-----Generated at Mon Jan 26 02:32:43 2026 by rpki-client