This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft File: 1Cq3jtp78B2VtZd07TRry_lqJoQ.mft (raw, json) Hash identifier: hNzkxHngIHdo4xdJ/iyXSuy/JdeswF7NVidqo3oXAYE= Subject key identifier: 68:83:15:16:DC:6A:B2:7A:20:35:04:E3:81:5B:86:DE:73:45:3C:D6 Authority key identifier: D4:2A:B7:8E:DA:7B:F0:1D:95:B5:97:74:ED:34:6B:CB:F9:6A:26:84 Certificate issuer: /CN=d42ab78eda7bf01d95b59774ed346bcbf96a2684 Certificate serial: 019BF5E38B8A62FA62A5938365273CBDCD41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Cq3jtp78B2VtZd07TRry_lqJoQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft Manifest number: 0837 Signing time: Sun 25 Jan 2026 16:01:28 +0000 Manifest this update: Sun 25 Jan 2026 16:01:28 +0000 Manifest next update: Mon 26 Jan 2026 16:01:28 +0000 Files and hashes: 1: 1Cq3jtp78B2VtZd07TRry_lqJoQ.crl (hash: Gaz8ixoVleC9KrtqX897M2pJLr8MAMJ/KLzTT/5vfTc=) 2: 2yhdKHvPD6x57cR2KCiWvDWOuNI.roa (hash: P8G4fD653ANAlH3OwS5YzFRY2dEK5yZI+P33CF+4huY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.crl rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1Cq3jtp78B2VtZd07TRry_lqJoQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:8b:8a:62:fa:62:a5:93:83:65:27:3c:bd:cd:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d42ab78eda7bf01d95b59774ed346bcbf96a2684 Validity Not Before: Jan 25 16:01:28 2026 GMT Not After : Jan 26 16:01:28 2026 GMT Subject: CN=68831516dc6ab27a203504e3815b86de73453cd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a6:52:fa:a9:00:7b:5d:b4:54:01:2c:92:6d: 61:00:6e:7d:f5:cc:a2:da:17:7f:bc:25:c1:6d:11: d0:ef:8e:40:bb:e7:a9:a4:84:f4:13:1a:d3:4c:7d: 75:25:2e:08:7e:00:b4:f2:92:e0:2b:23:71:94:4c: bb:94:5c:75:1c:37:67:26:3e:45:b9:14:77:1a:02: 8c:ac:0f:53:38:2d:66:16:84:8b:2f:a4:5c:70:ae: 4e:1c:86:09:7d:9b:4f:45:ea:2d:81:ae:d5:6c:66: 78:68:a3:8b:72:dd:2a:fa:b6:5a:89:a4:9b:f5:39: e0:db:f1:5e:96:c6:cd:33:0d:0a:dd:bd:5c:f5:4d: 0a:d0:7e:1d:61:46:24:c6:bb:d9:8c:da:0d:4b:1a: 24:5b:f6:92:f9:18:b0:01:16:9c:db:88:01:9d:6a: c6:87:95:00:71:d7:17:11:9c:77:b0:7c:96:fd:26: 71:46:ba:35:e7:27:d3:82:c1:fb:c4:28:ca:76:c2: 7c:eb:ad:d3:19:d2:47:83:d5:f1:4f:c4:49:a0:ba: f8:93:54:1a:a7:0e:db:49:bd:9f:aa:66:c2:97:69: 25:80:7e:a0:e1:53:93:02:8f:3f:2a:78:6d:65:16: 07:34:5f:fc:82:5e:c1:3e:9b:c2:5e:0f:8b:57:6a: 75:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:83:15:16:DC:6A:B2:7A:20:35:04:E3:81:5B:86:DE:73:45:3C:D6 X509v3 Authority Key Identifier: keyid:D4:2A:B7:8E:DA:7B:F0:1D:95:B5:97:74:ED:34:6B:CB:F9:6A:26:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Cq3jtp78B2VtZd07TRry_lqJoQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:77:2e:98:22:08:f1:3c:e0:92:91:b3:52:4d:8f:27:b7:27: 76:cb:36:e1:50:1e:74:17:b1:81:f1:d3:a7:69:33:a3:f5:64: f8:38:e0:f1:76:4e:74:75:37:cf:b1:f1:01:db:9c:bb:bb:f0: c9:cc:f4:4e:04:f3:1c:61:d5:17:ad:24:26:86:8e:f6:79:b5: 27:fa:64:b0:d2:e6:b4:e2:67:8d:f1:5e:20:c0:32:88:a6:44: cb:0d:b0:36:c3:99:79:da:c7:63:9d:20:76:19:ad:37:74:4d: b1:3b:55:11:eb:f7:a7:01:3e:5e:d5:da:a5:71:d0:10:85:84: ab:f0:d5:87:e7:20:8e:0f:5c:80:d7:7d:0a:6b:62:3f:3b:69: 5d:2b:95:ff:6e:53:2f:3f:f2:6d:bf:b3:99:94:12:14:5c:9e: b0:51:d7:59:ad:19:52:4c:f7:c7:61:75:16:b1:92:8f:c2:1b: 61:a6:4f:2b:04:22:ad:cf:7a:21:bc:7c:e5:05:e8:9c:f0:90: e6:ac:f8:ba:2f:cf:17:ab:18:75:12:c6:12:64:ce:a7:5e:21: c4:f2:62:83:68:dc:25:7d:61:a3:19:f0:98:bf:17:f9:0c:5e: 95:6f:cc:e9:36:52:f5:9d:32:32:db:8a:4a:f6:df:f9:75:d2: 96:6b:5e:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv144uKYvpipZODZSc8vc1BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MmFiNzhlZGE3YmYwMWQ5NWI1OTc3NGVkMzQ2YmNiZjk2 YTI2ODQwHhcNMjYwMTI1MTYwMTI4WhcNMjYwMTI2MTYwMTI4WjAzMTEwLwYDVQQD Eyg2ODgzMTUxNmRjNmFiMjdhMjAzNTA0ZTM4MTViODZkZTczNDUzY2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qZS+qkAe120VAEskm1hAG599cyi 2hd/vCXBbRHQ745Au+eppIT0ExrTTH11JS4IfgC08pLgKyNxlEy7lFx1HDdnJj5F uRR3GgKMrA9TOC1mFoSLL6RccK5OHIYJfZtPReotga7VbGZ4aKOLct0q+rZaiaSb 9Tng2/FelsbNMw0K3b1c9U0K0H4dYUYkxrvZjNoNSxokW/aS+RiwARac24gBnWrG h5UAcdcXEZx3sHyW/SZxRro15yfTgsH7xCjKdsJ8663TGdJHg9XxT8RJoLr4k1Qa pw7bSb2fqmbCl2klgH6g4VOTAo8/KnhtZRYHNF/8gl7BPpvCXg+LV2p1UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGiDFRbcarJ6IDUE44Fbht5zRTzWMB8GA1UdIwQY MBaAFNQqt47ae/AdlbWXdO00a8v5aiaEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUNxM2p0cDc4QjJWdFpkMDdUUnJ5X2xxSm9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi82NDRhMDAtMmQ4Yi00NzI1LWI1Y2Et OTAxMmJlYWUyODUyLzEvMUNxM2p0cDc4QjJWdFpkMDdUUnJ5X2xxSm9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi82NDRhMDAtMmQ4Yi00NzI1LWI1Y2EtOTAxMmJlYWUyODUy LzEvMUNxM2p0cDc4QjJWdFpkMDdUUnJ5X2xxSm9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY3cumCII 8TzgkpGzUk2PJ7cndss24VAedBexgfHTp2kzo/Vk+Djg8XZOdHU3z7HxAducu7vw ycz0TgTzHGHVF60kJoaO9nm1J/pksNLmtOJnjfFeIMAyiKZEyw2wNsOZedrHY50g dhmtN3RNsTtVEev3pwE+XtXapXHQEIWEq/DVh+cgjg9cgNd9CmtiPztpXSuV/25T Lz/ybb+zmZQSFFyesFHXWa0ZUkz3x2F1FrGSj8IbYaZPKwQirc96Ibx85QXonPCQ 5qz4ui/PF6sYdRLGEmTOp14hxPJig2jcJX1hoxnwmL8X+QxelW/M6TZS9Z0yMtuK Svbf+XXSlmteCw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:19:30 2026 by rpki-client