This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.mft File: m1WmQjec5XjznsDRBgPc-oP2404.mft (raw, json) Hash identifier: JixTsEz7uRtzhS2mc+CszjfWGrbgiBfs9GfepkaySaY= Subject key identifier: 8A:7B:BB:D1:2F:E9:E3:06:1E:2F:91:F8:07:3F:04:B7:73:60:50:27 Authority key identifier: 9B:55:A6:42:37:9C:E5:78:F3:9E:C0:D1:06:03:DC:FA:83:F6:E3:4E Certificate issuer: /CN=9b55a642379ce578f39ec0d10603dcfa83f6e34e Certificate serial: 019BF72CA19051285C20F5857AB632FAD915 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1WmQjec5XjznsDRBgPc-oP2404.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.mft Manifest number: 13CA Signing time: Sun 25 Jan 2026 22:00:55 +0000 Manifest this update: Sun 25 Jan 2026 22:00:55 +0000 Manifest next update: Mon 26 Jan 2026 22:00:55 +0000 Files and hashes: 1: m1WmQjec5XjznsDRBgPc-oP2404.crl (hash: 1Cql/7fKN5ejJrcycrCytiXZbjiENhz+4EfzgEDw0QY=) 2: uvET6Zdbf1uExwxmzflEOezn8Rc.roa (hash: OoCVZM5zRZmB6p+N+tNq0XseSeQIYStS8UgtYXAi4Xk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.crl rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.mft rsync://rpki.ripe.net/repository/DEFAULT/m1WmQjec5XjznsDRBgPc-oP2404.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:a1:90:51:28:5c:20:f5:85:7a:b6:32:fa:d9:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b55a642379ce578f39ec0d10603dcfa83f6e34e Validity Not Before: Jan 25 22:00:55 2026 GMT Not After : Jan 26 22:00:55 2026 GMT Subject: CN=8a7bbbd12fe9e3061e2f91f8073f04b773605027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1a:74:91:8a:05:ac:f7:54:11:97:a1:0d:25: 0b:eb:28:1d:19:cd:14:40:e8:c8:a1:75:a0:9a:d7: 3c:f6:91:f5:85:90:bc:40:5f:aa:20:03:a4:f5:94: 36:b4:3d:37:64:82:d8:01:a4:a0:8f:4b:92:b9:54: fb:28:e7:22:9f:f9:fb:cf:b9:06:d2:6d:46:87:28: a0:c6:04:f9:60:35:12:03:a7:fa:15:e8:a9:0e:59: aa:ed:98:e2:b5:b3:79:54:d8:32:d0:b8:17:f4:13: 74:83:a0:94:ea:81:08:42:6b:14:d7:f0:d5:79:74: d6:8e:2a:75:e9:38:3b:b5:fe:c1:4e:3b:d0:dc:d3: 86:58:32:2f:4d:6f:b5:87:2d:68:63:89:63:cb:9f: eb:0b:f3:83:02:9b:ca:d9:d8:99:ad:44:b3:fa:8e: b6:a5:5b:53:b0:84:26:8a:74:29:99:b5:5a:a9:e4: fc:05:9a:6f:66:84:2b:a9:a0:5a:42:6f:1a:26:5f: 3a:cd:e6:22:2a:8e:90:0b:8a:b0:81:cd:93:49:94: a3:8d:f8:66:5d:04:d6:a4:7d:ee:a4:ef:94:3e:df: 1e:95:59:a0:14:b6:17:53:40:4f:86:11:be:be:2b: d0:b0:0f:a3:92:dd:11:fb:a7:af:22:78:81:7b:17: df:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:7B:BB:D1:2F:E9:E3:06:1E:2F:91:F8:07:3F:04:B7:73:60:50:27 X509v3 Authority Key Identifier: keyid:9B:55:A6:42:37:9C:E5:78:F3:9E:C0:D1:06:03:DC:FA:83:F6:E3:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1WmQjec5XjznsDRBgPc-oP2404.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:37:25:04:1b:db:02:6d:5b:db:76:3d:65:f1:18:d7:55:66: 39:c0:98:ab:e5:98:29:06:44:77:aa:1a:c9:71:f9:25:10:9a: 00:7e:db:e8:f9:52:27:e2:8c:80:86:f2:4b:e9:7e:ee:08:dc: 0b:cb:02:d3:39:df:6d:eb:fa:78:2e:b1:da:af:f8:34:f5:a1: ac:f0:4b:ee:dc:e9:65:96:83:ab:ea:a2:35:a4:42:61:f5:1a: 92:33:5e:88:52:3e:bb:a9:1d:a5:22:04:19:3b:82:a8:ba:7a: c6:02:14:d2:4c:f5:3f:fc:92:d3:5a:aa:53:f5:e6:03:82:d1: 24:a2:dc:f0:c2:4c:43:e0:b6:06:10:b1:76:d5:d6:ec:8f:96: 3f:7c:cb:9a:24:d0:e3:14:a2:1f:37:d1:7c:ac:84:b6:58:84: 92:12:50:ba:c1:4d:a3:20:89:8b:78:92:c1:21:49:9b:7a:85: a0:ff:e9:bf:de:e2:eb:2d:11:99:60:0d:1e:82:36:a1:27:e6: e7:bd:93:be:d9:16:5b:e7:ed:a7:4d:1c:0f:db:a7:ff:11:76: 80:b9:d9:6d:09:11:38:ca:db:90:14:63:cf:7b:3b:90:de:e6: 37:60:c8:2a:f0:6c:aa:78:7d:c7:e7:a7:97:ff:a1:f7:02:a7: c9:b8:9c:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LKGQUShcIPWFerYy+tkVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliNTVhNjQyMzc5Y2U1NzhmMzllYzBkMTA2MDNkY2ZhODNm NmUzNGUwHhcNMjYwMTI1MjIwMDU1WhcNMjYwMTI2MjIwMDU1WjAzMTEwLwYDVQQD Eyg4YTdiYmJkMTJmZTllMzA2MWUyZjkxZjgwNzNmMDRiNzczNjA1MDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhp0kYoFrPdUEZehDSUL6ygdGc0U QOjIoXWgmtc89pH1hZC8QF+qIAOk9ZQ2tD03ZILYAaSgj0uSuVT7KOcin/n7z7kG 0m1GhyigxgT5YDUSA6f6FeipDlmq7ZjitbN5VNgy0LgX9BN0g6CU6oEIQmsU1/DV eXTWjip16Tg7tf7BTjvQ3NOGWDIvTW+1hy1oY4ljy5/rC/ODApvK2diZrUSz+o62 pVtTsIQminQpmbVaqeT8BZpvZoQrqaBaQm8aJl86zeYiKo6QC4qwgc2TSZSjjfhm XQTWpH3upO+UPt8elVmgFLYXU0BPhhG+vivQsA+jkt0R+6evIniBexffMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIp7u9Ev6eMGHi+R+Ac/BLdzYFAnMB8GA1UdIwQY MBaAFJtVpkI3nOV4857A0QYD3PqD9uNOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTFXbVFqZWM1WGp6bnNEUkJnUGMtb1AyNDA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9iZTkyYjUtNTcxNy00MDQ2LWFjMWMt ODIyMmUyNTFhOTFiLzEvbTFXbVFqZWM1WGp6bnNEUkJnUGMtb1AyNDA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9iZTkyYjUtNTcxNy00MDQ2LWFjMWMtODIyMmUyNTFhOTFi LzEvbTFXbVFqZWM1WGp6bnNEUkJnUGMtb1AyNDA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcDclBBvb Am1b23Y9ZfEY11VmOcCYq+WYKQZEd6oayXH5JRCaAH7b6PlSJ+KMgIbyS+l+7gjc C8sC0znfbev6eC6x2q/4NPWhrPBL7tzpZZaDq+qiNaRCYfUakjNeiFI+u6kdpSIE GTuCqLp6xgIU0kz1P/yS01qqU/XmA4LRJKLc8MJMQ+C2BhCxdtXW7I+WP3zLmiTQ 4xSiHzfRfKyEtliEkhJQusFNoyCJi3iSwSFJm3qFoP/pv97i6y0RmWANHoI2oSfm 572TvtkWW+ftp00cD9un/xF2gLnZbQkROMrbkBRjz3s7kN7mN2DIKvBsqnh9x+en l/+h9wKnybicGg== -----END CERTIFICATE-----Generated at Mon Jan 26 04:02:34 2026 by rpki-client