This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft File: 1PkhKd96qnFX4VlzwkdT4RjJBX0.mft (raw, json) Hash identifier: KTYlDWsutQXytovtKr2hT+muwnX82GsoUw4GK7oVSys= Subject key identifier: 5A:59:03:CF:55:88:F1:85:36:20:92:01:7F:75:8A:36:76:DA:64:7E Authority key identifier: D4:F9:21:29:DF:7A:AA:71:57:E1:59:73:C2:47:53:E1:18:C9:05:7D Certificate issuer: /CN=d4f92129df7aaa7157e15973c24753e118c9057d Certificate serial: 019BF6885674F1764A57A69E032A4D5924A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 19:01:28 +0000 Manifest this update: Sun 25 Jan 2026 19:01:28 +0000 Manifest next update: Mon 26 Jan 2026 19:01:28 +0000 Files and hashes: 1: 1PkhKd96qnFX4VlzwkdT4RjJBX0.crl (hash: EKfC+kJptIAzwklI2Q2V6NJ/qSqiyKxofHO2Oe4nhJM=) 2: 8Tyh5ruhIODg2RR4YRbwOH8XkME.roa (hash: VBVgrtmipcOaFwOKV8gkhl228HGa/1vfo6eAsTB8ty4=) 3: xc2N92zCzE8dOyiUB1DKEECW9u0.roa (hash: zdTFoZAtDppROLcUt1HO+ZMDOiFUGUnqXWfKYmpZP6k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.crl rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:88:56:74:f1:76:4a:57:a6:9e:03:2a:4d:59:24:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4f92129df7aaa7157e15973c24753e118c9057d Validity Not Before: Jan 25 19:01:28 2026 GMT Not After : Jan 26 19:01:28 2026 GMT Subject: CN=5a5903cf5588f185362092017f758a3676da647e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:57:24:44:e0:ca:11:1d:f5:0e:4d:95:a4:c2: 3a:13:d8:73:91:db:c4:dc:34:21:07:2f:e7:7b:10: 8c:e4:63:b1:b2:0a:88:2e:10:c9:96:6d:7b:35:28: e8:14:b1:b0:90:6f:bc:cb:fa:9d:dc:91:a7:59:71: 96:15:48:cc:2a:51:e2:54:2a:7c:4c:0c:ea:b9:b9: 40:4e:91:22:3b:21:81:86:a2:0b:bc:7d:ed:81:5b: 02:04:53:b0:fd:55:83:19:ee:a9:77:67:ea:53:ac: 0f:a1:10:c4:2f:80:9f:87:f6:b9:7d:f8:ba:d6:be: ee:e4:eb:bd:66:10:a1:5e:08:8c:07:ab:3f:ba:cf: c4:6d:ba:cf:45:63:cf:34:3e:73:41:e9:f8:de:84: 43:c1:b3:7e:6a:76:c3:00:57:11:23:1a:ee:bb:b6: f8:1c:d4:fb:ed:2b:76:07:62:4b:cd:96:83:a6:2a: ae:05:8e:0c:e3:e5:f2:a4:20:d9:0e:76:39:67:89: 80:cd:d0:f0:07:81:d3:1b:22:6a:da:59:05:46:86: d8:20:70:99:fa:c3:05:6c:07:41:7b:e5:d1:e1:db: f9:64:00:06:61:5f:0b:ef:4c:af:16:ed:27:a5:cb: a2:7d:1c:30:b6:56:89:b2:c0:be:3f:21:46:4a:b6: dd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:59:03:CF:55:88:F1:85:36:20:92:01:7F:75:8A:36:76:DA:64:7E X509v3 Authority Key Identifier: keyid:D4:F9:21:29:DF:7A:AA:71:57:E1:59:73:C2:47:53:E1:18:C9:05:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:cb:ec:ff:dd:6b:0c:78:48:a3:31:e3:0f:26:40:cf:3d:d2: 1a:a5:3d:dd:7a:9f:7d:b6:4a:c4:4f:a5:c3:33:94:75:d8:71: 20:eb:64:42:23:7e:b3:1e:ba:ea:30:c9:05:2f:0e:45:0c:e6: 73:a8:eb:1a:6b:cb:2e:44:e8:23:70:d0:78:25:23:64:fa:ea: 70:0f:92:98:b9:39:6d:68:02:c9:d0:7e:4b:2c:ba:e3:7f:72: cc:19:39:ea:75:8d:52:c7:c2:79:9f:c1:6a:aa:45:b5:2e:1e: eb:d6:fc:23:5f:44:4a:7d:83:35:2a:83:6f:2e:a6:c4:e7:03: 06:ae:f2:ec:9e:70:b5:40:d6:c0:51:27:79:f8:09:20:4d:36: d1:61:1d:77:ff:6a:09:5b:a6:fd:9c:0a:0e:7d:11:5d:ff:1a: 3a:4b:45:65:bb:ce:0c:65:2a:7f:21:4e:6e:c9:98:f6:de:b0: 7a:ee:7c:ce:7f:ae:7b:61:d8:7e:12:ac:2a:44:5d:2d:2b:b9: 0e:8e:7e:e9:3a:01:1c:94:5d:37:7d:9f:a5:76:ac:79:44:3c: cd:0a:d8:52:8a:91:08:7a:dc:e0:d3:69:7e:4a:59:45:d8:14: 8d:0b:db:d9:73:91:f1:af:00:41:2e:01:e1:7e:6b:6d:ca:34: 22:89:75:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2iFZ08XZKV6aeAypNWSSkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ZjkyMTI5ZGY3YWFhNzE1N2UxNTk3M2MyNDc1M2UxMThj OTA1N2QwHhcNMjYwMTI1MTkwMTI4WhcNMjYwMTI2MTkwMTI4WjAzMTEwLwYDVQQD Eyg1YTU5MDNjZjU1ODhmMTg1MzYyMDkyMDE3Zjc1OGEzNjc2ZGE2NDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1ckRODKER31Dk2VpMI6E9hzkdvE 3DQhBy/nexCM5GOxsgqILhDJlm17NSjoFLGwkG+8y/qd3JGnWXGWFUjMKlHiVCp8 TAzqublATpEiOyGBhqILvH3tgVsCBFOw/VWDGe6pd2fqU6wPoRDEL4Cfh/a5ffi6 1r7u5Ou9ZhChXgiMB6s/us/EbbrPRWPPND5zQen43oRDwbN+anbDAFcRIxruu7b4 HNT77St2B2JLzZaDpiquBY4M4+XypCDZDnY5Z4mAzdDwB4HTGyJq2lkFRobYIHCZ +sMFbAdBe+XR4dv5ZAAGYV8L70yvFu0npcuifRwwtlaJssC+PyFGSrbdQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFpZA89ViPGFNiCSAX91ijZ22mR+MB8GA1UdIwQY MBaAFNT5ISnfeqpxV+FZc8JHU+EYyQV9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVBraEtkOTZxbkZYNFZsendrZFQ0UmpKQlgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC85Y2ZlNWQtNTc3MC00YjVkLTg5MzUt OWYzOGM4YjhhOTI4LzEvMVBraEtkOTZxbkZYNFZsendrZFQ0UmpKQlgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC85Y2ZlNWQtNTc3MC00YjVkLTg5MzUtOWYzOGM4YjhhOTI4 LzEvMVBraEtkOTZxbkZYNFZsendrZFQ0UmpKQlgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwcvs/91r DHhIozHjDyZAzz3SGqU93XqffbZKxE+lwzOUddhxIOtkQiN+sx666jDJBS8ORQzm c6jrGmvLLkToI3DQeCUjZPrqcA+SmLk5bWgCydB+Syy6439yzBk56nWNUsfCeZ/B aqpFtS4e69b8I19ESn2DNSqDby6mxOcDBq7y7J5wtUDWwFEnefgJIE020WEdd/9q CVum/ZwKDn0RXf8aOktFZbvODGUqfyFObsmY9t6weu58zn+ue2HYfhKsKkRdLSu5 Do5+6ToBHJRdN32fpXaseUQ8zQrYUoqRCHrc4NNpfkpZRdgUjQvb2XOR8a8AQS4B 4X5rbco0Iol1PQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:01:07 2026 by rpki-client