This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft File: 1-KMdLu62epN-LofXatn50Xzal_A.mft (raw, json) Hash identifier: bAFGBKzJboTv0LgZFbI+luKPwJF6n1T363dXhcuUuzA= Subject key identifier: 83:E9:D1:02:E0:B6:D0:51:EF:FA:64:C1:F1:AC:62:D6:CC:83:23:95 Authority key identifier: F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0 Certificate issuer: /CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0 Certificate serial: 019BF2E22701D13728B9C793BE68020F6B50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft Manifest number: 0F87 Signing time: Sun 25 Jan 2026 02:01:05 +0000 Manifest this update: Sun 25 Jan 2026 02:01:05 +0000 Manifest next update: Mon 26 Jan 2026 02:01:05 +0000 Files and hashes: 1: 1-KMdLu62epN-LofXatn50Xzal_A.crl (hash: tY+cnsn+ti+BrtOBghSAk2zIIaI5lAloXgmPaXdmoIU=) 2: SOEMdBmGOl9OdgU6wRKXH8ofpiw.roa (hash: wRDPax/GBrg9//RtAKm4t39dVaYciZWJGLWscmkRs9k=) 3: bS5Jm8ZE-sVj1o36QwkjwTi3nSQ.roa (hash: HkP3HjP3l5NouDXiG5SFRZ81aMR3ohNIO6a1Rp53MSU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:e2:27:01:d1:37:28:b9:c7:93:be:68:02:0f:6b:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0 Validity Not Before: Jan 25 02:01:05 2026 GMT Not After : Jan 26 02:01:05 2026 GMT Subject: CN=83e9d102e0b6d051effa64c1f1ac62d6cc832395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5c:2a:8b:12:8d:85:b7:72:ee:69:46:ff:87: 8a:9a:3e:13:35:aa:4e:27:67:8c:45:ae:c9:d2:9b: 8d:3f:ea:a9:26:0f:14:5f:22:02:38:b4:5c:1a:30: 69:2b:0a:37:7c:1d:d3:ff:ad:35:21:ad:dd:d7:7a: 5d:17:1d:f8:d2:be:26:80:c0:e0:ef:2e:3c:82:d1: f3:a0:7c:78:2b:d1:30:3b:93:f4:96:86:50:57:b1: 3b:a5:9c:b1:6b:2b:ea:f8:d4:9f:09:3b:87:fb:56: cd:31:f3:89:9c:1e:3d:0d:3a:eb:1f:da:69:40:1e: 0c:be:55:7a:fb:b6:64:ef:86:09:40:f9:89:14:c1: 0a:6a:c1:79:e0:70:34:fa:48:32:e4:15:c7:31:53: ad:73:44:1c:e1:a9:5d:04:f8:37:46:b3:9e:07:aa: 62:69:53:51:77:89:95:8b:15:33:d2:96:19:07:29: b6:bc:fa:3d:6a:2b:a1:43:b1:e8:70:eb:4c:86:18: b6:4a:fb:b1:16:57:db:b8:24:14:2b:3a:4f:19:78: 6c:18:4f:e6:da:e3:a8:3a:c5:df:a7:64:5f:68:15: 49:8c:39:c2:13:d5:65:8e:a5:c7:a1:27:7f:e4:05: 07:35:47:f9:ab:b4:5c:b0:13:1e:d9:ed:8b:9e:12: d3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:E9:D1:02:E0:B6:D0:51:EF:FA:64:C1:F1:AC:62:D6:CC:83:23:95 X509v3 Authority Key Identifier: keyid:F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:3a:b5:18:fa:1f:37:9d:e5:3a:19:07:5e:5c:ef:cd:f2:4c: 5d:1a:51:4f:42:da:4b:f0:fe:5a:fb:9f:8e:cd:0c:6e:70:94: 15:0c:dd:c1:f0:c6:40:19:0a:41:96:65:c3:9d:c6:06:77:65: 98:c8:5c:c5:04:32:ea:12:2e:cb:3f:90:9f:57:62:4f:ea:09: 7b:fb:71:84:ef:93:1d:6f:e0:55:ae:53:cd:3d:b2:8d:e9:34: 09:cb:78:c9:98:be:4d:a4:fe:77:07:a2:95:2c:9a:1f:67:fe: 26:bf:ca:24:4d:c7:40:2d:bc:6c:3b:37:df:2b:a4:4d:7f:e7: ac:37:a2:42:89:ca:fc:6e:97:fc:94:c2:b3:58:01:4c:eb:c8: ce:e8:3f:6d:87:27:d5:a0:e8:a9:9e:2b:21:65:63:16:9b:8e: b3:8a:b7:87:6f:45:60:4a:65:c4:f4:07:36:51:dd:a8:d3:b4: 7f:ca:c5:5c:38:f8:d0:4c:70:dc:54:ce:69:f9:2d:3a:38:3b: 6e:a5:6e:68:b9:1f:b5:f4:5a:e6:bb:51:c1:82:d1:f3:6d:75: ee:93:38:f9:5f:89:9d:71:30:bf:83:a8:9e:f2:38:5d:82:56: 2b:da:c0:b7:d5:7b:c4:e5:41:d3:31:b4:e1:f7:95:37:03:79: db:33:d7:ef -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZvy4icB0TcouceTvmgCD2tQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YTMxZDJlZWViNjdhOTM3ZTJlODdkNzZhZDlmOWQxN2Nk YTk3ZjAwHhcNMjYwMTI1MDIwMTA1WhcNMjYwMTI2MDIwMTA1WjAzMTEwLwYDVQQD Eyg4M2U5ZDEwMmUwYjZkMDUxZWZmYTY0YzFmMWFjNjJkNmNjODMyMzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlwqixKNhbdy7mlG/4eKmj4TNapO J2eMRa7J0puNP+qpJg8UXyICOLRcGjBpKwo3fB3T/601Ia3d13pdFx340r4mgMDg 7y48gtHzoHx4K9EwO5P0loZQV7E7pZyxayvq+NSfCTuH+1bNMfOJnB49DTrrH9pp QB4MvlV6+7Zk74YJQPmJFMEKasF54HA0+kgy5BXHMVOtc0Qc4aldBPg3RrOeB6pi aVNRd4mVixUz0pYZBym2vPo9aiuhQ7HocOtMhhi2SvuxFlfbuCQUKzpPGXhsGE/m 2uOoOsXfp2RfaBVJjDnCE9VljqXHoSd/5AUHNUf5q7RcsBMe2e2LnhLTGQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFIPp0QLgttBR7/pkwfGsYtbMgyOVMB8GA1UdIwQY MBaAFPijHS7utnqTfi6H12rZ+dF82pfwMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LTWRMdTYyZXBOLUxvZlhhdG41MFh6YWxfQS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvODg2NjQ2LWZmYWEtNDAwZS04ZGY2 LTU5NWYyMTAwMTY2Yi8xLzEtS01kTHU2MmVwTi1Mb2ZYYXRuNTBYemFsX0EubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzdiLzg4NjY0Ni1mZmFhLTQwMGUtOGRmNi01OTVmMjEwMDE2 NmIvMS8xLUtNZEx1NjJlcE4tTG9mWGF0bjUwWHphbF9BLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWzq1 GPofN53lOhkHXlzvzfJMXRpRT0LaS/D+Wvufjs0MbnCUFQzdwfDGQBkKQZZlw53G BndlmMhcxQQy6hIuyz+Qn1diT+oJe/txhO+THW/gVa5TzT2yjek0Cct4yZi+TaT+ dweilSyaH2f+Jr/KJE3HQC28bDs33yukTX/nrDeiQonK/G6X/JTCs1gBTOvIzug/ bYcn1aDoqZ4rIWVjFpuOs4q3h29FYEplxPQHNlHdqNO0f8rFXDj40Exw3FTOafkt Ojg7bqVuaLkftfRa5rtRwYLR82117pM4+V+JnXEwv4OonvI4XYJWK9rAt9V7xOVB 0zG04feVNwN52zPX7w== -----END CERTIFICATE-----Generated at Sun Jan 25 12:39:36 2026 by rpki-client