This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft File: 1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft (raw, json) Hash identifier: uzlUEMw3fvXTDq5ZaB/Rw2/p8GXm8EL/5t9e2M0w/ck= Subject key identifier: D3:04:DD:5E:D0:9C:72:05:D0:D0:25:15:11:06:0A:6D:E2:F1:80:B0 Authority key identifier: FA:57:55:76:2D:FE:4C:70:CD:83:B3:0A:13:B7:82:C4:FF:C1:5F:5A Certificate issuer: /CN=fa5755762dfe4c70cd83b30a13b782c4ffc15f5a Certificate serial: 019BF6F5E3D68B9FD1BAB65C322E8BC3C2D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ldVdi3-THDNg7MKE7eCxP_BX1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft Manifest number: 014E Signing time: Sun 25 Jan 2026 21:01:08 +0000 Manifest this update: Sun 25 Jan 2026 21:01:08 +0000 Manifest next update: Mon 26 Jan 2026 21:01:08 +0000 Files and hashes: 1: 1-ldVdi3-THDNg7MKE7eCxP_BX1o.crl (hash: /wF29VssbvRb/K8esz+xPaPrPw4g7kauBLZmNSteHj8=) 2: pDA7nhW3yNSdUeX1KR6FhLMPZZY.roa (hash: ZZ1m4P8j+XlJcdrV7Ome2UFD4l54PQHH5x2pAoymEag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft rsync://rpki.ripe.net/repository/DEFAULT/1-ldVdi3-THDNg7MKE7eCxP_BX1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:e3:d6:8b:9f:d1:ba:b6:5c:32:2e:8b:c3:c2:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa5755762dfe4c70cd83b30a13b782c4ffc15f5a Validity Not Before: Jan 25 21:01:08 2026 GMT Not After : Jan 26 21:01:08 2026 GMT Subject: CN=d304dd5ed09c7205d0d0251511060a6de2f180b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a8:e2:dc:60:25:76:8c:79:ee:f0:d7:8b:9b: e8:53:f5:61:55:2f:34:e8:fe:c6:3b:eb:5d:08:52: b7:58:d9:f5:e4:1e:77:e2:6f:aa:17:a2:81:71:fb: 90:fc:cd:d2:61:9f:1c:75:d1:92:0a:88:a4:9c:46: b7:e0:db:7f:65:bb:00:53:fe:63:2d:50:70:15:56: f2:5f:cd:7e:41:6a:4f:2d:b1:fb:3e:46:ff:4b:ed: 14:f0:af:46:4a:9e:1e:b9:14:62:d9:ba:17:88:2b: f3:2c:be:88:a3:f5:41:e6:a4:ff:52:4c:f0:56:e1: 89:9f:14:60:8c:01:b3:41:9d:65:b9:44:24:9e:24: 38:d0:0f:9e:d7:86:46:9e:44:c8:2f:3c:ce:96:ca: 87:c6:12:8f:b1:b9:b6:9c:8f:73:42:a9:a5:98:31: a7:58:8d:e6:49:fd:26:7f:1d:2e:99:ce:d9:ae:2d: 54:93:d5:4b:68:b2:46:99:cf:59:4b:b4:22:f2:58: 8a:e8:0c:b0:6f:13:5b:67:8d:fe:cf:90:6c:fd:86: d0:ec:8d:7f:b8:53:12:6a:9a:f3:73:34:14:04:a8: a5:2d:13:a1:c6:a4:9b:27:a9:a3:b7:42:bc:34:60: 87:4e:0b:35:e7:c3:3d:ae:e8:20:83:94:99:69:74: 89:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:04:DD:5E:D0:9C:72:05:D0:D0:25:15:11:06:0A:6D:E2:F1:80:B0 X509v3 Authority Key Identifier: keyid:FA:57:55:76:2D:FE:4C:70:CD:83:B3:0A:13:B7:82:C4:FF:C1:5F:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ldVdi3-THDNg7MKE7eCxP_BX1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:e6:28:92:f1:77:00:79:d8:b6:c8:44:0d:e8:ff:60:1c:27: c2:bd:92:05:8d:78:4b:1a:52:20:9b:42:35:18:3c:1c:70:b8: 67:94:80:be:27:bc:a1:93:83:75:3d:a4:43:3e:cb:af:d1:e1: e8:3d:cb:00:ba:b5:0d:c8:b9:70:86:22:18:ef:aa:11:8d:ad: 87:7b:77:ee:91:53:51:ad:a2:d2:89:7a:c0:25:04:2a:d2:ac: bb:c7:c0:f2:e8:17:65:17:40:f0:e4:71:98:00:3e:72:30:b9: 02:81:cb:f9:6c:25:d8:35:68:b3:f3:bf:d4:c4:7a:e6:3f:b2: 54:31:0b:72:0a:97:b6:f6:fe:90:a7:fe:e4:02:78:04:79:b8: 4b:09:6f:1a:c7:61:bf:e8:d2:e8:a5:65:d4:21:11:12:d5:29: 68:78:9d:69:ab:d5:29:63:47:e1:97:0a:34:c7:3a:51:f9:3b: 5f:4d:a9:ea:fa:69:20:f5:ed:c3:f3:d5:f9:1b:36:08:e8:29: d4:90:1b:68:70:56:aa:b9:88:13:93:e9:80:12:0a:f9:f0:bf: 2e:e9:3f:25:44:72:88:38:64:19:d8:c0:4c:a6:1f:39:63:4e: 79:0a:6a:e2:c9:3c:aa:4b:23:aa:5d:54:1b:1b:0e:37:81:08: bc:1f:26:34 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZv29ePWi5/RurZcMi6Lw8LZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNTc1NTc2MmRmZTRjNzBjZDgzYjMwYTEzYjc4MmM0ZmZj MTVmNWEwHhcNMjYwMTI1MjEwMTA4WhcNMjYwMTI2MjEwMTA4WjAzMTEwLwYDVQQD EyhkMzA0ZGQ1ZWQwOWM3MjA1ZDBkMDI1MTUxMTA2MGE2ZGUyZjE4MGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKji3GAldox57vDXi5voU/VhVS80 6P7GO+tdCFK3WNn15B534m+qF6KBcfuQ/M3SYZ8cddGSCoiknEa34Nt/ZbsAU/5j LVBwFVbyX81+QWpPLbH7Pkb/S+0U8K9GSp4euRRi2boXiCvzLL6Io/VB5qT/Ukzw VuGJnxRgjAGzQZ1luUQkniQ40A+e14ZGnkTILzzOlsqHxhKPsbm2nI9zQqmlmDGn WI3mSf0mfx0umc7Zri1Uk9VLaLJGmc9ZS7Qi8liK6AywbxNbZ43+z5Bs/YbQ7I1/ uFMSaprzczQUBKilLROhxqSbJ6mjt0K8NGCHTgs158M9ruggg5SZaXSJ6wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFNME3V7QnHIF0NAlFREGCm3i8YCwMB8GA1UdIwQY MBaAFPpXVXYt/kxwzYOzChO3gsT/wV9aMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1sZFZkaTMtVEhETmc3TUtFN2VDeFBfQlgxby5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvZDU5MjQ2LTk1M2UtNDIzYS05NzA0 LTkzMTQxNDEwMWEwMS8xLzEtbGRWZGkzLVRIRE5nN01LRTdlQ3hQX0JYMW8ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzdiL2Q1OTI0Ni05NTNlLTQyM2EtOTcwNC05MzE0MTQxMDFh MDEvMS8xLWxkVmRpMy1USEROZzdNS0U3ZUN4UF9CWDFvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWuYo kvF3AHnYtshEDej/YBwnwr2SBY14SxpSIJtCNRg8HHC4Z5SAvie8oZODdT2kQz7L r9Hh6D3LALq1Dci5cIYiGO+qEY2th3t37pFTUa2i0ol6wCUEKtKsu8fA8ugXZRdA 8ORxmAA+cjC5AoHL+Wwl2DVos/O/1MR65j+yVDELcgqXtvb+kKf+5AJ4BHm4Swlv Gsdhv+jS6KVl1CEREtUpaHidaavVKWNH4ZcKNMc6Ufk7X02p6vppIPXtw/PV+Rs2 COgp1JAbaHBWqrmIE5PpgBIK+fC/Luk/JURyiDhkGdjATKYfOWNOeQpq4sk8qksj ql1UGxsON4EIvB8mNA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:32:54 2026 by rpki-client