This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/48e976-3707-4685-a5f9-961b78d9d4bc/1/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.mft File: 1-tvmWyj_JWZ0CczmNb4Jbj5t78o.mft (raw, json) Hash identifier: NSMk1xryJthIN9IfvwKlO3hADjsDM5pLlh0PQOu7SF4= Subject key identifier: 03:76:02:7D:E1:C0:49:44:D3:3C:31:34:80:0A:5B:17:31:BB:E2:BA Authority key identifier: FA:DB:E6:5B:28:FF:25:66:74:09:CC:E6:35:BE:09:6E:3E:6D:EF:CA Certificate issuer: /CN=fadbe65b28ff25667409cce635be096e3e6defca Certificate serial: 019BF5ACA6C6B91FA0C27889A7037171995F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/48e976-3707-4685-a5f9-961b78d9d4bc/1/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.mft Manifest number: 0875 Signing time: Sun 25 Jan 2026 15:01:31 +0000 Manifest this update: Sun 25 Jan 2026 15:01:31 +0000 Manifest next update: Mon 26 Jan 2026 15:01:31 +0000 Files and hashes: 1: 1-tvmWyj_JWZ0CczmNb4Jbj5t78o.crl (hash: qARR0an3oN3kYlco8iNcd1HzJs3Q21t9tM6exo4uCeQ=) 2: fLaxsW89f11aQKq9KNmjn6zptGA.roa (hash: HbgZ5Aywh4i4Y3ASONqgQY+RDwgBhWmFhWjC2EBV7i4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/48e976-3707-4685-a5f9-961b78d9d4bc/1/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/48e976-3707-4685-a5f9-961b78d9d4bc/1/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.mft rsync://rpki.ripe.net/repository/DEFAULT/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:a6:c6:b9:1f:a0:c2:78:89:a7:03:71:71:99:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fadbe65b28ff25667409cce635be096e3e6defca Validity Not Before: Jan 25 15:01:31 2026 GMT Not After : Jan 26 15:01:31 2026 GMT Subject: CN=0376027de1c04944d33c3134800a5b1731bbe2ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fe:26:3e:44:07:cb:a1:a7:57:6e:da:8c:1b: b7:3c:15:f5:37:0a:75:8a:91:64:34:5c:ec:fc:bc: ab:23:36:92:af:51:87:70:b8:bc:e2:f2:af:e1:f3: d6:81:15:44:31:3f:c8:ac:21:ba:f4:11:b7:a5:49: c3:32:66:ad:12:f2:75:74:38:e3:f1:f2:4d:c5:79: d9:42:7f:d9:19:f5:ea:e2:0f:ea:06:c0:c4:d4:cc: 8d:91:5a:f1:33:54:c1:c6:8f:2e:c0:3f:9a:69:0d: 05:ce:5d:f3:fc:c0:bb:ac:fd:a0:de:ec:4b:2a:96: 92:17:e9:bb:7d:c7:a5:4b:a0:64:52:0d:eb:ea:bb: 91:61:a9:6e:fb:19:ce:bd:44:1c:41:3a:b0:49:1a: 33:76:b5:8c:a5:ec:ae:d9:a9:42:d4:88:fe:56:98: 38:50:a1:b9:08:b2:9a:b1:62:e5:0f:d9:fe:36:9b: c4:d1:93:fe:86:29:cf:52:d4:b6:bd:c7:c2:fd:59: 87:b7:b2:0e:c4:ec:db:b9:d1:c5:15:e0:0c:34:d0: 21:b7:ff:41:b7:e3:a5:85:d9:c8:82:b6:24:23:a7: 06:6d:31:a3:f8:5e:7f:a8:f1:46:3b:ae:ef:79:bf: 0c:f1:5c:bc:66:33:9a:31:d5:0b:26:74:33:ad:2d: ea:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:76:02:7D:E1:C0:49:44:D3:3C:31:34:80:0A:5B:17:31:BB:E2:BA X509v3 Authority Key Identifier: keyid:FA:DB:E6:5B:28:FF:25:66:74:09:CC:E6:35:BE:09:6E:3E:6D:EF:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48e976-3707-4685-a5f9-961b78d9d4bc/1/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48e976-3707-4685-a5f9-961b78d9d4bc/1/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:07:c1:db:d6:36:41:92:02:a6:9e:46:8a:99:eb:07:02:dd: 37:90:d2:20:a7:47:18:87:31:97:24:3a:17:3d:3c:f6:71:f2: 2c:31:82:49:51:52:e4:38:0e:bf:b6:5c:49:18:8b:51:6b:29: 5e:1b:80:81:bd:ec:2f:d1:23:72:35:98:71:43:03:a9:79:6b: 65:54:24:5d:92:4f:3e:e4:f5:38:1a:cd:dd:65:27:fb:e7:23: 45:e7:de:2a:d8:93:7e:52:01:f3:0b:2f:8b:00:25:ee:11:c0: 88:d0:2e:fb:39:6b:4d:4c:b7:03:74:8d:56:9c:ee:c7:5c:e6: ed:9e:1c:60:c7:95:90:02:0c:a1:b6:f2:bd:2f:06:5c:0e:69: 35:91:a0:87:a5:09:3d:e0:e3:a6:50:97:9b:b8:55:c9:d9:e0: 67:c8:2c:21:c5:74:11:73:02:26:42:cb:d6:15:1f:d1:63:69: f8:b3:e7:7e:7d:9e:8d:80:42:71:51:aa:f0:de:5c:67:b5:9e: 1f:8c:a9:cc:31:23:ae:a3:9a:08:b0:64:d1:0a:f1:f2:96:19: 11:6a:fd:87:fd:88:7c:86:99:a8:46:1b:e1:7b:f8:be:7c:5e: 9a:fa:a9:b9:d3:79:ff:21:9b:d5:69:86:6a:52:f2:45:92:64: 12:ec:99:c3 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZv1rKbGuR+gwniJpwNxcZlfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZGJlNjViMjhmZjI1NjY3NDA5Y2NlNjM1YmUwOTZlM2U2 ZGVmY2EwHhcNMjYwMTI1MTUwMTMxWhcNMjYwMTI2MTUwMTMxWjAzMTEwLwYDVQQD EygwMzc2MDI3ZGUxYzA0OTQ0ZDMzYzMxMzQ4MDBhNWIxNzMxYmJlMmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAov4mPkQHy6GnV27ajBu3PBX1Nwp1 ipFkNFzs/LyrIzaSr1GHcLi84vKv4fPWgRVEMT/IrCG69BG3pUnDMmatEvJ1dDjj 8fJNxXnZQn/ZGfXq4g/qBsDE1MyNkVrxM1TBxo8uwD+aaQ0Fzl3z/MC7rP2g3uxL KpaSF+m7fcelS6BkUg3r6ruRYalu+xnOvUQcQTqwSRozdrWMpeyu2alC1Ij+Vpg4 UKG5CLKasWLlD9n+NpvE0ZP+hinPUtS2vcfC/VmHt7IOxOzbudHFFeAMNNAht/9B t+OlhdnIgrYkI6cGbTGj+F5/qPFGO67veb8M8Vy8ZjOaMdULJnQzrS3qMQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFAN2An3hwElE0zwxNIAKWxcxu+K6MB8GA1UdIwQY MBaAFPrb5lso/yVmdAnM5jW+CW4+be/KMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS10dm1XeWpfSldaMENjem1OYjRKYmo1dDc4by5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2MvNDhlOTc2LTM3MDctNDY4NS1hNWY5 LTk2MWI3OGQ5ZDRiYy8xLzEtdHZtV3lqX0pXWjBDY3ptTmI0SmJqNXQ3OG8ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzdjLzQ4ZTk3Ni0zNzA3LTQ2ODUtYTVmOS05NjFiNzhkOWQ0 YmMvMS8xLXR2bVd5al9KV1owQ2N6bU5iNEpiajV0NzhvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlQfB 29Y2QZICpp5GipnrBwLdN5DSIKdHGIcxlyQ6Fz089nHyLDGCSVFS5DgOv7ZcSRiL UWspXhuAgb3sL9EjcjWYcUMDqXlrZVQkXZJPPuT1OBrN3WUn++cjRefeKtiTflIB 8wsviwAl7hHAiNAu+zlrTUy3A3SNVpzux1zm7Z4cYMeVkAIMobbyvS8GXA5pNZGg h6UJPeDjplCXm7hVydngZ8gsIcV0EXMCJkLL1hUf0WNp+LPnfn2ejYBCcVGq8N5c Z7WeH4ypzDEjrqOaCLBk0Qrx8pYZEWr9h/2IfIaZqEYb4Xv4vnxemvqpudN5/yGb 1WmGalLyRZJkEuyZww== -----END CERTIFICATE-----Generated at Sun Jan 25 23:40:12 2026 by rpki-client