This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft File: 1-A4BfPFxFRmw_59lhYxJGy-l1As.mft (raw, json) Hash identifier: /A3TIJqNfZqwe8Njpm2t5ss8fZCvR/dMdQqNQM7+gsw= Subject key identifier: E1:CD:80:CC:0A:5E:2C:80:88:26:8A:42:2D:6A:3C:73:7C:C8:C3:B9 Authority key identifier: F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B Certificate issuer: /CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b Certificate serial: 019BF6BE9AEC75F74A7C719D4FFECB45C727 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft Manifest number: 13BC Signing time: Sun 25 Jan 2026 20:00:45 +0000 Manifest this update: Sun 25 Jan 2026 20:00:45 +0000 Manifest next update: Mon 26 Jan 2026 20:00:45 +0000 Files and hashes: 1: 1-A4BfPFxFRmw_59lhYxJGy-l1As.crl (hash: pW3q3zP7Nv5GxOptYFdtn4guP4ywX/nLnxHRDjIdbMI=) 2: 8umYqKkmet5xd-0fIbeiYVgQ7FA.roa (hash: v/CUAHtjhSU0aoLwfnOz3uF4/xB1kAd8kz1X1QEYG8w=) 3: IQZgisUvqq6AOXyb4Rxfqw_msJ8.roa (hash: 4T4CN7TKv+CMYzGbaTe2HA/gr50fscRLXntOxAqEXZQ=) 4: QjniU9JKY3uxyaTTaMZxDIsoq0g.roa (hash: 3apOmupnDVjN1GZ9mnQi2/rmvUPEGD+OAOsFa+YiBwY=) 5: Y29egXPiMsW9V8mMeno5f1i_DA0.roa (hash: nkloI1U6cBcEsHKtfEkrQxaSlfy9yDL70Etn0mEQzrQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:9a:ec:75:f7:4a:7c:71:9d:4f:fe:cb:45:c7:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b Validity Not Before: Jan 25 20:00:45 2026 GMT Not After : Jan 26 20:00:45 2026 GMT Subject: CN=e1cd80cc0a5e2c8088268a422d6a3c737cc8c3b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e3:9a:61:6d:b8:8b:e4:db:3c:80:50:2f:7f: 1c:54:29:bd:40:e6:01:95:ff:9c:9e:d8:4c:f4:ce: 00:71:24:a4:f1:2d:11:a5:ac:b7:8a:0e:8d:cd:09: f4:99:5d:17:da:b1:0a:1f:5b:2b:77:8f:4c:ca:bf: ef:cf:d7:df:f4:b3:ed:91:4d:fe:85:31:76:ed:db: 74:90:df:98:40:2b:fd:93:13:d0:ea:3a:14:3e:16: 44:29:ab:b7:a9:75:e3:6f:79:1f:b2:ac:35:b6:40: 99:9e:66:71:93:9e:4c:d2:0a:6c:45:92:ed:fd:25: 91:19:e1:b3:be:eb:29:76:16:10:81:77:c5:7c:d8: 3a:ec:e0:5e:24:bf:dc:8b:8a:dc:73:04:3b:a2:27: 18:ee:4a:3c:0b:b9:74:cf:58:7c:3e:c0:65:ee:e7: 3a:9a:2c:16:da:e5:db:39:de:67:0e:38:9d:68:bf: c1:6f:b7:31:63:c8:68:ea:38:2c:07:86:34:0d:ed: a0:88:92:3b:23:c4:3d:d1:a7:bc:1b:9b:3d:a9:07: e7:0f:8c:0b:b5:5b:09:f3:60:d4:32:c6:5e:9e:91: 85:d6:40:96:e2:0d:8f:2b:c1:e2:f4:46:ce:8d:da: 12:7b:84:9d:d5:63:11:1a:81:71:80:3f:f1:9c:fa: aa:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:CD:80:CC:0A:5E:2C:80:88:26:8A:42:2D:6A:3C:73:7C:C8:C3:B9 X509v3 Authority Key Identifier: keyid:F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:f8:a3:98:03:3c:2c:72:cf:75:9d:ec:6d:b1:fa:24:f8:95: fc:0b:98:a4:42:1f:ba:f3:c3:5e:0f:a3:b4:2f:f6:31:f8:4d: 47:49:ad:59:9c:8d:9b:20:41:27:2d:dc:fb:72:bd:67:c1:dd: 95:22:f5:d2:ed:d3:ad:d9:24:52:5b:fe:06:93:4c:d2:6f:fa: 26:56:12:9b:bc:9e:fe:3e:1f:84:0e:56:3b:5f:ed:1a:03:1e: dc:7b:b0:61:eb:e8:3b:f1:4e:0d:b0:19:b8:04:e2:a2:3c:a9: dd:b6:6f:dc:86:7f:73:65:07:7d:dc:06:1a:c3:5f:f6:c6:27: 08:8e:bb:b1:b2:d8:4e:c3:c0:b1:15:6e:f1:59:45:eb:cf:2c: 6d:52:bd:7d:2c:2c:bc:01:5b:c2:59:2d:5f:26:22:4e:07:20: bb:7a:bb:f5:1e:ab:21:d4:5e:1f:f5:e3:f1:74:0b:66:d1:99: 32:52:11:63:a0:fc:3e:78:49:e6:5c:02:96:3d:f2:e8:3d:64: 11:be:c6:7b:a5:bc:ff:10:e7:82:fc:77:d9:ad:8b:de:b0:a8: 82:76:4b:1c:0a:1b:d0:11:3f:a5:26:c4:6b:35:6b:72:42:82: b8:41:3b:9a:13:ac:76:11:0c:90:1c:cf:b6:57:b8:b1:8d:38: 8c:64:6d:48 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZv2vprsdfdKfHGdT/7LRccnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MGUwMTdjZjE3MTE1MTliMGZmOWY2NTg1OGM0OTFiMmZh NWQ0MGIwHhcNMjYwMTI1MjAwMDQ1WhcNMjYwMTI2MjAwMDQ1WjAzMTEwLwYDVQQD EyhlMWNkODBjYzBhNWUyYzgwODgyNjhhNDIyZDZhM2M3MzdjYzhjM2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveOaYW24i+TbPIBQL38cVCm9QOYB lf+cnthM9M4AcSSk8S0Rpay3ig6NzQn0mV0X2rEKH1srd49Myr/vz9ff9LPtkU3+ hTF27dt0kN+YQCv9kxPQ6joUPhZEKau3qXXjb3kfsqw1tkCZnmZxk55M0gpsRZLt /SWRGeGzvuspdhYQgXfFfNg67OBeJL/ci4rccwQ7oicY7ko8C7l0z1h8PsBl7uc6 miwW2uXbOd5nDjidaL/Bb7cxY8ho6jgsB4Y0De2giJI7I8Q90ae8G5s9qQfnD4wL tVsJ82DUMsZenpGF1kCW4g2PK8Hi9EbOjdoSe4Sd1WMRGoFxgD/xnPqqkQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFOHNgMwKXiyAiCaKQi1qPHN8yMO5MB8GA1UdIwQY MBaAFPgOAXzxcRUZsP+fZYWMSRsvpdQLMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1BNEJmUEZ4RlJtd181OWxoWXhKR3ktbDFBcy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODcvMmRjMTM2LTQwMGQtNDBlNy1hZDg2 LThjZTYwYTVjOGIxZi8xLzEtQTRCZlBGeEZSbXdfNTlsaFl4Skd5LWwxQXMubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzg3LzJkYzEzNi00MDBkLTQwZTctYWQ4Ni04Y2U2MGE1Yzhi MWYvMS8xLUE0QmZQRnhGUm13XzU5bGhZeEpHeS1sMUFzLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn/ij mAM8LHLPdZ3sbbH6JPiV/AuYpEIfuvPDXg+jtC/2MfhNR0mtWZyNmyBBJy3c+3K9 Z8HdlSL10u3TrdkkUlv+BpNM0m/6JlYSm7ye/j4fhA5WO1/tGgMe3HuwYevoO/FO DbAZuATiojyp3bZv3IZ/c2UHfdwGGsNf9sYnCI67sbLYTsPAsRVu8VlF688sbVK9 fSwsvAFbwlktXyYiTgcgu3q79R6rIdReH/Xj8XQLZtGZMlIRY6D8PnhJ5lwClj3y 6D1kEb7Ge6W8/xDngvx32a2L3rCognZLHAob0BE/pSbEazVrckKCuEE7mhOsdhEM kBzPtle4sY04jGRtSA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:11:46 2026 by rpki-client