This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft File: 1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft (raw, json) Hash identifier: TSkLoIHp0gdN7dIVrkSh0d3EBvcH+wFE8W2rIxi6iI0= Subject key identifier: C3:D5:35:0C:80:BF:DE:36:2F:F1:1F:13:88:FD:A3:03:3F:E9:4C:0C Authority key identifier: FA:C0:F0:DA:39:A2:2A:79:F8:0C:1F:37:9B:66:8B:90:F6:D7:47:08 Certificate issuer: /CN=fac0f0da39a22a79f80c1f379b668b90f6d74708 Certificate serial: 019BF49949758E0D4F47BBA90CDDD261CBF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sDw2jmiKnn4DB83m2aLkPbXRwg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft Manifest number: 17E7 Signing time: Sun 25 Jan 2026 10:00:44 +0000 Manifest this update: Sun 25 Jan 2026 10:00:44 +0000 Manifest next update: Mon 26 Jan 2026 10:00:44 +0000 Files and hashes: 1: 1-sDw2jmiKnn4DB83m2aLkPbXRwg.crl (hash: w0FA6rl+kpI4cEMLRma4RIIQpWkYDDuoX10uurhcFow=) 2: LN5u4cKF-NhDcGbejtHvD1zpxbQ.roa (hash: V/xKYLBS6IcpbpVkKJK+eiXs78SdG87M/X8zt2P0C70=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.crl rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sDw2jmiKnn4DB83m2aLkPbXRwg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:49:75:8e:0d:4f:47:bb:a9:0c:dd:d2:61:cb:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fac0f0da39a22a79f80c1f379b668b90f6d74708 Validity Not Before: Jan 25 10:00:44 2026 GMT Not After : Jan 26 10:00:44 2026 GMT Subject: CN=c3d5350c80bfde362ff11f1388fda3033fe94c0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a0:8f:61:77:07:87:4d:ed:4a:27:71:28:43: 37:97:6f:0c:ab:f7:b4:de:e6:35:98:07:7a:7a:de: d1:86:a5:48:d0:2a:69:ac:7c:c5:70:5a:f3:11:e9: c4:f0:79:4a:15:23:ae:62:93:15:d8:cd:6e:16:d0: 06:ae:4a:f4:15:7e:c5:7e:3c:7c:3d:62:8b:5b:23: 51:cf:0d:86:f3:9d:d5:ed:42:4a:8a:11:46:f7:12: d6:17:5b:20:84:be:47:91:b9:98:67:40:60:1e:f2: ff:e4:6c:21:f0:5d:a7:12:1c:de:fc:08:e6:e5:42: f7:7c:ea:b8:c8:98:67:a8:08:4f:36:19:35:a0:70: 39:22:51:c2:c0:fb:e9:17:b7:a2:bb:3e:21:f9:6c: c7:e2:6f:8e:67:a1:2a:6a:dd:6b:8d:a4:6c:06:35: fe:db:cd:e7:fb:26:09:a2:cf:03:a7:ab:3c:19:1f: bb:58:ed:14:5d:3d:71:16:ac:74:00:b4:bd:e4:99: a1:ba:2f:53:08:11:b0:2b:b6:43:aa:56:fe:5d:97: b4:cf:98:15:d3:b4:ef:86:0b:ef:7d:3e:2a:b0:91: 4e:84:06:cb:0b:ab:86:8f:fd:35:e5:a5:9c:cf:f3: 69:8e:4c:24:be:af:9e:6f:8b:56:25:81:2d:a6:4e: 7a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D5:35:0C:80:BF:DE:36:2F:F1:1F:13:88:FD:A3:03:3F:E9:4C:0C X509v3 Authority Key Identifier: keyid:FA:C0:F0:DA:39:A2:2A:79:F8:0C:1F:37:9B:66:8B:90:F6:D7:47:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sDw2jmiKnn4DB83m2aLkPbXRwg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:39:f3:7e:72:a6:f1:70:81:b7:87:be:fc:12:11:5a:45:40: e7:6f:2e:c2:0c:00:81:ec:7e:fd:e8:d1:c8:56:21:2b:f6:40: fb:7c:37:1b:8e:5a:88:f7:3b:a5:de:03:97:5c:1b:d8:88:9c: 8e:12:11:4b:44:76:3b:af:9b:d9:a2:80:ff:eb:86:d0:f1:99: 53:c2:7e:04:1f:5d:1b:22:bc:fa:38:ca:7c:f9:13:d9:7b:6a: 76:ac:aa:37:4a:64:e4:b3:d2:6b:39:f7:7a:3d:cf:0a:b4:af: 11:bb:7e:73:b9:dc:2e:49:ef:5f:50:e8:f4:be:04:26:bd:ed: 66:af:12:db:43:6d:0c:6f:63:14:08:a3:70:03:70:a7:8a:ed: d9:ee:f7:76:ca:1a:c3:16:f4:a8:15:e4:73:c2:29:b6:ea:d8: 06:e3:44:f1:65:a3:9d:c4:41:13:e8:4b:fe:3a:c3:35:fc:b9: b0:d6:06:19:f1:e3:2a:ee:71:ea:95:0d:4f:8e:4a:df:28:e2: 3b:7a:84:1c:b8:23:90:41:c6:21:97:3f:f0:12:37:46:48:73: e0:55:b8:84:84:97:2e:ad:88:e3:67:59:48:39:2f:29:86:5e: 26:83:9f:4b:50:cd:79:af:9b:b7:1e:c1:9d:78:c2:94:c0:84: 8a:10:0d:ed -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZv0mUl1jg1PR7upDN3SYcvwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhYzBmMGRhMzlhMjJhNzlmODBjMWYzNzliNjY4YjkwZjZk NzQ3MDgwHhcNMjYwMTI1MTAwMDQ0WhcNMjYwMTI2MTAwMDQ0WjAzMTEwLwYDVQQD EyhjM2Q1MzUwYzgwYmZkZTM2MmZmMTFmMTM4OGZkYTMwMzNmZTk0YzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06CPYXcHh03tSidxKEM3l28Mq/e0 3uY1mAd6et7RhqVI0CpprHzFcFrzEenE8HlKFSOuYpMV2M1uFtAGrkr0FX7Ffjx8 PWKLWyNRzw2G853V7UJKihFG9xLWF1sghL5HkbmYZ0BgHvL/5Gwh8F2nEhze/Ajm 5UL3fOq4yJhnqAhPNhk1oHA5IlHCwPvpF7eiuz4h+WzH4m+OZ6Eqat1rjaRsBjX+ 283n+yYJos8Dp6s8GR+7WO0UXT1xFqx0ALS95Jmhui9TCBGwK7ZDqlb+XZe0z5gV 07TvhgvvfT4qsJFOhAbLC6uGj/015aWcz/Npjkwkvq+eb4tWJYEtpk563QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFMPVNQyAv942L/EfE4j9owM/6UwMMB8GA1UdIwQY MBaAFPrA8No5oip5+AwfN5tmi5D210cIMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1zRHcyam1pS25uNERCODNtMmFMa1BiWFJ3Zy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODgvODZlZDViLWJjYzEtNGQwMy05NWRh LWI5OWQ0ZDAwZjgzMS8xLzEtc0R3MmptaUtubjREQjgzbTJhTGtQYlhSd2cubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzg4Lzg2ZWQ1Yi1iY2MxLTRkMDMtOTVkYS1iOTlkNGQwMGY4 MzEvMS8xLXNEdzJqbWlLbm40REI4M20yYUxrUGJYUndnLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiznz fnKm8XCBt4e+/BIRWkVA528uwgwAgex+/ejRyFYhK/ZA+3w3G45aiPc7pd4Dl1wb 2IicjhIRS0R2O6+b2aKA/+uG0PGZU8J+BB9dGyK8+jjKfPkT2XtqdqyqN0pk5LPS azn3ej3PCrSvEbt+c7ncLknvX1Do9L4EJr3tZq8S20NtDG9jFAijcANwp4rt2e73 dsoawxb0qBXkc8IpturYBuNE8WWjncRBE+hL/jrDNfy5sNYGGfHjKu5x6pUNT45K 3yjiO3qEHLgjkEHGIZc/8BI3Rkhz4FW4hISXLq2I42dZSDkvKYZeJoOfS1DNea+b tx7BnXjClMCEihAN7Q== -----END CERTIFICATE-----Generated at Sun Jan 25 17:51:48 2026 by rpki-client