This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft File: 0L1Mp_MxqirZEkCmWDoXbABeimM.mft (raw, json) Hash identifier: j40Ednbm0nXSaB6nfBQ3II1tZq6qgCSGyTH3jDGqetw= Subject key identifier: D6:27:4B:73:D3:62:93:91:C6:59:71:8D:29:EB:2F:9A:25:14:51:A2 Authority key identifier: D0:BD:4C:A7:F3:31:AA:2A:D9:12:40:A6:58:3A:17:6C:00:5E:8A:63 Certificate issuer: /CN=d0bd4ca7f331aa2ad91240a6583a176c005e8a63 Certificate serial: 019BF80821CBCDD56EA4B55C0FB91503D129 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0L1Mp_MxqirZEkCmWDoXbABeimM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft Manifest number: 0DB4 Signing time: Mon 26 Jan 2026 02:00:41 +0000 Manifest this update: Mon 26 Jan 2026 02:00:41 +0000 Manifest next update: Tue 27 Jan 2026 02:00:41 +0000 Files and hashes: 1: 0L1Mp_MxqirZEkCmWDoXbABeimM.crl (hash: JWMF3CLhQeKOo7epzXjurP/KDvkT7dYNcMdIA6ocPiw=) 2: SxTqFSaVYKNp7RXjp-9P-WYLFPk.roa (hash: ZmAlezL/eOxIgz3wvBspKHt49atyoUhtEGugoI4vkno=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft rsync://rpki.ripe.net/repository/DEFAULT/0L1Mp_MxqirZEkCmWDoXbABeimM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:21:cb:cd:d5:6e:a4:b5:5c:0f:b9:15:03:d1:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0bd4ca7f331aa2ad91240a6583a176c005e8a63 Validity Not Before: Jan 26 02:00:41 2026 GMT Not After : Jan 27 02:00:41 2026 GMT Subject: CN=d6274b73d3629391c659718d29eb2f9a251451a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b1:10:c1:38:9d:38:17:e1:10:43:f8:ac:e5: 29:2d:0a:9b:0f:95:4b:8f:b8:67:af:aa:47:90:c7: f0:f7:cc:a5:03:cb:73:59:67:f1:91:20:58:85:c0: 9d:1a:ce:87:30:9b:ae:9c:93:87:3a:95:c6:fd:fb: 4e:47:36:60:b7:d0:2e:4c:3e:61:fb:76:2c:79:95: c1:8f:ec:1a:6b:3d:9f:ac:5b:0c:a2:9a:85:0a:2e: fc:9b:39:4c:76:7f:06:18:b7:8a:85:6b:4c:39:26: b4:5b:23:0f:29:05:7e:19:09:9e:25:bc:ac:90:a5: c0:13:f1:a3:3f:ee:21:98:91:b5:f1:56:f7:95:1d: 30:4d:59:26:4f:28:ae:b8:98:39:1d:27:70:f7:74: 87:02:36:22:eb:8b:04:b8:84:a6:3f:24:26:11:34: d7:ff:7f:53:e8:84:10:3a:5b:77:35:4a:ec:75:5c: e9:a3:fe:b9:3b:13:27:84:e4:cb:ff:5c:f4:ac:16: a6:59:e6:73:e0:c7:4e:5e:85:d6:4f:5f:8c:d6:1f: 3f:b0:0b:c3:45:63:df:c8:5f:82:06:b3:b8:5a:fb: cd:85:3e:04:34:4b:63:4a:1f:1d:4a:59:d0:33:e0: 01:83:25:4f:b8:23:5f:8c:2b:db:af:be:6c:49:11: 26:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:27:4B:73:D3:62:93:91:C6:59:71:8D:29:EB:2F:9A:25:14:51:A2 X509v3 Authority Key Identifier: keyid:D0:BD:4C:A7:F3:31:AA:2A:D9:12:40:A6:58:3A:17:6C:00:5E:8A:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0L1Mp_MxqirZEkCmWDoXbABeimM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:81:11:72:b4:2f:80:68:cc:fa:1e:9d:8f:b6:53:32:82:05: 9d:1b:1c:2b:7a:02:c9:10:19:6b:11:6a:4d:7d:0f:09:9f:65: 97:8c:06:27:a3:fd:4f:d5:95:32:69:67:f5:cc:08:9d:5d:34: 42:dc:16:7c:e4:99:7b:26:31:1c:64:c3:3b:b3:9e:01:42:e0: 0f:b1:b2:9c:12:cf:96:26:c4:5d:ed:13:53:a4:ec:8d:f6:eb: 81:a4:69:52:b8:fb:94:a9:96:a7:50:cb:77:3b:86:64:7e:c2: 5e:98:be:06:e3:b9:8c:67:df:d4:cf:56:47:ec:48:e0:c0:cb: b6:89:2e:e2:ae:14:09:27:a1:75:1b:2e:fa:0f:f8:03:29:08: 1a:d3:33:ea:5f:75:6b:11:b0:99:eb:04:e6:44:b3:1e:a1:1a: 0b:b6:7e:9a:44:ad:20:79:25:ba:d2:07:ed:d4:89:b6:4b:45: 61:d6:8e:1b:9d:4d:c5:d5:78:f3:05:81:3e:ce:71:0c:14:da: bf:31:07:ce:95:b8:2f:c0:a2:c9:04:0b:33:db:af:6e:1d:5f: 3e:e1:f8:e7:8e:04:ec:fb:61:55:f0:63:1b:b7:4e:44:5c:55: 2d:c9:7b:92:09:af:fb:b9:5b:9f:fc:f0:e1:d6:f7:b5:68:f3: 2d:8b:64:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CCHLzdVupLVcD7kVA9EpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwYmQ0Y2E3ZjMzMWFhMmFkOTEyNDBhNjU4M2ExNzZjMDA1 ZThhNjMwHhcNMjYwMTI2MDIwMDQxWhcNMjYwMTI3MDIwMDQxWjAzMTEwLwYDVQQD EyhkNjI3NGI3M2QzNjI5MzkxYzY1OTcxOGQyOWViMmY5YTI1MTQ1MWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrEQwTidOBfhEEP4rOUpLQqbD5VL j7hnr6pHkMfw98ylA8tzWWfxkSBYhcCdGs6HMJuunJOHOpXG/ftORzZgt9AuTD5h +3YseZXBj+waaz2frFsMopqFCi78mzlMdn8GGLeKhWtMOSa0WyMPKQV+GQmeJbys kKXAE/GjP+4hmJG18Vb3lR0wTVkmTyiuuJg5HSdw93SHAjYi64sEuISmPyQmETTX /39T6IQQOlt3NUrsdVzpo/65OxMnhOTL/1z0rBamWeZz4MdOXoXWT1+M1h8/sAvD RWPfyF+CBrO4WvvNhT4ENEtjSh8dSlnQM+ABgyVPuCNfjCvbr75sSREm/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNYnS3PTYpORxllxjSnrL5olFFGiMB8GA1UdIwQY MBaAFNC9TKfzMaoq2RJAplg6F2wAXopjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEwxTXBfTXhxaXJaRWtDbVdEb1hiQUJlaW1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8xZDk0NDAtY2VlOC00MzgzLWIwYTAt ZTBiNWE5MmRmOTQwLzEvMEwxTXBfTXhxaXJaRWtDbVdEb1hiQUJlaW1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC8xZDk0NDAtY2VlOC00MzgzLWIwYTAtZTBiNWE5MmRmOTQw LzEvMEwxTXBfTXhxaXJaRWtDbVdEb1hiQUJlaW1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEIERcrQv gGjM+h6dj7ZTMoIFnRscK3oCyRAZaxFqTX0PCZ9ll4wGJ6P9T9WVMmln9cwInV00 QtwWfOSZeyYxHGTDO7OeAULgD7GynBLPlibEXe0TU6TsjfbrgaRpUrj7lKmWp1DL dzuGZH7CXpi+BuO5jGff1M9WR+xI4MDLtoku4q4UCSehdRsu+g/4AykIGtMz6l91 axGwmesE5kSzHqEaC7Z+mkStIHklutIH7dSJtktFYdaOG51NxdV48wWBPs5xDBTa vzEHzpW4L8CiyQQLM9uvbh1fPuH4544E7PthVfBjG7dORFxVLcl7kgmv+7lbn/zw 4db3tWjzLYtkUQ== -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:54 2026 by rpki-client