This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft File: 1hVJ9XWwR7y9wz59LTbtqEcf3so.mft (raw, json) Hash identifier: vd5U2jekS6vbMgDqg33zHYsHyoaFWptubW+8SF69ODE= Subject key identifier: 38:F3:27:91:EA:E8:BE:62:FB:CB:47:45:97:FD:68:0C:14:23:7D:65 Authority key identifier: D6:15:49:F5:75:B0:47:BC:BD:C3:3E:7D:2D:36:ED:A8:47:1F:DE:CA Certificate issuer: /CN=d61549f575b047bcbdc33e7d2d36eda8471fdeca Certificate serial: 019BF5AC9861828F06796782CF23F889F662 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft Manifest number: 01B9 Signing time: Sun 25 Jan 2026 15:01:27 +0000 Manifest this update: Sun 25 Jan 2026 15:01:27 +0000 Manifest next update: Mon 26 Jan 2026 15:01:27 +0000 Files and hashes: 1: 1hVJ9XWwR7y9wz59LTbtqEcf3so.crl (hash: sDHmWCLzYoFVkbF2Sz3WdnQH/tMrI5n1Y2wANKIE4jw=) 2: ksxu6ED0JYb4LkMNNBkeQrtTihg.roa (hash: hNrbAjwRe4DO2TxA72QQ5fqj3uvFtHcLzhkdLVrG1xA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:98:61:82:8f:06:79:67:82:cf:23:f8:89:f6:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d61549f575b047bcbdc33e7d2d36eda8471fdeca Validity Not Before: Jan 25 15:01:27 2026 GMT Not After : Jan 26 15:01:27 2026 GMT Subject: CN=38f32791eae8be62fbcb474597fd680c14237d65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:72:dc:24:e7:12:62:4b:8d:e3:63:93:25:a5: d7:15:be:f4:27:fb:71:b2:71:49:59:7c:ce:3d:e0: 6f:e7:a6:b6:cf:4a:81:e3:76:00:4d:2a:a0:fd:c1: 52:15:26:be:44:2c:32:f4:24:81:e2:9a:e1:7f:36: 34:c2:7f:1d:10:79:37:c8:49:2e:eb:6a:90:cc:af: 16:29:60:5b:57:79:2e:5a:40:ff:ac:c6:be:6a:35: d3:69:e4:83:0b:9c:70:34:a8:38:ae:de:15:90:fc: 82:3e:56:98:61:d6:d6:59:3c:af:12:8c:41:6b:6c: 19:b7:d6:04:5f:66:ce:6f:1b:82:5c:cf:1d:98:74: d4:1d:82:d8:18:b8:d3:90:48:91:5b:2e:08:52:9b: 3c:d4:99:3c:c3:61:88:b7:51:96:f2:ad:33:52:5a: cf:a5:a1:3a:7c:6c:ee:24:83:05:85:54:de:21:50: 7b:a5:5b:62:89:cf:9e:fe:b1:61:8e:49:08:eb:83: fc:b9:7f:ff:51:ca:f7:7b:ea:bb:8e:45:d8:31:a0: da:40:40:3f:c4:26:a6:c3:5b:0e:07:74:68:8e:31: d5:97:1a:85:d5:00:d4:08:0e:52:36:7f:bf:0f:1c: f7:43:9b:f4:c9:61:fe:f1:14:fe:b8:be:1b:a8:10: 7b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:F3:27:91:EA:E8:BE:62:FB:CB:47:45:97:FD:68:0C:14:23:7D:65 X509v3 Authority Key Identifier: keyid:D6:15:49:F5:75:B0:47:BC:BD:C3:3E:7D:2D:36:ED:A8:47:1F:DE:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:b6:83:04:11:e5:68:95:ff:d7:d6:06:e4:2b:f7:96:19:05: 5d:3e:93:e8:31:41:68:89:65:cd:7d:83:77:84:e8:59:df:fd: bd:7a:a1:18:fc:70:b2:63:2f:c4:ba:fb:38:81:6a:9d:41:ff: 0f:c3:58:e9:03:8b:a4:4d:50:4e:01:ce:4a:83:05:ca:3f:45: ed:cc:d4:af:c2:85:f4:02:4a:7b:0a:c4:05:aa:e6:41:1b:90: 8d:26:5e:82:f2:0b:21:95:69:06:88:02:9d:7f:82:f9:93:bb: 1c:8c:bc:2a:6a:97:30:e3:0d:7a:ef:23:37:c7:67:d4:d3:88: 52:81:79:4d:f4:6a:a9:11:cc:30:a0:72:c1:a0:8d:8c:ee:f0: 6c:74:c0:78:a3:2b:bc:ec:80:a4:ec:7d:4d:69:2b:2b:ea:c6: 81:07:73:a2:04:75:92:86:85:cf:3d:1e:a7:07:b6:5a:05:df: ec:44:79:71:74:41:56:fd:50:40:b0:d8:bf:29:a8:09:8b:2c: f8:1e:5a:99:26:78:29:ad:da:d8:05:bd:9a:5c:ed:3a:0f:e1: 87:c6:21:f7:36:70:b9:6c:f1:34:2f:15:d5:8f:5d:08:f8:72: 8c:27:8d:82:05:81:5b:c6:64:8a:52:da:d0:5b:44:e3:7f:67: d7:0a:16:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rJhhgo8GeWeCzyP4ifZiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MTU0OWY1NzViMDQ3YmNiZGMzM2U3ZDJkMzZlZGE4NDcx ZmRlY2EwHhcNMjYwMTI1MTUwMTI3WhcNMjYwMTI2MTUwMTI3WjAzMTEwLwYDVQQD EygzOGYzMjc5MWVhZThiZTYyZmJjYjQ3NDU5N2ZkNjgwYzE0MjM3ZDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXLcJOcSYkuN42OTJaXXFb70J/tx snFJWXzOPeBv56a2z0qB43YATSqg/cFSFSa+RCwy9CSB4prhfzY0wn8dEHk3yEku 62qQzK8WKWBbV3kuWkD/rMa+ajXTaeSDC5xwNKg4rt4VkPyCPlaYYdbWWTyvEoxB a2wZt9YEX2bObxuCXM8dmHTUHYLYGLjTkEiRWy4IUps81Jk8w2GIt1GW8q0zUlrP paE6fGzuJIMFhVTeIVB7pVtiic+e/rFhjkkI64P8uX//Ucr3e+q7jkXYMaDaQEA/ xCamw1sOB3RojjHVlxqF1QDUCA5SNn+/Dxz3Q5v0yWH+8RT+uL4bqBB7YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDjzJ5Hq6L5i+8tHRZf9aAwUI31lMB8GA1UdIwQY MBaAFNYVSfV1sEe8vcM+fS027ahHH97KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWhWSjlYV3dSN3k5d3o1OUxUYnRxRWNmM3NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNmQyNWItZDU0My00MjJkLThiNDMt NWZkMDk4ZjM0NTlkLzEvMWhWSjlYV3dSN3k5d3o1OUxUYnRxRWNmM3NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNmQyNWItZDU0My00MjJkLThiNDMtNWZkMDk4ZjM0NTlk LzEvMWhWSjlYV3dSN3k5d3o1OUxUYnRxRWNmM3NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgLaDBBHl aJX/19YG5Cv3lhkFXT6T6DFBaIllzX2Dd4ToWd/9vXqhGPxwsmMvxLr7OIFqnUH/ D8NY6QOLpE1QTgHOSoMFyj9F7czUr8KF9AJKewrEBarmQRuQjSZegvILIZVpBogC nX+C+ZO7HIy8KmqXMOMNeu8jN8dn1NOIUoF5TfRqqRHMMKBywaCNjO7wbHTAeKMr vOyApOx9TWkrK+rGgQdzogR1koaFzz0epwe2WgXf7ER5cXRBVv1QQLDYvymoCYss +B5amSZ4Ka3a2AW9mlztOg/hh8Yh9zZwuWzxNC8V1Y9dCPhyjCeNggWBW8ZkilLa 0FtE439n1woW4g== -----END CERTIFICATE-----Generated at Sun Jan 25 18:16:07 2026 by rpki-client