This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft File: 1DdYFDRN8L9tAXczrNxIjwAmMbI.mft (raw, json) Hash identifier: Q7MNX26xRQgVpLebbmQ1stuqfTY3pILBQu6EKypT2mM= Subject key identifier: 15:67:5C:6F:D2:67:5A:9F:8C:C8:F7:E3:F9:98:03:45:ED:CD:13:06 Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2 Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2 Certificate serial: 019BF506F8B01429CF6F45AEB8CEE49C8A66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft Manifest number: 1805 Signing time: Sun 25 Jan 2026 12:00:33 +0000 Manifest this update: Sun 25 Jan 2026 12:00:33 +0000 Manifest next update: Mon 26 Jan 2026 12:00:33 +0000 Files and hashes: 1: 1DdYFDRN8L9tAXczrNxIjwAmMbI.crl (hash: aC76LP6A+5bum3B4RAFFPD0b+YE6VfmVB9bhVcfAarc=) 2: _fx4TtZl912PDxKt3SpPKkcaW4A.roa (hash: dK8lG/+XmK+y1Z83e8NRgEb93MJfhW6m6ThSMLB6k4w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:06:f8:b0:14:29:cf:6f:45:ae:b8:ce:e4:9c:8a:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2 Validity Not Before: Jan 25 12:00:33 2026 GMT Not After : Jan 26 12:00:33 2026 GMT Subject: CN=15675c6fd2675a9f8cc8f7e3f9980345edcd1306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e4:53:21:f6:ef:7c:0f:80:a2:08:a0:4a:2b: b2:7b:35:81:55:59:87:b4:e9:47:66:09:f2:49:37: c5:21:71:eb:9c:ba:55:ab:8e:4d:f0:4b:4e:79:2c: b9:14:fd:ad:cd:15:42:3f:e5:e0:9d:46:d0:e6:bd: fa:40:af:7f:ad:e0:96:ce:bd:67:b5:fa:9d:0c:20: 4b:8b:a7:ec:b0:b3:6d:70:2b:6e:67:7e:28:58:cf: 6d:44:3b:15:5b:3b:31:01:cf:18:f4:a4:f8:d0:c4: d1:7d:c5:bd:c4:6d:31:a4:06:51:9f:a1:ad:62:03: 17:c0:39:62:6c:f6:b1:26:64:64:20:7a:c5:2f:92: 4f:ba:ce:dd:cd:d2:34:ce:82:f9:4a:7d:e0:25:b4: 83:81:ef:e2:84:d6:d6:0a:c6:ac:c5:e1:9f:57:74: 66:0c:7e:00:32:2e:cd:13:35:14:ef:bf:74:98:21: 0c:67:10:89:92:5a:a6:2c:6c:d4:26:03:57:e2:bf: 32:f5:8c:b4:fd:49:16:09:15:de:0b:f0:9a:f8:ff: 27:d8:82:9d:f3:c8:a9:e3:bc:67:01:c0:6d:ea:a7: 9d:50:b5:ce:08:59:39:a5:b0:fd:8a:12:cd:c4:43: 00:9f:0c:67:f9:04:fa:47:56:f5:0d:1d:23:3b:89: 7f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:67:5C:6F:D2:67:5A:9F:8C:C8:F7:E3:F9:98:03:45:ED:CD:13:06 X509v3 Authority Key Identifier: keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:a9:ea:d3:13:25:ca:55:85:93:6d:cc:78:e6:96:73:e7:f0: 10:f4:1e:e6:b8:b9:c7:83:14:0f:98:f8:df:16:eb:bf:7a:ab: e7:f7:df:37:d4:05:58:c1:d8:eb:dc:01:39:5d:43:ef:00:10: fc:87:e5:bf:6a:43:40:eb:3d:f9:b5:a7:d1:d6:b8:88:df:0d: 3d:91:8a:2f:8d:97:6a:bc:82:d5:2e:ec:a2:40:df:ed:25:2e: ec:9e:66:39:5e:13:12:fd:72:c6:d9:cf:4d:4c:e2:47:9b:44: 1e:bb:19:bf:57:d5:15:7a:20:21:d7:4c:56:1f:62:6a:13:eb: d6:c1:f0:1e:3a:9f:6f:cb:88:a6:e4:00:d5:21:26:ed:21:a1: 23:37:da:44:b2:bd:10:49:1e:40:ca:9e:f1:e8:06:14:82:d5: ec:f3:fb:7d:16:fa:a8:e3:69:0d:25:cc:20:76:8a:d3:8d:d5: d3:3d:44:c6:bc:1a:f5:f6:fa:7d:59:c0:27:93:d7:71:6e:59: 27:30:3f:39:5b:39:bf:9a:da:b9:0e:64:d4:08:13:c5:69:63: 01:e6:64:13:54:e9:61:40:9e:20:53:67:ad:c9:69:09:35:c6: 8c:a1:3a:9e:2b:66:22:6a:db:78:d2:dc:97:03:0c:69:ff:0c: 8f:ab:2c:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1BviwFCnPb0WuuM7knIpmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Mzc1ODE0MzQ0ZGYwYmY2ZDAxNzczM2FjZGM0ODhmMDAy NjMxYjIwHhcNMjYwMTI1MTIwMDMzWhcNMjYwMTI2MTIwMDMzWjAzMTEwLwYDVQQD EygxNTY3NWM2ZmQyNjc1YTlmOGNjOGY3ZTNmOTk4MDM0NWVkY2QxMzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeRTIfbvfA+AogigSiuyezWBVVmH tOlHZgnySTfFIXHrnLpVq45N8EtOeSy5FP2tzRVCP+XgnUbQ5r36QK9/reCWzr1n tfqdDCBLi6fssLNtcCtuZ34oWM9tRDsVWzsxAc8Y9KT40MTRfcW9xG0xpAZRn6Gt YgMXwDlibPaxJmRkIHrFL5JPus7dzdI0zoL5Sn3gJbSDge/ihNbWCsasxeGfV3Rm DH4AMi7NEzUU7790mCEMZxCJklqmLGzUJgNX4r8y9Yy0/UkWCRXeC/Ca+P8n2IKd 88ip47xnAcBt6qedULXOCFk5pbD9ihLNxEMAnwxn+QT6R1b1DR0jO4l/PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBVnXG/SZ1qfjMj34/mYA0XtzRMGMB8GA1UdIwQY MBaAFNQ3WBQ0TfC/bQF3M6zcSI8AJjGyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMURkWUZEUk44TDl0QVhjenJOeElqd0FtTWJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9iMjRiMmQtMzUyMy00MjJlLTliY2Yt MzY3MWQ2N2ViOWY4LzEvMURkWUZEUk44TDl0QVhjenJOeElqd0FtTWJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9iMjRiMmQtMzUyMy00MjJlLTliY2YtMzY3MWQ2N2ViOWY4 LzEvMURkWUZEUk44TDl0QVhjenJOeElqd0FtTWJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb6nq0xMl ylWFk23MeOaWc+fwEPQe5ri5x4MUD5j43xbrv3qr5/ffN9QFWMHY69wBOV1D7wAQ /Iflv2pDQOs9+bWn0da4iN8NPZGKL42XaryC1S7sokDf7SUu7J5mOV4TEv1yxtnP TUziR5tEHrsZv1fVFXogIddMVh9iahPr1sHwHjqfb8uIpuQA1SEm7SGhIzfaRLK9 EEkeQMqe8egGFILV7PP7fRb6qONpDSXMIHaK043V0z1Exrwa9fb6fVnAJ5PXcW5Z JzA/OVs5v5rauQ5k1AgTxWljAeZkE1TpYUCeIFNnrclpCTXGjKE6nitmImrbeNLc lwMMaf8Mj6ssjg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:01:05 2026 by rpki-client