This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft File: r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft (raw, json) Hash identifier: FqPqd3MOaSBclxtKSqyibymTNBP35+AMv2rAmMpT5O0= Subject key identifier: 5B:F5:93:8B:86:4C:44:5B:BA:62:D0:EA:7D:CF:9F:6F:9F:4E:1C:99 Authority key identifier: AF:50:3E:5B:83:5F:0A:81:38:1D:1C:4C:12:33:D3:8F:B7:DD:F2:3D Certificate issuer: /CN=af503e5b835f0a81381d1c4c1233d38fb7ddf23d Certificate serial: 019BF61A4EF4E13F2043DE6766CEEE6B7F0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft Manifest number: 17E7 Signing time: Sun 25 Jan 2026 17:01:17 +0000 Manifest this update: Sun 25 Jan 2026 17:01:17 +0000 Manifest next update: Mon 26 Jan 2026 17:01:17 +0000 Files and hashes: 1: 0xNS5FrAqu36g3GIdJ2TAJPVxMM.roa (hash: 66TkZOHNCz8kIbFw6krxK2sWb7Slqjbjz6EA46ccrLI=) 2: LdG-Kuli28HC1HbwTbHy9oEVmrs.roa (hash: 0suEljlbYLb5JxhGNORaOE+cyjxWUfkMWAXq8c0oR2M=) 3: QlMmdjdXjri_CBWva21BaIFHBho.roa (hash: tN7tjjqkm4W21ZyWVVJYjmkhiCizgF+fv67Iry9MGFU=) 4: r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl (hash: Han6fqxbFqVvk3dQb2o85HCxazimXSuoypV4CSQwYv8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:1a:4e:f4:e1:3f:20:43:de:67:66:ce:ee:6b:7f:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af503e5b835f0a81381d1c4c1233d38fb7ddf23d Validity Not Before: Jan 25 17:01:17 2026 GMT Not After : Jan 26 17:01:17 2026 GMT Subject: CN=5bf5938b864c445bba62d0ea7dcf9f6f9f4e1c99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0e:b7:47:0b:ef:81:ad:ea:74:93:be:a0:4d: 60:ec:fa:37:04:8a:44:ab:63:cf:f0:78:eb:96:22: a1:ed:f5:77:38:da:ab:f6:3c:fe:7b:0f:fe:9f:2a: 09:2e:b9:b8:39:2e:35:39:87:03:68:6e:aa:ef:4e: 46:9d:32:b9:be:aa:59:ce:00:58:da:f9:a3:ed:17: 14:82:d7:f9:c9:bd:6b:96:3f:01:2a:5c:d0:63:31: cf:2f:b1:2c:1a:52:d7:e7:55:52:63:fa:9c:54:38: f9:9b:f1:ae:25:4b:85:fa:b2:c1:95:c4:79:32:b1: 5f:02:2b:3d:aa:14:2c:7b:c8:b2:27:0a:5a:19:a9: 39:f2:ba:a1:19:6a:d8:ab:c3:e7:bc:12:8c:08:2d: 5b:b5:8d:7a:73:62:01:e9:52:d6:73:8d:46:e4:66: b0:05:dc:2e:34:be:c2:ac:74:82:d8:da:45:74:84: d8:c0:39:b6:91:8d:56:b7:c4:42:b0:57:46:49:c5: 55:e8:5c:2c:6c:ff:90:4a:93:83:9d:1b:32:b0:36: e2:fd:25:45:77:23:3b:8f:56:56:53:3c:52:45:a7: be:03:42:04:d0:f1:85:d2:e9:89:be:98:a5:d6:ea: e5:84:01:73:e8:1d:7c:14:34:d6:1a:af:ea:a9:1d: 63:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F5:93:8B:86:4C:44:5B:BA:62:D0:EA:7D:CF:9F:6F:9F:4E:1C:99 X509v3 Authority Key Identifier: keyid:AF:50:3E:5B:83:5F:0A:81:38:1D:1C:4C:12:33:D3:8F:B7:DD:F2:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:6f:28:2a:69:da:98:f5:62:2b:8c:a9:43:52:9e:11:d2:8f: d8:ff:c7:13:f3:bb:f0:27:26:20:86:b0:32:61:50:9a:4a:10: b3:6e:4e:6c:cc:1c:e2:55:9b:42:3d:14:20:95:7b:78:65:73: 41:9a:50:96:2b:3c:23:6c:ca:2e:e8:4d:a7:34:c8:f9:b3:83: 02:36:b2:62:c6:fb:40:bb:e4:ad:4c:9f:2f:aa:1a:26:ce:f9: b5:d4:a7:b3:4d:60:41:42:41:3f:f8:65:f0:8f:ed:74:39:b9: f3:62:e4:b8:68:10:87:38:bd:db:40:50:a8:e9:f4:88:c8:1c: dc:36:86:e2:0b:06:8e:05:93:46:d5:57:07:25:60:86:0e:b0: 20:c6:e9:da:77:d3:6a:cb:1c:91:fc:23:2d:a2:84:fc:e3:55: a9:0b:17:f2:a7:95:82:49:cc:48:69:71:f1:e1:f9:1c:f8:90: 7d:14:ea:1f:fd:b2:66:fb:d0:81:22:54:28:d8:d5:1b:6e:5b: df:22:6f:a5:3a:90:0d:94:3f:c3:cf:37:92:99:37:9b:43:fb: 90:a4:e1:73:5f:30:58:c9:5d:9b:7c:2f:c2:63:82:72:45:20: 47:ae:c8:d4:63:7c:e8:1c:80:b0:1b:6a:3c:b1:38:70:2c:a6: 9d:70:a4:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2Gk704T8gQ95nZs7ua38PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNTAzZTViODM1ZjBhODEzODFkMWM0YzEyMzNkMzhmYjdk ZGYyM2QwHhcNMjYwMTI1MTcwMTE3WhcNMjYwMTI2MTcwMTE3WjAzMTEwLwYDVQQD Eyg1YmY1OTM4Yjg2NGM0NDViYmE2MmQwZWE3ZGNmOWY2ZjlmNGUxYzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlw63Rwvvga3qdJO+oE1g7Po3BIpE q2PP8HjrliKh7fV3ONqr9jz+ew/+nyoJLrm4OS41OYcDaG6q705GnTK5vqpZzgBY 2vmj7RcUgtf5yb1rlj8BKlzQYzHPL7EsGlLX51VSY/qcVDj5m/GuJUuF+rLBlcR5 MrFfAis9qhQse8iyJwpaGak58rqhGWrYq8PnvBKMCC1btY16c2IB6VLWc41G5Gaw BdwuNL7CrHSC2NpFdITYwDm2kY1Wt8RCsFdGScVV6FwsbP+QSpODnRsysDbi/SVF dyM7j1ZWUzxSRae+A0IE0PGF0umJvpil1urlhAFz6B18FDTWGq/qqR1jdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFv1k4uGTERbumLQ6n3Pn2+fThyZMB8GA1UdIwQY MBaAFK9QPluDXwqBOB0cTBIz04+33fI9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjFBLVc0TmZDb0U0SFJ4TUVqUFRqN2ZkOGowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8wNjAwZjgtMjk1OC00NDE3LWJiNjct M2M1ZTE3NDRhY2RkLzEvcjFBLVc0TmZDb0U0SFJ4TUVqUFRqN2ZkOGowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS8wNjAwZjgtMjk1OC00NDE3LWJiNjctM2M1ZTE3NDRhY2Rk LzEvcjFBLVc0TmZDb0U0SFJ4TUVqUFRqN2ZkOGowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ28oKmna mPViK4ypQ1KeEdKP2P/HE/O78CcmIIawMmFQmkoQs25ObMwc4lWbQj0UIJV7eGVz QZpQlis8I2zKLuhNpzTI+bODAjayYsb7QLvkrUyfL6oaJs75tdSns01gQUJBP/hl 8I/tdDm582LkuGgQhzi920BQqOn0iMgc3DaG4gsGjgWTRtVXByVghg6wIMbp2nfT assckfwjLaKE/ONVqQsX8qeVgknMSGlx8eH5HPiQfRTqH/2yZvvQgSJUKNjVG25b 3yJvpTqQDZQ/w883kpk3m0P7kKThc18wWMldm3wvwmOCckUgR67I1GN86ByAsBtq PLE4cCymnXCkZw== -----END CERTIFICATE-----Generated at Sun Jan 25 23:55:25 2026 by rpki-client