This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft File: 1FurIIZT1CYevyAvYDYzQRmEYFU.mft (raw, json) Hash identifier: TQU2p7j0awEhoQo5Qq6Smi7vRvberXiK4J37mW+lTDA= Subject key identifier: F8:2A:AA:D6:38:A9:CF:E6:13:16:3D:65:16:C4:9A:F0:F6:7C:C4:64 Authority key identifier: D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55 Certificate issuer: /CN=d45bab208653d4261ebf202f6036334119846055 Certificate serial: 019BF5E3ED820FBA87012AA96AAFE50D704E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft Manifest number: 1454 Signing time: Sun 25 Jan 2026 16:01:53 +0000 Manifest this update: Sun 25 Jan 2026 16:01:53 +0000 Manifest next update: Mon 26 Jan 2026 16:01:53 +0000 Files and hashes: 1: 1FurIIZT1CYevyAvYDYzQRmEYFU.crl (hash: 1VKAxvF+WoG3OmEmYWRsTISgZ8CT6kDOiNWincZYLII=) 2: 3KIe1YS7QLLqz4eqT1TIg8Y0lHA.roa (hash: E01qUWDxs3w8/EkHXVeEMazo/S6sr6Nl2XEVde5Y+Qw=) 3: BmDJr6NVvMRZJfVxWJAT8OCM7fY.roa (hash: 5dcydJfHt2J/Yp4bz6hC2PeHwVc0JR/YkXEsIrJj0IQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:ed:82:0f:ba:87:01:2a:a9:6a:af:e5:0d:70:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45bab208653d4261ebf202f6036334119846055 Validity Not Before: Jan 25 16:01:53 2026 GMT Not After : Jan 26 16:01:53 2026 GMT Subject: CN=f82aaad638a9cfe613163d6516c49af0f67cc464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9e:d1:f2:95:c8:b3:41:34:bd:35:c8:4d:04: a5:5f:61:15:16:d4:31:21:d0:73:bd:51:92:89:d9: 18:1a:f3:66:a5:f4:70:dd:d9:77:a1:ff:ed:d2:b0: c9:51:05:9d:ab:a8:50:fe:cc:0e:70:9f:fa:ec:80: 8b:fa:74:95:ff:99:77:70:b8:2d:dd:de:3e:4d:f3: 21:f4:f6:fc:b5:79:e9:fa:ca:56:a8:3e:67:9d:42: f4:94:be:56:0c:f7:30:0f:7f:72:13:a5:e6:fb:05: f8:91:1d:c7:17:76:58:a3:24:ab:23:3e:d2:ab:4b: 22:75:46:fa:59:88:69:26:59:0f:70:80:f9:a5:22: b2:2c:fa:a7:34:9f:49:c7:97:9c:e5:25:b9:d2:6b: c1:6c:51:ba:81:a4:52:b2:98:4e:cc:dc:bf:2d:40: e5:c9:4c:45:b1:c7:d1:45:34:76:77:1c:8f:7b:ce: cb:85:ab:0a:fc:7b:19:1c:fd:26:dd:2f:86:16:00: 8b:56:92:aa:39:5b:4f:30:22:72:53:37:f8:b7:86: d9:85:37:52:31:3f:05:47:aa:3d:10:dc:21:85:9f: d5:00:8f:a1:4b:12:e4:17:82:74:62:2b:7f:ad:92: cc:6b:95:65:68:b4:e5:5b:65:3b:7d:d4:f0:78:ff: 5b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:2A:AA:D6:38:A9:CF:E6:13:16:3D:65:16:C4:9A:F0:F6:7C:C4:64 X509v3 Authority Key Identifier: keyid:D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:b4:6e:f4:9e:8d:89:0e:ab:c5:c8:bd:7a:97:10:84:1e:7c: a8:1f:ff:14:24:ff:92:1b:f3:eb:52:fe:c2:d1:1a:d8:9f:9a: f2:a3:10:85:8f:e3:38:17:10:4e:3e:e8:a7:81:e8:06:db:85: dc:be:0f:c1:5a:24:cd:ba:c8:71:9b:a5:f7:ba:91:4e:c2:3d: 19:4f:0c:d8:5d:19:df:25:6a:34:ef:19:a5:67:24:4d:be:22: a6:73:4d:11:2f:96:6a:42:53:ea:a2:1d:b3:29:b9:57:4b:e4: 37:80:f8:35:c6:98:fa:2a:69:bc:01:31:2e:4d:1d:13:33:5d: d1:6e:8d:b9:dc:0e:b6:d0:7d:d5:42:2a:5a:f9:a1:a6:87:6e: e5:9c:d4:b9:c8:65:c7:52:cc:44:b8:3d:bd:be:e3:0e:e8:08: 11:07:6e:1e:0d:92:12:ea:48:1f:1a:6f:9d:2a:c0:4b:b1:e9: 33:c7:31:9b:cd:c7:db:27:47:69:95:62:9e:1b:04:11:2b:20: cf:28:9a:88:5f:fc:ff:5b:56:fe:7a:87:80:94:93:19:d9:af: 05:a6:e0:ec:3f:4d:bd:13:b4:af:a0:f0:6d:64:50:8d:51:f0: b8:c6:b9:5f:e6:e0:a3:c8:34:7c:91:19:7c:ec:04:de:42:75: c9:57:fc:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv14+2CD7qHASqpaq/lDXBOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NWJhYjIwODY1M2Q0MjYxZWJmMjAyZjYwMzYzMzQxMTk4 NDYwNTUwHhcNMjYwMTI1MTYwMTUzWhcNMjYwMTI2MTYwMTUzWjAzMTEwLwYDVQQD EyhmODJhYWFkNjM4YTljZmU2MTMxNjNkNjUxNmM0OWFmMGY2N2NjNDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJ7R8pXIs0E0vTXITQSlX2EVFtQx IdBzvVGSidkYGvNmpfRw3dl3of/t0rDJUQWdq6hQ/swOcJ/67ICL+nSV/5l3cLgt 3d4+TfMh9Pb8tXnp+spWqD5nnUL0lL5WDPcwD39yE6Xm+wX4kR3HF3ZYoySrIz7S q0sidUb6WYhpJlkPcID5pSKyLPqnNJ9Jx5ec5SW50mvBbFG6gaRSsphOzNy/LUDl yUxFscfRRTR2dxyPe87LhasK/HsZHP0m3S+GFgCLVpKqOVtPMCJyUzf4t4bZhTdS MT8FR6o9ENwhhZ/VAI+hSxLkF4J0Yit/rZLMa5VlaLTlW2U7fdTweP9bFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPgqqtY4qc/mExY9ZRbEmvD2fMRkMB8GA1UdIwQY MBaAFNRbqyCGU9QmHr8gL2A2M0EZhGBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUZ1cklJWlQxQ1lldnlBdllEWXpRUm1FWUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wYWVjMWYtNjA2NS00ZDg4LTg0NTQt MTI0ZDNmYjM5MDZhLzEvMUZ1cklJWlQxQ1lldnlBdllEWXpRUm1FWUZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8wYWVjMWYtNjA2NS00ZDg4LTg0NTQtMTI0ZDNmYjM5MDZh LzEvMUZ1cklJWlQxQ1lldnlBdllEWXpRUm1FWUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL7Ru9J6N iQ6rxci9epcQhB58qB//FCT/khvz61L+wtEa2J+a8qMQhY/jOBcQTj7op4HoBtuF 3L4PwVokzbrIcZul97qRTsI9GU8M2F0Z3yVqNO8ZpWckTb4ipnNNES+WakJT6qId sym5V0vkN4D4NcaY+ippvAExLk0dEzNd0W6NudwOttB91UIqWvmhpodu5ZzUuchl x1LMRLg9vb7jDugIEQduHg2SEupIHxpvnSrAS7HpM8cxm83H2ydHaZVinhsEESsg zyiaiF/8/1tW/nqHgJSTGdmvBabg7D9NvRO0r6DwbWRQjVHwuMa5X+bgo8g0fJEZ fOwE3kJ1yVf8nw== -----END CERTIFICATE-----Generated at Sun Jan 25 21:35:50 2026 by rpki-client