This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft File: 1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft (raw, json) Hash identifier: q2sKnVwXMQK+w4zrmgyzG2VScg5Kh7NEaKHJ4mAY6wE= Subject key identifier: BE:AF:1C:4B:C1:40:67:FE:60:96:C6:3C:09:A7:8A:FF:AC:43:86:B1 Authority key identifier: F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35 Certificate issuer: /CN=f970049cba7f39aeed31d65313c7b953f3fda135 Certificate serial: 019BF7D1D6709578BDF870AD45A8643F4BDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft Manifest number: 1618 Signing time: Mon 26 Jan 2026 01:01:22 +0000 Manifest this update: Mon 26 Jan 2026 01:01:22 +0000 Manifest next update: Tue 27 Jan 2026 01:01:22 +0000 Files and hashes: 1: 1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl (hash: 4jV1zHVEpiMx64zP0ScRmEkpmO+bOjF0kiTCGFyD/eo=) 2: 9O4dKfnZgTgqWB_iiNETLsmvwXY.roa (hash: B3+44Wl16VVGNQlYDiIt0cK5DguWkC82Gzjl2M8qljQ=) 3: 9wP7mpH_B0PGwWv5_AlRe4xldiA.roa (hash: zYLWTc75j+s7gKIa+ebYI+LbuI7qKTL5YSAgcKHFymE=) 4: HUC0yUJUDgqy27kx_QVtwVTYAPk.roa (hash: CyeQ43VG6tD5RMnxhr0UsmCBVHZpmO9VtiFMAauD0/c=) 5: OuUlmrN0axWfSqeYSWZ3VFyR9gQ.roa (hash: QKGtXpsKu8AS09muhwUu1IIbo7MS1z9kgfO0GKSJA9I=) 6: UgGCU0bNSuQOEElr01rlVK8sU_Q.roa (hash: AacHgDrHZ+OvhSoYCRcjSoSerNRKqDKHnF8VQ9u1BE8=) 7: Wp-glj4jLDxWifTRA7ilsUKXI0w.roa (hash: vAjHOys3Ggc83LnsEZEpKy5P5ZSFbz3QKqyxgLEsEXc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d1:d6:70:95:78:bd:f8:70:ad:45:a8:64:3f:4b:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f970049cba7f39aeed31d65313c7b953f3fda135 Validity Not Before: Jan 26 01:01:22 2026 GMT Not After : Jan 27 01:01:22 2026 GMT Subject: CN=beaf1c4bc14067fe6096c63c09a78affac4386b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4e:e9:9c:5f:dc:5d:75:ef:c0:f3:db:a3:83: 24:79:76:81:a4:76:63:3f:46:5f:a4:24:cd:66:86: 40:96:2f:a8:db:0b:ba:84:67:26:94:86:b9:cc:fa: 08:e6:31:b8:26:c6:9a:ec:d3:e5:94:0c:3d:98:f6: 00:35:2f:a0:d2:09:5c:9e:4a:2a:b8:25:3a:00:0c: 66:e4:de:38:d6:dc:0b:e3:d2:41:a1:0c:f4:00:3f: 1c:aa:d9:66:29:77:3d:c9:31:1b:7a:83:8c:aa:2e: 82:49:29:ea:b4:dc:30:65:c2:5b:40:bd:5e:c1:cc: ba:e6:b1:6d:d2:2c:7e:59:a8:fc:98:c6:e3:3d:c4: 8a:9b:02:51:36:96:f5:85:1f:63:23:62:d2:a9:85: 67:dc:60:81:b6:b7:41:6b:8e:0c:33:b3:6d:0e:df: b6:fa:60:12:e9:93:f3:7f:d0:55:9f:ab:99:dc:70: 92:87:e3:e9:f6:f8:e1:b9:dc:a2:5d:79:ad:0f:c2: e8:18:3a:9d:cd:0d:1f:50:47:94:e1:fa:b9:2f:f7: 1d:2f:1b:86:75:22:c7:e4:b2:75:76:b5:a4:0d:80: 3b:d5:4a:24:ad:a4:f1:97:73:a9:eb:c5:31:d1:32: 20:d6:a9:7f:33:ff:c7:55:52:9a:60:60:8f:ff:9f: 5f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:AF:1C:4B:C1:40:67:FE:60:96:C6:3C:09:A7:8A:FF:AC:43:86:B1 X509v3 Authority Key Identifier: keyid:F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:5c:c8:48:c6:3f:ef:f8:93:e7:9f:98:54:62:73:4b:c7:f8: 84:0d:d3:cc:02:fe:d9:8b:05:48:d8:82:4e:8b:4b:ac:af:ca: ef:12:30:0b:23:b2:fe:c4:d5:bf:fb:47:e6:e4:d8:40:9e:5a: 5a:18:65:a6:b3:f2:73:14:d6:5c:1b:c6:ca:33:78:7f:3c:e0: a9:06:88:bf:b3:ab:7e:2f:af:07:1d:76:15:da:ed:8f:d2:b0: 24:db:ba:b9:a6:a2:77:6a:c0:b2:31:a2:dc:ad:92:77:20:ef: 54:e3:02:4c:52:51:6c:3a:87:79:60:44:b8:06:5a:89:39:fc: 1a:76:60:00:c0:5e:a6:4c:64:da:bb:00:ce:db:94:76:23:b2: 4d:5f:8f:35:91:a9:f5:24:c3:8c:2f:1b:6c:2f:3d:63:b0:10: 89:8f:03:c3:de:1b:0e:57:08:4c:7d:af:0a:45:26:bb:df:dc: ba:c0:f2:86:06:e9:a6:d3:67:fb:05:cc:4c:9e:89:95:40:56: 06:47:81:f4:24:80:4f:25:d0:8a:aa:30:07:8d:93:96:f8:15: 3d:96:1e:68:f2:e5:89:af:a2:92:90:92:5a:1b:98:08:7f:43: a6:f7:12:55:b9:6e:e6:7e:c3:19:8a:01:88:c2:b1:ac:d2:26: 32:db:44:ec -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZv30dZwlXi9+HCtRahkP0vaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NzAwNDljYmE3ZjM5YWVlZDMxZDY1MzEzYzdiOTUzZjNm ZGExMzUwHhcNMjYwMTI2MDEwMTIyWhcNMjYwMTI3MDEwMTIyWjAzMTEwLwYDVQQD EyhiZWFmMWM0YmMxNDA2N2ZlNjA5NmM2M2MwOWE3OGFmZmFjNDM4NmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApk7pnF/cXXXvwPPbo4MkeXaBpHZj P0ZfpCTNZoZAli+o2wu6hGcmlIa5zPoI5jG4Jsaa7NPllAw9mPYANS+g0glcnkoq uCU6AAxm5N441twL49JBoQz0AD8cqtlmKXc9yTEbeoOMqi6CSSnqtNwwZcJbQL1e wcy65rFt0ix+Waj8mMbjPcSKmwJRNpb1hR9jI2LSqYVn3GCBtrdBa44MM7NtDt+2 +mAS6ZPzf9BVn6uZ3HCSh+Pp9vjhudyiXXmtD8LoGDqdzQ0fUEeU4fq5L/cdLxuG dSLH5LJ1drWkDYA71UokraTxl3Op68Ux0TIg1ql/M//HVVKaYGCP/59fAwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFL6vHEvBQGf+YJbGPAmniv+sQ4axMB8GA1UdIwQY MBaAFPlwBJy6fzmu7THWUxPHuVPz/aE1MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1YQUVuTHBfT2E3dE1kWlRFOGU1VV9QOW9UVS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvMTNmNWYxLTQ1YjYtNGJjMS1iNWE1 LTUyMWZhNDFkZmM5Ni8xLzEtWEFFbkxwX09hN3RNZFpURThlNVVfUDlvVFUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2EyLzEzZjVmMS00NWI2LTRiYzEtYjVhNS01MjFmYTQxZGZj OTYvMS8xLVhBRW5McF9PYTd0TWRaVEU4ZTVVX1A5b1RVLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg1zI SMY/7/iT55+YVGJzS8f4hA3TzAL+2YsFSNiCTotLrK/K7xIwCyOy/sTVv/tH5uTY QJ5aWhhlprPycxTWXBvGyjN4fzzgqQaIv7Orfi+vBx12Fdrtj9KwJNu6uaaid2rA sjGi3K2SdyDvVOMCTFJRbDqHeWBEuAZaiTn8GnZgAMBepkxk2rsAztuUdiOyTV+P NZGp9STDjC8bbC89Y7AQiY8Dw94bDlcITH2vCkUmu9/cusDyhgbpptNn+wXMTJ6J lUBWBkeB9CSATyXQiqowB42TlvgVPZYeaPLlia+ikpCSWhuYCH9DpvcSVblu5n7D GYoBiMKxrNImMttE7A== -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:49 2026 by rpki-client