This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft File: _1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft (raw, json) Hash identifier: d6ALa2uyE19sP1R45+9QVKJi98RMN9VMKPD9YwoUFyA= Subject key identifier: 77:1C:40:1E:C5:37:67:D7:65:D0:D9:53:C2:A1:64:36:2D:35:F3:2D Authority key identifier: FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46 Certificate issuer: /CN=ff56d837fe254fa92e1f3c2f861aa1e485521746 Certificate serial: 019BF72CF5182DA27722A382F9E7A2814190 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 22:01:17 +0000 Manifest this update: Sun 25 Jan 2026 22:01:17 +0000 Manifest next update: Mon 26 Jan 2026 22:01:17 +0000 Files and hashes: 1: 4cocr0q1XWVnObqRRasdUZTa22c.roa (hash: 86THFSFQTNeIPxjfawMpIZH9JHPT6I8T1KqMTV+dRZo=) 2: _1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl (hash: nQQom1u7o3pyx/v2H6ze2oOg2er0/2u9Nzs1OVO+jGw=) 3: iwkzEw-xYne2_moODPhsHHvfJEE.roa (hash: e85JS9mOgxQCslqs7Lpvehm/GeHrCKP2QV8UeWsf++I=) 4: lPb2QmWiKPxzYTHlUwItF0AKSL0.roa (hash: t0HsgpiNiYSsplZbvt5snbpm+tzmqAxHOzqpSQ+fk5c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:f5:18:2d:a2:77:22:a3:82:f9:e7:a2:81:41:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff56d837fe254fa92e1f3c2f861aa1e485521746 Validity Not Before: Jan 25 22:01:17 2026 GMT Not After : Jan 26 22:01:17 2026 GMT Subject: CN=771c401ec53767d765d0d953c2a164362d35f32d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5c:e5:b5:fe:76:f6:9f:69:9b:af:93:9c:dd: 3f:48:0b:3d:2a:b8:9d:9c:a2:4b:5d:22:57:e6:68: cc:bc:d4:f7:07:74:34:00:20:d7:44:ad:03:b0:e6: e1:b4:08:3e:4e:77:19:0c:0a:b9:08:d2:7c:d1:93: 6f:7b:13:02:29:fa:75:9c:ac:2b:91:be:10:62:84: df:c9:de:42:1a:5c:da:7b:c1:00:ca:dd:50:a0:5b: e3:96:8e:cc:f2:68:14:3f:cc:f0:d0:9a:95:f9:ca: 5b:2c:89:f4:cb:d7:d2:5b:40:ad:dc:52:ba:f5:1c: 89:05:e6:36:a5:ac:cc:28:9f:16:15:3a:d8:8b:8c: f5:7a:b5:95:29:d4:fe:43:90:2d:be:7d:e3:d8:3d: 6a:82:c6:cd:58:8c:13:f1:4e:a3:19:3c:8f:ab:6d: c6:72:a9:83:41:90:c2:59:3b:02:dc:f5:39:2b:2a: 64:ff:af:7d:eb:2c:ee:48:a8:f3:16:48:d7:68:9a: 87:db:74:44:8a:4e:2c:b2:99:17:e1:ba:13:f3:cf: 50:de:27:79:82:1a:15:3b:77:5f:24:4c:94:08:62: e8:54:c8:5c:d9:51:a2:15:0a:78:2e:b5:0b:68:80: 5a:f8:20:c7:46:be:b7:b2:8e:70:b5:e1:18:0d:90: 21:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:1C:40:1E:C5:37:67:D7:65:D0:D9:53:C2:A1:64:36:2D:35:F3:2D X509v3 Authority Key Identifier: keyid:FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:af:d3:41:11:44:c3:2b:32:d6:87:92:89:55:71:66:18:97: 58:0e:62:c4:8a:f2:06:47:b3:b0:cd:70:d7:1b:af:18:b5:7f: 33:9c:85:7d:2b:86:00:c6:66:ce:fb:eb:12:99:20:4d:60:65: 03:19:7e:09:52:93:ba:d6:8d:34:4c:a2:9b:81:a0:6e:35:19: d4:6c:84:a9:b2:3a:46:6e:38:b3:89:d5:ed:c3:62:f6:91:08: bd:83:fe:f5:0b:53:80:9e:ab:3c:99:19:d7:b4:09:bd:3b:d0: 65:3c:86:d1:c9:99:e4:38:2b:10:55:c7:8d:25:db:9a:c4:b9: 0d:f5:fe:d5:52:2e:34:57:7c:df:fd:6b:01:9e:b9:d4:7a:9e: d0:f9:e4:14:58:9f:dc:24:68:db:0a:ea:02:2c:4d:e1:3e:81: de:4a:98:77:3d:bc:df:8d:3f:05:f2:18:36:64:dc:e5:7f:56: d7:b5:83:08:e6:6c:99:98:ed:76:f4:47:b4:f0:38:44:8f:f5: 22:f6:41:22:dc:7b:6c:0f:52:3d:f0:c9:48:8b:d2:f7:71:ea: b5:74:63:f2:21:c6:1b:df:7b:ce:47:3a:f3:df:eb:8d:05:b0: 77:f7:71:07:1a:da:24:f1:6d:5d:b9:6d:55:c9:94:c8:05:41: 93:83:bc:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LPUYLaJ3IqOC+eeigUGQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNTZkODM3ZmUyNTRmYTkyZTFmM2MyZjg2MWFhMWU0ODU1 MjE3NDYwHhcNMjYwMTI1MjIwMTE3WhcNMjYwMTI2MjIwMTE3WjAzMTEwLwYDVQQD Eyg3NzFjNDAxZWM1Mzc2N2Q3NjVkMGQ5NTNjMmExNjQzNjJkMzVmMzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFzltf529p9pm6+TnN0/SAs9Krid nKJLXSJX5mjMvNT3B3Q0ACDXRK0DsObhtAg+TncZDAq5CNJ80ZNvexMCKfp1nKwr kb4QYoTfyd5CGlzae8EAyt1QoFvjlo7M8mgUP8zw0JqV+cpbLIn0y9fSW0Ct3FK6 9RyJBeY2pazMKJ8WFTrYi4z1erWVKdT+Q5Atvn3j2D1qgsbNWIwT8U6jGTyPq23G cqmDQZDCWTsC3PU5Kypk/6996yzuSKjzFkjXaJqH23REik4sspkX4boT889Q3id5 ghoVO3dfJEyUCGLoVMhc2VGiFQp4LrULaIBa+CDHRr63so5wteEYDZAhMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHccQB7FN2fXZdDZU8KhZDYtNfMtMB8GA1UdIwQY MBaAFP9W2Df+JU+pLh88L4YaoeSFUhdGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzFiWU5fNGxUNmt1SHp3dmhocWg1SVZTRjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8xYjM3NDktOTY3My00MTJkLWIzNDgt NTBmYzRkNTU3ZDA4LzEvXzFiWU5fNGxUNmt1SHp3dmhocWg1SVZTRjBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8xYjM3NDktOTY3My00MTJkLWIzNDgtNTBmYzRkNTU3ZDA4 LzEvXzFiWU5fNGxUNmt1SHp3dmhocWg1SVZTRjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFq/TQRFE wysy1oeSiVVxZhiXWA5ixIryBkezsM1w1xuvGLV/M5yFfSuGAMZmzvvrEpkgTWBl Axl+CVKTutaNNEyim4GgbjUZ1GyEqbI6Rm44s4nV7cNi9pEIvYP+9QtTgJ6rPJkZ 17QJvTvQZTyG0cmZ5DgrEFXHjSXbmsS5DfX+1VIuNFd83/1rAZ651Hqe0PnkFFif 3CRo2wrqAixN4T6B3kqYdz28340/BfIYNmTc5X9W17WDCOZsmZjtdvRHtPA4RI/1 IvZBItx7bA9SPfDJSIvS93HqtXRj8iHGG997zkc689/rjQWwd/dxBxraJPFtXblt VcmUyAVBk4O83g== -----END CERTIFICATE-----Generated at Mon Jan 26 01:32:54 2026 by rpki-client