This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft File: 1fBlyL23j_KU98VFSXHb-r-2wYQ.mft (raw, json) Hash identifier: NxTqpgotzXgVsZ/Im6tVCrGyrugdRwqYFdjlGR9e14E= Subject key identifier: E8:1F:C9:BE:CC:99:04:69:17:43:B5:94:07:58:FD:B4:9D:77:06:48 Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84 Certificate issuer: /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184 Certificate serial: 019BF79A6E73F01E7BF355D658F6365FE527 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft Manifest number: 12E5 Signing time: Mon 26 Jan 2026 00:00:51 +0000 Manifest this update: Mon 26 Jan 2026 00:00:51 +0000 Manifest next update: Tue 27 Jan 2026 00:00:51 +0000 Files and hashes: 1: 1fBlyL23j_KU98VFSXHb-r-2wYQ.crl (hash: 4PfcRwxDTr1mCa6Jp9xtNneNYpUXlKR1r8HluKH6L/A=) 2: XzhQllg1Ngl309aRqikGgBtFojI.roa (hash: aZqPKeTFPYPjagSFs0ZOP4Bb2ybWfYzLdU16fXavbpc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:6e:73:f0:1e:7b:f3:55:d6:58:f6:36:5f:e5:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184 Validity Not Before: Jan 26 00:00:51 2026 GMT Not After : Jan 27 00:00:51 2026 GMT Subject: CN=e81fc9becc9904691743b5940758fdb49d770648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f1:76:2b:c4:c8:6a:53:fe:9b:49:95:a1:65: c2:3a:b7:7d:e5:c6:87:50:7f:d5:2e:39:d7:7a:11: 25:de:ab:00:49:fb:7d:ff:9f:8a:fb:cc:68:df:5b: e5:eb:78:ad:c1:24:c9:cc:b5:40:1c:80:b7:30:b5: 8a:de:94:16:12:6d:84:20:f9:70:70:4f:e5:30:20: 18:8a:6f:08:3f:5d:c2:ae:a8:e0:60:f2:bc:08:da: d0:cf:8c:d3:10:6b:ef:88:5f:a4:76:0e:01:3d:fc: 1e:22:18:80:44:32:f2:11:a9:e0:d4:8c:7b:18:65: 96:37:e4:71:38:2f:5c:aa:6d:14:34:d2:3e:3d:63: 31:0c:5a:16:ba:90:38:95:1b:d4:24:f3:d5:d7:7f: 4a:17:bc:9a:50:29:48:91:a6:3f:e1:29:dd:30:0c: f9:e8:59:d0:82:d4:40:fa:98:0e:bf:2b:c9:e9:b0: f9:68:59:61:17:56:44:4a:d5:bc:df:a4:4d:f2:4b: 9e:84:ba:b5:de:dc:71:28:0f:49:e7:35:a7:b5:57: 92:7c:4b:3b:74:9b:a8:6c:41:48:37:17:5b:78:cb: a2:b0:5a:12:5d:7e:87:34:29:01:0e:20:dd:ec:ad: bf:b7:d4:86:10:4a:6a:de:ec:83:1d:48:60:c8:73: 83:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:1F:C9:BE:CC:99:04:69:17:43:B5:94:07:58:FD:B4:9D:77:06:48 X509v3 Authority Key Identifier: keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:dd:38:b5:69:72:b6:ae:d4:16:0c:35:9a:e8:90:a8:81:21: a4:c5:3b:20:3f:03:78:d5:a1:83:ec:d6:b4:5b:8a:c6:3b:b8: 9d:26:77:26:91:27:24:23:c3:d4:38:dd:bb:97:a6:4d:00:d0: 06:68:c6:93:37:ec:9c:b8:07:a1:22:64:e3:95:1a:d0:9b:02: 06:b5:de:0d:47:b3:14:65:d7:76:15:9b:56:31:f0:55:8e:b8: 02:c4:49:59:5b:f7:be:a8:37:e9:3e:64:77:97:6c:47:cf:d0: e9:e8:27:d3:8d:9d:e9:c5:f6:50:7c:2a:83:63:85:de:41:89: 2e:b9:d7:92:95:ef:b6:48:06:25:6d:c1:9c:3b:c6:17:92:11: f9:5c:39:39:00:a2:f6:5d:cf:37:bc:76:13:fb:20:4a:0e:ff: d2:29:68:7b:46:a4:9e:18:02:07:c2:ee:47:9f:37:21:39:94: 18:5b:af:e9:6a:d1:3d:b5:27:94:a4:18:91:d1:12:08:70:1b: cf:f6:b6:af:52:f8:9b:34:6f:85:8d:27:fd:5c:2e:9f:06:48: e1:d2:94:0d:37:51:31:8a:3f:63:91:7b:ae:7a:43:4f:8e:28: 33:8d:bc:d5:35:8d:3e:de:4c:7c:b6:23:fb:6c:7a:82:6d:89: f7:16:95:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mm5z8B5781XWWPY2X+UnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZjA2NWM4YmRiNzhmZjI5NGY3YzU0NTQ5NzFkYmZhYmZi NmMxODQwHhcNMjYwMTI2MDAwMDUxWhcNMjYwMTI3MDAwMDUxWjAzMTEwLwYDVQQD EyhlODFmYzliZWNjOTkwNDY5MTc0M2I1OTQwNzU4ZmRiNDlkNzcwNjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vF2K8TIalP+m0mVoWXCOrd95caH UH/VLjnXehEl3qsASft9/5+K+8xo31vl63itwSTJzLVAHIC3MLWK3pQWEm2EIPlw cE/lMCAYim8IP13CrqjgYPK8CNrQz4zTEGvviF+kdg4BPfweIhiARDLyEang1Ix7 GGWWN+RxOC9cqm0UNNI+PWMxDFoWupA4lRvUJPPV139KF7yaUClIkaY/4SndMAz5 6FnQgtRA+pgOvyvJ6bD5aFlhF1ZEStW836RN8kuehLq13txxKA9J5zWntVeSfEs7 dJuobEFINxdbeMuisFoSXX6HNCkBDiDd7K2/t9SGEEpq3uyDHUhgyHOD4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOgfyb7MmQRpF0O1lAdY/bSddwZIMB8GA1UdIwQY MBaAFNXwZci9t4/ylPfFRUlx2/q/tsGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWZCbHlMMjNqX0tVOThWRlNYSGItci0yd1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9mMjc3ZWEtNzI2YS00MDUyLThlNWIt MzVhNWRjMmM3OTJjLzEvMWZCbHlMMjNqX0tVOThWRlNYSGItci0yd1lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9mMjc3ZWEtNzI2YS00MDUyLThlNWItMzVhNWRjMmM3OTJj LzEvMWZCbHlMMjNqX0tVOThWRlNYSGItci0yd1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFN04tWly tq7UFgw1muiQqIEhpMU7ID8DeNWhg+zWtFuKxju4nSZ3JpEnJCPD1Djdu5emTQDQ BmjGkzfsnLgHoSJk45Ua0JsCBrXeDUezFGXXdhWbVjHwVY64AsRJWVv3vqg36T5k d5dsR8/Q6egn042d6cX2UHwqg2OF3kGJLrnXkpXvtkgGJW3BnDvGF5IR+Vw5OQCi 9l3PN7x2E/sgSg7/0iloe0aknhgCB8LuR583ITmUGFuv6WrRPbUnlKQYkdESCHAb z/a2r1L4mzRvhY0n/VwunwZI4dKUDTdRMYo/Y5F7rnpDT44oM4281TWNPt5MfLYj +2x6gm2J9xaVIw== -----END CERTIFICATE-----Generated at Mon Jan 26 04:24:43 2026 by rpki-client