This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft File: 1pI99NrpGVDPANI1_jngDuo4FtI.mft (raw, json) Hash identifier: REBIHhxE8Ir4PRaTTQrcfILcjuY4XjokWLtIAIJB8t0= Subject key identifier: 62:63:5B:2D:1F:08:A1:B1:F3:92:3D:C7:31:22:D4:23:B7:E2:58:81 Authority key identifier: D6:92:3D:F4:DA:E9:19:50:CF:00:D2:35:FE:39:E0:0E:EA:38:16:D2 Certificate issuer: /CN=d6923df4dae91950cf00d235fe39e00eea3816d2 Certificate serial: 019BF7D1C634C40B397626F7E262EF7C94E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft Manifest number: 17EA Signing time: Mon 26 Jan 2026 01:01:18 +0000 Manifest this update: Mon 26 Jan 2026 01:01:18 +0000 Manifest next update: Tue 27 Jan 2026 01:01:18 +0000 Files and hashes: 1: 1pI99NrpGVDPANI1_jngDuo4FtI.crl (hash: 4ykcyTSpTB8fczaTXMeTj8Aq7UNziJP4UmHf2w89kc4=) 2: 7WrVoWRcLHU2Bsy4ilW5Cx0arVE.roa (hash: /TUreq9BRtjv30vH+llUuJBYCO9XE8y+WYf/yceedfM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d1:c6:34:c4:0b:39:76:26:f7:e2:62:ef:7c:94:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6923df4dae91950cf00d235fe39e00eea3816d2 Validity Not Before: Jan 26 01:01:18 2026 GMT Not After : Jan 27 01:01:18 2026 GMT Subject: CN=62635b2d1f08a1b1f3923dc73122d423b7e25881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7b:13:45:22:ca:9e:a3:de:ef:64:3e:e9:85: c0:ff:87:a3:bd:c1:c5:57:b7:a8:16:3e:87:fe:d3: 86:1a:36:53:44:63:81:29:87:71:a0:1e:e2:f0:a5: dd:89:18:15:55:70:c9:5d:38:5c:2a:d7:69:88:cb: 3d:02:f9:8f:fa:0f:50:32:b1:36:e0:c8:1a:62:aa: 5b:16:7d:8d:a6:b1:bb:8c:31:72:91:18:1d:03:0b: 7d:bc:8b:e6:e6:4b:d7:c0:1c:e8:df:35:15:2e:9b: ac:a4:ff:64:69:a3:ed:b5:f5:f4:66:a5:39:68:45: 70:b2:d8:26:03:27:e2:f5:f4:26:86:0c:5e:ad:b0: 50:ec:e4:77:5a:de:26:97:5a:98:7f:5f:b6:4c:f7: 2e:a3:dc:a5:de:fe:15:8a:c2:e2:f4:40:94:51:66: f4:32:19:7d:44:7f:e4:88:c7:98:92:1b:aa:96:75: bc:b9:77:cc:53:27:63:11:5f:8a:d8:cb:06:c2:f9: 82:e1:bc:db:a1:55:54:2f:9b:3e:50:dd:fc:b6:33: 93:21:99:12:c9:a5:d5:a4:a8:68:41:d2:8f:22:dc: 82:40:eb:a5:3a:c9:a9:9b:93:48:3d:e9:5d:ed:43: fe:d6:98:43:cb:6d:20:f9:9a:4c:e8:26:c1:a6:7c: 62:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:63:5B:2D:1F:08:A1:B1:F3:92:3D:C7:31:22:D4:23:B7:E2:58:81 X509v3 Authority Key Identifier: keyid:D6:92:3D:F4:DA:E9:19:50:CF:00:D2:35:FE:39:E0:0E:EA:38:16:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:db:de:45:0f:2f:27:dd:28:0a:57:a2:65:36:6f:bd:5d:ae: b3:94:4a:78:d7:aa:f1:fa:35:aa:68:a0:82:ed:75:e5:68:4c: 63:01:51:7d:16:ae:4e:6a:b3:bb:a8:62:1a:25:04:fd:ae:d8: 2d:a2:eb:8e:8e:fb:79:55:d9:96:5e:bd:1c:72:1e:31:14:5d: 0c:6c:52:b2:56:cb:a4:38:7a:e2:7e:85:85:25:c5:c2:46:8f: 22:73:00:48:3f:a4:0f:03:0b:1f:61:2d:d0:d2:c3:bd:bb:d6: ba:3e:db:6d:14:7c:1e:f2:5e:be:90:6f:b2:74:6a:e9:a2:6a: 5c:dd:85:4c:d7:74:52:8e:9f:54:bc:7f:b9:09:7f:8b:f1:b2: 4b:09:10:a9:51:14:5d:4b:49:73:91:b0:e5:29:5a:a9:02:f7: 04:5e:17:65:39:cb:57:7b:65:78:e6:fb:0f:7f:ba:ed:69:00: 71:02:d4:d1:62:af:1d:b3:72:14:14:8e:bd:76:f5:e9:eb:44: 93:bf:c0:1e:b6:f3:d8:9d:0a:45:e2:df:32:ae:f3:90:5c:fa: 6e:cd:6d:ea:28:5b:90:7c:3c:09:b5:4d:6b:a5:08:07:f0:da: 7b:e8:ed:7e:dd:4f:7a:fe:25:47:0d:1f:36:3e:61:c1:17:12: 32:05:89:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30cY0xAs5dib34mLvfJTlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2OTIzZGY0ZGFlOTE5NTBjZjAwZDIzNWZlMzllMDBlZWEz ODE2ZDIwHhcNMjYwMTI2MDEwMTE4WhcNMjYwMTI3MDEwMTE4WjAzMTEwLwYDVQQD Eyg2MjYzNWIyZDFmMDhhMWIxZjM5MjNkYzczMTIyZDQyM2I3ZTI1ODgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHsTRSLKnqPe72Q+6YXA/4ejvcHF V7eoFj6H/tOGGjZTRGOBKYdxoB7i8KXdiRgVVXDJXThcKtdpiMs9AvmP+g9QMrE2 4MgaYqpbFn2NprG7jDFykRgdAwt9vIvm5kvXwBzo3zUVLpuspP9kaaPttfX0ZqU5 aEVwstgmAyfi9fQmhgxerbBQ7OR3Wt4ml1qYf1+2TPcuo9yl3v4VisLi9ECUUWb0 Mhl9RH/kiMeYkhuqlnW8uXfMUydjEV+K2MsGwvmC4bzboVVUL5s+UN38tjOTIZkS yaXVpKhoQdKPItyCQOulOsmpm5NIPeld7UP+1phDy20g+ZpM6CbBpnxiQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGJjWy0fCKGx85I9xzEi1CO34liBMB8GA1UdIwQY MBaAFNaSPfTa6RlQzwDSNf454A7qOBbSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXBJOTlOcnBHVkRQQU5JMV9qbmdEdW80RnRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zMjY4MGQtMDNkOS00YWZhLTk0MTYt OGQ2ZmMwMTA1MjNkLzEvMXBJOTlOcnBHVkRQQU5JMV9qbmdEdW80RnRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8zMjY4MGQtMDNkOS00YWZhLTk0MTYtOGQ2ZmMwMTA1MjNk LzEvMXBJOTlOcnBHVkRQQU5JMV9qbmdEdW80RnRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH9veRQ8v J90oCleiZTZvvV2us5RKeNeq8fo1qmiggu115WhMYwFRfRauTmqzu6hiGiUE/a7Y LaLrjo77eVXZll69HHIeMRRdDGxSslbLpDh64n6FhSXFwkaPInMASD+kDwMLH2Et 0NLDvbvWuj7bbRR8HvJevpBvsnRq6aJqXN2FTNd0Uo6fVLx/uQl/i/GySwkQqVEU XUtJc5Gw5SlaqQL3BF4XZTnLV3tleOb7D3+67WkAcQLU0WKvHbNyFBSOvXb16etE k7/AHrbz2J0KReLfMq7zkFz6bs1t6ihbkHw8CbVNa6UIB/Dae+jtft1Pev4lRw0f Nj5hwRcSMgWJjQ== -----END CERTIFICATE-----Generated at Mon Jan 26 10:18:45 2026 by rpki-client