This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft File: 1O219t5yQ2FIs1pZA38jNBUN2zY.mft (raw, json) Hash identifier: jntcDUVPA1c2tpK3ogWVYlyRExQGQ6xvGf7YQpOnNF0= Subject key identifier: D6:DF:9E:7A:BB:4E:C1:07:88:C8:50:56:AB:46:29:96:04:24:20:10 Authority key identifier: D4:ED:B5:F6:DE:72:43:61:48:B3:5A:59:03:7F:23:34:15:0D:DB:36 Certificate issuer: /CN=d4edb5f6de72436148b35a59037f2334150ddb36 Certificate serial: 019BF6F562002E1CDF353E88AC94C835FC37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft Manifest number: 177C Signing time: Sun 25 Jan 2026 21:00:35 +0000 Manifest this update: Sun 25 Jan 2026 21:00:35 +0000 Manifest next update: Mon 26 Jan 2026 21:00:35 +0000 Files and hashes: 1: 1O219t5yQ2FIs1pZA38jNBUN2zY.crl (hash: A1HZiECd0Kpz+23E75GiULOoK/bIAougPex+IQbdivU=) 2: RpCy1JXxo-ZI0wF9fz-fX4KJGZQ.roa (hash: 3/7dLJaax8heeK87EWODxuRiV6OLm+WDskuSJCjvPmQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:62:00:2e:1c:df:35:3e:88:ac:94:c8:35:fc:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4edb5f6de72436148b35a59037f2334150ddb36 Validity Not Before: Jan 25 21:00:35 2026 GMT Not After : Jan 26 21:00:35 2026 GMT Subject: CN=d6df9e7abb4ec10788c85056ab46299604242010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1d:d3:60:69:ba:a4:9d:db:5d:e3:ce:60:c0: 79:23:8c:bd:b3:96:13:46:fa:6f:eb:e6:cb:0a:0c: 25:50:bf:86:62:8a:24:e3:76:5f:da:96:1a:2e:88: 0b:0e:b0:ea:ec:c6:9c:d1:4c:6b:76:e9:d5:cd:3c: 23:b9:35:30:3d:71:95:c3:fa:e6:71:fb:c5:09:ae: e5:bb:45:3e:7d:04:ec:b8:bd:05:9c:eb:a0:e5:a3: be:3b:e3:09:b0:ac:3f:72:c4:61:ca:5c:42:3e:61: c8:75:0d:0a:78:64:ec:bc:8b:50:6e:f9:87:74:c9: 7e:9f:a2:68:f0:51:24:96:b9:6e:32:80:73:91:df: ca:1b:ac:68:f2:77:9b:dd:9e:b3:99:d0:fc:67:e8: 75:a4:55:9b:2d:cc:d8:38:3c:0e:cd:99:0d:a4:a1: da:7e:2c:7a:92:05:b9:80:dd:d7:4c:46:5f:e7:9a: cc:d9:9d:92:61:6a:7a:d6:80:db:c8:a5:c8:05:5b: 20:6c:01:0c:f3:23:2c:f4:90:24:15:ba:bb:db:26: 87:48:a3:a6:6f:04:6a:5e:e6:fa:8e:6e:e3:6d:0a: 56:8b:e9:a1:f1:9b:85:74:e3:c6:1d:07:d9:a2:80: ac:b5:51:de:18:af:61:55:fe:03:59:d7:42:ac:0a: 44:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:DF:9E:7A:BB:4E:C1:07:88:C8:50:56:AB:46:29:96:04:24:20:10 X509v3 Authority Key Identifier: keyid:D4:ED:B5:F6:DE:72:43:61:48:B3:5A:59:03:7F:23:34:15:0D:DB:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:89:4d:79:90:f1:0d:6a:64:82:8b:20:ec:8a:6d:ba:55:a4: c6:b9:ad:ed:f3:ce:b4:f2:eb:82:3c:83:5c:5b:31:cb:ae:c0: 78:da:49:de:ee:52:2d:46:81:68:7f:25:c1:1b:a3:1f:5f:80: 93:5d:99:e6:b7:e4:a5:bc:b0:73:0c:05:be:9d:29:01:58:dc: 31:e8:2a:10:cb:90:be:8f:af:29:91:49:c1:12:e6:3e:01:89: 15:df:0a:a6:cc:e0:52:6b:02:20:a0:6f:b9:da:c3:de:da:9c: fc:98:aa:83:c3:d7:19:9e:6b:34:ec:00:59:11:e4:67:b9:7f: 1f:17:b0:9b:6f:43:b7:9c:56:9e:3f:73:ac:95:74:df:37:c2: 50:74:22:d8:6f:59:91:c0:95:c5:ad:60:1b:cb:1b:e1:cf:a1: 9f:8d:83:ad:18:95:3a:55:3c:36:81:92:68:67:0a:0f:83:f1: eb:95:77:f6:cc:28:6a:b5:6c:8d:c2:52:67:e7:58:5f:09:c1: ea:5e:59:e7:a6:aa:26:4b:22:fe:8f:1c:15:41:66:c8:b1:3f: 84:48:77:63:f8:3f:bb:3d:ff:4a:75:42:ce:f2:f3:74:49:eb: 27:68:c0:c4:f5:09:a1:7a:a5:ef:a1:08:99:ee:7d:3c:1a:7d: 69:d6:e2:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29WIALhzfNT6IrJTINfw3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ZWRiNWY2ZGU3MjQzNjE0OGIzNWE1OTAzN2YyMzM0MTUw ZGRiMzYwHhcNMjYwMTI1MjEwMDM1WhcNMjYwMTI2MjEwMDM1WjAzMTEwLwYDVQQD EyhkNmRmOWU3YWJiNGVjMTA3ODhjODUwNTZhYjQ2Mjk5NjA0MjQyMDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwx3TYGm6pJ3bXePOYMB5I4y9s5YT Rvpv6+bLCgwlUL+GYook43Zf2pYaLogLDrDq7Mac0UxrdunVzTwjuTUwPXGVw/rm cfvFCa7lu0U+fQTsuL0FnOug5aO+O+MJsKw/csRhylxCPmHIdQ0KeGTsvItQbvmH dMl+n6Jo8FEklrluMoBzkd/KG6xo8neb3Z6zmdD8Z+h1pFWbLczYODwOzZkNpKHa fix6kgW5gN3XTEZf55rM2Z2SYWp61oDbyKXIBVsgbAEM8yMs9JAkFbq72yaHSKOm bwRqXub6jm7jbQpWi+mh8ZuFdOPGHQfZooCstVHeGK9hVf4DWddCrApEvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNbfnnq7TsEHiMhQVqtGKZYEJCAQMB8GA1UdIwQY MBaAFNTttfbeckNhSLNaWQN/IzQVDds2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU8yMTl0NXlRMkZJczFwWkEzOGpOQlVOMnpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zYTUyNTgtOTg5ZC00MDBiLWI3Yjct NDU0YzkzYzA2NWEwLzEvMU8yMTl0NXlRMkZJczFwWkEzOGpOQlVOMnpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8zYTUyNTgtOTg5ZC00MDBiLWI3YjctNDU0YzkzYzA2NWEw LzEvMU8yMTl0NXlRMkZJczFwWkEzOGpOQlVOMnpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPIlNeZDx DWpkgosg7IptulWkxrmt7fPOtPLrgjyDXFsxy67AeNpJ3u5SLUaBaH8lwRujH1+A k12Z5rfkpbywcwwFvp0pAVjcMegqEMuQvo+vKZFJwRLmPgGJFd8KpszgUmsCIKBv udrD3tqc/Jiqg8PXGZ5rNOwAWRHkZ7l/Hxewm29Dt5xWnj9zrJV03zfCUHQi2G9Z kcCVxa1gG8sb4c+hn42DrRiVOlU8NoGSaGcKD4Px65V39swoarVsjcJSZ+dYXwnB 6l5Z56aqJksi/o8cFUFmyLE/hEh3Y/g/uz3/SnVCzvLzdEnrJ2jAxPUJoXql76EI me59PBp9adbiUw== -----END CERTIFICATE-----Generated at Mon Jan 26 03:12:01 2026 by rpki-client