This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft File: 1fQ0Wir2tUTNG4541z7AK4iVVG0.mft (raw, json) Hash identifier: pyERpf+uL8iMNyno8fjeomtqXzudO9AgIEkRm3Kcd8M= Subject key identifier: EE:CB:4C:18:7D:00:18:DC:F5:68:93:FB:95:5B:9D:FC:FA:26:8D:C0 Authority key identifier: D5:F4:34:5A:2A:F6:B5:44:CD:1B:8E:78:D7:3E:C0:2B:88:95:54:6D Certificate issuer: /CN=d5f4345a2af6b544cd1b8e78d73ec02b8895546d Certificate serial: 019BFC8AA51D2EDBDA0F42F246EBEE30B7E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft Manifest number: 047F Signing time: Mon 26 Jan 2026 23:01:43 +0000 Manifest this update: Mon 26 Jan 2026 23:01:43 +0000 Manifest next update: Tue 27 Jan 2026 23:01:43 +0000 Files and hashes: 1: 1fQ0Wir2tUTNG4541z7AK4iVVG0.crl (hash: 1lcdV3RxUdvQB30Ehp/mFG7Yqik6H8S17LZQ9pE14Lc=) 2: IebKw_yiTfK_V4_z25ukLjaMeWQ.roa (hash: MAvIvWJqafppESV+KP67qNLbvZAyKKXSx7PlRQfGNY0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:8a:a5:1d:2e:db:da:0f:42:f2:46:eb:ee:30:b7:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5f4345a2af6b544cd1b8e78d73ec02b8895546d Validity Not Before: Jan 26 23:01:43 2026 GMT Not After : Jan 27 23:01:43 2026 GMT Subject: CN=eecb4c187d0018dcf56893fb955b9dfcfa268dc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:09:3d:95:17:e7:6c:62:3e:2a:db:88:10:3c: 67:72:93:de:7b:41:1c:98:89:b5:d0:0e:4e:80:fc: 4b:e8:3b:01:55:6e:ef:e1:f5:0f:26:f0:95:c9:70: e0:50:20:fd:eb:ef:97:97:77:fe:62:3d:09:41:3a: 99:5f:c4:4e:31:b2:94:e2:77:0e:33:dc:da:cd:69: d4:e6:04:4f:1d:44:52:d0:25:37:65:e5:b2:06:88: 38:50:6d:62:93:e6:91:73:29:fe:bb:58:13:92:18: ef:a7:c1:5d:90:27:4c:fe:4d:9e:12:95:75:0c:7f: 62:af:10:0a:27:7e:9a:5c:8d:8a:5e:e6:e5:fa:8c: 4a:0a:7e:ab:42:a8:77:5c:15:e6:7c:8d:d3:97:c8: 93:71:2a:16:66:3c:3d:6e:1e:e5:91:5d:63:42:57: 09:07:11:d7:ad:4a:29:b7:2d:de:e1:84:15:2c:50: cc:9c:2f:e2:ab:1b:ff:67:4d:76:1a:00:15:37:19: 4d:87:bf:7d:c1:a7:1f:94:8f:13:60:df:e7:bd:9c: f3:f5:c8:d8:93:43:67:d4:87:a5:58:ed:c0:88:69: cc:3e:20:55:99:b3:6b:c1:30:ef:b9:87:55:c6:66: 5d:2d:96:9d:61:b5:a6:09:a1:60:8c:1b:81:ae:e1: e4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:CB:4C:18:7D:00:18:DC:F5:68:93:FB:95:5B:9D:FC:FA:26:8D:C0 X509v3 Authority Key Identifier: keyid:D5:F4:34:5A:2A:F6:B5:44:CD:1B:8E:78:D7:3E:C0:2B:88:95:54:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:ea:88:7c:b3:fd:c5:62:5e:57:15:d3:3e:af:49:f9:69:12: 55:7c:a9:a7:fe:39:71:32:5e:6f:4f:96:7d:f7:0d:84:82:68: fb:f7:0f:18:1f:1e:32:55:58:bf:b1:14:60:6c:8c:22:5e:0d: 3d:75:f6:e8:80:52:1c:62:f0:31:56:ab:ef:a2:4e:7a:b5:71: 96:03:5f:b2:6b:d8:bd:54:96:c9:f5:d3:aa:9f:c8:5c:10:1e: 6b:dc:54:03:e5:9a:56:0c:97:26:43:9f:38:45:c5:09:bb:45: 81:48:74:ca:79:47:68:0b:e3:bb:57:88:26:7a:76:75:88:0a: 5b:9c:64:69:45:2f:7b:82:0e:2c:57:ec:ad:d3:41:eb:4f:d0: 81:c3:c2:aa:78:79:f7:40:6a:2e:f6:02:79:31:c2:c3:19:13: 12:b8:a4:8e:58:d6:1d:ae:d6:f7:e6:55:07:54:4d:18:d0:ca: 9d:0f:98:bf:12:bf:3b:27:06:74:e2:7f:14:6d:92:13:fa:89: e8:69:97:69:db:e0:02:36:07:0f:e1:81:58:85:c5:af:af:54: f0:0d:c8:dd:03:5b:af:29:c5:17:8a:1c:f6:63:97:16:6b:f8: 5b:54:61:ad:7d:5e:9f:e2:cf:ee:fb:ea:7b:b7:ef:a8:ec:ca: 8d:89:60:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8iqUdLtvaD0LyRuvuMLfmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZjQzNDVhMmFmNmI1NDRjZDFiOGU3OGQ3M2VjMDJiODg5 NTU0NmQwHhcNMjYwMTI2MjMwMTQzWhcNMjYwMTI3MjMwMTQzWjAzMTEwLwYDVQQD EyhlZWNiNGMxODdkMDAxOGRjZjU2ODkzZmI5NTViOWRmY2ZhMjY4ZGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwk9lRfnbGI+KtuIEDxncpPee0Ec mIm10A5OgPxL6DsBVW7v4fUPJvCVyXDgUCD96++Xl3f+Yj0JQTqZX8ROMbKU4ncO M9zazWnU5gRPHURS0CU3ZeWyBog4UG1ik+aRcyn+u1gTkhjvp8FdkCdM/k2eEpV1 DH9irxAKJ36aXI2KXubl+oxKCn6rQqh3XBXmfI3Tl8iTcSoWZjw9bh7lkV1jQlcJ BxHXrUopty3e4YQVLFDMnC/iqxv/Z012GgAVNxlNh799wacflI8TYN/nvZzz9cjY k0Nn1IelWO3AiGnMPiBVmbNrwTDvuYdVxmZdLZadYbWmCaFgjBuBruHkjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO7LTBh9ABjc9WiT+5Vbnfz6Jo3AMB8GA1UdIwQY MBaAFNX0NFoq9rVEzRuOeNc+wCuIlVRtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWZRMFdpcjJ0VVRORzQ1NDF6N0FLNGlWVkcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC85ZWRmOTEtMzczNi00YmY5LWEzOGIt MjViYjlmYjE5NzIwLzEvMWZRMFdpcjJ0VVRORzQ1NDF6N0FLNGlWVkcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC85ZWRmOTEtMzczNi00YmY5LWEzOGItMjViYjlmYjE5NzIw LzEvMWZRMFdpcjJ0VVRORzQ1NDF6N0FLNGlWVkcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgOqIfLP9 xWJeVxXTPq9J+WkSVXypp/45cTJeb0+WffcNhIJo+/cPGB8eMlVYv7EUYGyMIl4N PXX26IBSHGLwMVar76JOerVxlgNfsmvYvVSWyfXTqp/IXBAea9xUA+WaVgyXJkOf OEXFCbtFgUh0ynlHaAvju1eIJnp2dYgKW5xkaUUve4IOLFfsrdNB60/QgcPCqnh5 90BqLvYCeTHCwxkTErikjljWHa7W9+ZVB1RNGNDKnQ+YvxK/OycGdOJ/FG2SE/qJ 6GmXadvgAjYHD+GBWIXFr69U8A3I3QNbrynFF4oc9mOXFmv4W1RhrX1en+LP7vvq e7fvqOzKjYlgNg== -----END CERTIFICATE-----Generated at Tue Jan 27 02:17:20 2026 by rpki-client