This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft File: 1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft (raw, json) Hash identifier: 25hD+rtEtZO563ubmbKO/KQxa67gEYuE+M4OIO2Ah2M= Subject key identifier: 6C:B6:3A:27:39:E5:3A:CD:9E:69:B3:7A:CF:90:3E:9B:10:2E:97:62 Authority key identifier: FB:95:E6:59:4D:C3:70:53:CE:98:BD:58:89:06:35:91:B3:5E:2D:80 Certificate issuer: /CN=fb95e6594dc37053ce98bd5889063591b35e2d80 Certificate serial: 019BF7D1DE678CBB45F1F4E828416F2ACE34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft Manifest number: 1195 Signing time: Mon 26 Jan 2026 01:01:24 +0000 Manifest this update: Mon 26 Jan 2026 01:01:24 +0000 Manifest next update: Tue 27 Jan 2026 01:01:24 +0000 Files and hashes: 1: 1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl (hash: z9PwnKpdSr0EQOQRskc/5tyhKt0mfOdvqyhyfBQIpQs=) 2: DhpDBX_7AhUzL9AP6J2bnK3aQ1o.roa (hash: CBUZxcykEIqcfYCfDpxjg7qtOjik95UqEoINbP51Nd8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d1:de:67:8c:bb:45:f1:f4:e8:28:41:6f:2a:ce:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb95e6594dc37053ce98bd5889063591b35e2d80 Validity Not Before: Jan 26 01:01:24 2026 GMT Not After : Jan 27 01:01:24 2026 GMT Subject: CN=6cb63a2739e53acd9e69b37acf903e9b102e9762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f8:74:5c:fe:9f:18:4c:91:46:b1:95:79:5d: a1:ab:2c:8f:2a:5a:87:fd:3e:d4:44:00:2c:ac:c4: cf:c8:60:4e:ff:26:44:ad:2d:99:70:fd:db:47:ce: cf:f6:9e:81:02:e2:d1:ad:0a:71:36:73:fe:fe:d5: c9:f6:8d:52:1a:35:66:2c:1d:74:37:cb:09:61:be: 93:ce:ff:46:5f:64:f7:8f:93:90:46:66:fb:55:11: 10:0b:2c:81:d8:8b:9b:a0:75:e0:e3:79:b3:4c:b7: 33:3b:02:53:2f:6b:de:a3:59:46:1b:0b:9e:fc:70: c3:1f:5b:38:7f:43:3a:b9:4a:42:96:db:00:62:81: 35:40:0c:ef:a3:c9:4f:9a:ef:d0:27:c8:ff:a3:13: d5:17:21:fb:2f:b9:72:47:68:c4:fe:a9:33:fd:4b: 83:f6:b6:0d:80:4b:99:0a:bc:98:bc:eb:05:62:1d: 85:fb:0d:d7:27:6b:6c:f3:c9:ca:9a:3d:65:39:8e: e9:f2:ad:62:7a:f7:30:6e:a8:b5:8d:12:89:e9:8c: 83:4f:06:fa:88:9e:77:60:c3:2b:d8:2c:ea:a1:4f: 0d:6f:5b:4e:e6:0a:5f:3c:ce:58:ef:b1:03:46:ec: 05:30:2e:09:17:a5:1c:15:ea:5d:77:69:c2:de:79: 52:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:B6:3A:27:39:E5:3A:CD:9E:69:B3:7A:CF:90:3E:9B:10:2E:97:62 X509v3 Authority Key Identifier: keyid:FB:95:E6:59:4D:C3:70:53:CE:98:BD:58:89:06:35:91:B3:5E:2D:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:7f:a1:fa:cf:eb:c7:ec:1c:b9:f5:c0:c2:fb:a4:c3:ed:65: 59:3d:ac:dc:a1:6f:6d:03:cb:c7:c5:6e:39:a2:7a:1b:1f:65: 30:a4:0e:61:59:4b:2a:37:58:e1:c9:c6:ef:8c:51:c9:20:e8: bb:14:79:3f:ce:9e:a9:67:3a:17:d4:3f:57:72:b2:32:09:06: 9e:80:71:18:70:8e:ba:2c:b7:23:09:10:b8:53:65:76:c9:1b: a3:9e:24:1e:3f:cf:29:af:8a:e9:f7:7e:9c:5f:72:7b:bf:f4: 47:04:52:22:e5:96:77:29:cf:41:6d:46:4e:92:64:21:97:a1: 19:d6:fa:41:87:4c:cd:92:26:55:96:f6:d4:e3:80:54:b4:d2: 2c:fe:27:aa:f1:72:10:4f:96:28:c0:15:d4:70:7a:aa:6b:1c: 21:65:39:c1:e6:af:07:0f:b6:c0:4e:68:6d:f8:7a:8d:7c:a5: b2:84:11:62:b4:a4:28:98:e0:f6:bb:41:b8:b9:c1:13:e1:ad: 16:e9:75:f8:5e:20:fa:9d:bc:be:5f:c8:e4:6a:e6:26:6d:e4: a6:02:5d:ce:cf:69:e2:b9:4a:ce:c8:42:1f:c2:27:4d:16:44: 16:df:2f:9c:62:73:8c:90:eb:ec:86:ec:63:de:c2:08:2d:2f: ea:7f:c8:d9 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZv30d5njLtF8fToKEFvKs40MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiOTVlNjU5NGRjMzcwNTNjZTk4YmQ1ODg5MDYzNTkxYjM1 ZTJkODAwHhcNMjYwMTI2MDEwMTI0WhcNMjYwMTI3MDEwMTI0WjAzMTEwLwYDVQQD Eyg2Y2I2M2EyNzM5ZTUzYWNkOWU2OWIzN2FjZjkwM2U5YjEwMmU5NzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/h0XP6fGEyRRrGVeV2hqyyPKlqH /T7URAAsrMTPyGBO/yZErS2ZcP3bR87P9p6BAuLRrQpxNnP+/tXJ9o1SGjVmLB10 N8sJYb6Tzv9GX2T3j5OQRmb7VREQCyyB2IuboHXg43mzTLczOwJTL2veo1lGGwue /HDDH1s4f0M6uUpCltsAYoE1QAzvo8lPmu/QJ8j/oxPVFyH7L7lyR2jE/qkz/UuD 9rYNgEuZCryYvOsFYh2F+w3XJ2ts88nKmj1lOY7p8q1ievcwbqi1jRKJ6YyDTwb6 iJ53YMMr2CzqoU8Nb1tO5gpfPM5Y77EDRuwFMC4JF6UcFepdd2nC3nlSewIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFGy2Oic55TrNnmmzes+QPpsQLpdiMB8GA1UdIwQY MBaAFPuV5llNw3BTzpi9WIkGNZGzXi2AMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS01WG1XVTNEY0ZQT21MMVlpUVkxa2JOZUxZQS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmIvNzgxNzhmLTIxOTktNDhlMC05MDFk LWJkYTIxNWI4MTYzNi8xLzEtNVhtV1UzRGNGUE9tTDFZaVFZMWtiTmVMWUEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2JiLzc4MTc4Zi0yMTk5LTQ4ZTAtOTAxZC1iZGEyMTViODE2 MzYvMS8xLTVYbVdVM0RjRlBPbUwxWWlRWTFrYk5lTFlBLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADH+h +s/rx+wcufXAwvukw+1lWT2s3KFvbQPLx8VuOaJ6Gx9lMKQOYVlLKjdY4cnG74xR ySDouxR5P86eqWc6F9Q/V3KyMgkGnoBxGHCOuiy3IwkQuFNldskbo54kHj/PKa+K 6fd+nF9ye7/0RwRSIuWWdynPQW1GTpJkIZehGdb6QYdMzZImVZb21OOAVLTSLP4n qvFyEE+WKMAV1HB6qmscIWU5weavBw+2wE5obfh6jXylsoQRYrSkKJjg9rtBuLnB E+GtFul1+F4g+p28vl/I5GrmJm3kpgJdzs9p4rlKzshCH8InTRZEFt8vnGJzjJDr 7IbsY97CCC0v6n/I2Q== -----END CERTIFICATE-----Generated at Mon Jan 26 05:37:40 2026 by rpki-client