This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft File: 1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft (raw, json) Hash identifier: WOaWMnVn0nkY9DfNqBAgYPvpeCfkwkB+KOyw2rGLxnY= Subject key identifier: BF:5E:06:FF:8A:A9:E3:F4:39:32:DF:F1:F0:7E:6F:A9:6A:23:24:37 Authority key identifier: FA:E0:14:64:A6:95:B0:F6:F5:2F:51:1B:CC:12:40:FA:28:4D:3D:CF Certificate issuer: /CN=fae01464a695b0f6f52f511bcc1240fa284d3dcf Certificate serial: 019BF619FC61AE16BDB36C311C91501A897E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft Manifest number: 0F88 Signing time: Sun 25 Jan 2026 17:00:56 +0000 Manifest this update: Sun 25 Jan 2026 17:00:56 +0000 Manifest next update: Mon 26 Jan 2026 17:00:56 +0000 Files and hashes: 1: 1-uAUZKaVsPb1L1EbzBJA-ihNPc8.crl (hash: ZmdIdLrCw6EAvjHGXjqK2eb8FCiBqM1/fVTphMQrwP4=) 2: CqbH3RIH6k3OGToDcKs74wUqaFs.roa (hash: 4evCpjOyfa/KENR+HMxzfPquOr1nNuAfj2oYSaueXwY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft rsync://rpki.ripe.net/repository/DEFAULT/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:fc:61:ae:16:bd:b3:6c:31:1c:91:50:1a:89:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fae01464a695b0f6f52f511bcc1240fa284d3dcf Validity Not Before: Jan 25 17:00:56 2026 GMT Not After : Jan 26 17:00:56 2026 GMT Subject: CN=bf5e06ff8aa9e3f43932dff1f07e6fa96a232437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d5:ff:d9:3d:aa:aa:84:2b:de:7d:d6:5a:0e: da:7a:e2:90:eb:8d:98:8e:28:fd:ca:ea:1f:8a:09: 12:63:cd:39:6b:1c:5a:b0:6d:0b:bc:32:61:49:a4: b8:8d:2b:f2:8c:c1:5d:fb:70:49:1b:64:68:db:3a: 9e:0d:13:20:24:08:69:b7:5c:32:3e:38:7f:8c:56: 25:4f:1c:51:a7:9f:f0:78:38:a2:7d:f1:19:ad:2b: 25:5f:0d:45:e5:ec:3d:e3:7e:69:d9:18:7f:72:5d: ce:2a:e6:8f:b5:4c:ec:22:41:0c:0e:f5:30:ba:95: 57:6c:9e:76:17:ef:0b:2e:f2:7c:57:84:86:84:c2: 1e:46:4c:fd:21:32:44:36:15:6b:5d:15:af:5c:6f: 36:45:0b:9f:f9:c6:10:24:36:66:9c:d4:21:2f:5d: f7:eb:74:85:6d:85:31:ab:72:62:f0:2c:97:a9:19: 1e:c2:23:9a:70:81:df:5e:c5:f3:99:29:09:cf:a3: 5a:39:93:06:8c:51:64:56:d5:29:b9:c0:63:a5:1f: fb:c1:4a:38:dd:e5:cb:07:49:25:4d:84:55:ef:59: 55:83:9a:7e:ff:f4:b0:78:06:a4:bc:a6:21:ce:43: 74:d1:48:f2:1b:b0:2a:54:1e:33:ab:b2:44:64:fd: 12:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:5E:06:FF:8A:A9:E3:F4:39:32:DF:F1:F0:7E:6F:A9:6A:23:24:37 X509v3 Authority Key Identifier: keyid:FA:E0:14:64:A6:95:B0:F6:F5:2F:51:1B:CC:12:40:FA:28:4D:3D:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:03:a1:45:af:af:b6:2a:8b:9c:21:1c:b9:1b:95:82:2a:dd: 41:41:43:4c:82:fe:2c:63:e5:ae:56:fc:10:75:ec:8e:1c:6b: 1e:01:4e:5a:90:c7:66:ca:26:f3:07:01:95:4c:9a:f2:14:37: f2:8e:8d:7d:ae:fc:12:f2:d8:06:89:a1:17:d1:6c:f5:ba:d5: e9:13:52:de:33:38:01:4a:3b:15:4f:25:8b:68:49:23:33:9e: 27:39:b5:c3:f0:40:99:42:50:37:0a:da:b9:b8:1a:fb:51:bb: fa:9d:b7:70:ff:53:c8:dd:5e:5d:1a:ba:42:d9:1c:12:d1:1c: 76:d4:b9:88:12:cb:f7:5f:40:fd:45:2f:4c:24:07:9b:2f:a3: 81:d3:f0:f9:c8:72:38:31:df:d2:b7:4f:ad:53:4d:ed:4d:ff: fc:f0:f7:3b:28:50:1d:3d:65:60:0c:6f:70:17:b6:e9:47:d3: f8:9a:65:d3:7d:ce:3f:06:4f:72:ec:a4:bb:b0:86:4f:c4:51: 44:a1:51:0f:63:ec:b6:81:36:2d:ad:dd:98:06:42:07:6f:ee: 45:50:44:9d:fc:77:6a:b9:ba:d6:02:dc:dd:41:5a:0f:d8:84: bf:41:ee:06:4b:d3:9a:49:f2:cc:70:0f:83:b7:9f:da:d7:81: 4f:5b:cf:48 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZv2Gfxhrha9s2wxHJFQGol+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZTAxNDY0YTY5NWIwZjZmNTJmNTExYmNjMTI0MGZhMjg0 ZDNkY2YwHhcNMjYwMTI1MTcwMDU2WhcNMjYwMTI2MTcwMDU2WjAzMTEwLwYDVQQD EyhiZjVlMDZmZjhhYTllM2Y0MzkzMmRmZjFmMDdlNmZhOTZhMjMyNDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtX/2T2qqoQr3n3WWg7aeuKQ642Y jij9yuofigkSY805axxasG0LvDJhSaS4jSvyjMFd+3BJG2Ro2zqeDRMgJAhpt1wy Pjh/jFYlTxxRp5/weDiiffEZrSslXw1F5ew9435p2Rh/cl3OKuaPtUzsIkEMDvUw upVXbJ52F+8LLvJ8V4SGhMIeRkz9ITJENhVrXRWvXG82RQuf+cYQJDZmnNQhL133 63SFbYUxq3Ji8CyXqRkewiOacIHfXsXzmSkJz6NaOZMGjFFkVtUpucBjpR/7wUo4 3eXLB0klTYRV71lVg5p+//SweAakvKYhzkN00UjyG7AqVB4zq7JEZP0SMQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFL9eBv+KqeP0OTLf8fB+b6lqIyQ3MB8GA1UdIwQY MBaAFPrgFGSmlbD29S9RG8wSQPooTT3PMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS11QVVaS2FWc1BiMUwxRWJ6QkpBLWloTlBjOC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMvMWM2NzA0LTUxMGEtNDgwMC1hODkw LTMyMzUyZjk2YTYyMS8xLzEtdUFVWkthVnNQYjFMMUViekJKQS1paE5QYzgubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2JjLzFjNjcwNC01MTBhLTQ4MDAtYTg5MC0zMjM1MmY5NmE2 MjEvMS8xLXVBVVpLYVZzUGIxTDFFYnpCSkEtaWhOUGM4LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsgOh Ra+vtiqLnCEcuRuVgirdQUFDTIL+LGPlrlb8EHXsjhxrHgFOWpDHZsom8wcBlUya 8hQ38o6Nfa78EvLYBomhF9Fs9brV6RNS3jM4AUo7FU8li2hJIzOeJzm1w/BAmUJQ Nwraubga+1G7+p23cP9TyN1eXRq6QtkcEtEcdtS5iBLL919A/UUvTCQHmy+jgdPw +chyODHf0rdPrVNN7U3//PD3OyhQHT1lYAxvcBe26UfT+Jpl033OPwZPcuyku7CG T8RRRKFRD2PstoE2La3dmAZCB2/uRVBEnfx3arm61gLc3UFaD9iEv0HuBkvTmkny zHAPg7ef2teBT1vPSA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:14:14 2026 by rpki-client