This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft File: h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft (raw, json) Hash identifier: BNH6BrspTWNqV7nvPNvFcsAhKt4Cmii+nZEtJGpsuDU= Subject key identifier: 91:8E:7F:EB:FC:F7:1C:BA:C5:78:55:63:B7:DD:A8:03:6F:42:3D:BA Authority key identifier: 87:51:05:4D:FB:FD:AD:22:C4:9E:6B:BA:DA:B3:A1:8F:42:A1:C3:64 Certificate issuer: /CN=8751054dfbfdad22c49e6bbadab3a18f42a1c364 Certificate serial: 019BF4D0618028D904FF4045DB4DC117A246 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h1EFTfv9rSLEnmu62rOhj0Khw2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft Manifest number: 0180 Signing time: Sun 25 Jan 2026 11:00:55 +0000 Manifest this update: Sun 25 Jan 2026 11:00:55 +0000 Manifest next update: Mon 26 Jan 2026 11:00:55 +0000 Files and hashes: 1: H6uqUGEMkw_GDxczJD1M696P_zE.roa (hash: nWnw8H8sn82+YCkD2O0kI6uMQ5WeKNqhPpnI/ZrVopY=) 2: h1EFTfv9rSLEnmu62rOhj0Khw2Q.crl (hash: WUPTMYfqPRsJ+d4fAr6c3kfDt6m0qpo5Qw9TBwMr1Y8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/h1EFTfv9rSLEnmu62rOhj0Khw2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:61:80:28:d9:04:ff:40:45:db:4d:c1:17:a2:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8751054dfbfdad22c49e6bbadab3a18f42a1c364 Validity Not Before: Jan 25 11:00:55 2026 GMT Not After : Jan 26 11:00:55 2026 GMT Subject: CN=918e7febfcf71cbac5785563b7dda8036f423dba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b7:c3:30:83:f9:73:8c:f1:a5:76:17:31:e3: 7b:e0:3f:a2:53:f7:c5:0c:af:e0:47:8e:73:85:56: 1a:a3:6d:25:ea:08:62:dc:f5:d1:d4:50:71:dc:68: 6b:14:2b:c7:6a:5e:e3:d1:50:14:6e:36:db:e7:ba: 47:d9:7b:4c:d2:22:ef:5e:f1:46:a4:1a:90:b0:8b: 0e:bd:ba:f1:d3:94:55:f3:05:9c:63:97:e4:03:3b: 5a:de:1d:48:8c:73:4e:e7:f4:fd:d4:ad:51:fc:df: c7:86:63:10:74:73:b3:e8:f1:d3:12:5b:f1:10:9a: 55:eb:62:7d:72:7c:41:8e:19:4c:18:13:e6:10:01: da:fb:ac:ab:8b:1e:ca:9b:c4:1a:31:76:66:01:7d: 7d:23:a4:e0:40:cd:ea:a5:d6:1a:34:3c:2e:d8:80: 56:bc:e1:cf:bd:94:8e:5f:9c:2e:89:90:8d:78:c0: 42:a6:fc:b5:60:9b:1d:5f:15:75:97:29:d2:1b:30: b8:86:5d:18:f9:52:85:c4:fe:b2:d0:bd:84:90:a1: 5c:73:45:28:59:4b:17:12:1e:f4:88:48:a2:28:57: f9:0b:6c:9d:a4:de:cf:aa:df:c6:68:21:f0:52:dd: a0:82:b6:8f:2e:fa:53:41:d2:f1:d6:07:af:bc:61: cf:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:8E:7F:EB:FC:F7:1C:BA:C5:78:55:63:B7:DD:A8:03:6F:42:3D:BA X509v3 Authority Key Identifier: keyid:87:51:05:4D:FB:FD:AD:22:C4:9E:6B:BA:DA:B3:A1:8F:42:A1:C3:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1EFTfv9rSLEnmu62rOhj0Khw2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:af:dd:4d:97:33:00:ad:ce:d0:cf:04:46:52:90:6e:ce:f6: 51:1e:97:3c:40:25:d3:e9:27:19:d0:59:e6:a3:b6:42:e5:e6: 44:a8:42:2b:59:47:96:f1:38:71:c9:69:6b:55:c0:77:51:a5: 2c:3d:ce:f7:ee:48:b7:e9:d2:1a:3c:6b:01:5b:50:fa:a6:11: 2e:cf:8d:8a:86:1b:45:40:81:b1:fb:64:09:c8:af:5f:b3:50: cf:9c:8a:a3:64:59:df:2c:0f:05:7c:e0:cb:e4:17:98:94:2e: d3:5c:e0:f3:d2:2a:bf:ab:27:b7:4f:1b:69:72:c9:72:a3:87: de:a8:7a:e9:2e:8f:42:30:66:f0:72:60:ab:b8:9e:35:34:51: 6a:4c:9d:55:c7:cd:1f:33:4f:30:d3:b6:44:94:19:59:5a:2d: 14:e8:e5:ab:68:47:c0:31:03:80:73:3d:9e:e3:f6:64:fb:03: cf:b8:55:44:6f:c0:ca:e4:2b:05:f2:82:bc:cf:5e:fc:90:fe: bc:78:ae:1f:79:18:4f:1a:94:9a:9b:22:4e:a9:19:7d:c3:bc: 33:5a:9d:10:87:da:57:4c:a0:f0:32:f9:6c:6b:e9:b7:14:0c: 05:58:26:ec:27:cc:c1:57:1a:9a:79:e6:2c:e0:94:be:77:70: 94:45:1d:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00GGAKNkE/0BF203BF6JGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NTEwNTRkZmJmZGFkMjJjNDllNmJiYWRhYjNhMThmNDJh MWMzNjQwHhcNMjYwMTI1MTEwMDU1WhcNMjYwMTI2MTEwMDU1WjAzMTEwLwYDVQQD Eyg5MThlN2ZlYmZjZjcxY2JhYzU3ODU1NjNiN2RkYTgwMzZmNDIzZGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLfDMIP5c4zxpXYXMeN74D+iU/fF DK/gR45zhVYao20l6ghi3PXR1FBx3GhrFCvHal7j0VAUbjbb57pH2XtM0iLvXvFG pBqQsIsOvbrx05RV8wWcY5fkAzta3h1IjHNO5/T91K1R/N/HhmMQdHOz6PHTElvx EJpV62J9cnxBjhlMGBPmEAHa+6yrix7Km8QaMXZmAX19I6TgQM3qpdYaNDwu2IBW vOHPvZSOX5wuiZCNeMBCpvy1YJsdXxV1lynSGzC4hl0Y+VKFxP6y0L2EkKFcc0Uo WUsXEh70iEiiKFf5C2ydpN7Pqt/GaCHwUt2ggraPLvpTQdLx1gevvGHPXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJGOf+v89xy6xXhVY7fdqANvQj26MB8GA1UdIwQY MBaAFIdRBU37/a0ixJ5rutqzoY9CocNkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDFFRlRmdjlyU0xFbm11NjJyT2hqMEtodzJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xZGE3ZWMtMWMzNC00NjQ3LTllODMt NzU3OWU4NWExYTQ5LzEvaDFFRlRmdjlyU0xFbm11NjJyT2hqMEtodzJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8xZGE3ZWMtMWMzNC00NjQ3LTllODMtNzU3OWU4NWExYTQ5 LzEvaDFFRlRmdjlyU0xFbm11NjJyT2hqMEtodzJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOK/dTZcz AK3O0M8ERlKQbs72UR6XPEAl0+knGdBZ5qO2QuXmRKhCK1lHlvE4cclpa1XAd1Gl LD3O9+5It+nSGjxrAVtQ+qYRLs+NioYbRUCBsftkCcivX7NQz5yKo2RZ3ywPBXzg y+QXmJQu01zg89Iqv6snt08baXLJcqOH3qh66S6PQjBm8HJgq7ieNTRRakydVcfN HzNPMNO2RJQZWVotFOjlq2hHwDEDgHM9nuP2ZPsDz7hVRG/AyuQrBfKCvM9e/JD+ vHiuH3kYTxqUmpsiTqkZfcO8M1qdEIfaV0yg8DL5bGvptxQMBVgm7CfMwVcamnnm LOCUvndwlEUdHw== -----END CERTIFICATE-----Generated at Sun Jan 25 19:15:27 2026 by rpki-client