This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft File: 1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft (raw, json) Hash identifier: naKgij8ORxb1nNaw1ptG0vUS55jbZI1dIr2ZstbPMyc= Subject key identifier: 7B:43:DA:8B:3E:60:CC:36:2C:0D:9A:73:8F:E0:82:7E:E4:CE:E3:C0 Authority key identifier: F8:BA:41:B6:AD:6E:63:78:0E:C3:F1:21:60:E7:C4:ED:0F:74:69:AC Certificate issuer: /CN=f8ba41b6ad6e63780ec3f12160e7c4ed0f7469ac Certificate serial: 019BF50746774DAC1804E20147F8E596F48C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft Manifest number: 0148 Signing time: Sun 25 Jan 2026 12:00:53 +0000 Manifest this update: Sun 25 Jan 2026 12:00:53 +0000 Manifest next update: Mon 26 Jan 2026 12:00:53 +0000 Files and hashes: 1: 1-LpBtq1uY3gOw_EhYOfE7Q90aaw.crl (hash: mfkVApGOC9jaA6LzsEvpSpkYqc7yGpLROidijCHPgIc=) 2: S91SpqjKHj-9za4dXEoQ07MOmwY.roa (hash: mrZK89V5wHR4TTBGwZBPy+vU+mPnk1QYo7P0So8JmRM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft rsync://rpki.ripe.net/repository/DEFAULT/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:46:77:4d:ac:18:04:e2:01:47:f8:e5:96:f4:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8ba41b6ad6e63780ec3f12160e7c4ed0f7469ac Validity Not Before: Jan 25 12:00:53 2026 GMT Not After : Jan 26 12:00:53 2026 GMT Subject: CN=7b43da8b3e60cc362c0d9a738fe0827ee4cee3c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8a:00:8c:97:f4:ce:d3:66:3d:8d:f7:67:9f: 16:70:94:53:9f:58:55:9d:62:10:65:d9:4e:45:61: 04:39:b6:65:55:ce:d7:df:4f:98:4a:4b:22:53:d4: 21:6e:20:47:70:93:53:d4:a6:01:ea:a6:fb:d0:71: 45:88:7f:92:27:98:27:56:d4:42:9a:fa:ad:52:82: a1:4c:f1:63:46:d8:e5:74:a3:59:ba:e3:7f:14:9b: 13:ae:08:f2:0b:2d:d1:10:6e:68:96:ff:54:51:0b: b6:36:4d:e0:9e:df:72:ed:62:0f:76:6c:fd:2a:f4: dd:96:11:56:34:5f:88:ec:b0:fe:3a:d5:fc:66:be: 15:dc:7b:53:c2:36:bf:9c:1d:f9:26:b2:3e:fd:5b: 31:ec:a8:3a:cd:60:7b:0e:1b:82:33:3f:37:5d:9c: 87:60:75:3b:8a:74:0b:d2:c6:eb:d9:8d:be:64:f8: e4:84:79:b1:d2:3e:73:75:60:09:8f:4b:bc:d9:fd: a6:d4:69:4f:e6:56:0d:d9:1a:ca:7b:7f:87:4a:1d: f0:51:ab:a5:39:17:84:a5:e8:fe:87:d3:4d:3e:27: cf:dd:f6:7a:32:18:af:e0:51:32:8f:81:43:c9:65: d3:0a:9e:e0:f4:4d:09:2a:39:8b:e7:05:56:b2:37: 79:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:43:DA:8B:3E:60:CC:36:2C:0D:9A:73:8F:E0:82:7E:E4:CE:E3:C0 X509v3 Authority Key Identifier: keyid:F8:BA:41:B6:AD:6E:63:78:0E:C3:F1:21:60:E7:C4:ED:0F:74:69:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:7e:b0:70:90:cf:b4:99:09:78:60:b4:85:68:1c:5d:57:21: 09:15:12:28:fb:95:e9:14:49:28:83:e0:dd:c3:8b:3e:e1:bc: b5:cd:2b:45:44:83:78:f5:2c:83:9f:59:53:22:a6:29:ef:fc: 2d:bc:12:35:c3:5f:cf:98:fb:ca:3a:d0:a5:1e:44:42:9c:7f: 5a:89:b3:9d:d4:6c:02:f3:9a:21:c4:f2:2a:9e:a2:00:29:55: 5b:de:37:f5:a2:50:e5:d6:15:80:bb:47:02:e1:d7:06:3b:88: 5a:64:0b:a9:f8:ca:20:e6:65:b5:65:d2:db:9d:46:1c:d6:72: 6b:9a:0b:36:fa:e9:04:35:bd:d7:30:e3:e6:19:8c:a7:ec:6f: 22:3f:62:8c:39:73:99:cc:fb:d8:1f:cb:89:cc:ef:83:1c:42: f4:27:3d:6f:d8:de:40:02:50:8d:62:dd:ee:79:16:e7:8f:3f: e0:ce:ec:e3:96:72:04:94:62:f4:12:67:c5:8f:0a:77:b3:94: 62:f7:62:49:d5:65:26:23:63:6e:10:1b:02:65:1d:90:e3:a6: b2:b9:31:3b:0d:d8:9e:53:23:48:69:f2:e4:ce:83:5b:62:bb: e1:d4:a6:70:a5:74:79:0e:a9:a2:a7:da:1c:69:cb:e3:e8:fc: 86:0c:ba:01 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZv1B0Z3TawYBOIBR/jllvSMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YmE0MWI2YWQ2ZTYzNzgwZWMzZjEyMTYwZTdjNGVkMGY3 NDY5YWMwHhcNMjYwMTI1MTIwMDUzWhcNMjYwMTI2MTIwMDUzWjAzMTEwLwYDVQQD Eyg3YjQzZGE4YjNlNjBjYzM2MmMwZDlhNzM4ZmUwODI3ZWU0Y2VlM2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqooAjJf0ztNmPY33Z58WcJRTn1hV nWIQZdlORWEEObZlVc7X30+YSksiU9QhbiBHcJNT1KYB6qb70HFFiH+SJ5gnVtRC mvqtUoKhTPFjRtjldKNZuuN/FJsTrgjyCy3REG5olv9UUQu2Nk3gnt9y7WIPdmz9 KvTdlhFWNF+I7LD+OtX8Zr4V3HtTwja/nB35JrI+/Vsx7Kg6zWB7DhuCMz83XZyH YHU7inQL0sbr2Y2+ZPjkhHmx0j5zdWAJj0u82f2m1GlP5lYN2RrKe3+HSh3wUaul OReEpej+h9NNPifP3fZ6Mhiv4FEyj4FDyWXTCp7g9E0JKjmL5wVWsjd55wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFHtD2os+YMw2LA2ac4/ggn7kzuPAMB8GA1UdIwQY MBaAFPi6QbatbmN4DsPxIWDnxO0PdGmsMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1McEJ0cTF1WTNnT3dfRWhZT2ZFN1E5MGFhdy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvODNlZTZmLWVlODMtNDQ0Yi1iZGM2 LWFlNDQ5NzlmODFkZS8xLzEtTHBCdHExdVkzZ093X0VoWU9mRTdROTBhYXcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2M0LzgzZWU2Zi1lZTgzLTQ0NGItYmRjNi1hZTQ0OTc5Zjgx ZGUvMS8xLUxwQnRxMXVZM2dPd19FaFlPZkU3UTkwYWF3LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWH6w cJDPtJkJeGC0hWgcXVchCRUSKPuV6RRJKIPg3cOLPuG8tc0rRUSDePUsg59ZUyKm Ke/8LbwSNcNfz5j7yjrQpR5EQpx/WomzndRsAvOaIcTyKp6iAClVW9439aJQ5dYV gLtHAuHXBjuIWmQLqfjKIOZltWXS251GHNZya5oLNvrpBDW91zDj5hmMp+xvIj9i jDlzmcz72B/LiczvgxxC9Cc9b9jeQAJQjWLd7nkW548/4M7s45ZyBJRi9BJnxY8K d7OUYvdiSdVlJiNjbhAbAmUdkOOmsrkxOw3YnlMjSGny5M6DW2K74dSmcKV0eQ6p oqfaHGnL4+j8hgy6AQ== -----END CERTIFICATE-----Generated at Sun Jan 25 16:19:32 2026 by rpki-client