This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft File: 1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft (raw, json) Hash identifier: +Ueu5zCo3et7B0wwEXNkjJlrVvJKEkwBfPERJ14AaTk= Subject key identifier: 96:47:71:E9:C6:7C:7F:49:41:CA:F6:09:08:74:9B:20:E0:0B:4C:C5 Authority key identifier: FA:14:E8:15:3C:D3:F9:1C:33:39:7F:9B:7D:F9:1B:F1:73:C4:D1:6B Certificate issuer: /CN=fa14e8153cd3f91c33397f9b7df91bf173c4d16b Certificate serial: 019BF6BF834ECA77134CED7E0F2F3BB0363D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft Manifest number: 01F3 Signing time: Sun 25 Jan 2026 20:01:44 +0000 Manifest this update: Sun 25 Jan 2026 20:01:44 +0000 Manifest next update: Mon 26 Jan 2026 20:01:44 +0000 Files and hashes: 1: 1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl (hash: XqF9dHxX0mBKyyGsfqN2ve1Z+IVSGC/iEiXIpB9A4gs=) 2: FKy4QquWDiXsB6434vLtVQiZ1BI.roa (hash: E7KgcSUkFp282kfhM/A9rdhpcSBu+wYieQbkPSRtk8I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:83:4e:ca:77:13:4c:ed:7e:0f:2f:3b:b0:36:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa14e8153cd3f91c33397f9b7df91bf173c4d16b Validity Not Before: Jan 25 20:01:44 2026 GMT Not After : Jan 26 20:01:44 2026 GMT Subject: CN=964771e9c67c7f4941caf60908749b20e00b4cc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:80:f9:19:6a:c4:cd:3f:df:45:fd:3b:90:8b: 04:88:da:d6:e9:7f:8b:bb:62:05:90:33:0a:91:4e: 68:73:e7:f7:8e:40:6c:5a:1e:76:dd:50:26:35:ad: d4:19:bb:3c:3f:a1:82:f2:5e:99:34:49:1e:e4:5f: 28:26:76:34:f5:63:9b:aa:cd:1f:81:f2:f3:77:37: b7:f4:b1:87:2c:46:67:e3:57:29:90:cf:5e:15:3d: 90:82:0f:3f:03:fc:79:57:27:83:0c:78:0c:90:fa: f0:8c:0c:53:c1:e1:75:1d:a5:31:ba:38:0f:aa:da: 86:ae:63:72:b7:8f:3c:56:9f:a1:e1:0f:13:90:e8: 02:01:33:f2:55:ab:3f:2c:1d:c0:2f:ca:ce:12:fb: 45:e6:d6:3a:e1:9c:6f:a7:1b:68:85:18:2c:5c:6c: c3:51:8d:2a:fe:7b:c0:b4:fd:9e:34:f3:30:6f:c6: 1a:d5:0a:cf:13:f3:a8:ef:f9:6f:4a:84:66:dd:fa: dd:f2:0f:ee:43:89:02:9b:3c:f0:f0:56:b2:9b:6e: 76:3f:22:58:29:59:82:4c:bc:fc:bd:00:09:7a:9b: 1e:30:f8:5f:2a:1d:90:3f:50:01:85:f5:ad:29:7f: 2d:b9:e5:6b:e0:68:d0:8e:22:2d:b4:1c:2b:33:6c: d3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:47:71:E9:C6:7C:7F:49:41:CA:F6:09:08:74:9B:20:E0:0B:4C:C5 X509v3 Authority Key Identifier: keyid:FA:14:E8:15:3C:D3:F9:1C:33:39:7F:9B:7D:F9:1B:F1:73:C4:D1:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:fc:bc:15:9e:4b:12:15:6a:3a:75:c3:5f:d0:fc:ee:2f:a8: 7b:ef:65:23:06:06:7d:97:66:2d:41:74:d5:e7:6c:83:9a:26: 49:bc:dd:19:8d:24:5c:02:90:65:72:40:6b:e5:ed:0b:da:65: e7:51:f2:ce:30:3e:d9:ad:ee:46:76:66:7e:94:b6:a4:88:95: fc:85:6c:23:2a:cf:90:43:2e:68:9f:74:d9:e5:70:ff:8c:be: d3:dc:86:ff:56:cc:51:03:63:25:98:c9:b9:22:a5:a9:59:e7: d1:af:c7:5f:cc:b1:84:f7:b0:0f:c1:0a:b4:bf:07:e3:76:e5: 43:d5:ea:34:e7:a0:22:e7:dd:11:c8:9f:18:83:0f:9f:af:70: d3:9d:fc:87:db:7f:96:63:cd:86:1d:2a:b8:28:24:b7:7c:26: 1e:1a:6d:1d:38:79:9b:9a:a4:5a:bc:4f:95:c8:6d:9b:4e:75: 07:6b:52:15:0a:5f:bf:ce:ac:66:20:8c:d0:84:82:74:87:bc: f7:45:7d:ff:fc:6d:5f:3c:5f:97:1e:e9:73:78:f8:ce:9f:dd: e1:6b:09:5d:ff:b0:66:a2:28:ce:57:6b:b6:85:a2:2f:9a:bc: 75:59:b0:8f:c3:7c:cd:64:a8:d2:7b:d8:fa:02:e6:86:f1:82: b8:77:7b:3b -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZv2v4NOyncTTO1+Dy87sDY9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMTRlODE1M2NkM2Y5MWMzMzM5N2Y5YjdkZjkxYmYxNzNj NGQxNmIwHhcNMjYwMTI1MjAwMTQ0WhcNMjYwMTI2MjAwMTQ0WjAzMTEwLwYDVQQD Eyg5NjQ3NzFlOWM2N2M3ZjQ5NDFjYWY2MDkwODc0OWIyMGUwMGI0Y2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoD5GWrEzT/fRf07kIsEiNrW6X+L u2IFkDMKkU5oc+f3jkBsWh523VAmNa3UGbs8P6GC8l6ZNEke5F8oJnY09WObqs0f gfLzdze39LGHLEZn41cpkM9eFT2Qgg8/A/x5VyeDDHgMkPrwjAxTweF1HaUxujgP qtqGrmNyt488Vp+h4Q8TkOgCATPyVas/LB3AL8rOEvtF5tY64ZxvpxtohRgsXGzD UY0q/nvAtP2eNPMwb8Ya1QrPE/Oo7/lvSoRm3frd8g/uQ4kCmzzw8Faym252PyJY KVmCTLz8vQAJepseMPhfKh2QP1ABhfWtKX8tueVr4GjQjiIttBwrM2zTywIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFJZHcenGfH9JQcr2CQh0myDgC0zFMB8GA1UdIwQY MBaAFPoU6BU80/kcMzl/m335G/FzxNFrMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1oVG9GVHpULVJ3ek9YLWJmZmtiOFhQRTBXcy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcvMjQwNzgwLTgxMTAtNDVkNy1iZDcz LWZkZmQyZDcyYjU0MS8xLzEtaFRvRlR6VC1Sd3pPWC1iZmZrYjhYUEUwV3MubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2M3LzI0MDc4MC04MTEwLTQ1ZDctYmQ3My1mZGZkMmQ3MmI1 NDEvMS8xLWhUb0ZUelQtUnd6T1gtYmZma2I4WFBFMFdzLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP/y8 FZ5LEhVqOnXDX9D87i+oe+9lIwYGfZdmLUF01edsg5omSbzdGY0kXAKQZXJAa+Xt C9pl51HyzjA+2a3uRnZmfpS2pIiV/IVsIyrPkEMuaJ902eVw/4y+09yG/1bMUQNj JZjJuSKlqVnn0a/HX8yxhPewD8EKtL8H43blQ9XqNOegIufdEcifGIMPn69w0538 h9t/lmPNhh0quCgkt3wmHhptHTh5m5qkWrxPlchtm051B2tSFQpfv86sZiCM0ISC dIe890V9//xtXzxflx7pc3j4zp/d4WsJXf+wZqIozldrtoWiL5q8dVmwj8N8zWSo 0nvY+gLmhvGCuHd7Ow== -----END CERTIFICATE-----Generated at Mon Jan 26 03:59:24 2026 by rpki-client