This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft File: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft (raw, json) Hash identifier: N3ZO9eI9pf1viX6l1iURSS6zvqll1w8W61zpQbkk9iE= Subject key identifier: 79:76:9C:00:6A:45:80:D3:8D:8D:D6:A5:E7:1D:03:01:94:AA:44:1D Authority key identifier: D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94 Certificate issuer: /CN=d5a193671dc59d76fc311db2d6689a3c88299094 Certificate serial: 019BF6BF11DEB1C12503735C9F16D125F110 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 20:01:15 +0000 Manifest this update: Sun 25 Jan 2026 20:01:15 +0000 Manifest next update: Mon 26 Jan 2026 20:01:15 +0000 Files and hashes: 1: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl (hash: sZUGYhRcDimiB/D6ynAcoEulNZpjZYKet2/6YRGbHqk=) 2: d-Vj4GQJiqWPAhJ2S_9WJs-V0iY.roa (hash: Q3tKs3eY3Zo0tWqBxw95FI72mGqjo+ppjib/b057VZI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:11:de:b1:c1:25:03:73:5c:9f:16:d1:25:f1:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5a193671dc59d76fc311db2d6689a3c88299094 Validity Not Before: Jan 25 20:01:15 2026 GMT Not After : Jan 26 20:01:15 2026 GMT Subject: CN=79769c006a4580d38d8dd6a5e71d030194aa441d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e6:4d:07:78:b0:23:14:93:6d:7d:8b:ef:98: c1:01:a6:04:c6:58:1a:a0:cf:0f:a2:31:c5:6a:4e: 13:35:c0:74:04:e3:1d:22:26:6a:1b:64:26:5d:07: 83:56:2b:dd:9c:14:c0:b4:01:3b:79:10:0d:ae:b0: 8d:c7:18:36:88:22:73:cd:fc:55:e9:a8:06:e2:1b: 0f:95:0b:35:6b:71:6b:58:6e:d1:f5:36:5d:1e:80: 50:5e:ef:c4:37:bb:04:15:d3:95:8f:a9:6e:3f:64: 70:9d:03:fa:ab:74:9e:52:d2:1d:35:6b:b6:8d:15: b4:4a:3f:4e:bf:c6:8d:29:88:1d:1e:35:ea:2b:c8: 27:38:e5:b5:af:81:6e:c8:dd:fc:45:8e:b0:0b:f5: 44:a7:60:8f:9f:c1:18:6b:cc:3a:17:df:ec:80:55: 61:15:95:6a:e0:59:39:00:8c:a5:bb:ef:22:bf:c9: fd:56:7b:fe:f2:d5:0f:38:b9:73:17:77:c4:63:d0: 4d:75:b0:82:82:cb:33:fc:df:77:c4:b6:8c:ee:78: 4a:eb:b8:a7:e5:7d:43:5b:96:f0:0e:12:5b:44:9e: 3d:bd:55:4a:9f:0e:2f:c5:7f:f0:01:38:64:50:da: 97:b7:66:41:c9:5c:10:0e:59:e8:05:29:67:c1:a2: 50:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:76:9C:00:6A:45:80:D3:8D:8D:D6:A5:E7:1D:03:01:94:AA:44:1D X509v3 Authority Key Identifier: keyid:D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:69:6a:02:7c:fb:e0:0f:6a:eb:c7:35:d2:d9:f3:53:47:fe: 3c:fd:97:17:84:40:ea:d3:07:83:c7:c4:c9:92:29:c8:d7:97: 9e:d7:65:5d:21:ff:cc:0e:0f:e9:7b:dc:c8:86:b9:c7:29:fd: 58:1e:29:27:f7:42:40:3e:95:02:0c:02:54:6d:f4:8d:5d:74: e9:7c:2c:27:65:cd:14:ae:5e:99:35:27:da:82:7b:c2:2f:a0: 61:99:47:e4:3a:de:6b:8f:b3:d6:b0:54:62:c4:bb:fb:bb:7d: bf:7a:70:51:ab:78:bb:b7:84:94:29:1b:ed:b5:42:95:dd:bb: 1b:54:61:e0:1c:d2:e8:90:3d:78:9d:f6:bc:47:5e:78:aa:5d: 99:21:60:09:e5:ac:3c:1c:62:37:4c:12:8c:3e:63:18:b7:e6: fd:51:60:4f:36:52:fc:14:d0:7f:c4:79:b3:da:12:95:15:e1: 76:56:bd:2f:0e:ad:57:f5:80:a8:6d:b5:b3:57:dd:e0:b7:9d: 67:be:50:f9:4b:cf:ee:0f:86:0f:91:7c:b9:c6:95:75:76:65: 46:b1:90:24:4c:ae:6f:ae:1d:0d:4f:62:1b:5b:27:30:f4:8c: 56:04:ba:1b:bf:ae:75:54:42:cb:95:01:34:0e:b7:98:0f:16: 71:dd:85:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vxHescElA3NcnxbRJfEQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1YTE5MzY3MWRjNTlkNzZmYzMxMWRiMmQ2Njg5YTNjODgy OTkwOTQwHhcNMjYwMTI1MjAwMTE1WhcNMjYwMTI2MjAwMTE1WjAzMTEwLwYDVQQD Eyg3OTc2OWMwMDZhNDU4MGQzOGQ4ZGQ2YTVlNzFkMDMwMTk0YWE0NDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOZNB3iwIxSTbX2L75jBAaYExlga oM8PojHFak4TNcB0BOMdIiZqG2QmXQeDVivdnBTAtAE7eRANrrCNxxg2iCJzzfxV 6agG4hsPlQs1a3FrWG7R9TZdHoBQXu/EN7sEFdOVj6luP2RwnQP6q3SeUtIdNWu2 jRW0Sj9Ov8aNKYgdHjXqK8gnOOW1r4FuyN38RY6wC/VEp2CPn8EYa8w6F9/sgFVh FZVq4Fk5AIylu+8iv8n9Vnv+8tUPOLlzF3fEY9BNdbCCgssz/N93xLaM7nhK67in 5X1DW5bwDhJbRJ49vVVKnw4vxX/wAThkUNqXt2ZByVwQDlnoBSlnwaJQXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHl2nABqRYDTjY3WpecdAwGUqkQdMB8GA1UdIwQY MBaAFNWhk2cdxZ12/DEdstZomjyIKZCUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWFHVFp4M0ZuWGI4TVIyeTFtaWFQSWdwa0pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zZDI1OWQtOTE4My00MGEwLTkyYTEt MmIyYTZlMjdmOTZmLzEvMWFHVFp4M0ZuWGI4TVIyeTFtaWFQSWdwa0pRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8zZDI1OWQtOTE4My00MGEwLTkyYTEtMmIyYTZlMjdmOTZm LzEvMWFHVFp4M0ZuWGI4TVIyeTFtaWFQSWdwa0pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl2lqAnz7 4A9q68c10tnzU0f+PP2XF4RA6tMHg8fEyZIpyNeXntdlXSH/zA4P6XvcyIa5xyn9 WB4pJ/dCQD6VAgwCVG30jV106XwsJ2XNFK5emTUn2oJ7wi+gYZlH5Drea4+z1rBU YsS7+7t9v3pwUat4u7eElCkb7bVCld27G1Rh4BzS6JA9eJ32vEdeeKpdmSFgCeWs PBxiN0wSjD5jGLfm/VFgTzZS/BTQf8R5s9oSlRXhdla9Lw6tV/WAqG21s1fd4Led Z75Q+UvP7g+GD5F8ucaVdXZlRrGQJEyub64dDU9iG1snMPSMVgS6G7+udVRCy5UB NA63mA8Wcd2Fng== -----END CERTIFICATE-----Generated at Mon Jan 26 01:50:44 2026 by rpki-client