This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.mft File: r1vEnV8BojWvkonPSSav_vevkrA.mft (raw, json) Hash identifier: fWaTzUd+1eWoGzJrMqE9rHe8pSgTHdAcKGWdt2zqpi4= Subject key identifier: 10:E0:29:57:64:61:6C:CC:81:9D:D0:18:0E:D2:36:22:0A:E0:82:7C Authority key identifier: AF:5B:C4:9D:5F:01:A2:35:AF:92:89:CF:49:26:AF:FE:F7:AF:92:B0 Certificate issuer: /CN=af5bc49d5f01a235af9289cf4926affef7af92b0 Certificate serial: 019BF4993CC48C70DC61CDBFD4813E8722CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1vEnV8BojWvkonPSSav_vevkrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.mft Manifest number: 17E6 Signing time: Sun 25 Jan 2026 10:00:41 +0000 Manifest this update: Sun 25 Jan 2026 10:00:41 +0000 Manifest next update: Mon 26 Jan 2026 10:00:41 +0000 Files and hashes: 1: KeMni_7tMd8WW03JhhJAoiRDaZc.roa (hash: J+/LqFSqApR1P/gNsOZB6B78O8nvHtR7KNZNBA4Da8s=) 2: r1vEnV8BojWvkonPSSav_vevkrA.crl (hash: pRHtbcYfaI0EHTug40aiNiH8KoT32Hv7ZEe/L3r8qAE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.mft rsync://rpki.ripe.net/repository/DEFAULT/r1vEnV8BojWvkonPSSav_vevkrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:3c:c4:8c:70:dc:61:cd:bf:d4:81:3e:87:22:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af5bc49d5f01a235af9289cf4926affef7af92b0 Validity Not Before: Jan 25 10:00:41 2026 GMT Not After : Jan 26 10:00:41 2026 GMT Subject: CN=10e0295764616ccc819dd0180ed236220ae0827c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:da:7d:da:3c:fc:24:a5:81:40:55:4e:26:19: c7:0c:4c:60:70:02:d8:6a:69:de:6a:1e:23:4b:3b: 9d:f0:7e:d9:dd:76:95:38:1a:14:a7:b7:4f:16:8d: 18:e9:a3:b4:ec:bd:cc:2b:b6:78:b5:65:4a:0d:66: a8:17:d5:b9:d6:d8:d8:33:9c:97:71:d9:d9:2d:39: 20:9f:e5:fb:b8:98:72:5c:69:59:bb:31:2c:9c:61: 4b:87:d5:c7:d4:0b:78:10:7e:5b:e1:cc:61:3b:cf: 63:7e:32:ae:67:a9:cb:c8:4b:8c:69:15:b9:06:26: c3:96:84:be:49:b9:73:f4:61:97:4c:d1:c1:7f:2f: a4:2d:d8:7c:d7:01:09:a2:14:09:ea:fa:64:36:77: 2c:7e:9f:1b:11:8e:e5:6b:ae:ce:02:f6:15:3b:c5: cb:e3:b3:ec:2a:01:93:45:08:bd:9b:ff:cb:94:7f: df:f2:ea:51:26:91:d3:d5:4f:5f:72:63:e4:e1:a0: 17:7f:ff:0b:46:fb:0f:e8:4f:19:cf:17:a4:fd:c5: 53:51:fb:0c:c2:33:15:5c:63:92:9f:b4:7f:48:00: 0b:03:87:23:cd:ff:fa:cb:3b:d1:c9:af:a2:21:09: 27:9b:5a:b7:16:58:4b:d7:18:c2:c0:a1:8e:7c:2a: a2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:E0:29:57:64:61:6C:CC:81:9D:D0:18:0E:D2:36:22:0A:E0:82:7C X509v3 Authority Key Identifier: keyid:AF:5B:C4:9D:5F:01:A2:35:AF:92:89:CF:49:26:AF:FE:F7:AF:92:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1vEnV8BojWvkonPSSav_vevkrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:7d:a0:06:37:0f:dc:0a:bf:2f:0f:77:8a:80:58:46:20:f7: c6:e0:e8:e9:39:cd:3f:b3:03:32:49:17:8c:70:f1:e6:5c:ca: 76:2b:2b:24:0f:87:b1:d4:4e:58:51:75:de:4a:57:9a:83:65: 46:65:38:a2:4b:ea:e0:d3:e9:cb:0b:84:c6:b4:78:77:60:13: 78:47:98:bd:2e:b8:50:b8:84:8b:40:4c:cc:2e:3e:6e:8b:d5: 6e:8a:6d:7b:5f:2f:42:c3:ee:36:eb:6a:de:9c:64:92:35:86: d6:84:e5:f7:b0:4f:86:4f:2d:18:41:f0:a6:ad:91:74:33:ba: eb:1a:56:4b:a9:31:03:3c:7a:44:f4:b7:e4:f5:7e:94:68:25: 62:9e:79:18:bf:74:29:46:1b:b7:45:e7:25:b4:30:f4:3b:40: 28:d2:7b:31:56:0b:25:c6:9f:ec:9c:41:59:82:f2:04:77:2f: 5d:ce:14:16:28:f4:ed:36:a7:72:41:85:e2:37:b4:6e:03:d0: 4c:b5:fe:2a:ed:3b:f3:7d:75:6c:da:85:f0:71:dc:ba:6c:fa: cf:45:ec:b0:ec:5e:ae:f6:0a:09:35:a9:09:bd:59:77:95:05: 43:b9:1b:94:a9:4d:d3:9f:e3:85:66:ac:40:b1:62:9f:23:a7: 60:90:27:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0mTzEjHDcYc2/1IE+hyLMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNWJjNDlkNWYwMWEyMzVhZjkyODljZjQ5MjZhZmZlZjdh ZjkyYjAwHhcNMjYwMTI1MTAwMDQxWhcNMjYwMTI2MTAwMDQxWjAzMTEwLwYDVQQD EygxMGUwMjk1NzY0NjE2Y2NjODE5ZGQwMTgwZWQyMzYyMjBhZTA4MjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotp92jz8JKWBQFVOJhnHDExgcALY amneah4jSzud8H7Z3XaVOBoUp7dPFo0Y6aO07L3MK7Z4tWVKDWaoF9W51tjYM5yX cdnZLTkgn+X7uJhyXGlZuzEsnGFLh9XH1At4EH5b4cxhO89jfjKuZ6nLyEuMaRW5 BibDloS+Sblz9GGXTNHBfy+kLdh81wEJohQJ6vpkNncsfp8bEY7la67OAvYVO8XL 47PsKgGTRQi9m//LlH/f8upRJpHT1U9fcmPk4aAXf/8LRvsP6E8Zzxek/cVTUfsM wjMVXGOSn7R/SAALA4cjzf/6yzvRya+iIQknm1q3FlhL1xjCwKGOfCqiqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBDgKVdkYWzMgZ3QGA7SNiIK4IJ8MB8GA1UdIwQY MBaAFK9bxJ1fAaI1r5KJz0kmr/73r5KwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjF2RW5WOEJvald2a29uUFNTYXZfdmV2a3JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9mMmZiZDgtZDZlMS00N2FkLWFhMjEt MTQ3ZTQ1NzI4NzNhLzEvcjF2RW5WOEJvald2a29uUFNTYXZfdmV2a3JBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9mMmZiZDgtZDZlMS00N2FkLWFhMjEtMTQ3ZTQ1NzI4NzNh LzEvcjF2RW5WOEJvald2a29uUFNTYXZfdmV2a3JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuH2gBjcP 3Aq/Lw93ioBYRiD3xuDo6TnNP7MDMkkXjHDx5lzKdisrJA+HsdROWFF13kpXmoNl RmU4okvq4NPpywuExrR4d2ATeEeYvS64ULiEi0BMzC4+bovVbopte18vQsPuNutq 3pxkkjWG1oTl97BPhk8tGEHwpq2RdDO66xpWS6kxAzx6RPS35PV+lGglYp55GL90 KUYbt0XnJbQw9DtAKNJ7MVYLJcaf7JxBWYLyBHcvXc4UFij07TanckGF4je0bgPQ TLX+Ku078311bNqF8HHcumz6z0XssOxervYKCTWpCb1Zd5UFQ7kblKlN05/jhWas QLFinyOnYJAn/A== -----END CERTIFICATE-----Generated at Sun Jan 25 16:45:22 2026 by rpki-client