This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft File: 1onLcYkcbZS9nm8U8W5-N8LHKL8.mft (raw, json) Hash identifier: JRpqJKLJ6J6rqF8Q+kJhSrU2TEOoCXsUm7SPk/0rMhI= Subject key identifier: 6B:E8:FD:3E:4D:0E:BE:AB:4B:0A:3F:78:76:35:4C:6E:71:6B:60:62 Authority key identifier: D6:89:CB:71:89:1C:6D:94:BD:9E:6F:14:F1:6E:7E:37:C2:C7:28:BF Certificate issuer: /CN=d689cb71891c6d94bd9e6f14f16e7e37c2c728bf Certificate serial: 019BF83F8C48A69E2A207FC3D8DA13F84394 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft Manifest number: 059F Signing time: Mon 26 Jan 2026 03:01:12 +0000 Manifest this update: Mon 26 Jan 2026 03:01:12 +0000 Manifest next update: Tue 27 Jan 2026 03:01:12 +0000 Files and hashes: 1: 1onLcYkcbZS9nm8U8W5-N8LHKL8.crl (hash: 9mMqeuUtbyMwxHEwJCOPpQFBMToWtW8q3kT833S2s8Q=) 2: A1S7zaMW03197K0PFUGmkuS6qHc.roa (hash: P0RbhOWnYpuPcWIDbY8PS2tuKH+AkCqge3UmcT8QPYg=) 3: HcWgx2MiMP_xtGT9IucxolgQeIY.roa (hash: rcEUsMaoUm7Xd2I+QLC1mGGbjcwOScogc6eZLbEfymQ=) 4: iTT1Go78g5owZfyu9ktxbP5JHAk.roa (hash: Qjj93lcgSQbKTpiPRrMG7KIy0uRqncRntlD8V9IPje4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:8c:48:a6:9e:2a:20:7f:c3:d8:da:13:f8:43:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d689cb71891c6d94bd9e6f14f16e7e37c2c728bf Validity Not Before: Jan 26 03:01:12 2026 GMT Not After : Jan 27 03:01:12 2026 GMT Subject: CN=6be8fd3e4d0ebeab4b0a3f7876354c6e716b6062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bd:be:08:aa:a2:f6:d2:fe:57:c4:14:bc:74: 59:85:a5:87:91:46:61:fc:89:94:13:b7:71:55:50: 6b:3f:56:8a:4c:15:f0:47:20:b6:18:32:1e:35:da: 41:4a:7a:f9:23:8f:1d:95:ee:32:e4:77:af:67:97: 53:9d:ef:10:9b:b5:50:7e:d1:1f:79:f7:6d:3e:fc: 6f:a4:9d:50:e9:dd:bd:b1:05:e3:a9:ef:a5:ac:0c: 5e:9a:ce:88:b9:ad:52:41:96:dd:32:b5:50:4a:4b: 9b:5e:22:b0:ed:3c:d5:2b:c8:de:b5:9f:51:9d:a9: 46:c7:6a:60:38:a1:31:f2:11:e1:38:a3:e3:cd:b4: d8:16:a6:2a:ec:55:b8:d5:57:1e:a7:fe:f6:8d:f0: 19:dd:56:b3:42:9e:20:cc:89:76:35:f6:98:1d:8f: 66:4c:4b:0b:0e:da:c0:8b:7e:f2:76:96:3b:96:f3: 99:70:5a:9a:df:96:0d:98:9b:a8:37:6a:8b:b1:20: 0e:7c:18:93:9b:56:ee:11:9b:04:53:73:3d:7b:98: c8:16:f6:8e:74:16:63:5f:95:6d:bb:c2:c7:66:9d: 48:29:2c:71:a7:e1:ef:1a:bf:99:3b:49:03:f1:7e: 28:4a:62:95:64:6c:c9:44:af:14:50:0f:ea:74:e6: 2c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:E8:FD:3E:4D:0E:BE:AB:4B:0A:3F:78:76:35:4C:6E:71:6B:60:62 X509v3 Authority Key Identifier: keyid:D6:89:CB:71:89:1C:6D:94:BD:9E:6F:14:F1:6E:7E:37:C2:C7:28:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:0c:82:11:79:84:cb:73:ee:8a:c8:e8:6a:53:b1:28:19:ac: d3:ae:8e:92:1d:1c:5d:94:62:df:82:8c:ef:17:df:15:6a:91: 51:6b:9d:27:42:e9:d6:14:d2:33:0e:cf:23:a7:42:16:1e:14: c1:89:cc:29:ca:4c:e6:3c:0d:3c:3f:94:97:5c:71:71:02:cb: cd:6d:22:74:f9:08:d2:14:89:24:de:73:a4:d3:60:5b:2d:33: 7b:fc:b5:dc:e9:78:82:82:f6:26:21:f3:d6:3c:98:79:77:1d: 72:76:57:a8:c6:aa:2e:4a:df:ad:0e:37:3b:70:89:25:35:ef: 06:36:a6:c3:03:a0:13:73:a7:b0:b5:be:98:b5:0c:29:3d:8d: ba:d8:a3:f7:75:5d:fe:3c:a1:39:76:a3:71:d4:27:07:70:68: 7a:dd:73:83:40:00:f0:c6:95:d2:4d:6b:fb:92:08:47:b8:3c: 69:bd:9c:f9:9b:16:78:fc:63:47:26:e4:81:d8:c2:6d:dc:7d: a0:b7:99:c0:85:69:d2:46:cb:38:1f:5b:07:c4:69:e1:42:3a: 01:59:6c:36:5a:aa:fc:69:f3:f8:d5:a6:7a:79:3b:b3:d4:c8: e1:73:62:03:e2:01:ce:61:d7:76:29:e3:5e:5c:09:bb:c3:67: 16:3b:8f:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P4xIpp4qIH/D2NoT+EOUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ODljYjcxODkxYzZkOTRiZDllNmYxNGYxNmU3ZTM3YzJj NzI4YmYwHhcNMjYwMTI2MDMwMTEyWhcNMjYwMTI3MDMwMTEyWjAzMTEwLwYDVQQD Eyg2YmU4ZmQzZTRkMGViZWFiNGIwYTNmNzg3NjM1NGM2ZTcxNmI2MDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArL2+CKqi9tL+V8QUvHRZhaWHkUZh /ImUE7dxVVBrP1aKTBXwRyC2GDIeNdpBSnr5I48dle4y5HevZ5dTne8Qm7VQftEf efdtPvxvpJ1Q6d29sQXjqe+lrAxems6Iua1SQZbdMrVQSkubXiKw7TzVK8jetZ9R nalGx2pgOKEx8hHhOKPjzbTYFqYq7FW41Vcep/72jfAZ3VazQp4gzIl2NfaYHY9m TEsLDtrAi37ydpY7lvOZcFqa35YNmJuoN2qLsSAOfBiTm1buEZsEU3M9e5jIFvaO dBZjX5Vtu8LHZp1IKSxxp+HvGr+ZO0kD8X4oSmKVZGzJRK8UUA/qdOYsNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGvo/T5NDr6rSwo/eHY1TG5xa2BiMB8GA1UdIwQY MBaAFNaJy3GJHG2UvZ5vFPFufjfCxyi/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW9uTGNZa2NiWlM5bm04VThXNS1OOExIS0w4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8wZGYyOGQtOTI0ZC00YjRlLTk0Yjgt ODI0ZmZjNjk0MmY0LzEvMW9uTGNZa2NiWlM5bm04VThXNS1OOExIS0w4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8wZGYyOGQtOTI0ZC00YjRlLTk0YjgtODI0ZmZjNjk0MmY0 LzEvMW9uTGNZa2NiWlM5bm04VThXNS1OOExIS0w4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADAyCEXmE y3PuisjoalOxKBms066Okh0cXZRi34KM7xffFWqRUWudJ0Lp1hTSMw7PI6dCFh4U wYnMKcpM5jwNPD+Ul1xxcQLLzW0idPkI0hSJJN5zpNNgWy0ze/y13Ol4goL2JiHz 1jyYeXcdcnZXqMaqLkrfrQ43O3CJJTXvBjamwwOgE3OnsLW+mLUMKT2Nutij93Vd /jyhOXajcdQnB3Boet1zg0AA8MaV0k1r+5IIR7g8ab2c+ZsWePxjRybkgdjCbdx9 oLeZwIVp0kbLOB9bB8Rp4UI6AVlsNlqq/Gnz+NWmenk7s9TI4XNiA+IBzmHXdinj XlwJu8NnFjuP/g== -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:38 2026 by rpki-client