This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft File: k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft (raw, json) Hash identifier: AA2C85urFpp7Hno2tu+fAVFYOVF6QAMtjplpNgfPI0I= Subject key identifier: 9B:4E:A7:1E:E3:14:E6:A0:FE:4B:B3:AE:1B:03:7B:AD:6E:D8:51:4E Authority key identifier: 93:51:5F:25:98:6E:4B:57:2A:78:B1:09:D9:95:C9:DD:F5:DA:12:66 Certificate issuer: /CN=93515f25986e4b572a78b109d995c9ddf5da1266 Certificate serial: 019BF763661E33C5456FD6BDA3619D713633 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft Manifest number: 10AA Signing time: Sun 25 Jan 2026 23:00:45 +0000 Manifest this update: Sun 25 Jan 2026 23:00:45 +0000 Manifest next update: Mon 26 Jan 2026 23:00:45 +0000 Files and hashes: 1: k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl (hash: bjvX/KXFi3Y91n/f8uWinxK04RZquGVDonSiimblt5A=) 2: uj3jB1h_BPelT0gTa2jTECaTC_E.roa (hash: 2myfgj9WZ6r4hpUffwkXe16EkwdfIe0OAsHUggJVE+c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:66:1e:33:c5:45:6f:d6:bd:a3:61:9d:71:36:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93515f25986e4b572a78b109d995c9ddf5da1266 Validity Not Before: Jan 25 23:00:45 2026 GMT Not After : Jan 26 23:00:45 2026 GMT Subject: CN=9b4ea71ee314e6a0fe4bb3ae1b037bad6ed8514e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a3:09:3d:e0:00:9e:c1:bc:53:95:22:28:61: 41:c1:eb:ed:54:54:08:b5:c1:3e:37:55:ed:85:23: 86:36:7f:09:b0:2f:8f:bd:d9:95:d2:45:db:bd:71: 42:15:63:80:6f:da:a5:76:c0:78:5f:e9:c5:ea:4e: 14:f6:e9:9e:d4:79:7e:d8:0b:25:75:c1:05:41:5d: 6a:85:40:81:aa:f8:b9:de:5f:16:95:eb:42:5a:b5: 87:91:23:42:bd:bf:76:1c:53:be:50:d5:1c:86:a2: 19:5b:be:9a:f3:f5:8f:fd:50:9e:a7:cc:be:75:39: 2e:c8:9b:18:57:35:3d:7d:45:42:f1:43:56:f1:ed: fd:bf:d7:56:2d:a2:7e:43:58:b8:2b:ec:19:3d:0d: c5:5c:39:e5:01:39:5b:9a:b5:91:98:f5:ba:59:4b: a8:be:0c:a9:5a:c9:be:80:8a:ab:c1:f2:20:6e:8a: 0d:20:86:f0:80:b5:06:a9:d4:a9:af:f3:51:cf:2d: 21:93:dc:5f:fe:03:57:c6:f5:36:59:25:3f:63:ce: f2:cf:d7:89:f1:0c:76:48:a9:22:2e:83:54:03:42: 58:be:9b:31:38:f9:ad:c1:a3:41:cd:85:78:29:a7: df:51:9a:98:ef:a8:2d:02:99:4b:33:65:3a:54:f6: e8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:4E:A7:1E:E3:14:E6:A0:FE:4B:B3:AE:1B:03:7B:AD:6E:D8:51:4E X509v3 Authority Key Identifier: keyid:93:51:5F:25:98:6E:4B:57:2A:78:B1:09:D9:95:C9:DD:F5:DA:12:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:3b:8a:8e:be:86:81:83:d3:9e:cc:60:ea:97:76:b4:a8:10: 40:8c:e0:06:6b:87:fa:66:bd:7f:35:e4:74:28:fa:5a:af:9f: 2b:89:a3:a8:b7:ae:6c:82:ba:f8:ca:ee:79:1e:85:07:96:c4: 57:c4:d6:ba:41:27:80:ca:c5:0c:e2:f6:f4:9d:11:55:cc:84: ed:3d:44:d9:4e:d9:12:84:72:0e:86:6e:2f:78:a4:e5:cc:fb: a6:53:f6:9b:ec:c6:52:16:c1:e0:f6:f1:62:b6:a5:c8:71:6e: 51:d8:b5:19:8b:be:6f:c3:56:cd:b8:9b:06:fb:db:70:7c:c2: ec:3e:eb:89:b9:4d:ee:f6:d7:e1:35:d4:34:5d:bf:63:8e:7c: e5:8d:02:3f:42:c0:f2:af:a8:13:25:c7:4a:32:8b:ba:54:b7: 94:32:cf:ee:28:09:5e:50:32:f6:8f:ba:6a:db:6c:f0:f9:c9: bf:57:1b:37:10:05:2c:b7:75:46:6c:71:62:05:17:30:95:38: 7a:d0:ee:7e:db:57:58:d7:86:5c:50:a3:1b:6b:69:2e:a5:29: 03:26:d4:cc:c7:b9:a5:ef:81:b9:36:18:fb:49:d2:a8:75:2c: 6b:c6:ef:7a:19:51:93:d8:b4:61:56:56:29:4b:b4:54:a8:16: 4e:ce:3a:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y2YeM8VFb9a9o2GdcTYzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNTE1ZjI1OTg2ZTRiNTcyYTc4YjEwOWQ5OTVjOWRkZjVk YTEyNjYwHhcNMjYwMTI1MjMwMDQ1WhcNMjYwMTI2MjMwMDQ1WjAzMTEwLwYDVQQD Eyg5YjRlYTcxZWUzMTRlNmEwZmU0YmIzYWUxYjAzN2JhZDZlZDg1MTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qMJPeAAnsG8U5UiKGFBwevtVFQI tcE+N1XthSOGNn8JsC+PvdmV0kXbvXFCFWOAb9qldsB4X+nF6k4U9ume1Hl+2Asl dcEFQV1qhUCBqvi53l8WletCWrWHkSNCvb92HFO+UNUchqIZW76a8/WP/VCep8y+ dTkuyJsYVzU9fUVC8UNW8e39v9dWLaJ+Q1i4K+wZPQ3FXDnlATlbmrWRmPW6WUuo vgypWsm+gIqrwfIgbooNIIbwgLUGqdSpr/NRzy0hk9xf/gNXxvU2WSU/Y87yz9eJ 8Qx2SKkiLoNUA0JYvpsxOPmtwaNBzYV4KaffUZqY76gtAplLM2U6VPbo6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJtOpx7jFOag/kuzrhsDe61u2FFOMB8GA1UdIwQY MBaAFJNRXyWYbktXKnixCdmVyd312hJmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazFGZkpaaHVTMWNxZUxFSjJaWEozZlhhRW1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS84NGIwM2ItNTYxOS00MjcyLTk0N2Yt MTNkNTEzMjhhOWY3LzEvazFGZkpaaHVTMWNxZUxFSjJaWEozZlhhRW1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS84NGIwM2ItNTYxOS00MjcyLTk0N2YtMTNkNTEzMjhhOWY3 LzEvazFGZkpaaHVTMWNxZUxFSjJaWEozZlhhRW1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALjuKjr6G gYPTnsxg6pd2tKgQQIzgBmuH+ma9fzXkdCj6Wq+fK4mjqLeubIK6+MrueR6FB5bE V8TWukEngMrFDOL29J0RVcyE7T1E2U7ZEoRyDoZuL3ik5cz7plP2m+zGUhbB4Pbx YralyHFuUdi1GYu+b8NWzbibBvvbcHzC7D7riblN7vbX4TXUNF2/Y4585Y0CP0LA 8q+oEyXHSjKLulS3lDLP7igJXlAy9o+6atts8PnJv1cbNxAFLLd1RmxxYgUXMJU4 etDufttXWNeGXFCjG2tpLqUpAybUzMe5pe+BuTYY+0nSqHUsa8bvehlRk9i0YVZW KUu0VKgWTs46lg== -----END CERTIFICATE-----Generated at Mon Jan 26 07:46:55 2026 by rpki-client