This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft File: 1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft (raw, json) Hash identifier: OjiGqkx8jhNLj92SIXwrxMlSEwm2M0lj6fw4CN4YTzI= Subject key identifier: B5:12:BB:74:66:D3:22:FB:C7:25:33:69:29:58:20:28:8F:DD:53:49 Authority key identifier: D6:F3:57:C5:49:49:F2:0B:40:08:83:ED:8C:98:D3:73:1C:3C:B4:95 Certificate issuer: /CN=d6f357c54949f20b400883ed8c98d3731c3cb495 Certificate serial: 019BF651BCAF81DB31AD3CF420B723233B60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft Manifest number: 17E7 Signing time: Sun 25 Jan 2026 18:01:50 +0000 Manifest this update: Sun 25 Jan 2026 18:01:50 +0000 Manifest next update: Mon 26 Jan 2026 18:01:50 +0000 Files and hashes: 1: 1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl (hash: /QePZWasG3ytCmiLmyAhM0IiiTEF8cR6sbp+jUW4SmQ=) 2: C96r7R6Mb5GqlprR3I_no-ERD4g.roa (hash: NLf7EUxe3BSu+odq1YzXIDULHf2Z5URrNMh4SALrwlY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:bc:af:81:db:31:ad:3c:f4:20:b7:23:23:3b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6f357c54949f20b400883ed8c98d3731c3cb495 Validity Not Before: Jan 25 18:01:50 2026 GMT Not After : Jan 26 18:01:50 2026 GMT Subject: CN=b512bb7466d322fbc7253369295820288fdd5349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:36:23:ae:6a:23:47:c2:41:3b:37:21:09:12: ee:39:fa:7d:ae:70:4e:0a:95:ef:60:4a:ae:e8:99: ce:7c:14:e6:e3:f8:24:8d:a9:e6:95:fa:26:58:54: db:82:c2:f9:db:0d:ff:16:e3:91:35:8f:cc:9f:a9: 1d:4f:e2:f4:73:e4:dd:aa:48:04:17:7a:c0:2e:04: dd:03:6c:17:15:8f:90:58:1c:12:09:ba:76:49:1f: 8a:eb:0f:1f:c2:dc:d7:7d:16:d2:14:ca:5b:bb:6f: a3:bd:e7:d4:21:8e:57:ab:b8:a6:95:e6:c7:07:79: d5:ca:8d:e9:ab:45:a6:8f:2e:68:44:c3:5a:2f:78: dd:f0:09:38:af:3d:f3:0e:26:3a:30:a7:69:9a:ee: 30:48:53:9e:05:e7:b1:08:e1:28:14:fc:a9:9d:f1: 25:28:e5:33:e6:4e:ba:8a:df:2e:59:b5:5b:4d:d1: fa:e7:82:23:54:e4:15:1f:d6:a9:7d:b1:c1:58:49: 22:69:7f:23:10:dc:c2:19:3f:bc:21:a1:79:17:02: 7c:fc:ef:18:a2:44:52:99:ab:41:80:59:1c:61:b0: 87:fe:59:12:a9:6d:41:f8:34:26:df:a4:80:c9:08: 30:2b:c2:46:ec:a6:13:2e:0e:d1:5a:59:38:ea:20: 83:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:12:BB:74:66:D3:22:FB:C7:25:33:69:29:58:20:28:8F:DD:53:49 X509v3 Authority Key Identifier: keyid:D6:F3:57:C5:49:49:F2:0B:40:08:83:ED:8C:98:D3:73:1C:3C:B4:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:ba:fb:20:e0:4a:46:de:ac:91:2a:67:f5:bc:ba:dd:11:fb: 33:12:b3:01:4f:ed:5e:fd:9f:dc:b0:2d:d0:e5:e3:69:55:75: 98:23:3d:16:7f:34:6a:21:a8:4b:8f:fd:83:e1:4d:18:8e:77: df:f1:33:b9:35:05:dd:d1:a5:8f:9a:bd:12:96:ba:1a:28:30: a7:83:2f:10:7f:f3:f1:1b:7d:99:aa:fb:9f:7f:cc:3c:9f:61: b1:a1:b5:64:91:42:18:00:0b:e2:93:20:b1:c9:df:4a:8a:4c: 31:26:6a:58:e2:66:16:99:23:3c:e0:18:a1:9d:a5:aa:b7:61: 66:4b:c1:45:ab:3d:32:4a:4f:1c:f0:29:5d:21:ed:98:3d:71: a1:a0:0d:3b:fa:f0:a2:d1:f4:14:fa:44:97:d9:d1:c4:c3:30: 02:ef:24:44:08:26:6b:2d:81:33:80:2d:6b:a2:93:95:17:59: 5d:6d:44:e2:73:90:45:ad:e5:bd:f1:c6:5d:bb:59:29:fa:8b: 96:8a:f0:db:ae:2c:d9:b5:fa:46:ce:bc:02:ae:7f:93:1d:c7: fb:ca:33:f5:d6:49:ce:0c:65:13:ef:03:bf:74:d8:be:37:41: 90:c1:46:86:17:0e:95:15:86:20:cd:bd:76:9c:fd:a3:49:c7: c8:53:99:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UbyvgdsxrTz0ILcjIztgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ZjM1N2M1NDk0OWYyMGI0MDA4ODNlZDhjOThkMzczMWMz Y2I0OTUwHhcNMjYwMTI1MTgwMTUwWhcNMjYwMTI2MTgwMTUwWjAzMTEwLwYDVQQD EyhiNTEyYmI3NDY2ZDMyMmZiYzcyNTMzNjkyOTU4MjAyODhmZGQ1MzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjYjrmojR8JBOzchCRLuOfp9rnBO CpXvYEqu6JnOfBTm4/gkjanmlfomWFTbgsL52w3/FuORNY/Mn6kdT+L0c+TdqkgE F3rALgTdA2wXFY+QWBwSCbp2SR+K6w8fwtzXfRbSFMpbu2+jvefUIY5Xq7imlebH B3nVyo3pq0Wmjy5oRMNaL3jd8Ak4rz3zDiY6MKdpmu4wSFOeBeexCOEoFPypnfEl KOUz5k66it8uWbVbTdH654IjVOQVH9apfbHBWEkiaX8jENzCGT+8IaF5FwJ8/O8Y okRSmatBgFkcYbCH/lkSqW1B+DQm36SAyQgwK8JG7KYTLg7RWlk46iCDpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLUSu3Rm0yL7xyUzaSlYICiP3VNJMB8GA1UdIwQY MBaAFNbzV8VJSfILQAiD7YyY03McPLSVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXZOWHhVbEo4Z3RBQ0lQdGpKalRjeHc4dEpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yODFlZGItMGQ0Mi00MDdhLWI0NTkt MDVmMDllZjg2ZTdiLzEvMXZOWHhVbEo4Z3RBQ0lQdGpKalRjeHc4dEpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8yODFlZGItMGQ0Mi00MDdhLWI0NTktMDVmMDllZjg2ZTdi LzEvMXZOWHhVbEo4Z3RBQ0lQdGpKalRjeHc4dEpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj7r7IOBK Rt6skSpn9by63RH7MxKzAU/tXv2f3LAt0OXjaVV1mCM9Fn80aiGoS4/9g+FNGI53 3/EzuTUF3dGlj5q9Epa6Gigwp4MvEH/z8Rt9mar7n3/MPJ9hsaG1ZJFCGAAL4pMg scnfSopMMSZqWOJmFpkjPOAYoZ2lqrdhZkvBRas9MkpPHPApXSHtmD1xoaANO/rw otH0FPpEl9nRxMMwAu8kRAgmay2BM4Ata6KTlRdZXW1E4nOQRa3lvfHGXbtZKfqL lorw264s2bX6Rs68Aq5/kx3H+8oz9dZJzgxlE+8Dv3TYvjdBkMFGhhcOlRWGIM29 dpz9o0nHyFOZkA== -----END CERTIFICATE-----Generated at Mon Jan 26 03:11:54 2026 by rpki-client