This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft File: 1-cuQlMt82hOL0BABPrnswzGQMEE.mft (raw, json) Hash identifier: uWln92OFROfIXyjmFB0Md+rQyAxowPPVhqOZFllM8QA= Subject key identifier: 70:B0:A3:89:55:DE:7E:C1:26:4F:2B:59:B0:53:8A:09:68:C2:FF:40 Authority key identifier: F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41 Certificate issuer: /CN=f9cb9094cb7cda138bd010013eb9ecc331903041 Certificate serial: 019BF506EDCAE8BD4B8335FD0F8CD02D2579 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 12:00:30 +0000 Manifest this update: Sun 25 Jan 2026 12:00:30 +0000 Manifest next update: Mon 26 Jan 2026 12:00:30 +0000 Files and hashes: 1: 1-cuQlMt82hOL0BABPrnswzGQMEE.crl (hash: gLIueex3jfKDaJ8/xhXJiR/iep6hlPB9YkCaAOoyYwI=) 2: Qk5MpNdRL52qvitv9k0XvdvcapI.roa (hash: vbB6JQXbd3WJ1/NPtyFdfR5AK1sMZwRoGAo5/Aa6H5E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:06:ed:ca:e8:bd:4b:83:35:fd:0f:8c:d0:2d:25:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9cb9094cb7cda138bd010013eb9ecc331903041 Validity Not Before: Jan 25 12:00:30 2026 GMT Not After : Jan 26 12:00:30 2026 GMT Subject: CN=70b0a38955de7ec1264f2b59b0538a0968c2ff40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4d:6d:71:ec:87:d2:f6:0e:cf:d9:95:fd:6f: 7e:6d:ff:2f:c2:c9:e5:5c:32:71:3d:6d:2c:93:c5: dd:67:00:99:3a:4c:79:db:a2:fb:7b:aa:c1:aa:63: 28:6d:9f:25:55:5b:fd:31:dc:4f:bd:08:1c:d0:2f: ba:3d:bc:ed:3f:f0:47:8b:a5:77:1e:ed:9c:80:99: f4:b5:56:eb:b7:62:c3:9e:b9:d3:a1:d6:00:a0:6e: a7:25:2a:b0:b8:8c:32:18:57:fc:27:f4:b3:3e:eb: 4a:ae:b2:6a:00:c4:60:f3:f2:26:0e:7f:7b:13:85: 27:d8:c8:b9:7c:a1:3a:7e:24:cd:fc:fa:93:17:a3: b3:02:1a:5f:6c:98:a9:f9:72:c9:76:e2:21:3c:8a: d5:48:e5:2b:19:92:1a:92:72:d7:88:d3:76:8d:dd: 5a:e9:0a:91:6b:61:00:c7:96:a0:e6:c0:62:a9:4f: 48:52:65:3d:48:7d:c6:4a:5c:17:59:81:09:fb:9e: c4:ac:25:42:a6:ce:f1:5f:44:46:c9:02:8a:38:49: 8e:a8:e2:74:64:07:f6:cd:ed:b4:75:c8:7a:4f:e4: a4:c5:f8:e9:95:48:7d:e6:6c:a5:f3:b3:b3:f7:aa: 3a:c6:54:da:1c:20:66:c7:d3:4b:74:e2:a0:e5:02: 3b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:B0:A3:89:55:DE:7E:C1:26:4F:2B:59:B0:53:8A:09:68:C2:FF:40 X509v3 Authority Key Identifier: keyid:F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:c5:a5:f1:a7:34:ce:16:96:51:e9:b0:19:7d:10:b4:ab:53: 0a:72:a8:b3:2c:07:c2:3b:39:f0:38:68:29:d5:03:86:f7:41: 4e:c9:1c:4e:3a:d2:19:6b:cb:d2:79:08:97:1a:cf:bd:5c:8e: ec:a2:a8:ab:b9:20:c7:34:ed:a4:30:14:05:ae:a7:20:29:d2: ba:70:ca:6a:32:53:fb:44:81:bd:11:56:09:ba:5e:17:25:b8: f1:d7:ff:a1:72:d9:c2:25:40:f8:0f:9b:63:d1:1b:07:21:e6: cd:28:e7:da:8b:e6:6c:ca:ca:8c:ee:ae:02:2c:19:35:d3:8a: b6:2a:79:3b:53:80:df:42:7a:8a:bb:b4:54:dd:0e:40:ae:fa: b7:24:62:91:3f:4f:b6:ee:56:92:17:9a:1d:39:b9:4c:47:3d: c7:d6:6b:92:cb:d1:78:3e:f5:08:1e:82:d4:14:91:c9:a6:bd: 04:c8:e9:83:e9:bf:28:1c:1d:5d:eb:b9:b5:0b:43:96:54:9a: 5e:b5:bb:02:f7:ba:b2:5c:db:6e:d9:14:ec:c0:64:e0:c2:d5: cb:a0:85:d2:14:06:45:14:7d:c9:e5:ff:76:c7:c0:6e:35:19: b7:11:c1:d0:9f:01:04:bf:54:95:b3:46:11:0e:b9:73:c2:0d: 21:48:f5:3b -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZv1Bu3K6L1LgzX9D4zQLSV5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5Y2I5MDk0Y2I3Y2RhMTM4YmQwMTAwMTNlYjllY2MzMzE5 MDMwNDEwHhcNMjYwMTI1MTIwMDMwWhcNMjYwMTI2MTIwMDMwWjAzMTEwLwYDVQQD Eyg3MGIwYTM4OTU1ZGU3ZWMxMjY0ZjJiNTliMDUzOGEwOTY4YzJmZjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzU1tceyH0vYOz9mV/W9+bf8vwsnl XDJxPW0sk8XdZwCZOkx526L7e6rBqmMobZ8lVVv9MdxPvQgc0C+6PbztP/BHi6V3 Hu2cgJn0tVbrt2LDnrnTodYAoG6nJSqwuIwyGFf8J/SzPutKrrJqAMRg8/ImDn97 E4Un2Mi5fKE6fiTN/PqTF6OzAhpfbJip+XLJduIhPIrVSOUrGZIaknLXiNN2jd1a 6QqRa2EAx5ag5sBiqU9IUmU9SH3GSlwXWYEJ+57ErCVCps7xX0RGyQKKOEmOqOJ0 ZAf2ze20dch6T+SkxfjplUh95myl87Oz96o6xlTaHCBmx9NLdOKg5QI7aQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFHCwo4lV3n7BJk8rWbBTiglowv9AMB8GA1UdIwQY MBaAFPnLkJTLfNoTi9AQAT657MMxkDBBMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1jdVFsTXQ4MmhPTDBCQUJQcm5zd3pHUU1FRS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvNjI0NTQ2LTRhYzgtNGRiZS04Njk3 LWFhY2U4NzhiYWI2NS8xLzEtY3VRbE10ODJoT0wwQkFCUHJuc3d6R1FNRUUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2VhLzYyNDU0Ni00YWM4LTRkYmUtODY5Ny1hYWNlODc4YmFi NjUvMS8xLWN1UWxNdDgyaE9MMEJBQlBybnN3ekdRTUVFLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV8Wl 8ac0zhaWUemwGX0QtKtTCnKosywHwjs58DhoKdUDhvdBTskcTjrSGWvL0nkIlxrP vVyO7KKoq7kgxzTtpDAUBa6nICnSunDKajJT+0SBvRFWCbpeFyW48df/oXLZwiVA +A+bY9EbByHmzSjn2ovmbMrKjO6uAiwZNdOKtip5O1OA30J6iru0VN0OQK76tyRi kT9Ptu5WkheaHTm5TEc9x9ZrksvReD71CB6C1BSRyaa9BMjpg+m/KBwdXeu5tQtD llSaXrW7Ave6slzbbtkU7MBk4MLVy6CF0hQGRRR9yeX/dsfAbjUZtxHB0J8BBL9U lbNGEQ65c8INIUj1Ow== -----END CERTIFICATE-----Generated at Sun Jan 25 19:15:04 2026 by rpki-client