This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft File: 1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft (raw, json) Hash identifier: QSkPMWMSTOSxwCmFFnpura9ucOKvTgeyXhcxHHa+grk= Subject key identifier: 38:F0:3C:DD:DE:F7:BC:E9:7C:47:E5:C7:36:50:DD:12:42:68:A8:DE Authority key identifier: F9:95:1B:A5:63:29:32:3B:4C:60:F6:20:D6:A7:39:1E:70:7B:55:56 Certificate issuer: /CN=f9951ba56329323b4c60f620d6a7391e707b5556 Certificate serial: 019BF6BF858D08966DEAD0AE7110C794BE4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft Manifest number: 1009 Signing time: Sun 25 Jan 2026 20:01:44 +0000 Manifest this update: Sun 25 Jan 2026 20:01:44 +0000 Manifest next update: Mon 26 Jan 2026 20:01:44 +0000 Files and hashes: 1: 1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.crl (hash: s3NV+At5XRM7Ef7D198p+DByYQUOwmWJU8/xbuYWXR4=) 2: 3KARvcQJLBK_AN72q-v-VXBedTc.roa (hash: QFK7Ue4or8LMr7VexDK6GWjCaMT28dD7LoXQN+qlc8A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft rsync://rpki.ripe.net/repository/DEFAULT/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:85:8d:08:96:6d:ea:d0:ae:71:10:c7:94:be:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9951ba56329323b4c60f620d6a7391e707b5556 Validity Not Before: Jan 25 20:01:44 2026 GMT Not After : Jan 26 20:01:44 2026 GMT Subject: CN=38f03cdddef7bce97c47e5c73650dd124268a8de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:41:24:e1:85:1c:87:db:23:9b:f3:e7:c7:b4: fe:8e:d7:09:a6:de:ac:66:e6:50:37:d5:92:55:a1: ce:8c:55:14:e4:32:7f:3e:01:22:33:40:28:27:86: 60:57:41:90:d7:43:14:26:13:cb:b5:4d:88:cb:dc: ae:7f:bc:2e:4d:db:51:84:7d:14:ef:04:d7:5d:02: ac:90:07:26:4f:7c:b1:9a:b0:46:b3:28:b1:1f:99: d9:3a:cd:fa:d3:9b:bd:10:d2:c0:00:e6:c4:35:c6: 73:7a:c3:07:22:b9:88:aa:c5:3d:7b:0a:d6:a6:2e: cb:9d:67:a6:41:5c:56:77:5d:61:71:de:46:f7:c7: 4a:0e:d4:d5:8a:fb:de:e3:4e:bd:57:c3:d6:c2:9a: b4:85:eb:a2:a9:dc:da:b2:10:94:39:4f:55:4f:01: 79:1f:d1:5c:bb:c1:90:10:89:15:d5:38:b0:af:f9: 05:be:19:ee:16:30:27:59:83:ad:b1:2a:0d:e5:b1: c6:6e:2f:02:7e:6b:4a:8f:94:5d:52:17:e2:cf:d3: 6c:7a:6f:3e:16:fa:74:c9:74:9e:a3:75:7c:2d:69: 4c:0a:53:52:27:84:ee:8c:1d:b5:6f:ce:43:32:cf: f2:3b:6c:a7:d0:f1:a6:41:04:28:8d:74:b3:ed:ff: 39:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:F0:3C:DD:DE:F7:BC:E9:7C:47:E5:C7:36:50:DD:12:42:68:A8:DE X509v3 Authority Key Identifier: keyid:F9:95:1B:A5:63:29:32:3B:4C:60:F6:20:D6:A7:39:1E:70:7B:55:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:43:f5:f2:2e:cd:cb:c1:49:89:5c:45:67:a0:2b:e1:b4:22: 8b:40:62:85:a5:01:31:2a:e0:d4:9d:44:03:d6:4e:de:e0:ad: 5b:c0:13:02:b0:f4:c3:11:a6:ec:25:a9:72:4d:c6:e5:5e:48: 75:6b:51:4f:42:4b:f9:7e:b2:fe:3c:c6:5b:84:70:e1:49:73: bd:a6:a5:9e:9e:1d:8f:77:e9:5f:db:65:8e:80:b6:5d:ee:ad: 57:c9:30:86:17:95:a3:09:bd:8d:25:6e:e0:43:53:da:e4:53: 26:bd:31:01:8c:f0:e8:6d:e8:c8:16:2f:a8:5b:9f:9f:8e:3a: 47:b4:40:08:f5:6c:bc:41:74:df:7e:e1:2f:37:93:99:93:c5: 68:d6:40:40:99:80:f5:79:ad:2d:ae:9b:c5:ac:7c:30:08:b4: 3a:4f:6d:e6:aa:9e:29:25:19:b1:80:9a:8c:16:b1:c5:01:f1: 48:c8:77:94:e7:7f:dd:d8:b2:60:bb:4c:38:b3:33:fc:2a:e0: 28:1f:0e:f3:6a:c8:21:b8:9c:7b:9b:0b:87:18:7d:90:4e:55: e6:61:f9:df:4b:2c:2f:c3:24:78:72:b7:b4:c2:01:bb:6d:51: 0e:ad:11:6b:eb:06:c5:2a:e5:7c:ef:89:98:92:e4:19:f2:fe: 21:5e:e4:b7 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZv2v4WNCJZt6tCucRDHlL5PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5OTUxYmE1NjMyOTMyM2I0YzYwZjYyMGQ2YTczOTFlNzA3 YjU1NTYwHhcNMjYwMTI1MjAwMTQ0WhcNMjYwMTI2MjAwMTQ0WjAzMTEwLwYDVQQD EygzOGYwM2NkZGRlZjdiY2U5N2M0N2U1YzczNjUwZGQxMjQyNjhhOGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0Ek4YUch9sjm/Pnx7T+jtcJpt6s ZuZQN9WSVaHOjFUU5DJ/PgEiM0AoJ4ZgV0GQ10MUJhPLtU2Iy9yuf7wuTdtRhH0U 7wTXXQKskAcmT3yxmrBGsyixH5nZOs3605u9ENLAAObENcZzesMHIrmIqsU9ewrW pi7LnWemQVxWd11hcd5G98dKDtTVivve4069V8PWwpq0heuiqdzashCUOU9VTwF5 H9Fcu8GQEIkV1Tiwr/kFvhnuFjAnWYOtsSoN5bHGbi8CfmtKj5RdUhfiz9Nsem8+ Fvp0yXSeo3V8LWlMClNSJ4TujB21b85DMs/yO2yn0PGmQQQojXSz7f85VQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFDjwPN3e97zpfEflxzZQ3RJCaKjeMB8GA1UdIwQY MBaAFPmVG6VjKTI7TGD2INanOR5we1VWMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1aVWJwV01wTWp0TVlQWWcxcWM1SG5CN1ZWWS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWQvOGY1Y2JkLWY1MzktNGZmZi1iNDJm LTQ3NDVkN2NkOTNmMS8xLzEtWlVicFdNcE1qdE1ZUFlnMXFjNUhuQjdWVlkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2VkLzhmNWNiZC1mNTM5LTRmZmYtYjQyZi00NzQ1ZDdjZDkz ZjEvMS8xLVpVYnBXTXBNanRNWVBZZzFxYzVIbkI3VlZZLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVUP1 8i7Ny8FJiVxFZ6Ar4bQii0BihaUBMSrg1J1EA9ZO3uCtW8ATArD0wxGm7CWpck3G 5V5IdWtRT0JL+X6y/jzGW4Rw4Ulzvaalnp4dj3fpX9tljoC2Xe6tV8kwhheVowm9 jSVu4ENT2uRTJr0xAYzw6G3oyBYvqFufn446R7RACPVsvEF0337hLzeTmZPFaNZA QJmA9XmtLa6bxax8MAi0Ok9t5qqeKSUZsYCajBaxxQHxSMh3lOd/3diyYLtMOLMz /CrgKB8O82rIIbice5sLhxh9kE5V5mH530ssL8MkeHK3tMIBu21RDq0Ra+sGxSrl fO+JmJLkGfL+IV7ktw== -----END CERTIFICATE-----Generated at Sun Jan 25 23:55:33 2026 by rpki-client