This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft File: 1QYosB6kR3GDy_-S23oMWBRRlaQ.mft (raw, json) Hash identifier: tuyKVH+IakwX/5rPm3fMZUe5BfJfGdteYObLzY/Ys/8= Subject key identifier: 9B:B8:93:A2:47:DF:B4:B7:39:2F:AF:56:CF:69:40:54:B6:0E:15:19 Authority key identifier: D5:06:28:B0:1E:A4:47:71:83:CB:FF:92:DB:7A:0C:58:14:51:95:A4 Certificate issuer: /CN=d50628b01ea4477183cbff92db7a0c58145195a4 Certificate serial: 019BF763810734529ACCD287BCEF75D3DF30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft Manifest number: 0C8F Signing time: Sun 25 Jan 2026 23:00:51 +0000 Manifest this update: Sun 25 Jan 2026 23:00:51 +0000 Manifest next update: Mon 26 Jan 2026 23:00:51 +0000 Files and hashes: 1: 1QYosB6kR3GDy_-S23oMWBRRlaQ.crl (hash: DXwySfG1sw/+Y3sfRctivYKZCHaEiLRvklDBPzJ9rHY=) 2: Cgsxb4qiaxInZIOD52ZW_SBVWn8.roa (hash: AfaNiPsxEDa6BqM9VdWTViXe2dMUmuZ+VOqQLOWjvx0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:81:07:34:52:9a:cc:d2:87:bc:ef:75:d3:df:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d50628b01ea4477183cbff92db7a0c58145195a4 Validity Not Before: Jan 25 23:00:51 2026 GMT Not After : Jan 26 23:00:51 2026 GMT Subject: CN=9bb893a247dfb4b7392faf56cf694054b60e1519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:dd:61:78:00:0d:2c:44:58:59:d5:21:da:66: ad:7d:71:09:6c:d2:8c:dc:78:bc:6b:45:96:15:08: aa:30:f1:bc:da:9f:b8:81:fa:0c:0a:b8:ac:93:5c: 7d:73:3f:5c:6e:69:b9:c4:43:d0:1a:47:f7:e9:ef: 35:7b:39:c9:0d:e3:26:db:ee:e6:17:a3:f6:96:9d: 24:69:05:2f:e3:5e:e9:87:7b:76:03:20:a8:d8:d2: ee:8a:5d:e5:44:80:ba:e6:d5:ad:f3:21:dc:1d:b9: 73:06:d5:df:b4:96:a5:b6:f5:24:94:16:c2:7d:63: 83:c8:62:15:65:fe:91:a8:82:aa:cd:9d:d3:e0:c9: 4e:47:23:51:47:28:9c:a3:5c:54:10:a1:60:64:61: 88:79:86:eb:c4:cd:26:b5:f6:11:78:d0:58:4a:a5: 69:97:03:c9:b0:b5:6f:98:27:56:2e:26:11:93:00: f3:53:05:86:a0:ed:d7:e5:e1:1a:47:4e:82:ee:36: 3c:17:3a:06:47:10:29:23:b2:1a:33:f0:98:5c:1f: 55:ae:fa:1c:04:b2:3c:4e:47:19:fb:18:1d:98:d6: 01:21:36:0f:33:3e:29:12:2b:74:6d:14:3d:a4:be: 1c:79:3c:19:bf:2f:e8:d2:a6:7d:4c:31:27:da:5a: d2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B8:93:A2:47:DF:B4:B7:39:2F:AF:56:CF:69:40:54:B6:0E:15:19 X509v3 Authority Key Identifier: keyid:D5:06:28:B0:1E:A4:47:71:83:CB:FF:92:DB:7A:0C:58:14:51:95:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:d0:65:a6:49:4a:cd:3d:74:59:37:3a:9e:27:94:fa:79:e4: de:1c:df:da:20:0b:a1:ee:e9:6c:c7:be:62:b8:94:5b:bc:a6: 2e:f6:9b:9b:9e:f0:5f:e7:55:79:09:1f:62:cb:c1:06:a3:0d: 5a:4d:fa:83:3b:b8:d7:f5:a7:f0:c2:a4:f9:bc:fc:e7:88:03: dd:eb:b0:49:39:6a:70:32:ad:3f:0a:cd:93:a3:a5:4d:7a:34: 7f:8a:26:8c:5b:95:6a:a6:05:46:2c:00:b0:70:3d:25:29:ea: dd:4e:17:6d:f8:b0:39:0c:ed:73:ff:5a:cf:68:36:06:57:8a: 0c:69:3b:2e:c5:4d:c5:38:ee:05:1a:d0:cd:2e:c7:66:f0:30: 21:e2:aa:df:8a:91:d3:6d:1c:f9:24:e8:e6:61:f4:13:aa:c0: 67:6e:21:09:b3:ff:ea:4d:f9:86:75:c5:b8:18:fd:06:57:28: 42:98:e4:ab:de:98:39:61:c4:48:a2:a8:11:d8:f6:54:6d:73: e3:26:dc:90:18:39:c1:72:4f:71:5a:43:07:74:e2:9e:56:97: 3d:85:56:ad:fc:36:01:30:1c:fc:07:72:3d:9d:8d:60:b7:e1: 6c:62:c1:d1:08:15:05:ec:c3:66:1a:97:72:73:85:a5:69:36: 30:19:ac:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y4EHNFKazNKHvO91098wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MDYyOGIwMWVhNDQ3NzE4M2NiZmY5MmRiN2EwYzU4MTQ1 MTk1YTQwHhcNMjYwMTI1MjMwMDUxWhcNMjYwMTI2MjMwMDUxWjAzMTEwLwYDVQQD Eyg5YmI4OTNhMjQ3ZGZiNGI3MzkyZmFmNTZjZjY5NDA1NGI2MGUxNTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtN1heAANLERYWdUh2matfXEJbNKM 3Hi8a0WWFQiqMPG82p+4gfoMCrisk1x9cz9cbmm5xEPQGkf36e81eznJDeMm2+7m F6P2lp0kaQUv417ph3t2AyCo2NLuil3lRIC65tWt8yHcHblzBtXftJaltvUklBbC fWODyGIVZf6RqIKqzZ3T4MlORyNRRyico1xUEKFgZGGIeYbrxM0mtfYReNBYSqVp lwPJsLVvmCdWLiYRkwDzUwWGoO3X5eEaR06C7jY8FzoGRxApI7IaM/CYXB9Vrvoc BLI8TkcZ+xgdmNYBITYPMz4pEit0bRQ9pL4ceTwZvy/o0qZ9TDEn2lrSYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJu4k6JH37S3OS+vVs9pQFS2DhUZMB8GA1UdIwQY MBaAFNUGKLAepEdxg8v/ktt6DFgUUZWkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVFZb3NCNmtSM0dEeV8tUzIzb01XQlJSbGFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9hODA5NmMtOTUyNy00OWNjLTk0Y2Qt ODNlNGJhZTM3NTViLzEvMVFZb3NCNmtSM0dEeV8tUzIzb01XQlJSbGFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9hODA5NmMtOTUyNy00OWNjLTk0Y2QtODNlNGJhZTM3NTVi LzEvMVFZb3NCNmtSM0dEeV8tUzIzb01XQlJSbGFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiNBlpklK zT10WTc6nieU+nnk3hzf2iALoe7pbMe+YriUW7ymLvabm57wX+dVeQkfYsvBBqMN Wk36gzu41/Wn8MKk+bz854gD3euwSTlqcDKtPwrNk6OlTXo0f4omjFuVaqYFRiwA sHA9JSnq3U4XbfiwOQztc/9az2g2BleKDGk7LsVNxTjuBRrQzS7HZvAwIeKq34qR 020c+STo5mH0E6rAZ24hCbP/6k35hnXFuBj9BlcoQpjkq96YOWHESKKoEdj2VG1z 4ybckBg5wXJPcVpDB3TinlaXPYVWrfw2ATAc/AdyPZ2NYLfhbGLB0QgVBezDZhqX cnOFpWk2MBmsrQ== -----END CERTIFICATE-----Generated at Mon Jan 26 07:12:35 2026 by rpki-client