This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft File: 1NhufQc6nk1p7HFcNiMXaAWJTVo.mft (raw, json) Hash identifier: AsZN1v6/QuUU8qpZy/xL2bKfXKAihK2emMzEh7U6mPg= Subject key identifier: EB:BA:48:FD:81:BC:05:9F:3F:2C:68:CE:14:05:90:86:6C:F0:A7:3D Authority key identifier: D4:D8:6E:7D:07:3A:9E:4D:69:EC:71:5C:36:23:17:68:05:89:4D:5A Certificate issuer: /CN=d4d86e7d073a9e4d69ec715c3623176805894d5a Certificate serial: 019BF763585D51B6CB60C65DE0E059FA8E6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft Manifest number: 0EDC Signing time: Sun 25 Jan 2026 23:00:41 +0000 Manifest this update: Sun 25 Jan 2026 23:00:41 +0000 Manifest next update: Mon 26 Jan 2026 23:00:41 +0000 Files and hashes: 1: 1NhufQc6nk1p7HFcNiMXaAWJTVo.crl (hash: 8+x5wiy4OBnJ2Z2wyIRPRnasq0MU5X6cFpu2k+3ubXs=) 2: E53XM9bwcUdhNes8XtMe3ZWybN8.roa (hash: MGupxfszh7a8rx7tMG0y7Bj5FjeIlETaabShTOh0AgM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 23:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:58:5d:51:b6:cb:60:c6:5d:e0:e0:59:fa:8e:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4d86e7d073a9e4d69ec715c3623176805894d5a Validity Not Before: Jan 25 23:00:41 2026 GMT Not After : Jan 26 23:00:41 2026 GMT Subject: CN=ebba48fd81bc059f3f2c68ce140590866cf0a73d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:45:6d:6e:b3:7b:db:5c:20:02:d6:62:d6:36: c4:97:38:64:b0:e4:42:aa:3d:91:5b:87:17:42:f6: 71:40:66:29:9b:81:5f:4b:5e:0b:bb:dc:02:0f:60: 5f:b3:56:bb:30:1d:48:5d:b2:16:a9:30:14:4f:6b: b9:53:62:bc:3a:a5:8f:e6:51:aa:23:b0:71:7b:97: 56:5f:2c:74:bd:60:b7:25:8c:d3:d0:47:b5:30:9f: 3d:a2:15:e9:d3:b7:8f:db:1d:00:25:6f:05:3a:de: 17:5b:34:7e:89:0a:74:d3:2f:6f:d2:76:b1:dd:85: d4:cb:0a:52:55:61:18:a5:1c:b3:5b:ec:26:60:55: b2:40:56:d5:9a:8b:c8:a9:e6:7f:71:f9:0a:b3:19: a9:08:3a:02:2c:5b:e3:8d:92:1e:43:6b:b8:7f:da: 6e:75:70:9c:9a:2e:5e:3e:70:3d:7e:9e:67:67:ad: a5:f1:00:6a:75:20:73:b4:0a:01:1a:28:08:98:c4: f0:c7:79:62:46:70:d8:84:60:11:2f:c7:c0:ff:5e: c5:52:70:f4:19:36:41:63:c3:ba:7b:6a:f5:39:75: f8:c2:db:8e:d1:c6:58:ab:53:d6:96:ee:8c:63:fd: c6:0f:54:7f:8c:30:1c:59:63:29:60:25:6f:91:19: cc:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:BA:48:FD:81:BC:05:9F:3F:2C:68:CE:14:05:90:86:6C:F0:A7:3D X509v3 Authority Key Identifier: keyid:D4:D8:6E:7D:07:3A:9E:4D:69:EC:71:5C:36:23:17:68:05:89:4D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:2e:d4:d1:db:fd:3c:48:8a:f3:c5:bf:a8:04:64:2d:18:ed: 5f:c9:a5:a0:10:00:88:7f:51:9a:8c:07:62:31:3d:98:58:2e: 61:04:83:b8:4b:fa:cf:7f:3a:56:80:2e:f2:ac:50:1e:42:3a: 78:b6:8b:74:be:cf:73:0d:b8:ae:38:41:cd:f4:12:ff:d5:36: 22:d2:5b:65:a1:50:c7:f9:cd:fa:fb:c8:dd:fc:77:de:7b:0d: 85:f3:23:83:a6:64:d3:2b:f4:40:b0:23:d4:d9:c6:74:fb:30: 9e:c3:4d:29:0c:ef:a6:6a:27:70:e3:91:8b:7a:06:4e:2d:2e: 69:65:a8:64:1c:87:f2:79:86:89:a3:e8:b8:09:5e:80:a4:22: 05:9d:fc:22:da:91:cc:4d:36:7a:40:d8:06:c9:8d:24:0c:9b: bc:46:f6:f2:cc:6d:0a:ba:06:35:90:06:c1:c8:a2:1f:7e:09: a3:a5:90:b6:ad:fa:f0:91:74:06:f3:a8:c1:4a:0e:dd:52:a8: 20:92:bd:62:8a:36:10:8d:64:2f:4a:84:2e:e0:90:36:07:81: 30:f2:ae:cc:e4:f9:eb:72:93:14:ac:b3:d7:00:25:84:7b:6b: c8:1a:7b:a1:38:7a:57:68:dc:d9:8b:4e:a5:f5:b7:fe:cf:10: d1:23:1e:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y1hdUbbLYMZd4OBZ+o5qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ZDg2ZTdkMDczYTllNGQ2OWVjNzE1YzM2MjMxNzY4MDU4 OTRkNWEwHhcNMjYwMTI1MjMwMDQxWhcNMjYwMTI2MjMwMDQxWjAzMTEwLwYDVQQD EyhlYmJhNDhmZDgxYmMwNTlmM2YyYzY4Y2UxNDA1OTA4NjZjZjBhNzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkVtbrN721wgAtZi1jbElzhksORC qj2RW4cXQvZxQGYpm4FfS14Lu9wCD2Bfs1a7MB1IXbIWqTAUT2u5U2K8OqWP5lGq I7Bxe5dWXyx0vWC3JYzT0Ee1MJ89ohXp07eP2x0AJW8FOt4XWzR+iQp00y9v0nax 3YXUywpSVWEYpRyzW+wmYFWyQFbVmovIqeZ/cfkKsxmpCDoCLFvjjZIeQ2u4f9pu dXCcmi5ePnA9fp5nZ62l8QBqdSBztAoBGigImMTwx3liRnDYhGARL8fA/17FUnD0 GTZBY8O6e2r1OXX4wtuO0cZYq1PWlu6MY/3GD1R/jDAcWWMpYCVvkRnMqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOu6SP2BvAWfPyxozhQFkIZs8Kc9MB8GA1UdIwQY MBaAFNTYbn0HOp5NaexxXDYjF2gFiU1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU5odWZRYzZuazFwN0hGY05pTVhhQVdKVFZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC84MmQ2NWEtNDVlMi00ZWZiLWIyM2Mt OTU1YWQ3OGJjYjA3LzEvMU5odWZRYzZuazFwN0hGY05pTVhhQVdKVFZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC84MmQ2NWEtNDVlMi00ZWZiLWIyM2MtOTU1YWQ3OGJjYjA3 LzEvMU5odWZRYzZuazFwN0hGY05pTVhhQVdKVFZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbi7U0dv9 PEiK88W/qARkLRjtX8mloBAAiH9RmowHYjE9mFguYQSDuEv6z386VoAu8qxQHkI6 eLaLdL7Pcw24rjhBzfQS/9U2ItJbZaFQx/nN+vvI3fx33nsNhfMjg6Zk0yv0QLAj 1NnGdPswnsNNKQzvpmoncOORi3oGTi0uaWWoZByH8nmGiaPouAlegKQiBZ38ItqR zE02ekDYBsmNJAybvEb28sxtCroGNZAGwciiH34Jo6WQtq368JF0BvOowUoO3VKo IJK9Yoo2EI1kL0qELuCQNgeBMPKuzOT563KTFKyz1wAlhHtryBp7oTh6V2jc2YtO pfW3/s8Q0SMeiw== -----END CERTIFICATE-----Generated at Mon Jan 26 09:01:58 2026 by rpki-client