This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft File: 1vgHZgvyzZKu45FEKlNDr3GMGMc.mft (raw, json) Hash identifier: TiRX+nM+d+M+cFBkF/Maw8Mesf8XBoMLRa0GR7lgoVQ= Subject key identifier: 61:55:57:D4:B5:84:29:89:18:6D:35:06:E9:D6:F1:11:02:CB:52:49 Authority key identifier: D6:F8:07:66:0B:F2:CD:92:AE:E3:91:44:2A:53:43:AF:71:8C:18:C7 Certificate issuer: /CN=d6f807660bf2cd92aee391442a5343af718c18c7 Certificate serial: 019BF53E83AFF316347D467E7D8BDCC8D70A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft Manifest number: 177B Signing time: Sun 25 Jan 2026 13:01:13 +0000 Manifest this update: Sun 25 Jan 2026 13:01:13 +0000 Manifest next update: Mon 26 Jan 2026 13:01:13 +0000 Files and hashes: 1: 1vgHZgvyzZKu45FEKlNDr3GMGMc.crl (hash: 2k0m1eIRYzSXULyi8gTZklTa5fRRAYwpMBrRxFga06A=) 2: DcQtZ-Dz8X8GVNr2BI2zUcr15D8.roa (hash: ARWpTu4Im5vDVchDP7TKrgojtqolrGKcQ5Qr0gDHopw=) 3: pBfnRaa4uT2fJ1J0F8evwtWCvCs.roa (hash: nmGG8AuPdljBBkNiuco4BAfX85eXAF9UrVPHWokUo4s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:83:af:f3:16:34:7d:46:7e:7d:8b:dc:c8:d7:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6f807660bf2cd92aee391442a5343af718c18c7 Validity Not Before: Jan 25 13:01:13 2026 GMT Not After : Jan 26 13:01:13 2026 GMT Subject: CN=615557d4b5842989186d3506e9d6f11102cb5249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2b:70:21:52:c6:ee:ed:fe:a8:01:d3:0e:e3: 6d:ae:07:a3:d1:3b:a7:3c:18:36:72:af:c4:e3:5f: d3:02:11:64:93:3b:8e:2e:03:2a:80:5c:a0:59:9d: a2:be:96:c0:48:43:06:94:a3:7b:f7:74:b5:f7:e3: bd:42:34:41:8c:dd:28:ee:98:3a:02:72:b6:ac:e0: d5:20:ac:c1:62:21:26:12:fe:e2:f9:e4:36:d2:64: d5:19:f9:13:03:6a:3a:d5:14:86:26:54:a7:f5:ec: e5:7f:9a:1c:c8:50:d1:59:13:d5:ab:7c:ce:70:a1: 7e:93:3f:06:af:ea:04:31:fa:66:23:69:f4:0f:aa: 49:84:b0:24:2e:92:a9:3b:94:fc:79:4c:dc:07:ad: 2a:ff:e0:da:ed:73:1b:64:6a:26:f4:38:22:c4:34: e7:c2:f7:b8:40:db:a0:f9:ac:1f:28:b2:bc:e3:a3: b1:88:fe:89:c1:4e:bf:27:f4:71:e9:6b:4a:a8:ac: ec:95:8c:a2:69:12:c8:08:c7:af:29:0a:30:52:92: 98:c7:5f:b6:9b:09:ec:4b:7d:82:8e:56:60:84:86: 37:f2:ad:8e:55:e2:89:f4:c9:d5:f8:b4:ed:88:e7: 65:83:5a:cc:37:05:b8:6d:0f:71:cf:4f:5d:75:83: ff:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:55:57:D4:B5:84:29:89:18:6D:35:06:E9:D6:F1:11:02:CB:52:49 X509v3 Authority Key Identifier: keyid:D6:F8:07:66:0B:F2:CD:92:AE:E3:91:44:2A:53:43:AF:71:8C:18:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:92:d3:23:b7:cf:7c:90:85:44:7f:71:41:e9:fb:4a:a5:fd: 99:7b:c0:0d:df:13:81:56:d8:a7:e4:d2:0a:84:2c:53:2d:95: 09:47:37:6b:16:06:7c:0f:39:cb:30:75:88:2e:3a:7b:9f:89: db:36:ef:d9:49:95:09:a8:c9:a6:f3:18:d3:c3:54:07:f7:4d: d7:ec:c4:b5:14:c0:88:9f:3f:be:0d:88:16:ef:00:ed:3c:0e: 03:4b:ca:d3:71:0c:52:84:27:fe:33:f4:2d:ce:80:78:16:01: af:ee:bf:54:26:aa:43:15:52:fb:cc:a4:c6:ce:b6:d7:0a:55: a0:d7:fb:0b:69:20:cb:2f:d7:1b:f9:04:bf:cc:27:90:54:29: a0:a2:04:7a:40:e1:03:62:11:12:5b:b1:91:5a:dd:65:e1:8a: f1:8a:2f:1b:30:20:f7:6e:37:f9:95:03:3e:95:16:fc:eb:e9: 72:e9:a0:31:8e:9a:f9:f4:ed:1a:c7:50:a4:00:f9:42:3e:8a: 04:c0:8f:69:8c:5f:88:e0:a3:b0:77:0b:ce:74:cd:fa:16:50: 02:7a:3c:06:10:e9:07:3e:a7:d5:2e:da:df:ab:0c:e8:7a:0b: 50:ae:d9:bf:04:3a:66:f6:08:36:f9:a3:e2:a3:2a:de:12:15: 88:f3:e8:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PoOv8xY0fUZ+fYvcyNcKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ZjgwNzY2MGJmMmNkOTJhZWUzOTE0NDJhNTM0M2FmNzE4 YzE4YzcwHhcNMjYwMTI1MTMwMTEzWhcNMjYwMTI2MTMwMTEzWjAzMTEwLwYDVQQD Eyg2MTU1NTdkNGI1ODQyOTg5MTg2ZDM1MDZlOWQ2ZjExMTAyY2I1MjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoStwIVLG7u3+qAHTDuNtrgej0Tun PBg2cq/E41/TAhFkkzuOLgMqgFygWZ2ivpbASEMGlKN793S19+O9QjRBjN0o7pg6 AnK2rODVIKzBYiEmEv7i+eQ20mTVGfkTA2o61RSGJlSn9ezlf5ocyFDRWRPVq3zO cKF+kz8Gr+oEMfpmI2n0D6pJhLAkLpKpO5T8eUzcB60q/+Da7XMbZGom9DgixDTn wve4QNug+awfKLK846OxiP6JwU6/J/Rx6WtKqKzslYyiaRLICMevKQowUpKYx1+2 mwnsS32CjlZghIY38q2OVeKJ9MnV+LTtiOdlg1rMNwW4bQ9xz09ddYP/YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGFVV9S1hCmJGG01BunW8RECy1JJMB8GA1UdIwQY MBaAFNb4B2YL8s2SruORRCpTQ69xjBjHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXZnSFpndnl6Wkt1NDVGRUtsTkRyM0dNR01jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iNzVkNjQtOWE1NS00OTBjLThjNTgt M2ZlMTc0ODFmNjA4LzEvMXZnSFpndnl6Wkt1NDVGRUtsTkRyM0dNR01jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9iNzVkNjQtOWE1NS00OTBjLThjNTgtM2ZlMTc0ODFmNjA4 LzEvMXZnSFpndnl6Wkt1NDVGRUtsTkRyM0dNR01jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASZLTI7fP fJCFRH9xQen7SqX9mXvADd8TgVbYp+TSCoQsUy2VCUc3axYGfA85yzB1iC46e5+J 2zbv2UmVCajJpvMY08NUB/dN1+zEtRTAiJ8/vg2IFu8A7TwOA0vK03EMUoQn/jP0 Lc6AeBYBr+6/VCaqQxVS+8ykxs621wpVoNf7C2kgyy/XG/kEv8wnkFQpoKIEekDh A2IREluxkVrdZeGK8YovGzAg9243+ZUDPpUW/OvpcumgMY6a+fTtGsdQpAD5Qj6K BMCPaYxfiOCjsHcLznTN+hZQAno8BhDpBz6n1S7a36sM6HoLUK7ZvwQ6ZvYINvmj 4qMq3hIViPPoUw== -----END CERTIFICATE-----Generated at Sun Jan 25 21:12:22 2026 by rpki-client