This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft File: 1LDBHmZmz8G38baZTg9Dcymt7AQ.mft (raw, json) Hash identifier: IT3DXPFokymzu3JeeTdghKvPMz3hf9ron+v2RkKg0nA= Subject key identifier: 86:DB:20:9E:0B:B0:F4:A6:C4:FF:A3:55:B7:60:0B:10:4B:FB:16:4C Authority key identifier: D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04 Certificate issuer: /CN=d4b0c11e6666cfc1b7f1b6994e0f437329adec04 Certificate serial: 019BF3503EFE78B8F6084E970FC6B34B9E19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft Manifest number: 177A Signing time: Sun 25 Jan 2026 04:01:21 +0000 Manifest this update: Sun 25 Jan 2026 04:01:21 +0000 Manifest next update: Mon 26 Jan 2026 04:01:21 +0000 Files and hashes: 1: 1LDBHmZmz8G38baZTg9Dcymt7AQ.crl (hash: 6C0vCI96YBOkXkBL3eROOmTko4cAPi5SBCb+r96W1QU=) 2: jGUPhdM1XZTdzsS3lD-IYIE9S9g.roa (hash: 69/RQWyt8lYUh/QhtvMFFUSfV50PWIikyQS0MBItp/o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:50:3e:fe:78:b8:f6:08:4e:97:0f:c6:b3:4b:9e:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4b0c11e6666cfc1b7f1b6994e0f437329adec04 Validity Not Before: Jan 25 04:01:21 2026 GMT Not After : Jan 26 04:01:21 2026 GMT Subject: CN=86db209e0bb0f4a6c4ffa355b7600b104bfb164c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:04:a3:61:b1:ff:b1:43:9a:92:4d:a5:1c:0b: 84:91:87:50:c3:d3:12:bc:55:f3:63:74:e1:e3:a8: 25:d5:7d:5e:81:70:0c:7f:de:fe:ed:02:41:ec:be: d3:2c:b3:87:09:33:f7:e9:fc:2d:f1:b0:4f:f3:06: ff:4e:5c:35:41:39:51:cf:58:58:f6:d8:2e:59:90: 26:c1:1e:1e:20:96:0b:82:76:0f:c3:53:a6:7d:4e: 29:70:86:be:ac:59:81:62:e9:11:b3:2d:e3:80:2a: 11:92:49:7b:33:3c:92:ab:81:a9:b9:cc:49:6e:b6: b6:19:a1:9a:37:14:1e:97:36:f4:b5:ac:6a:d3:45: c4:ee:1e:03:0b:a3:12:88:bb:58:24:56:ef:f7:c0: 17:8a:e8:d7:7d:56:57:a6:14:5c:35:37:29:a8:9b: 97:af:5d:de:a2:e6:7a:9e:b0:0f:42:9c:b5:3a:95: 29:60:e6:89:92:19:98:1b:93:b8:26:e8:8d:18:be: c9:6a:68:50:ac:72:28:2c:0f:88:52:7e:8b:86:14: f8:10:fd:3e:f3:9b:7d:00:0b:8d:05:db:dc:2a:1d: 07:ce:e3:fd:cb:ba:4d:00:53:6c:e0:0c:a7:eb:a1: a5:e3:5a:03:5c:ad:88:60:68:79:97:86:3f:b6:a8: f2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:DB:20:9E:0B:B0:F4:A6:C4:FF:A3:55:B7:60:0B:10:4B:FB:16:4C X509v3 Authority Key Identifier: keyid:D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:96:c5:fc:ab:15:9b:c2:df:f2:3c:85:6a:74:0a:ac:ac:38: 81:b5:51:23:67:01:e9:d0:5a:8b:61:4b:d9:87:5d:51:00:f9: 30:6e:3d:d4:22:e7:ed:f2:d8:d1:c8:af:04:47:5e:b6:9e:41: 6f:3e:2a:5b:c0:39:76:eb:3e:83:52:20:77:cf:05:65:05:d4: 80:c8:a7:4e:84:2c:46:90:ad:9e:95:dd:56:96:b9:cc:22:d2: 55:96:f7:9a:a9:10:35:0a:bc:64:ed:e9:de:6f:6d:e9:6f:4f: e9:52:d8:b4:33:f3:1b:cb:e2:d1:7b:1d:92:8d:6a:37:fa:58: 46:69:81:29:7d:61:1e:ab:46:a0:d6:0f:7e:dc:95:21:4b:05: 4b:7e:9d:96:96:b3:68:82:cc:c1:a6:c3:91:13:e8:6a:23:ae: 8d:c5:9b:b3:e4:ed:e9:8c:5c:1e:0d:22:6b:0c:56:b0:8c:46: 63:e9:24:de:9e:fc:a5:72:42:2b:6a:f0:f6:46:55:4b:78:26: 44:b2:9b:b3:b1:f9:61:a3:28:1b:08:d9:61:42:80:52:8c:d7: d8:1c:0a:e0:b6:61:a1:30:90:9d:92:30:26:21:88:2b:7e:38: 91:2c:c0:8d:48:9f:fd:2a:d4:e3:15:d0:f7:de:cb:89:a3:87: f4:ec:d8:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzUD7+eLj2CE6XD8azS54ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0YjBjMTFlNjY2NmNmYzFiN2YxYjY5OTRlMGY0MzczMjlh ZGVjMDQwHhcNMjYwMTI1MDQwMTIxWhcNMjYwMTI2MDQwMTIxWjAzMTEwLwYDVQQD Eyg4NmRiMjA5ZTBiYjBmNGE2YzRmZmEzNTViNzYwMGIxMDRiZmIxNjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwSjYbH/sUOakk2lHAuEkYdQw9MS vFXzY3Th46gl1X1egXAMf97+7QJB7L7TLLOHCTP36fwt8bBP8wb/Tlw1QTlRz1hY 9tguWZAmwR4eIJYLgnYPw1OmfU4pcIa+rFmBYukRsy3jgCoRkkl7MzySq4GpucxJ bra2GaGaNxQelzb0taxq00XE7h4DC6MSiLtYJFbv98AXiujXfVZXphRcNTcpqJuX r13eouZ6nrAPQpy1OpUpYOaJkhmYG5O4JuiNGL7JamhQrHIoLA+IUn6LhhT4EP0+ 85t9AAuNBdvcKh0HzuP9y7pNAFNs4Ayn66Gl41oDXK2IYGh5l4Y/tqjy4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIbbIJ4LsPSmxP+jVbdgCxBL+xZMMB8GA1UdIwQY MBaAFNSwwR5mZs/Bt/G2mU4PQ3MprewEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUxEQkhtWm16OEczOGJhWlRnOURjeW10N0FRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS80ZGI5M2QtZmM4Ny00ZTE2LTliM2It Nzk0NTNiNDc0ZTJlLzEvMUxEQkhtWm16OEczOGJhWlRnOURjeW10N0FRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS80ZGI5M2QtZmM4Ny00ZTE2LTliM2ItNzk0NTNiNDc0ZTJl LzEvMUxEQkhtWm16OEczOGJhWlRnOURjeW10N0FRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx5bF/KsV m8Lf8jyFanQKrKw4gbVRI2cB6dBai2FL2YddUQD5MG491CLn7fLY0civBEdetp5B bz4qW8A5dus+g1Igd88FZQXUgMinToQsRpCtnpXdVpa5zCLSVZb3mqkQNQq8ZO3p 3m9t6W9P6VLYtDPzG8vi0Xsdko1qN/pYRmmBKX1hHqtGoNYPftyVIUsFS36dlpaz aILMwabDkRPoaiOujcWbs+Tt6YxcHg0iawxWsIxGY+kk3p78pXJCK2rw9kZVS3gm RLKbs7H5YaMoGwjZYUKAUozX2BwK4LZhoTCQnZIwJiGIK344kSzAjUif/SrU4xXQ 997LiaOH9OzYgQ== -----END CERTIFICATE-----Generated at Sun Jan 25 16:19:23 2026 by rpki-client