This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft File: 1DVli1i3FBlu7zcb2WfAxeLKvWY.mft (raw, json) Hash identifier: MR8EeEPIeOcqdp3pNa0zaLDevmNEgBHU/t6oNDwKD48= Subject key identifier: 50:8D:76:FB:EF:7B:A5:02:3E:32:1B:25:D4:A1:4E:EC:15:ED:5C:F8 Authority key identifier: D4:35:65:8B:58:B7:14:19:6E:EF:37:1B:D9:67:C0:C5:E2:CA:BD:66 Certificate issuer: /CN=d435658b58b714196eef371bd967c0c5e2cabd66 Certificate serial: 019BF79AD93CEF06FDE9E8FB9F9139FE942B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft Manifest number: 1510 Signing time: Mon 26 Jan 2026 00:01:18 +0000 Manifest this update: Mon 26 Jan 2026 00:01:18 +0000 Manifest next update: Tue 27 Jan 2026 00:01:18 +0000 Files and hashes: 1: 1DVli1i3FBlu7zcb2WfAxeLKvWY.crl (hash: QZO5hmReHf5w3Bb3r3Tad7hpKT4VYbqWDQIsd0lcE5o=) 2: jTE7aus6FHt_I5mpklvVVf-KpAw.roa (hash: jTSKuDkQyIFhQKFi7+s/96OtXGRbDcnGaxvdpome6eY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:d9:3c:ef:06:fd:e9:e8:fb:9f:91:39:fe:94:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d435658b58b714196eef371bd967c0c5e2cabd66 Validity Not Before: Jan 26 00:01:18 2026 GMT Not After : Jan 27 00:01:18 2026 GMT Subject: CN=508d76fbef7ba5023e321b25d4a14eec15ed5cf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c4:41:48:a7:47:25:4f:bf:68:e3:78:bf:4c: 9b:1c:0d:cb:60:5c:1a:2a:df:a6:f0:82:70:2f:fc: 18:d9:80:f6:a2:e6:80:f2:dd:de:23:21:72:74:88: 31:dd:5c:39:a4:2f:9d:03:e6:a1:58:00:13:34:3c: 3d:33:6f:05:84:d6:3a:b1:f7:8c:c5:94:67:36:cd: 55:64:63:5b:97:2f:8e:e0:bf:9a:98:6d:b1:ba:c0: 3c:35:2e:69:26:7d:c8:8d:51:d1:0c:df:98:29:49: b5:3d:98:2b:6d:8f:79:ce:6d:dc:4a:3c:ca:a1:43: dc:c5:f0:ab:9c:b0:2e:1d:5f:78:b8:97:28:37:06: b5:88:d8:1e:2a:fc:f0:b1:cd:b0:1e:d0:eb:2d:62: 8d:79:ae:05:b2:00:6e:89:08:be:26:64:61:e4:21: a3:2f:84:b1:20:5a:4f:cc:0c:61:73:aa:d3:e1:06: 20:64:d8:c3:fe:7a:b3:e1:43:01:40:03:b9:eb:1b: 0f:28:d0:95:f6:93:e2:16:80:ac:51:5c:12:b7:b2: 8f:da:0a:03:45:54:e9:f7:0d:b2:f9:63:13:41:a7: 8e:39:08:f0:b1:b1:e1:5c:fc:6d:9d:a5:94:d6:bd: 44:2d:b4:ed:30:a9:41:13:31:42:d0:1a:48:91:03: c0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:8D:76:FB:EF:7B:A5:02:3E:32:1B:25:D4:A1:4E:EC:15:ED:5C:F8 X509v3 Authority Key Identifier: keyid:D4:35:65:8B:58:B7:14:19:6E:EF:37:1B:D9:67:C0:C5:E2:CA:BD:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:60:58:42:c2:b8:46:b0:f7:5a:9c:3c:d4:be:9c:d3:c5:7c: ef:52:ef:ed:84:5d:9b:b8:df:18:24:ba:ba:cc:db:8f:82:69: fd:29:e3:08:12:83:e7:b5:a0:b3:b3:61:ef:52:a8:76:01:5e: 8b:d8:7b:db:a4:93:17:94:c2:bf:53:11:06:60:d2:cf:22:f7: 63:21:30:eb:3d:3d:01:dd:6d:58:f2:cb:a4:53:8b:e0:5b:70: 2b:fb:76:d3:65:42:bb:9a:98:1a:ab:cb:b7:88:ea:82:5d:94: ee:c7:d9:e9:cc:11:0f:1b:68:3a:20:82:db:aa:45:65:7b:12: f8:7a:46:01:26:b9:f4:11:1e:17:74:6e:66:3a:3f:c8:ff:33: 69:f6:cb:33:6f:3e:88:04:3f:de:5c:df:cd:87:3a:80:a0:cb: 13:65:20:54:ac:88:d1:62:e7:cd:42:65:14:de:22:db:9b:cd: 9f:6c:b6:83:d6:71:15:de:0b:dd:8c:c6:73:ed:94:96:a7:c3: da:8f:ee:7a:5f:ae:1e:cc:34:57:51:04:19:7f:3a:ae:0f:7d: e0:4e:4c:a2:0a:90:0d:65:d6:39:0f:9d:24:da:51:57:37:cf: c4:39:22:d5:74:b8:ca:94:0a:84:a8:bf:d2:79:35:b7:80:1f: 63:36:47:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mtk87wb96ej7n5E5/pQrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MzU2NThiNThiNzE0MTk2ZWVmMzcxYmQ5NjdjMGM1ZTJj YWJkNjYwHhcNMjYwMTI2MDAwMTE4WhcNMjYwMTI3MDAwMTE4WjAzMTEwLwYDVQQD Eyg1MDhkNzZmYmVmN2JhNTAyM2UzMjFiMjVkNGExNGVlYzE1ZWQ1Y2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMRBSKdHJU+/aON4v0ybHA3LYFwa Kt+m8IJwL/wY2YD2ouaA8t3eIyFydIgx3Vw5pC+dA+ahWAATNDw9M28FhNY6sfeM xZRnNs1VZGNbly+O4L+amG2xusA8NS5pJn3IjVHRDN+YKUm1PZgrbY95zm3cSjzK oUPcxfCrnLAuHV94uJcoNwa1iNgeKvzwsc2wHtDrLWKNea4FsgBuiQi+JmRh5CGj L4SxIFpPzAxhc6rT4QYgZNjD/nqz4UMBQAO56xsPKNCV9pPiFoCsUVwSt7KP2goD RVTp9w2y+WMTQaeOOQjwsbHhXPxtnaWU1r1ELbTtMKlBEzFC0BpIkQPAPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFCNdvvve6UCPjIbJdShTuwV7Vz4MB8GA1UdIwQY MBaAFNQ1ZYtYtxQZbu83G9lnwMXiyr1mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMURWbGkxaTNGQmx1N3pjYjJXZkF4ZUxLdldZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi85MWY4ZjktZmMzZi00YmI4LTg0NTQt NDA1YjBiZGEyYzI2LzEvMURWbGkxaTNGQmx1N3pjYjJXZkF4ZUxLdldZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi85MWY4ZjktZmMzZi00YmI4LTg0NTQtNDA1YjBiZGEyYzI2 LzEvMURWbGkxaTNGQmx1N3pjYjJXZkF4ZUxLdldZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANGBYQsK4 RrD3Wpw81L6c08V871Lv7YRdm7jfGCS6uszbj4Jp/SnjCBKD57Wgs7Nh71KodgFe i9h726STF5TCv1MRBmDSzyL3YyEw6z09Ad1tWPLLpFOL4FtwK/t202VCu5qYGqvL t4jqgl2U7sfZ6cwRDxtoOiCC26pFZXsS+HpGASa59BEeF3RuZjo/yP8zafbLM28+ iAQ/3lzfzYc6gKDLE2UgVKyI0WLnzUJlFN4i25vNn2y2g9ZxFd4L3YzGc+2UlqfD 2o/uel+uHsw0V1EEGX86rg994E5MogqQDWXWOQ+dJNpRVzfPxDki1XS4ypQKhKi/ 0nk1t4AfYzZH9A== -----END CERTIFICATE-----Generated at Mon Jan 26 09:57:35 2026 by rpki-client