This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft File: 1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft (raw, json) Hash identifier: /O1/JIYaRbGOoFt9YH+grJRUzHrpiC93JPa33JGSZQA= Subject key identifier: BD:AF:81:F9:5B:50:BB:D1:24:37:2E:12:3D:8C:5C:6B:A5:52:2A:F5 Authority key identifier: F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7 Certificate issuer: /CN=f879988e0f49971a326f419e5cfacbfddcc993e7 Certificate serial: 019BD7D952D2F1DD7617F6476DA9291A9518 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft Manifest number: 13A1 Signing time: Mon 19 Jan 2026 20:01:42 +0000 Manifest this update: Mon 19 Jan 2026 20:01:42 +0000 Manifest next update: Tue 20 Jan 2026 20:01:42 +0000 Files and hashes: 1: 1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl (hash: g9ugYEcdApEC5LNFgw2AC8MvCigDBNx4KcD6CZDTDkg=) 2: 4-2PHy4BbqBG4XIZeUFJyecMDB0.roa (hash: LT7qoUHsyJ1W7OMNJpNL1fgI1yxHMTvsp6/LRnCoi0Q=) 3: I-etTiyhzk_oS0jiw4MSDZk_e9Y.roa (hash: wSnumKCGcKJNe5X3ET8w/3ULT8RzVLmJW0letJCd4tQ=) 4: UcCqMTHisbto-8lkUT_tLgAeR84.roa (hash: MKKos7zvQxC3AHlxEIyIz2TorbEhj+M5Gg1Z5qYM5Vw=) 5: dKrxZh5eXZLlr4ulHUj3rX7iLKw.roa (hash: 3Y0TgUH+fONslolgRyWTVgCSVHlc4/LZlKQTJy+uJA8=) 6: rL-iVMHxtGo5kWiOEpOPkt5AYVk.roa (hash: gBSDL3GaTKepMFy7vrD/4/ZtzbB+iloDhAFlQ3Xiouc=) 7: zNwZgS-KWr_tdZQlJYw7r-bncj4.roa (hash: bFzYQzvtRgyI5Sf4GLvJJ0QPWEhrGxWF/aPyki12aFQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d7:d9:52:d2:f1:dd:76:17:f6:47:6d:a9:29:1a:95:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f879988e0f49971a326f419e5cfacbfddcc993e7 Validity Not Before: Jan 19 20:01:42 2026 GMT Not After : Jan 20 20:01:42 2026 GMT Subject: CN=bdaf81f95b50bbd124372e123d8c5c6ba5522af5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c3:56:cd:57:eb:7f:a2:6e:35:c0:62:29:b4: 56:d0:c7:52:dc:09:af:0c:c3:9e:2e:4a:ee:c0:76: 9c:2f:4a:fc:1b:a3:3d:e6:59:47:ec:52:a0:93:c1: 9d:84:00:49:e5:dd:1e:93:84:ea:b0:f0:75:50:7f: 39:87:1b:9c:5c:61:64:24:b3:7b:06:f6:31:5e:43: 44:cc:e3:44:7f:fd:e0:d5:2c:12:67:39:fa:c5:73: 37:fc:0c:6d:6e:03:1d:fd:a6:36:63:6a:ca:e9:36: b8:f6:24:b8:93:2b:63:a4:fa:12:2b:16:91:64:19: 47:ea:25:cd:dc:d2:eb:ec:37:1a:88:4c:65:ed:d5: 74:e1:ee:36:0f:7a:77:91:c9:98:76:3a:6c:4d:7c: 60:dd:33:8b:4a:a3:e4:a8:a0:cd:e9:bc:0c:f0:87: 77:99:32:f2:f7:69:da:e3:ca:09:04:ef:90:f3:1f: 41:d6:19:1e:e1:b2:b2:b4:e3:8b:42:57:9f:64:75: a0:72:be:8c:bd:87:71:f3:73:cd:ea:50:4e:46:2b: ab:9d:6e:0c:68:6e:db:4d:3c:76:85:01:78:89:a1: af:03:25:51:db:bc:83:ff:23:ff:ba:59:81:a2:4e: 4f:13:b9:99:0d:29:45:26:87:5f:d0:d8:2c:5d:c5: e2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:AF:81:F9:5B:50:BB:D1:24:37:2E:12:3D:8C:5C:6B:A5:52:2A:F5 X509v3 Authority Key Identifier: keyid:F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:66:f5:89:d1:4a:33:a1:3d:9f:e0:43:2c:7b:3e:1b:92:4e: 70:1e:23:68:f2:5c:da:e0:f9:b1:6a:bd:42:8b:f3:b2:db:07: 91:8a:74:fe:0d:07:2c:1a:04:26:29:ee:c4:8f:0b:5f:b3:57: a5:bf:e1:7c:b8:d4:1c:26:af:bd:23:40:51:92:1a:50:bf:09: b1:e9:c1:7b:71:7a:41:b2:22:48:38:b6:72:66:b1:2b:7f:6b: 65:c9:0d:74:59:4a:87:71:c0:b0:11:45:6e:30:6c:09:cd:47: 5e:10:3a:49:66:db:b9:9a:af:bc:7b:07:30:db:d5:8d:dd:40: 3c:3f:bf:1b:ac:db:9e:1f:0d:4b:75:d7:a9:24:f8:05:63:28: 9c:dd:63:67:6e:61:b3:10:7e:9e:3b:67:d5:d9:5f:a9:b6:5d: 78:65:ba:2a:b4:d6:9b:a2:e9:c1:83:24:aa:2f:bf:bf:76:95: b1:0e:e9:b0:7c:74:1f:7e:9e:80:97:fe:da:c5:63:fa:a1:21: be:4a:e4:70:5e:32:f1:c1:48:d9:a7:08:5e:b1:2d:15:4c:05: 90:d9:60:42:84:89:52:13:d7:93:88:3c:bd:01:76:e1:95:8f: b3:0c:32:b0:a7:e1:82:40:23:4f:af:26:23:59:b0:f8:a9:a1: 4c:12:6f:c3 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZvX2VLS8d12F/ZHbakpGpUYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4Nzk5ODhlMGY0OTk3MWEzMjZmNDE5ZTVjZmFjYmZkZGNj OTkzZTcwHhcNMjYwMTE5MjAwMTQyWhcNMjYwMTIwMjAwMTQyWjAzMTEwLwYDVQQD EyhiZGFmODFmOTViNTBiYmQxMjQzNzJlMTIzZDhjNWM2YmE1NTIyYWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcNWzVfrf6JuNcBiKbRW0MdS3Amv DMOeLkruwHacL0r8G6M95llH7FKgk8GdhABJ5d0ek4TqsPB1UH85hxucXGFkJLN7 BvYxXkNEzONEf/3g1SwSZzn6xXM3/AxtbgMd/aY2Y2rK6Ta49iS4kytjpPoSKxaR ZBlH6iXN3NLr7DcaiExl7dV04e42D3p3kcmYdjpsTXxg3TOLSqPkqKDN6bwM8Id3 mTLy92na48oJBO+Q8x9B1hke4bKytOOLQlefZHWgcr6MvYdx83PN6lBORiurnW4M aG7bTTx2hQF4iaGvAyVR27yD/yP/ulmBok5PE7mZDSlFJodf0NgsXcXiKQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFL2vgflbULvRJDcuEj2MXGulUir1MB8GA1UdIwQY MBaAFPh5mI4PSZcaMm9Bnlz6y/3cyZPnMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1IbVlqZzlKbHhveWIwR2VYUHJMX2R6SmstYy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvYWYzZDgxLTAwNDctNDEzYy05MWY0 LTA0NzBiNGJiMzBkYi8xLzEtSG1Zamc5Smx4b3liMEdlWFByTF9kekprLWMubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzA1L2FmM2Q4MS0wMDQ3LTQxM2MtOTFmNC0wNDcwYjRiYjMw ZGIvMS8xLUhtWWpnOUpseG95YjBHZVhQckxfZHpKay1jLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASWb1 idFKM6E9n+BDLHs+G5JOcB4jaPJc2uD5sWq9QovzstsHkYp0/g0HLBoEJinuxI8L X7NXpb/hfLjUHCavvSNAUZIaUL8JsenBe3F6QbIiSDi2cmaxK39rZckNdFlKh3HA sBFFbjBsCc1HXhA6SWbbuZqvvHsHMNvVjd1APD+/G6zbnh8NS3XXqST4BWMonN1j Z25hsxB+njtn1dlfqbZdeGW6KrTWm6LpwYMkqi+/v3aVsQ7psHx0H36egJf+2sVj +qEhvkrkcF4y8cFI2acIXrEtFUwFkNlgQoSJUhPXk4g8vQF24ZWPswwysKfhgkAj T68mI1mw+KmhTBJvww== -----END CERTIFICATE-----Generated at Tue Jan 20 00:32:55 2026 by rpki-client