This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft File: 1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft (raw, json) Hash identifier: dne9Pb59w3Lcm87EcnGopnxa1n7LI7TGHmLcDE5kcUk= Subject key identifier: 3A:2B:19:2D:5D:4F:38:D9:9B:C8:AC:7D:3A:CA:83:25:66:A8:48:22 Authority key identifier: F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73 Certificate issuer: /CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473 Certificate serial: 019BF9F671CBF9A3F1FBD7DA37EC12B355FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft Manifest number: 1818 Signing time: Mon 26 Jan 2026 11:00:36 +0000 Manifest this update: Mon 26 Jan 2026 11:00:36 +0000 Manifest next update: Tue 27 Jan 2026 11:00:36 +0000 Files and hashes: 1: 1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl (hash: 1YBi76wdYztlUYCc3YoiBAJel7a9ODNXdr5+7c847f0=) 2: FHwGNHrCl9ZDaI5iHSATgi0eQI4.roa (hash: Ry8wkccjRDgFgOO1ND+5XAwtEK69W7guaqIyY6Z98Uk=) 3: GgM8OW03SnTWQN6a4-JcJuboxRQ.roa (hash: PcNLLvc5YaEzAxnanxM9AExzd2bC6OppQmgQXDF3KdM=) 4: HbEx7H1JLwPBlmcAN-xpDopPNGM.roa (hash: YJcx1ed3tK16bbLzRe+E+u16eoX0vPPKSbeVN78fzcs=) 5: KnpLhbBEufmPsTr4rfzt358Z5NA.roa (hash: spWQWP4oc84BPT4Abbm0x2lE5bf02yTSVRuZE9yCBqk=) 6: O01AHTz126xddYBIHOgu7hjWpTQ.roa (hash: wUbmS1l2rNfhauG9wUd4dDdjVRn6lpjxrfwiwa8yNYQ=) 7: paJ_DE2H42zvRaO-PkfsPRsWcgo.roa (hash: ZLCNlkkwSoN76l5ZmTEE4VyXeJGMvWwQpQVxOZQbfbA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 11:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:f6:71:cb:f9:a3:f1:fb:d7:da:37:ec:12:b3:55:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473 Validity Not Before: Jan 26 11:00:36 2026 GMT Not After : Jan 27 11:00:36 2026 GMT Subject: CN=3a2b192d5d4f38d99bc8ac7d3aca832566a84822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:63:30:ba:08:d0:45:4b:0a:12:33:b8:a0:b3: c1:26:ff:4a:89:1d:67:10:1d:e0:a7:fb:24:ca:98: 72:cf:77:d3:65:79:83:1b:22:25:83:d0:90:04:24: 92:c2:37:9a:58:6c:25:fc:aa:dd:87:18:85:ea:7f: e7:eb:ea:26:7c:68:6e:f7:2b:ba:10:24:36:e8:24: cd:99:31:2a:5b:15:bb:7c:ef:03:86:61:55:e0:f4: d8:b6:5f:74:b7:21:3f:49:99:fc:7a:3e:60:42:1d: 2e:be:95:0d:3b:7f:e9:23:3d:e2:fa:b9:1e:1e:dd: fa:02:ca:02:f5:9c:64:5d:bb:4a:08:7d:01:8a:48: 7e:d5:0a:a0:a9:80:79:b7:d2:ed:a1:d4:cf:44:be: 4e:64:a2:1d:af:7a:31:a1:6b:df:17:fa:37:a7:a0: 73:4c:a8:ef:ee:2b:ba:34:32:02:98:e4:bd:dd:e8: c6:64:11:38:1f:39:52:68:0c:8d:bc:43:7c:72:56: 1c:2f:19:8c:49:85:90:ea:34:00:45:b7:73:6e:b1: 9d:ac:74:93:61:6e:35:8d:5e:74:33:c9:89:e7:1e: 1e:38:8e:6e:54:18:37:f5:c8:3e:ad:f3:f8:81:92: ce:6d:56:30:43:1a:78:1a:4e:8c:f6:e1:37:53:c1: e3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:2B:19:2D:5D:4F:38:D9:9B:C8:AC:7D:3A:CA:83:25:66:A8:48:22 X509v3 Authority Key Identifier: keyid:F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:03:31:17:f0:8e:d1:38:2b:4b:18:f1:c6:97:ad:c6:4e:e9: 9b:9f:f9:68:46:64:f5:b8:59:d7:c1:38:5a:c6:e4:a1:a2:ae: 16:1d:be:60:91:c1:b0:f6:44:75:7c:14:c7:a5:09:fb:96:46: fa:c7:59:97:0d:aa:fc:7c:f6:dd:b0:59:e2:77:e9:ae:f8:c8: 0b:c3:05:60:8b:31:60:77:72:2f:ca:a6:a1:6f:79:09:82:48: 6c:3d:fa:ba:99:cd:58:1f:d8:13:18:bc:e9:97:a9:54:34:8b: ae:fd:c7:f3:7f:c1:c0:6c:80:48:8a:38:5a:1b:a2:e7:73:1d: ce:39:87:5e:5a:45:43:97:04:ab:f1:7c:39:d6:2d:c4:04:0d: ed:0d:8a:3b:7b:4c:98:ae:05:92:e2:28:14:f3:77:86:74:00: ef:e8:8b:6a:a7:34:7e:96:03:df:36:ef:23:35:53:0e:fb:a1: 90:a2:f7:97:b6:00:9e:b9:03:ca:ed:68:5b:e3:9a:f4:75:d1: 36:03:45:5b:ae:ff:cd:67:84:d7:82:ca:94:43:20:a2:3a:68: 7e:5b:93:ba:1f:16:62:1b:a6:ca:fd:43:7e:42:18:79:72:c2: b9:bc:30:55:af:cb:1c:f4:51:d4:d5:ae:63:da:db:53:86:e9: 45:5c:dd:86 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZv59nHL+aPx+9faN+wSs1X9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5ODU2ZDY3NGYwZTlkYmY2MDEyZDViNWQzZDk2YjQzYWZk NzY0NzMwHhcNMjYwMTI2MTEwMDM2WhcNMjYwMTI3MTEwMDM2WjAzMTEwLwYDVQQD EygzYTJiMTkyZDVkNGYzOGQ5OWJjOGFjN2QzYWNhODMyNTY2YTg0ODIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGMwugjQRUsKEjO4oLPBJv9KiR1n EB3gp/skyphyz3fTZXmDGyIlg9CQBCSSwjeaWGwl/KrdhxiF6n/n6+omfGhu9yu6 ECQ26CTNmTEqWxW7fO8DhmFV4PTYtl90tyE/SZn8ej5gQh0uvpUNO3/pIz3i+rke Ht36AsoC9ZxkXbtKCH0Bikh+1QqgqYB5t9LtodTPRL5OZKIdr3oxoWvfF/o3p6Bz TKjv7iu6NDICmOS93ejGZBE4HzlSaAyNvEN8clYcLxmMSYWQ6jQARbdzbrGdrHST YW41jV50M8mJ5x4eOI5uVBg39cg+rfP4gZLObVYwQxp4Gk6M9uE3U8HjUQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFDorGS1dTzjZm8isfTrKgyVmqEgiMB8GA1UdIwQY MBaAFPmFbWdPDp2/YBLVtdPZa0Ov12RzMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1ZVnRaMDhPbmI5Z0V0VzEwOWxyUTZfWFpITS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvOWY5NTkwLTdmMGEtNDFiMy1hYzRm LWVmZDE0ZGI5NTdmYi8xLzEtWVZ0WjA4T25iOWdFdFcxMDlsclE2X1haSE0ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzBhLzlmOTU5MC03ZjBhLTQxYjMtYWM0Zi1lZmQxNGRiOTU3 ZmIvMS8xLVlWdFowOE9uYjlnRXRXMTA5bHJRNl9YWkhNLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaAMx F/CO0TgrSxjxxpetxk7pm5/5aEZk9bhZ18E4WsbkoaKuFh2+YJHBsPZEdXwUx6UJ +5ZG+sdZlw2q/Hz23bBZ4nfprvjIC8MFYIsxYHdyL8qmoW95CYJIbD36upnNWB/Y Exi86ZepVDSLrv3H83/BwGyASIo4Whui53MdzjmHXlpFQ5cEq/F8OdYtxAQN7Q2K O3tMmK4FkuIoFPN3hnQA7+iLaqc0fpYD3zbvIzVTDvuhkKL3l7YAnrkDyu1oW+Oa 9HXRNgNFW67/zWeE14LKlEMgojpofluTuh8WYhumyv1DfkIYeXLCubwwVa/LHPRR 1NWuY9rbU4bpRVzdhg== -----END CERTIFICATE-----Generated at Mon Jan 26 17:00:54 2026 by rpki-client