This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft File: 1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft (raw, json) Hash identifier: r8DpNRWX39rCZOGpqbkBIp+b/WC+GCxdR7A3454kSuo= Subject key identifier: 4D:91:3C:FF:3A:C7:BF:74:C4:53:83:BB:FB:3D:63:4F:86:4C:78:34 Authority key identifier: D7:0A:F9:42:46:5F:F2:65:B8:96:F0:D1:B7:62:49:0F:27:DC:32:2C Certificate issuer: /CN=d70af942465ff265b896f0d1b762490f27dc322c Certificate serial: 019BAA93362408271F82A4AC257C9273C742 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wr5QkZf8mW4lvDRt2JJDyfcMiw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft Manifest number: 146C Signing time: Sun 11 Jan 2026 01:02:12 +0000 Manifest this update: Sun 11 Jan 2026 01:02:12 +0000 Manifest next update: Mon 12 Jan 2026 01:02:12 +0000 Files and hashes: 1: 1wr5QkZf8mW4lvDRt2JJDyfcMiw.crl (hash: 4l119nglEcCNE1FMEbDrcgtHwIYJSnYZkw6q7tNy1OI=) 2: pTKY06gWgEXaIu_OYznOKa1SCYQ.roa (hash: DO+JIn1Z+CZdkSG19VC8thtAj3bTLW7VrZO6RWhGcRE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft rsync://rpki.ripe.net/repository/DEFAULT/1wr5QkZf8mW4lvDRt2JJDyfcMiw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:aa:93:36:24:08:27:1f:82:a4:ac:25:7c:92:73:c7:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70af942465ff265b896f0d1b762490f27dc322c Validity Not Before: Jan 11 01:02:12 2026 GMT Not After : Jan 12 01:02:12 2026 GMT Subject: CN=4d913cff3ac7bf74c45383bbfb3d634f864c7834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a8:13:22:d3:79:a5:d9:cc:35:d8:6b:04:c5: ed:15:d9:9e:26:33:5e:4f:6d:4d:bc:06:6f:a1:c9: 6d:e2:d8:a4:03:2a:82:38:be:eb:4e:f5:14:4f:00: c6:1d:8b:0e:da:67:a9:af:c5:f1:77:bf:94:f8:b1: 64:6a:4d:81:6a:92:2d:d5:9a:98:6b:87:8f:ed:b5: 0e:58:08:f5:8a:cb:5c:4d:c0:21:76:7e:63:85:20: 5c:4c:30:3e:e7:89:a4:98:c7:8f:8a:36:83:a7:28: 10:9e:f1:7a:50:43:15:11:f5:c3:f0:92:94:ed:23: 9a:7c:6c:f2:ec:11:df:96:97:02:d3:4c:ec:02:eb: b6:37:c6:42:63:7f:3c:f7:dc:17:aa:e4:4a:95:93: a6:6d:3c:00:51:0f:0c:58:63:5a:ff:cc:59:9b:e3: 92:47:d8:c5:b5:96:f6:09:46:cf:8f:02:b0:98:9b: 0f:85:45:8c:0c:e9:06:67:0e:b7:77:b1:8b:9a:d1: 59:47:81:04:f7:a0:13:9d:cc:88:41:e6:18:9f:a1: 41:24:fd:84:26:55:bc:e9:75:56:a3:13:63:1c:5a: a3:85:1b:19:96:1d:10:1a:8a:08:a0:1e:55:ce:e1: 2f:86:8b:c9:b4:42:be:64:20:ed:df:be:3d:5d:9f: 95:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:91:3C:FF:3A:C7:BF:74:C4:53:83:BB:FB:3D:63:4F:86:4C:78:34 X509v3 Authority Key Identifier: keyid:D7:0A:F9:42:46:5F:F2:65:B8:96:F0:D1:B7:62:49:0F:27:DC:32:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wr5QkZf8mW4lvDRt2JJDyfcMiw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:5d:1f:99:5c:b8:b3:b3:41:10:f6:5a:ae:ae:4b:f0:85:f6: ac:76:bd:2a:ce:69:69:e2:94:ee:da:e0:b7:ab:ab:b7:51:46: 7a:43:cb:e2:31:d9:da:27:04:04:1a:c3:61:38:a4:be:ce:c4: 2d:0b:0f:25:62:64:32:4e:a6:75:57:19:d7:3b:19:d3:b8:45: 8e:1e:10:6d:ab:1b:52:a3:ea:82:fd:2f:71:0c:5f:e9:04:74: 08:5f:0f:ee:9f:7c:4e:77:95:89:28:1e:bc:68:25:43:39:b5: 33:15:ac:c5:e8:c8:0f:2f:71:a6:4d:5a:9e:79:af:eb:6a:36: df:87:84:c0:f7:88:d5:a6:fa:a6:c9:fd:47:ce:6b:3f:2f:9f: ef:53:5b:ef:f9:8d:d1:8f:4a:59:b5:78:bc:b9:65:6e:00:ba: 82:5b:5c:9e:d5:8b:c0:4e:3f:7e:8e:71:f9:93:1e:3b:d4:44: 26:5a:14:4a:53:34:35:26:ba:79:47:f6:e3:98:70:fe:62:0a: 88:84:87:7d:c1:97:94:35:7f:81:61:d1:58:b9:fd:0a:61:76: 0c:24:3e:73:aa:76:a3:51:0b:22:54:95:7f:e6:f7:58:61:d0: d5:e8:2c:c2:78:cb:da:34:5d:91:f3:5c:b9:63:6d:0a:2d:81: f8:69:cb:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuqkzYkCCcfgqSsJXySc8dCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MGFmOTQyNDY1ZmYyNjViODk2ZjBkMWI3NjI0OTBmMjdk YzMyMmMwHhcNMjYwMTExMDEwMjEyWhcNMjYwMTEyMDEwMjEyWjAzMTEwLwYDVQQD Eyg0ZDkxM2NmZjNhYzdiZjc0YzQ1MzgzYmJmYjNkNjM0Zjg2NGM3ODM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6gTItN5pdnMNdhrBMXtFdmeJjNe T21NvAZvoclt4tikAyqCOL7rTvUUTwDGHYsO2mepr8Xxd7+U+LFkak2BapIt1ZqY a4eP7bUOWAj1istcTcAhdn5jhSBcTDA+54mkmMePijaDpygQnvF6UEMVEfXD8JKU 7SOafGzy7BHflpcC00zsAuu2N8ZCY38899wXquRKlZOmbTwAUQ8MWGNa/8xZm+OS R9jFtZb2CUbPjwKwmJsPhUWMDOkGZw63d7GLmtFZR4EE96ATncyIQeYYn6FBJP2E JlW86XVWoxNjHFqjhRsZlh0QGooIoB5VzuEvhovJtEK+ZCDt3749XZ+V1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE2RPP86x790xFODu/s9Y0+GTHg0MB8GA1UdIwQY MBaAFNcK+UJGX/JluJbw0bdiSQ8n3DIsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXdyNVFrWmY4bVc0bHZEUnQySkpEeWZjTWl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9lOTIwM2QtY2RjZi00ZjIzLWEzYmYt ZjQ0OWJhZDI5ODU1LzEvMXdyNVFrWmY4bVc0bHZEUnQySkpEeWZjTWl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9lOTIwM2QtY2RjZi00ZjIzLWEzYmYtZjQ0OWJhZDI5ODU1 LzEvMXdyNVFrWmY4bVc0bHZEUnQySkpEeWZjTWl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWl0fmVy4 s7NBEPZarq5L8IX2rHa9Ks5paeKU7trgt6urt1FGekPL4jHZ2icEBBrDYTikvs7E LQsPJWJkMk6mdVcZ1zsZ07hFjh4QbasbUqPqgv0vcQxf6QR0CF8P7p98TneViSge vGglQzm1MxWsxejIDy9xpk1annmv62o234eEwPeI1ab6psn9R85rPy+f71Nb7/mN 0Y9KWbV4vLllbgC6gltcntWLwE4/fo5x+ZMeO9REJloUSlM0NSa6eUf245hw/mIK iISHfcGXlDV/gWHRWLn9CmF2DCQ+c6p2o1ELIlSVf+b3WGHQ1egswnjL2jRdkfNc uWNtCi2B+GnLIw== -----END CERTIFICATE-----Generated at Sun Jan 11 09:00:40 2026 by rpki-client