This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.mft File: 1gTknpKDBavLjzLe8_78A-u83kQ.mft (raw, json) Hash identifier: /PBk5aTdCa+FJ8HlZtdblpv4dMRPO01C3vn9LAMTTN8= Subject key identifier: 5F:97:7C:1F:7B:F6:97:55:FF:70:2C:92:8E:BE:91:55:B6:58:24:68 Authority key identifier: D6:04:E4:9E:92:83:05:AB:CB:8F:32:DE:F3:FE:FC:03:EB:BC:DE:44 Certificate issuer: /CN=d604e49e928305abcb8f32def3fefc03ebbcde44 Certificate serial: 019C1C4C2BB372ACF1B5129475A1055AB735 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gTknpKDBavLjzLe8_78A-u83kQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.mft Manifest number: 178F Signing time: Mon 02 Feb 2026 03:01:19 +0000 Manifest this update: Mon 02 Feb 2026 03:01:19 +0000 Manifest next update: Tue 03 Feb 2026 03:01:19 +0000 Files and hashes: 1: 1gTknpKDBavLjzLe8_78A-u83kQ.crl (hash: zpj13EsAG1OwrPUTMe5rryK9ulkCkhOWmb4Rcf/qrMM=) 2: O3NHX1xusGOC_jwAncPD2CBztNE.roa (hash: tIvb5cVDrsiT8uq8kfesqrbk5rRYub73yqvQwpeTOXo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.crl rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1gTknpKDBavLjzLe8_78A-u83kQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 03:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1c:4c:2b:b3:72:ac:f1:b5:12:94:75:a1:05:5a:b7:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d604e49e928305abcb8f32def3fefc03ebbcde44 Validity Not Before: Feb 2 03:01:19 2026 GMT Not After : Feb 3 03:01:19 2026 GMT Subject: CN=5f977c1f7bf69755ff702c928ebe9155b6582468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6c:e4:51:12:8a:26:9a:d4:9a:71:6e:2f:9d: 42:5d:2f:b3:de:2c:b0:3e:b6:cd:3d:95:a1:50:c0: 84:1a:d2:20:50:4b:f2:ff:04:a5:59:8b:1d:d0:2d: 91:e2:7e:5d:fe:d0:11:ed:c5:dd:20:90:ee:13:d4: 5e:9d:8f:42:e0:dc:5c:65:2b:37:d8:e6:be:44:ce: a9:29:33:0a:f4:e6:a8:a1:a3:a5:27:d9:d2:e6:ad: 7e:c1:17:47:e6:2c:d5:60:2f:ba:40:11:87:c5:f9: 90:24:69:cb:61:fd:9f:34:1e:bf:fa:cc:42:da:91: 40:46:24:49:2f:3d:69:56:36:ba:41:f6:75:6d:6e: 17:aa:e3:66:d7:11:d9:91:21:fe:2c:83:f5:41:aa: 54:3d:ea:4e:a8:46:67:63:b1:4b:8c:4a:21:8d:27: 99:52:e8:29:02:17:55:62:e9:0a:ca:aa:80:71:b0: f4:1d:08:ff:2f:7c:6f:ac:fd:37:2e:53:d7:f5:0b: a4:32:1f:10:20:b7:be:d2:10:37:28:7c:4f:c9:2c: 43:bf:2d:05:69:4e:28:d1:dd:96:a1:88:4a:46:65: e8:5d:61:41:6c:88:ac:fd:bb:b4:94:9c:f7:ce:19: a0:38:ef:8c:f3:51:a9:3e:3b:26:6d:04:ad:3f:e1: eb:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:97:7C:1F:7B:F6:97:55:FF:70:2C:92:8E:BE:91:55:B6:58:24:68 X509v3 Authority Key Identifier: keyid:D6:04:E4:9E:92:83:05:AB:CB:8F:32:DE:F3:FE:FC:03:EB:BC:DE:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gTknpKDBavLjzLe8_78A-u83kQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:51:4d:2c:6e:b0:f9:24:9b:fa:52:df:cb:13:2a:5e:89:8f: 1d:5f:f7:4c:e6:c5:16:fb:40:62:23:12:d1:f5:4e:9e:fb:3f: 41:15:cc:39:79:74:56:35:be:f6:66:c8:c0:74:e0:fc:10:75: 7a:37:a2:45:4b:0f:93:fd:7f:df:be:d4:82:0a:75:c1:19:f1: c1:1d:5c:a7:2c:22:9b:4f:22:c3:c8:6c:dd:c9:94:22:c7:99: 30:c4:13:63:67:84:c4:fa:fb:c6:1f:11:f5:68:0a:55:69:27: a1:12:38:8f:40:fd:2c:a2:bd:04:54:ae:ce:54:3c:65:87:9e: c4:2d:2d:d2:97:7c:21:eb:b6:62:f5:6f:f3:34:41:38:a6:57: 20:dd:43:4f:e7:4c:ab:3d:bb:6f:0c:70:9c:eb:2f:65:4a:7d: df:2f:55:ba:16:39:b0:06:46:01:db:34:83:e8:15:83:e2:82: 5e:69:c1:76:52:08:2a:29:2b:5c:4d:70:80:1b:a0:ea:25:6a: f1:44:1d:7f:ce:f0:f8:a0:4a:45:ad:b5:23:a2:0a:8f:ce:f7: 9b:af:87:81:e3:f5:94:47:99:d9:56:34:af:70:af:5d:37:fd: e7:51:fd:dc:ab:8c:72:e1:4f:8b:30:af:58:d9:34:d7:be:af: 83:0b:55:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwcTCuzcqzxtRKUdaEFWrc1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MDRlNDllOTI4MzA1YWJjYjhmMzJkZWYzZmVmYzAzZWJi Y2RlNDQwHhcNMjYwMjAyMDMwMTE5WhcNMjYwMjAzMDMwMTE5WjAzMTEwLwYDVQQD Eyg1Zjk3N2MxZjdiZjY5NzU1ZmY3MDJjOTI4ZWJlOTE1NWI2NTgyNDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2zkURKKJprUmnFuL51CXS+z3iyw PrbNPZWhUMCEGtIgUEvy/wSlWYsd0C2R4n5d/tAR7cXdIJDuE9RenY9C4NxcZSs3 2Oa+RM6pKTMK9OaooaOlJ9nS5q1+wRdH5izVYC+6QBGHxfmQJGnLYf2fNB6/+sxC 2pFARiRJLz1pVja6QfZ1bW4XquNm1xHZkSH+LIP1QapUPepOqEZnY7FLjEohjSeZ UugpAhdVYukKyqqAcbD0HQj/L3xvrP03LlPX9QukMh8QILe+0hA3KHxPySxDvy0F aU4o0d2WoYhKRmXoXWFBbIis/bu0lJz3zhmgOO+M81GpPjsmbQStP+Hr8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF+XfB979pdV/3Asko6+kVW2WCRoMB8GA1UdIwQY MBaAFNYE5J6SgwWry48y3vP+/APrvN5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWdUa25wS0RCYXZManpMZThfNzhBLXU4M2tRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9hODMwYTItMDI3MS00ZGU5LWJjMzgt MDNjODIxNTc0MjFhLzEvMWdUa25wS0RCYXZManpMZThfNzhBLXU4M2tRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9hODMwYTItMDI3MS00ZGU5LWJjMzgtMDNjODIxNTc0MjFh LzEvMWdUa25wS0RCYXZManpMZThfNzhBLXU4M2tRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALFFNLG6w +SSb+lLfyxMqXomPHV/3TObFFvtAYiMS0fVOnvs/QRXMOXl0VjW+9mbIwHTg/BB1 ejeiRUsPk/1/377Uggp1wRnxwR1cpywim08iw8hs3cmUIseZMMQTY2eExPr7xh8R 9WgKVWknoRI4j0D9LKK9BFSuzlQ8ZYeexC0t0pd8Ieu2YvVv8zRBOKZXIN1DT+dM qz27bwxwnOsvZUp93y9VuhY5sAZGAds0g+gVg+KCXmnBdlIIKikrXE1wgBug6iVq 8UQdf87w+KBKRa21I6IKj873m6+HgeP1lEeZ2VY0r3CvXTf951H93KuMcuFPizCv WNk0176vgwtVOQ== -----END CERTIFICATE-----Generated at Mon Feb 2 12:50:40 2026 by rpki-client