This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft File: 1balyjfq0x_So1CwtBLXfZUyCSg.mft (raw, json) Hash identifier: ZhIRJ0ipEJLDgiTmyLrtnkCHguoMdS8xG5xPvhn55tw= Subject key identifier: 35:8C:06:BE:84:EB:29:0E:86:4C:69:FB:93:2E:89:DC:5B:0B:59:D7 Authority key identifier: D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28 Certificate issuer: /CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928 Certificate serial: 019C1B39596EE0A831906B35D0957EEB93F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft Manifest number: 1089 Signing time: Sun 01 Feb 2026 22:01:09 +0000 Manifest this update: Sun 01 Feb 2026 22:01:09 +0000 Manifest next update: Mon 02 Feb 2026 22:01:09 +0000 Files and hashes: 1: 1balyjfq0x_So1CwtBLXfZUyCSg.crl (hash: kn8PL2VU0P47FRCQAWvkOvkPdKi5HVQf927fQQc5MRM=) 2: 1qgUA35hbbIGcm-jImU1wJP1uAg.roa (hash: pVjSDhFzGgaJ+xSK7dqGwBjTwMA/n9tQ1SKH0O/Fad0=) 3: 6mVE9UvtAfo4Qyo5mfFiFR5CYCE.roa (hash: 7jvO+7DiigtIMsr2CKWo896+gSiIAOMeoyBPHjSRSp0=) 4: Bh-T23qknIeIH3OoC5e589rNtKc.asa (hash: fzH1wDHUsYlpNJwrEYlI/LoWVi84gSQemumRr98/KQM=) 5: JWV8R4TfRRoO8EKRkWQEhGBYa6w.roa (hash: PEKThMrpJCdPtYK4KnaIvA8wKCSWObeFX4VH05QYfXg=) 6: SJqCby9bRcz81zQZO1TeT-stBH8.asa (hash: zdlq1QtWJPDwU8pcUXTI4wu8J85849xwOKfqaDypeVk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1b:39:59:6e:e0:a8:31:90:6b:35:d0:95:7e:eb:93:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928 Validity Not Before: Feb 1 22:01:09 2026 GMT Not After : Feb 2 22:01:09 2026 GMT Subject: CN=358c06be84eb290e864c69fb932e89dc5b0b59d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e7:49:57:f8:2b:98:c1:44:39:99:bb:5a:65: 7e:06:ee:3d:1b:33:84:b7:27:d7:7a:6d:fe:d3:16: cc:1b:c7:ee:a1:43:04:3f:d4:62:89:03:53:d7:43: b9:f3:2a:7e:ab:86:85:8e:29:1f:a4:0c:da:fb:2f: 1b:88:d8:4a:8d:a5:04:95:f1:ef:77:b4:eb:d9:f4: ad:c3:04:9d:73:b7:3f:fd:4f:13:96:ef:e5:5d:8f: 8c:93:e0:4a:dc:19:22:e7:ee:7d:69:e2:93:02:29: 46:e6:0e:f6:75:83:1e:c7:0c:3b:86:45:53:6d:f1: 27:db:75:a5:58:00:f8:1c:e0:ad:a2:75:68:06:8c: 1b:ac:e0:aa:12:22:c3:5d:af:09:90:09:2a:65:4f: 4d:92:af:f8:43:50:fd:81:c3:cd:ca:15:c6:0f:72: 30:5d:f0:34:02:92:a6:b8:e4:a7:2a:09:ce:92:e0: 2b:9f:5c:f0:9e:81:c0:f1:7a:c2:94:51:08:ca:50: d7:17:da:71:d6:3b:5e:40:a3:b0:91:d8:54:54:f1: a6:5f:33:c8:4d:44:46:af:1a:e4:61:a1:5a:58:37: 42:4b:15:83:55:cd:d3:e1:41:a3:fe:a9:83:53:13: 2c:ce:48:a2:49:8d:98:58:1d:68:d9:bd:97:05:82: 69:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:8C:06:BE:84:EB:29:0E:86:4C:69:FB:93:2E:89:DC:5B:0B:59:D7 X509v3 Authority Key Identifier: keyid:D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:0a:6d:56:5d:4f:c9:f4:fb:2f:24:76:c4:28:ec:ab:cd:b4: d3:44:17:03:d2:bd:7e:b1:0e:f7:14:d6:37:d0:3d:7a:d5:a9: 7f:8f:92:1e:1b:8e:ed:bd:5f:fc:05:c4:d8:c3:df:7c:f3:7a: ad:2e:d7:4e:f9:ed:fd:ba:81:b7:5f:26:ef:48:4d:76:bc:ad: dc:e3:6f:79:ff:09:96:3f:aa:20:a8:61:d1:6f:f9:79:99:47: 66:7d:27:95:b2:d8:56:3b:8f:77:cc:f7:de:b0:70:a1:cc:dd: e7:a5:69:7c:e9:7b:44:fd:4e:47:65:ad:a7:47:85:cb:87:f2: 49:ee:a9:a4:42:dd:74:a5:6f:d1:12:cc:3b:f1:a7:ee:f6:23: f3:3e:1c:ca:cd:47:cc:09:c1:fc:f5:c9:99:d7:dd:9c:a9:d8: ef:1a:0a:cf:0e:b3:87:ab:3b:6a:53:c6:bc:51:0a:32:73:17: 4c:bc:07:db:fd:8f:04:12:8b:a2:19:a1:15:bc:6c:80:e1:3a: 7b:88:37:bb:4b:c0:a4:19:5c:f2:4a:55:fd:45:28:91:69:57: 2a:22:1f:5f:ef:06:45:5d:5f:96:f7:41:f4:78:44:48:bc:2d: 30:c2:48:42:0a:14:81:60:6f:4a:ca:f9:08:9d:e8:11:14:21: 06:1e:37:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwbOVlu4KgxkGs10JV+65P3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1YjZhNWNhMzdlYWQzMWZkMmEzNTBiMGI0MTJkNzdkOTUz MjA5MjgwHhcNMjYwMjAxMjIwMTA5WhcNMjYwMjAyMjIwMTA5WjAzMTEwLwYDVQQD EygzNThjMDZiZTg0ZWIyOTBlODY0YzY5ZmI5MzJlODlkYzViMGI1OWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwedJV/grmMFEOZm7WmV+Bu49GzOE tyfXem3+0xbMG8fuoUMEP9RiiQNT10O58yp+q4aFjikfpAza+y8biNhKjaUElfHv d7Tr2fStwwSdc7c//U8Tlu/lXY+Mk+BK3Bki5+59aeKTAilG5g72dYMexww7hkVT bfEn23WlWAD4HOCtonVoBowbrOCqEiLDXa8JkAkqZU9Nkq/4Q1D9gcPNyhXGD3Iw XfA0ApKmuOSnKgnOkuArn1zwnoHA8XrClFEIylDXF9px1jteQKOwkdhUVPGmXzPI TURGrxrkYaFaWDdCSxWDVc3T4UGj/qmDUxMszkiiSY2YWB1o2b2XBYJpmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDWMBr6E6ykOhkxp+5MuidxbC1nXMB8GA1UdIwQY MBaAFNW2pco36tMf0qNQsLQS132VMgkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWJhbHlqZnEweF9TbzFDd3RCTFhmWlV5Q1NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8zZmE5M2YtYTM0Zi00MWNmLTg4NzUt ZDRlODgyMDgzZTRmLzEvMWJhbHlqZnEweF9TbzFDd3RCTFhmWlV5Q1NnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8zZmE5M2YtYTM0Zi00MWNmLTg4NzUtZDRlODgyMDgzZTRm LzEvMWJhbHlqZnEweF9TbzFDd3RCTFhmWlV5Q1NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtwptVl1P yfT7LyR2xCjsq82000QXA9K9frEO9xTWN9A9etWpf4+SHhuO7b1f/AXE2MPffPN6 rS7XTvnt/bqBt18m70hNdryt3ONvef8Jlj+qIKhh0W/5eZlHZn0nlbLYVjuPd8z3 3rBwoczd56VpfOl7RP1OR2Wtp0eFy4fySe6ppELddKVv0RLMO/Gn7vYj8z4cys1H zAnB/PXJmdfdnKnY7xoKzw6zh6s7alPGvFEKMnMXTLwH2/2PBBKLohmhFbxsgOE6 e4g3u0vApBlc8kpV/UUokWlXKiIfX+8GRV1flvdB9HhESLwtMMJIQgoUgWBvSsr5 CJ3oERQhBh43oA== -----END CERTIFICATE-----Generated at Mon Feb 2 08:13:27 2026 by rpki-client