This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft File: 1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft (raw, json) Hash identifier: DjVXlB/MHw054RnU040HTpUxpQUb0uZ+HK+nQGKBtNI= Subject key identifier: 8A:A8:63:18:1C:7D:C8:72:90:19:C5:5E:00:25:3F:94:41:3A:B8:FC Authority key identifier: FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0 Certificate issuer: /CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0 Certificate serial: 019C2BF54E9526C720750B3D5FE53302BB30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft Manifest number: 048A Signing time: Thu 05 Feb 2026 04:00:22 +0000 Manifest this update: Thu 05 Feb 2026 04:00:22 +0000 Manifest next update: Fri 06 Feb 2026 04:00:22 +0000 Files and hashes: 1: 1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl (hash: jCY9Erj4CIZ6loZkgt+2zHvas0rjgQQYdqvYhNpGLlE=) 2: wELXb2upKDUk9ug1VUWo0G60EVg.roa (hash: tEEqGfojVYh3aK4OosjlDUvbLIy7wKvl+V1lWIlr7hk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 03:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:2b:f5:4e:95:26:c7:20:75:0b:3d:5f:e5:33:02:bb:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0 Validity Not Before: Feb 5 04:00:22 2026 GMT Not After : Feb 6 04:00:22 2026 GMT Subject: CN=8aa863181c7dc8729019c55e00253f94413ab8fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:bf:ad:32:8f:a8:da:c2:c3:1c:1d:49:ec:ab: 45:c8:84:50:09:cd:b4:8e:e0:6f:10:d3:dd:46:d2: 9f:cd:58:05:2c:58:2e:86:23:3d:21:41:8c:7b:38: 9e:04:af:75:e0:e6:15:3c:14:a7:5d:27:31:f0:06: 5b:22:48:24:16:b6:be:2f:94:4f:fc:b7:b5:e9:72: 02:87:4a:cc:19:55:b2:f4:5a:5b:ca:72:d4:ee:cc: d1:b4:0b:21:7d:91:2f:66:aa:99:9a:af:95:b2:61: 1f:bf:a0:8e:86:9b:b3:8d:81:a8:f2:cf:ac:da:9c: 8e:58:4f:0c:c2:96:ec:9e:79:58:d2:82:a2:35:1c: 0a:9d:b8:e5:89:f7:4d:57:30:ae:70:dd:28:b5:67: 31:93:83:d5:eb:d5:bd:4c:cb:4a:19:39:bf:93:3a: 5c:e4:58:fc:14:1e:86:34:1b:dc:6e:2f:85:76:7e: 85:c9:1b:ab:c7:07:96:79:e1:ba:ac:ed:2b:a3:75: 2e:c2:67:c5:ae:b3:a8:3e:4a:f4:2c:b8:46:56:47: 4f:36:c5:d1:ab:4e:3f:89:a3:54:7b:1a:0a:b6:81: 78:97:fc:58:17:41:75:23:4d:5c:3e:be:6d:20:2d: 03:8e:29:f9:9c:fb:1c:1c:f6:bd:ec:4f:d1:d6:b6: b0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:A8:63:18:1C:7D:C8:72:90:19:C5:5E:00:25:3F:94:41:3A:B8:FC X509v3 Authority Key Identifier: keyid:FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:19:99:76:72:62:78:4b:7c:11:75:ad:79:74:a7:a8:24:ce: 0e:92:6f:39:c1:ec:4d:f8:ab:46:4a:a8:20:8b:86:d9:a5:34: d1:b7:e0:de:6f:3d:7a:57:56:84:17:ab:b4:0b:76:87:4f:3b: 22:ec:a8:fb:4c:eb:bc:5f:38:1c:cb:a1:80:d0:4c:d8:fd:10: 45:e1:2d:f0:36:ef:ad:45:76:2e:2a:77:21:53:07:b2:d6:87: f9:fd:89:b7:9b:a3:76:38:1d:f1:d4:c2:d8:24:54:f4:d8:cb: a7:b8:2f:d9:f4:d0:38:91:c9:68:e9:51:2f:ed:0e:e1:7a:4d: ec:99:2f:88:6b:0c:58:06:04:5b:ec:3c:ca:81:59:eb:6a:b9: 6b:fd:b4:cc:af:ea:e1:d8:86:b7:6b:df:c1:ed:32:2e:c4:c0: 5e:ae:2e:a5:b3:6f:e0:ef:da:dc:34:40:7a:d6:94:f8:63:39: 14:7b:86:ba:4f:7a:0b:de:4a:43:0a:64:b1:3d:f3:70:27:33: 08:38:82:ba:cf:8c:f3:b8:4b:7c:d6:09:e0:0a:2c:da:7d:7f: 71:d0:7a:fb:3e:90:fd:b9:e5:b8:58:01:bb:09:49:3f:f4:b9: 7f:e1:2a:0a:b8:2b:cf:0b:b9:b6:22:74:3c:6f:9b:d8:51:85: 66:f6:97:19 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZwr9U6VJscgdQs9X+UzArswMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZjY0N2RmMjE4ZTJjNmYzZmQxY2Y1NDlkMjdkZjRlNTBj ZDZkYjAwHhcNMjYwMjA1MDQwMDIyWhcNMjYwMjA2MDQwMDIyWjAzMTEwLwYDVQQD Eyg4YWE4NjMxODFjN2RjODcyOTAxOWM1NWUwMDI1M2Y5NDQxM2FiOGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0L+tMo+o2sLDHB1J7KtFyIRQCc20 juBvENPdRtKfzVgFLFguhiM9IUGMezieBK914OYVPBSnXScx8AZbIkgkFra+L5RP /Le16XICh0rMGVWy9FpbynLU7szRtAshfZEvZqqZmq+VsmEfv6COhpuzjYGo8s+s 2pyOWE8MwpbsnnlY0oKiNRwKnbjlifdNVzCucN0otWcxk4PV69W9TMtKGTm/kzpc 5Fj8FB6GNBvcbi+Fdn6FyRurxweWeeG6rO0ro3UuwmfFrrOoPkr0LLhGVkdPNsXR q04/iaNUexoKtoF4l/xYF0F1I01cPr5tIC0Djin5nPscHPa97E/R1raw6QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFIqoYxgcfchykBnFXgAlP5RBOrj8MB8GA1UdIwQY MBaAFPr2R98hjixvP9HPVJ0n305QzW2wMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS12WkgzeUdPTEc4XzBjOVVuU2ZmVGxETmJiQS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQvNDVhNTcyLWI4MDgtNDBmNS04YjI1 LWRkY2ExNTNhMjBhYi8xLzEtdlpIM3lHT0xHOF8wYzlVblNmZlRsRE5iYkEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzE0LzQ1YTU3Mi1iODA4LTQwZjUtOGIyNS1kZGNhMTUzYTIw YWIvMS8xLXZaSDN5R09MRzhfMGM5VW5TZmZUbEROYmJBLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGxmZ dnJieEt8EXWteXSnqCTODpJvOcHsTfirRkqoIIuG2aU00bfg3m89eldWhBertAt2 h087Iuyo+0zrvF84HMuhgNBM2P0QReEt8DbvrUV2Lip3IVMHstaH+f2Jt5ujdjgd 8dTC2CRU9NjLp7gv2fTQOJHJaOlRL+0O4XpN7JkviGsMWAYEW+w8yoFZ62q5a/20 zK/q4diGt2vfwe0yLsTAXq4upbNv4O/a3DRAetaU+GM5FHuGuk96C95KQwpksT3z cCczCDiCus+M87hLfNYJ4Aos2n1/cdB6+z6Q/bnluFgBuwlJP/S5f+EqCrgrzwu5 tiJ0PG+b2FGFZvaXGQ== -----END CERTIFICATE-----Generated at Thu Feb 5 12:23:57 2026 by rpki-client