This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft File: 1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft (raw, json) Hash identifier: aTkDHmZCVS3imWTQXLmuHILKhk/cVla3e63IPFEn7sE= Subject key identifier: 3F:9D:3A:C8:64:63:55:DF:CB:1C:25:63:F5:16:3F:B6:60:A1:09:06 Authority key identifier: D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1 Certificate issuer: /CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1 Certificate serial: 019BE036AE00161A30B058AD4909B3AFE48B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft Manifest number: 1404 Signing time: Wed 21 Jan 2026 11:00:38 +0000 Manifest this update: Wed 21 Jan 2026 11:00:38 +0000 Manifest next update: Thu 22 Jan 2026 11:00:38 +0000 Files and hashes: 1: 0uyZF4hqCFblriuhdFvB97CSvjE.roa (hash: F5N4p/+NGVHw75uzEq/ujSUpO10EhoH/RBzsn4VqeFg=) 2: 1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl (hash: vtfxlJvER9nfr45AOr7cJF7eCZf5DrCVnON3llphW8w=) 3: HBGLJhBsyXuuqq1G2WRr7w9GmzA.roa (hash: Xrp4GvKqpuyXoOP+vPhalYrazHW2Uf34ic2KIJ7gEtM=) 4: HEYOxnvlLCOWsnSS_6it9qLhNIs.roa (hash: 6D1EaOUZTiXuJWqZZr2E8iZjtev1Lso+FFHwbrAgIes=) 5: KhJgMsf4MlVqjTxkDuQ9Ni25cwU.roa (hash: N7b1KGX3pLxR+FHyz4EyWAub2m3A959wM0aSSosSFf4=) 6: OUe9Gs1ZfjOio8GPiClkO1rK7Co.roa (hash: 9zzu21yZwWAMdvzRS8JS72fLpBxbfgfEMRdYkP6CTaA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 11:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:36:ae:00:16:1a:30:b0:58:ad:49:09:b3:af:e4:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1 Validity Not Before: Jan 21 11:00:38 2026 GMT Not After : Jan 22 11:00:38 2026 GMT Subject: CN=3f9d3ac8646355dfcb1c2563f5163fb660a10906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:21:c9:04:5c:98:af:ca:29:58:a2:80:65:93: 70:5b:f5:35:e3:19:90:04:f5:81:fe:f9:54:f7:0f: 2d:c7:da:e0:ae:85:c7:13:71:4e:34:21:7d:1a:6a: 05:43:5d:e8:9a:f3:46:bd:22:5f:9a:f9:0c:51:84: 07:ce:e1:39:bb:0f:25:95:3f:0e:8a:80:51:6b:97: 3a:5c:a6:94:78:a2:be:8a:43:53:9c:2f:c0:52:83: fe:12:a6:b7:5a:44:db:67:ca:e0:9e:9a:ee:4f:a3: a1:ea:b8:5f:42:63:ec:42:21:95:98:d0:2a:19:6f: ff:bd:97:ff:a1:18:09:2e:b9:a1:e6:85:0e:c8:f5: 40:2a:b9:37:53:34:1b:02:bb:c1:80:b8:e9:fb:17: 13:0b:e1:b8:b9:11:e4:c3:84:07:d4:bb:cd:41:53: 21:90:2f:06:60:91:0f:7a:41:b9:88:4b:8d:18:81: 17:3a:cd:69:c6:c1:d9:2d:9b:c5:a8:8d:f5:6a:22: 38:19:4c:f2:b4:eb:31:30:6c:fc:12:ee:bf:32:d7: 9b:7d:d2:40:85:14:a9:84:7d:62:a4:11:b5:49:75: af:40:f7:08:d0:c1:be:ad:39:a6:bc:82:b4:61:07: 7e:df:2e:95:f3:52:c4:60:a6:f5:e8:83:71:45:e2: 85:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:9D:3A:C8:64:63:55:DF:CB:1C:25:63:F5:16:3F:B6:60:A1:09:06 X509v3 Authority Key Identifier: keyid:D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:a8:d9:9e:e9:bb:e1:ff:6b:eb:3f:6d:8e:e3:50:34:63:f5: 8b:25:50:d7:8d:cc:85:90:2d:33:da:f3:0a:51:19:ca:ff:1d: b9:10:6e:8d:9d:7f:f9:33:a3:c6:03:13:cd:15:61:03:ac:6d: d0:c4:72:23:87:3a:1a:72:06:df:01:0a:59:b2:ff:b7:0b:67: ff:ca:32:0e:83:e6:0d:ec:ac:3a:24:7e:2c:92:41:39:3c:a0: d9:3d:17:b0:73:55:60:cd:ce:77:58:77:17:90:e7:80:c8:0b: d6:6d:57:2c:d1:c2:9d:f5:b9:cc:f5:58:6b:7e:70:2b:ba:bc: 01:70:86:fa:29:83:05:a2:56:9e:52:61:a0:9f:ce:73:b9:3a: 33:f2:20:4b:4d:41:41:8d:96:8a:57:8d:75:c4:54:05:73:ad: 21:92:e2:f2:bb:c4:7e:10:7f:75:6d:99:76:c9:5c:80:cf:42: 90:f9:2e:8e:54:b1:94:64:dc:80:c8:b8:30:22:81:c3:7c:b5: 26:d0:c4:73:2d:fd:56:69:0f:e2:f5:45:4b:55:06:99:66:81: e1:b2:2c:78:87:51:34:fc:f9:69:0b:ab:c2:25:b2:4a:ac:4c: 3e:b2:8e:66:1c:08:d1:3c:fe:0b:32:8d:83:0a:88:1b:86:98: b5:4b:b9:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvgNq4AFhowsFitSQmzr+SLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZTY3MzNmYTIzOWM1ZmIwYzQzOGM4MmY3YzIzMGY1NWQ0 NzhjYjEwHhcNMjYwMTIxMTEwMDM4WhcNMjYwMTIyMTEwMDM4WjAzMTEwLwYDVQQD EygzZjlkM2FjODY0NjM1NWRmY2IxYzI1NjNmNTE2M2ZiNjYwYTEwOTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCHJBFyYr8opWKKAZZNwW/U14xmQ BPWB/vlU9w8tx9rgroXHE3FONCF9GmoFQ13omvNGvSJfmvkMUYQHzuE5uw8llT8O ioBRa5c6XKaUeKK+ikNTnC/AUoP+Eqa3WkTbZ8rgnpruT6Oh6rhfQmPsQiGVmNAq GW//vZf/oRgJLrmh5oUOyPVAKrk3UzQbArvBgLjp+xcTC+G4uRHkw4QH1LvNQVMh kC8GYJEPekG5iEuNGIEXOs1pxsHZLZvFqI31aiI4GUzytOsxMGz8Eu6/MtebfdJA hRSphH1ipBG1SXWvQPcI0MG+rTmmvIK0YQd+3y6V81LEYKb16INxReKFrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD+dOshkY1XfyxwlY/UWP7ZgoQkGMB8GA1UdIwQY MBaAFNXmcz+iOcX7DEOMgvfCMPVdR4yxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWVaelA2STV4ZnNNUTR5Qzk4SXc5VjFIakxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8yNWM5NWUtN2YyNy00ZDY5LTg1NmQt YTM4YjY3OTVmYjI0LzEvMWVaelA2STV4ZnNNUTR5Qzk4SXc5VjFIakxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8yNWM5NWUtN2YyNy00ZDY5LTg1NmQtYTM4YjY3OTVmYjI0 LzEvMWVaelA2STV4ZnNNUTR5Qzk4SXc5VjFIakxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADqjZnum7 4f9r6z9tjuNQNGP1iyVQ143MhZAtM9rzClEZyv8duRBujZ1/+TOjxgMTzRVhA6xt 0MRyI4c6GnIG3wEKWbL/twtn/8oyDoPmDeysOiR+LJJBOTyg2T0XsHNVYM3Od1h3 F5DngMgL1m1XLNHCnfW5zPVYa35wK7q8AXCG+imDBaJWnlJhoJ/Oc7k6M/IgS01B QY2WileNdcRUBXOtIZLi8rvEfhB/dW2ZdslcgM9CkPkujlSxlGTcgMi4MCKBw3y1 JtDEcy39VmkP4vVFS1UGmWaB4bIseIdRNPz5aQurwiWySqxMPrKOZhwI0Tz+CzKN gwqIG4aYtUu5tg== -----END CERTIFICATE-----Generated at Wed Jan 21 19:06:13 2026 by rpki-client