This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft File: invfL1uWEjLljbKJtIqf4kX6nWw.mft (raw, json) Hash identifier: oyDWjlCKaClMRgvbqfLhT6AXPLVXnfD/VoLnnPKhuXk= Subject key identifier: 2D:E0:1B:39:76:84:9C:D6:22:4C:F3:A6:82:87:0F:CE:EA:69:6B:36 Authority key identifier: 8A:7B:DF:2F:5B:96:12:32:E5:8D:B2:89:B4:8A:9F:E2:45:FA:9D:6C Certificate issuer: /CN=8a7bdf2f5b961232e58db289b48a9fe245fa9d6c Certificate serial: 019BFC899A14D9866F7A831FAA2D2AC062A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft Manifest number: 057D Signing time: Mon 26 Jan 2026 23:00:34 +0000 Manifest this update: Mon 26 Jan 2026 23:00:34 +0000 Manifest next update: Tue 27 Jan 2026 23:00:34 +0000 Files and hashes: 1: 13bg8sr321aaC-jFOX86O1_lBzU.roa (hash: bU7Oi7TbB7FOIxER/ptIdZra1cEI8qAD1Nz/78F0Vtg=) 2: invfL1uWEjLljbKJtIqf4kX6nWw.crl (hash: M+knd860HKlS3F+YxMmMBt+z1j2IHtAh9+TPHiPkefc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:89:9a:14:d9:86:6f:7a:83:1f:aa:2d:2a:c0:62:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a7bdf2f5b961232e58db289b48a9fe245fa9d6c Validity Not Before: Jan 26 23:00:34 2026 GMT Not After : Jan 27 23:00:34 2026 GMT Subject: CN=2de01b3976849cd6224cf3a682870fceea696b36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ca:fb:fb:11:41:11:0b:53:b1:08:3f:91:93: 63:5b:d1:95:2d:8c:3b:41:15:ac:c4:ca:06:5e:c8: 0e:02:cb:87:82:17:3d:cd:ad:eb:df:d2:23:60:30: 42:fb:df:8c:fe:e5:b7:61:3a:3b:c5:b5:89:ed:c3: de:6b:92:30:6f:dc:e0:a4:4c:f1:8e:49:69:a4:29: 18:52:65:eb:9e:26:42:87:17:4e:27:98:22:df:7b: eb:99:7b:ab:e1:28:f0:89:6b:41:b2:cd:31:86:56: 40:e0:8e:06:c3:e1:03:0a:24:30:44:97:10:4f:ec: cc:f7:80:a4:93:be:aa:46:82:cd:11:0f:45:71:e0: 71:2e:e5:e2:1a:c4:90:7e:68:71:cb:f8:56:ae:de: fd:00:42:08:4a:46:83:ba:c5:d5:00:f5:6b:0a:a5: 03:e8:1e:d6:c8:f7:d6:78:5b:4c:26:a8:d6:89:eb: 9a:da:0d:ba:cc:7f:f3:bc:84:4f:7a:14:b8:e7:26: be:71:26:9b:49:e3:b0:32:e5:ec:97:7a:02:0d:0b: ca:7a:06:f8:0c:18:c7:4e:26:99:56:37:f2:f9:ef: 29:17:47:0a:22:f9:f8:84:34:95:97:89:c4:63:5f: 07:3d:bf:e4:e1:46:1d:a5:f1:22:c0:ce:8c:72:fe: 2a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E0:1B:39:76:84:9C:D6:22:4C:F3:A6:82:87:0F:CE:EA:69:6B:36 X509v3 Authority Key Identifier: keyid:8A:7B:DF:2F:5B:96:12:32:E5:8D:B2:89:B4:8A:9F:E2:45:FA:9D:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:ff:96:ed:e8:a5:9c:11:f5:df:76:4d:aa:dc:c3:79:86:d6: 88:2e:17:6c:e3:60:17:45:5b:8b:8e:26:3a:d2:17:e4:7f:50: 06:05:39:71:b2:12:a2:d4:e8:d7:28:cc:82:ba:c3:f2:9b:12: 99:74:04:ff:96:44:41:ee:0d:3b:3f:79:96:55:44:31:29:f4: 40:77:f3:72:ab:5a:63:06:e7:fc:65:ab:fc:48:f5:96:b0:61: 06:5b:d0:04:e9:5c:93:7d:01:31:76:98:ae:fc:2a:9e:06:fd: 48:c6:80:18:d2:a4:8c:4b:5b:ef:ed:86:bb:f4:65:14:29:9c: 90:d6:0e:01:ec:56:66:15:77:8b:1a:a1:a0:54:79:f9:aa:ac: 61:4d:33:04:04:fe:cd:ef:20:fd:56:73:2b:c5:63:09:7a:71: 9b:f5:cf:d3:e0:35:5b:51:16:25:85:b8:1d:5b:95:b8:3d:d5: a3:76:81:1c:5b:58:55:69:92:02:dc:66:71:26:a2:06:a0:b7: 3e:ae:62:f3:75:bc:d6:f9:e0:08:a4:9a:0f:3a:9b:6f:e0:55: bf:be:d1:92:3b:05:9d:c0:cc:60:de:99:bf:49:4f:95:b4:1b: ce:2c:d7:17:23:d6:d9:3d:57:84:09:81:18:35:1b:db:96:26: a6:b8:35:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8iZoU2YZveoMfqi0qwGKnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhN2JkZjJmNWI5NjEyMzJlNThkYjI4OWI0OGE5ZmUyNDVm YTlkNmMwHhcNMjYwMTI2MjMwMDM0WhcNMjYwMTI3MjMwMDM0WjAzMTEwLwYDVQQD EygyZGUwMWIzOTc2ODQ5Y2Q2MjI0Y2YzYTY4Mjg3MGZjZWVhNjk2YjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsr7+xFBEQtTsQg/kZNjW9GVLYw7 QRWsxMoGXsgOAsuHghc9za3r39IjYDBC+9+M/uW3YTo7xbWJ7cPea5Iwb9zgpEzx jklppCkYUmXrniZChxdOJ5gi33vrmXur4SjwiWtBss0xhlZA4I4Gw+EDCiQwRJcQ T+zM94Ckk76qRoLNEQ9FceBxLuXiGsSQfmhxy/hWrt79AEIISkaDusXVAPVrCqUD 6B7WyPfWeFtMJqjWieua2g26zH/zvIRPehS45ya+cSabSeOwMuXsl3oCDQvKegb4 DBjHTiaZVjfy+e8pF0cKIvn4hDSVl4nEY18HPb/k4UYdpfEiwM6Mcv4qKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC3gGzl2hJzWIkzzpoKHD87qaWs2MB8GA1UdIwQY MBaAFIp73y9blhIy5Y2yibSKn+JF+p1sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaW52ZkwxdVdFakxsamJLSnRJcWY0a1g2bld3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9hY2Q3NDYtNzFlYi00Y2RlLWFlMjAt Njc2ODViNGRjOGI5LzEvaW52ZkwxdVdFakxsamJLSnRJcWY0a1g2bld3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9hY2Q3NDYtNzFlYi00Y2RlLWFlMjAtNjc2ODViNGRjOGI5 LzEvaW52ZkwxdVdFakxsamJLSnRJcWY0a1g2bld3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYP+W7eil nBH133ZNqtzDeYbWiC4XbONgF0Vbi44mOtIX5H9QBgU5cbISotTo1yjMgrrD8psS mXQE/5ZEQe4NOz95llVEMSn0QHfzcqtaYwbn/GWr/Ej1lrBhBlvQBOlck30BMXaY rvwqngb9SMaAGNKkjEtb7+2Gu/RlFCmckNYOAexWZhV3ixqhoFR5+aqsYU0zBAT+ ze8g/VZzK8VjCXpxm/XP0+A1W1EWJYW4HVuVuD3Vo3aBHFtYVWmSAtxmcSaiBqC3 Pq5i83W81vngCKSaDzqbb+BVv77RkjsFncDMYN6Zv0lPlbQbzizXFyPW2T1XhAmB GDUb25Ymprg1uQ== -----END CERTIFICATE-----Generated at Tue Jan 27 01:07:32 2026 by rpki-client