This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft File: 1nADQQTxv2WBRLSqRbQaP1d53A8.mft (raw, json) Hash identifier: dMRke14JJizbxSmSPy9d39E+R47MqVtAzCk6HkvXuMA= Subject key identifier: C1:DB:E5:04:6A:9A:1A:C8:CB:97:3D:01:5C:A1:69:CF:D4:B8:E4:0E Authority key identifier: D6:70:03:41:04:F1:BF:65:81:44:B4:AA:45:B4:1A:3F:57:79:DC:0F Certificate issuer: /CN=d670034104f1bf658144b4aa45b41a3f5779dc0f Certificate serial: 019BFCC12A49A55B55507B41CB13B9B9AB52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft Manifest number: 01F7 Signing time: Tue 27 Jan 2026 00:01:16 +0000 Manifest this update: Tue 27 Jan 2026 00:01:16 +0000 Manifest next update: Wed 28 Jan 2026 00:01:16 +0000 Files and hashes: 1: 1nADQQTxv2WBRLSqRbQaP1d53A8.crl (hash: ue2k57ELa0gmROU28oa4YZkE0KesyM1SF1R6aY6TnUU=) 2: _5wD3GhDQ1YTzFTjqBTWs_Q3la0.roa (hash: wo2o5ggTBU2w++bpEVrPqvzmJ1RgxdR3NpxYQHN0044=) 3: k3iM252MCayhLR_PBb595fv_baM.roa (hash: EbtrM8zDUBSt9GwmEMPTeNJfc3L8jh3H2e88Yy2j2HI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.crl rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:c1:2a:49:a5:5b:55:50:7b:41:cb:13:b9:b9:ab:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d670034104f1bf658144b4aa45b41a3f5779dc0f Validity Not Before: Jan 27 00:01:16 2026 GMT Not After : Jan 28 00:01:16 2026 GMT Subject: CN=c1dbe5046a9a1ac8cb973d015ca169cfd4b8e40e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6f:b2:a6:f6:1a:1a:d8:de:3d:a5:5d:2e:5d: 65:05:92:90:34:e7:c7:25:9a:28:81:db:1a:8d:de: bc:09:54:1a:0c:f0:3f:30:e8:6a:c8:92:fd:59:47: 42:23:7c:99:f0:de:06:2b:cf:91:b0:29:09:0e:95: 61:8d:c3:41:bf:f3:21:b9:0a:ed:da:f1:bc:6b:70: f7:4c:2f:b3:be:87:c8:86:11:31:ad:f5:ff:65:26: 08:15:20:83:c4:ff:da:d9:2f:49:2c:f1:1f:df:c0: 66:91:b6:c4:e2:ea:10:8b:cd:73:a8:5e:ac:85:5b: 9d:ea:2e:cd:a0:96:60:06:42:50:d1:72:33:62:ef: 2d:da:f7:27:1d:95:9d:35:06:94:35:65:72:18:09: 0a:9c:11:97:67:b4:82:1c:f0:52:de:77:fb:7d:dc: 85:e1:36:d5:80:45:10:fb:73:54:cf:12:77:ed:af: e9:22:50:0e:5c:4a:7f:10:9c:61:92:6a:c6:d4:57: 4f:ec:5b:94:fe:18:b3:c6:1c:19:2c:ca:dd:a0:f6: 14:93:4f:da:e9:cc:2d:fa:08:c7:6d:a0:6e:74:3a: 79:0c:7f:ac:3f:b2:02:2d:84:68:b6:0f:6b:29:5e: d0:c5:8c:4e:db:1f:76:9c:83:8c:ba:aa:07:6a:65: ee:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:DB:E5:04:6A:9A:1A:C8:CB:97:3D:01:5C:A1:69:CF:D4:B8:E4:0E X509v3 Authority Key Identifier: keyid:D6:70:03:41:04:F1:BF:65:81:44:B4:AA:45:B4:1A:3F:57:79:DC:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:f2:cb:c4:f5:c6:53:2c:8a:17:ad:36:ef:9d:28:f9:fe:d4: c4:35:fb:13:f7:2a:e2:81:2c:18:8c:6b:a6:a0:63:95:9f:26: e3:8f:17:2d:e0:fa:34:fe:85:b6:5e:a1:20:25:36:9b:c9:07: c1:ff:40:7c:6d:cb:6a:1f:1f:29:91:44:15:9e:c4:46:aa:df: d2:c7:ac:a7:1e:26:ae:86:22:ef:31:db:74:7c:48:fc:83:a6: 1c:c6:cb:f4:56:45:08:d4:c5:59:0d:9c:98:29:b1:6a:b0:1d: 9b:92:58:81:7b:77:62:4f:d0:0c:59:42:e5:6c:9d:fa:3a:6c: 35:7b:06:75:b9:cf:6c:4c:27:3d:a7:69:c8:e7:e1:ce:c0:08: 56:0d:d6:2b:5b:85:71:3b:70:ac:a5:9d:f2:16:b5:47:b6:68: 30:18:f4:f1:40:5d:e5:83:ad:e6:e8:3f:e0:d4:05:9e:88:eb: 01:d4:7f:03:ce:3b:33:d9:3a:12:45:c3:f3:97:61:3e:e2:e0: 68:0d:c5:bc:13:6a:89:45:c5:3e:5a:46:89:7c:c7:ed:11:dc: 35:7f:a3:29:b6:5f:cc:20:b1:1d:e2:6f:72:66:ec:92:ac:60: 82:44:b2:42:9e:70:77:cb:47:46:af:61:6b:53:ed:4b:57:87: bb:32:f4:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8wSpJpVtVUHtByxO5uatSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NzAwMzQxMDRmMWJmNjU4MTQ0YjRhYTQ1YjQxYTNmNTc3 OWRjMGYwHhcNMjYwMTI3MDAwMTE2WhcNMjYwMTI4MDAwMTE2WjAzMTEwLwYDVQQD EyhjMWRiZTUwNDZhOWExYWM4Y2I5NzNkMDE1Y2ExNjljZmQ0YjhlNDBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2+ypvYaGtjePaVdLl1lBZKQNOfH JZoogdsajd68CVQaDPA/MOhqyJL9WUdCI3yZ8N4GK8+RsCkJDpVhjcNBv/MhuQrt 2vG8a3D3TC+zvofIhhExrfX/ZSYIFSCDxP/a2S9JLPEf38BmkbbE4uoQi81zqF6s hVud6i7NoJZgBkJQ0XIzYu8t2vcnHZWdNQaUNWVyGAkKnBGXZ7SCHPBS3nf7fdyF 4TbVgEUQ+3NUzxJ37a/pIlAOXEp/EJxhkmrG1FdP7FuU/hizxhwZLMrdoPYUk0/a 6cwt+gjHbaBudDp5DH+sP7ICLYRotg9rKV7QxYxO2x92nIOMuqoHamXubQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMHb5QRqmhrIy5c9AVyhac/UuOQOMB8GA1UdIwQY MBaAFNZwA0EE8b9lgUS0qkW0Gj9XedwPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW5BRFFRVHh2MldCUkxTcVJiUWFQMWQ1M0E4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMWNiYzMtMjhhMS00ZTUzLWEwYTQt ZjkxNzJjY2JjNWFmLzEvMW5BRFFRVHh2MldCUkxTcVJiUWFQMWQ1M0E4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9lMWNiYzMtMjhhMS00ZTUzLWEwYTQtZjkxNzJjY2JjNWFm LzEvMW5BRFFRVHh2MldCUkxTcVJiUWFQMWQ1M0E4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe/LLxPXG UyyKF602750o+f7UxDX7E/cq4oEsGIxrpqBjlZ8m448XLeD6NP6Ftl6hICU2m8kH wf9AfG3Lah8fKZFEFZ7ERqrf0sespx4mroYi7zHbdHxI/IOmHMbL9FZFCNTFWQ2c mCmxarAdm5JYgXt3Yk/QDFlC5Wyd+jpsNXsGdbnPbEwnPadpyOfhzsAIVg3WK1uF cTtwrKWd8ha1R7ZoMBj08UBd5YOt5ug/4NQFnojrAdR/A847M9k6EkXD85dhPuLg aA3FvBNqiUXFPlpGiXzH7RHcNX+jKbZfzCCxHeJvcmbskqxggkSyQp5wd8tHRq9h a1PtS1eHuzL0zA== -----END CERTIFICATE-----Generated at Tue Jan 27 05:36:41 2026 by rpki-client