This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft File: 1gR16-fwfXQVPLHMozjBbYAfRfc.mft (raw, json) Hash identifier: /dOqSqf+CKief+8ZBCltZuKDjOllWFQEAcs2VqhqgOs= Subject key identifier: 7D:35:D3:F5:DD:B8:2E:0E:C5:62:1E:BB:E4:CE:1E:65:4B:42:D0:94 Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Certificate serial: 019BE036ABDDCA5375E8C1699397160AF92E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft Manifest number: 18D7 Signing time: Wed 21 Jan 2026 11:00:37 +0000 Manifest this update: Wed 21 Jan 2026 11:00:37 +0000 Manifest next update: Thu 22 Jan 2026 11:00:37 +0000 Files and hashes: 1: 1AHWdqsfLZWVnpd7ySpQCvW-jsc.roa (hash: m7dz8w2hdfa6XOQ5lZQThIIgEVCr6pRG/uc4x6X1d84=) 2: 1gR16-fwfXQVPLHMozjBbYAfRfc.crl (hash: VRosldJBtv0kCEE7jw59AMtX51MRP7Fjm6SDoikMmR8=) 3: 2tySjVTQSHiULWpIIHxe3UTXyKc.roa (hash: 11efIhc4jliYz5b7ccbbcBy+lueobimG/f4ImBFKSr4=) 4: 7osNxsXaNZ0atgy1tSk-ErRImNA.roa (hash: 8e7o+cChykZO+0/seKW+tQ6gNasSXCuNcM9hirx8EvE=) 5: 8mJ_gjPNuA1v0E8kGgFSHtyuDE8.roa (hash: iBeqVNXfdRFJ/xbLsD0hF/qTWwOBkcVA6E79gUwEHAE=) 6: 9APAVgIssnTKkTbMWmqz-ZKWQzk.asa (hash: t2TNQyBjvhJVC1oMPGQYGSgDoc/TaANjpVHxgHvHhck=) 7: EQGugxJGZZhy7ULlXu2xf-8SXLU.roa (hash: UznnK9y+/YnAzmFCMUsWlBbf7xpLU6GolAvI0bvVwdE=) 8: KbInZ1Gpupdhphj7CkIdrL5je5o.roa (hash: q3MqxIRaBKHDKKFdix9wq0J/uM2um2WP1MbmKzjeTHE=) 9: XOJqgPtkORGHv7Nl-1WIFWlpEVc.roa (hash: NkYkGj0wSkYhV+bXuEXtn1TIi5NsUyapnO+clUSvIHU=) 10: fUY8ZLyPFO6PzdE1sHTPRnXSlKM.roa (hash: mSqtCcipoj++PAZRPkO1MS55ZKNwolFB8twWgcQV0Yk=) 11: hjwqR_BvVV3igv-VRSRakB0C0gY.roa (hash: dGn15gWRk4S5nvTCswCYk4PnSEMzXrTWJmJ53SFUgxE=) 12: kxe8v2_GCeDxT_0MCmWHOHxPJNM.roa (hash: tEeXDR/COaV7Zl8LmdrHLVZAbvrGNZU+gXaNAYeV4rM=) 13: lITdQxhmX_QJLHCdZAw823-rxIE.roa (hash: LD1BnadL45zxeXJQFcYTUwoYEdwQD3yyFtEI21xm/MU=) 14: lZYjAlieaWalZ0KSroGQzHPZAaI.roa (hash: 0dG1ycXZz4Qf/zwx+gjvfmGbbEvQRsWOdYOPitUdJTA=) 15: o5usRUvaTvh6G2keAnUfVT8NAfA.roa (hash: pPdHXR2AOGXsw+/jHJo3zUy9fjtPG7RWk5boxOB8T1s=) 16: oOCEdl18ApazsLr9oW3-hDtAacY.roa (hash: a86oY7wjZz2Dhj/N/W2mY4vwh1YYVreTExq6exYWPOc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 11:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:36:ab:dd:ca:53:75:e8:c1:69:93:97:16:0a:f9:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Validity Not Before: Jan 21 11:00:37 2026 GMT Not After : Jan 22 11:00:37 2026 GMT Subject: CN=7d35d3f5ddb82e0ec5621ebbe4ce1e654b42d094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:84:90:da:9f:fb:d7:72:0b:0a:18:91:33:e1: 95:85:82:91:ca:83:02:d5:a0:b4:61:8b:44:0a:39: 31:4b:da:56:ff:84:9c:96:3f:3c:10:14:8f:b3:7c: a4:c3:83:2a:17:3c:af:ec:bd:ea:80:37:34:a7:1b: 23:35:0b:c4:9f:7e:3a:2d:65:b8:49:9c:ee:f9:72: 64:9d:7f:b1:4f:44:a0:a2:d8:d5:bf:d9:b4:fb:35: 9c:65:d4:53:4a:b7:af:81:f6:9d:bf:9d:16:2a:4f: ad:df:36:b2:95:97:a8:d0:bd:09:a5:8e:71:41:2e: 65:7d:1b:a8:af:b3:0f:70:ae:2a:a4:54:14:a7:2b: bb:19:5a:f2:76:fc:0d:20:46:db:d4:8a:8f:02:c4: 60:96:4b:38:1a:cb:be:43:43:f0:84:7d:03:5d:c0: b2:e7:77:57:e2:3b:4f:3d:c1:4d:c9:96:1f:cb:5d: b1:19:be:a5:33:45:78:63:03:a6:a8:b6:be:87:3f: d7:e2:af:62:63:e4:df:15:39:74:9a:af:15:9f:d0: 29:cb:b8:97:fb:4f:3f:2a:37:ff:f4:e4:b0:96:c0: a3:4d:0d:ab:0b:e2:67:8b:5c:ff:48:ef:aa:9e:50: 24:a9:82:75:62:40:44:3f:f1:79:c9:35:1c:cd:98: ec:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:35:D3:F5:DD:B8:2E:0E:C5:62:1E:BB:E4:CE:1E:65:4B:42:D0:94 X509v3 Authority Key Identifier: keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:df:28:d2:eb:04:e8:84:87:cd:f6:24:01:f6:c1:cf:24:3d: 64:ed:66:09:b4:05:f7:ed:aa:7d:11:b2:c4:f2:8a:ba:7d:8a: 22:2a:a7:36:08:91:62:ea:bf:1a:a4:04:ed:fa:43:fe:9b:b3: 87:4b:ac:75:da:07:56:cc:17:24:fb:1c:9d:95:0c:e3:05:6f: ac:5f:c7:91:8a:2c:84:a4:36:bf:04:64:41:3a:d1:0a:42:8b: 6e:5a:de:95:10:92:e9:eb:e8:40:02:2d:4a:cd:8d:8c:01:68: 4b:aa:ee:23:49:a1:c2:cc:68:ce:46:cf:fe:35:0f:e3:dc:d9: d1:7d:d6:83:ed:8d:28:b0:30:71:a2:dc:68:f2:90:16:e2:27: 93:f6:33:38:94:00:62:c1:a5:0e:9b:f8:42:9a:47:b5:dc:25: 42:fc:e8:3a:e9:ee:da:f0:ae:9f:48:eb:9c:61:81:0d:05:ab: 13:87:e8:a4:fd:c1:b1:b4:48:a1:a3:8c:d1:f3:5a:98:85:da: 9c:cf:f4:08:05:54:56:2c:20:83:6a:9e:fb:cc:74:ec:be:8e: 3d:7b:6a:4c:a8:f9:97:a3:8f:0a:60:29:37:46:ca:20:57:3c: ea:cd:27:12:47:22:86:72:cb:35:8a:f1:58:d4:42:06:44:0b: 7b:3f:a9:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvgNqvdylN16MFpk5cWCvkuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx ZjQ1ZjcwHhcNMjYwMTIxMTEwMDM3WhcNMjYwMTIyMTEwMDM3WjAzMTEwLwYDVQQD Eyg3ZDM1ZDNmNWRkYjgyZTBlYzU2MjFlYmJlNGNlMWU2NTRiNDJkMDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ISQ2p/713ILChiRM+GVhYKRyoMC 1aC0YYtECjkxS9pW/4Sclj88EBSPs3ykw4MqFzyv7L3qgDc0pxsjNQvEn346LWW4 SZzu+XJknX+xT0SgotjVv9m0+zWcZdRTSrevgfadv50WKk+t3zaylZeo0L0JpY5x QS5lfRuor7MPcK4qpFQUpyu7GVrydvwNIEbb1IqPAsRglks4Gsu+Q0PwhH0DXcCy 53dX4jtPPcFNyZYfy12xGb6lM0V4YwOmqLa+hz/X4q9iY+TfFTl0mq8Vn9Apy7iX +08/Kjf/9OSwlsCjTQ2rC+Jni1z/SO+qnlAkqYJ1YkBEP/F5yTUczZjs9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH010/XduC4OxWIeu+TOHmVLQtCUMB8GA1UdIwQY MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt NDk2ZjhlYmIyZDYxLzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARN8o0usE 6ISHzfYkAfbBzyQ9ZO1mCbQF9+2qfRGyxPKKun2KIiqnNgiRYuq/GqQE7fpD/puz h0usddoHVswXJPscnZUM4wVvrF/HkYoshKQ2vwRkQTrRCkKLblrelRCS6evoQAIt Ss2NjAFoS6ruI0mhwsxozkbP/jUP49zZ0X3Wg+2NKLAwcaLcaPKQFuInk/YzOJQA YsGlDpv4QppHtdwlQvzoOunu2vCun0jrnGGBDQWrE4fopP3BsbRIoaOM0fNamIXa nM/0CAVUViwgg2qe+8x07L6OPXtqTKj5l6OPCmApN0bKIFc86s0nEkcihnLLNYrx WNRCBkQLez+pCw== -----END CERTIFICATE-----Generated at Wed Jan 21 21:10:19 2026 by rpki-client