This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft File: 1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft (raw, json) Hash identifier: DUKLB2P76RtBX5XuATlS3E9/Jk91JTdJHUdubDBvOAg= Subject key identifier: 88:66:C8:8C:F0:24:8E:E8:F9:8D:30:DF:34:65:2A:08:AF:3A:AB:7F Authority key identifier: F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09 Certificate issuer: /CN=f8fc3590bf49afb42ce44a8c174c44161b8fc209 Certificate serial: 019BFAD290B7166A47490F125F0898F9AF84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft Manifest number: 17BB Signing time: Mon 26 Jan 2026 15:01:02 +0000 Manifest this update: Mon 26 Jan 2026 15:01:02 +0000 Manifest next update: Tue 27 Jan 2026 15:01:02 +0000 Files and hashes: 1: 1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl (hash: LCaY85Z6IQBZ+BADbgwVER1o6avFzBFQuugpGhe6NC0=) 2: _xye3zL4cDBrsfPa3oaNO5DUWKk.roa (hash: f5gE3FGAqbRKSe0OsknEgvTr1MnW4+hSm41yjpSqF/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:d2:90:b7:16:6a:47:49:0f:12:5f:08:98:f9:af:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8fc3590bf49afb42ce44a8c174c44161b8fc209 Validity Not Before: Jan 26 15:01:02 2026 GMT Not After : Jan 27 15:01:02 2026 GMT Subject: CN=8866c88cf0248ee8f98d30df34652a08af3aab7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9a:86:7d:9b:5e:30:83:e8:47:a6:68:d9:1e: 16:3a:fe:c3:de:3a:57:12:75:1d:b0:a1:9d:23:ef: 3f:bf:d8:4c:fa:7c:d6:ef:cf:c6:6e:09:62:ec:80: ae:76:97:31:6d:46:4f:e0:76:2c:44:f7:2b:8f:22: 07:9f:2e:0a:f0:56:61:c1:5f:e1:2b:71:7c:5a:9e: 5a:07:23:a4:61:9c:79:4c:e5:3d:d0:a9:a5:e7:eb: 70:2f:27:c7:3c:76:cb:9d:10:7d:3f:bd:74:56:3c: 6c:3d:ce:75:1e:b0:f9:96:93:01:63:e8:55:3b:75: ab:ea:1a:01:ff:81:cc:2d:59:87:a7:d6:09:d9:7b: cd:e9:63:1e:ba:71:1d:0d:73:82:43:a1:b3:c9:86: 40:6b:5b:8d:c5:11:36:02:e6:5d:d6:c0:ea:09:c0: f9:3c:83:bd:d9:ea:36:2e:9b:ee:5d:57:ae:4d:92: 6b:7f:6b:e7:3c:7f:d1:24:b9:82:6c:7f:b2:0d:97: a3:bf:10:74:a9:94:00:10:73:4f:b8:7f:e2:b4:ee: 23:45:61:85:99:9d:07:6f:16:11:db:49:06:22:68: 2f:df:77:3b:b3:8f:64:93:09:30:56:d7:64:24:6f: a3:0f:27:f9:e2:1b:ce:99:10:23:1b:91:a3:2c:c8: 12:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:66:C8:8C:F0:24:8E:E8:F9:8D:30:DF:34:65:2A:08:AF:3A:AB:7F X509v3 Authority Key Identifier: keyid:F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:f0:2a:3f:6b:c4:31:43:b9:fc:fe:d7:1b:e1:0c:47:32:16: 82:d4:8f:01:dc:8a:4b:6c:43:eb:18:05:ca:e4:0f:4b:54:77: 16:ec:c6:f7:e0:83:f1:7b:32:a7:43:63:b3:48:b8:21:c2:5f: a9:91:f5:4f:35:5c:ee:0b:0b:f3:a8:80:f1:db:af:3b:65:b6: 4f:1f:75:fc:bb:2d:a1:13:e0:d3:34:40:69:6b:0d:fd:ba:98: cb:c6:93:13:53:f6:28:02:b9:0a:97:9a:84:93:57:f7:bb:6a: fe:db:46:09:8c:b5:8c:73:df:81:6c:58:ea:90:01:50:94:42: ed:2c:89:52:df:db:fe:3c:76:96:79:97:36:75:66:a7:e5:0c: d5:0e:19:1d:dd:ca:11:53:0b:9b:ca:c6:7c:49:b7:f0:c1:5b: f1:a2:e1:34:d0:ba:5f:9e:a6:98:47:0f:ee:22:07:d9:0b:e7: 46:77:de:10:e9:a9:6d:66:d1:83:8a:c9:1b:09:24:56:35:17: 7d:8e:42:cb:f8:ff:6b:63:46:78:9d:f2:65:34:14:4f:6a:c6: f1:65:fb:dc:92:ea:85:0b:28:35:ae:cb:46:8c:ee:25:03:62: 7e:ba:54:29:7e:9c:af:17:f1:67:68:10:9e:ea:d3:6b:af:52: ae:c9:5c:25 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZv60pC3FmpHSQ8SXwiY+a+EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZmMzNTkwYmY0OWFmYjQyY2U0NGE4YzE3NGM0NDE2MWI4 ZmMyMDkwHhcNMjYwMTI2MTUwMTAyWhcNMjYwMTI3MTUwMTAyWjAzMTEwLwYDVQQD Eyg4ODY2Yzg4Y2YwMjQ4ZWU4Zjk4ZDMwZGYzNDY1MmEwOGFmM2FhYjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJqGfZteMIPoR6Zo2R4WOv7D3jpX EnUdsKGdI+8/v9hM+nzW78/Gbgli7ICudpcxbUZP4HYsRPcrjyIHny4K8FZhwV/h K3F8Wp5aByOkYZx5TOU90Kml5+twLyfHPHbLnRB9P710VjxsPc51HrD5lpMBY+hV O3Wr6hoB/4HMLVmHp9YJ2XvN6WMeunEdDXOCQ6GzyYZAa1uNxRE2AuZd1sDqCcD5 PIO92eo2LpvuXVeuTZJrf2vnPH/RJLmCbH+yDZejvxB0qZQAEHNPuH/itO4jRWGF mZ0HbxYR20kGImgv33c7s49kkwkwVtdkJG+jDyf54hvOmRAjG5GjLMgSqwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFIhmyIzwJI7o+Y0w3zRlKgivOqt/MB8GA1UdIwQY MBaAFPj8NZC/Sa+0LORKjBdMRBYbj8IJMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1QdzFrTDlKcjdRczVFcU1GMHhFRmh1UHdnay5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvYTFlNmYyLWRkNWEtNDQ4My04ZmRi LWZlZTI2YTFjNDNkOS8xLzEtUHcxa0w5SnI3UXM1RXFNRjB4RUZodVB3Z2subWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzJhL2ExZTZmMi1kZDVhLTQ0ODMtOGZkYi1mZWUyNmExYzQz ZDkvMS8xLVB3MWtMOUpyN1FzNUVxTUYweEVGaHVQd2drLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADfAq P2vEMUO5/P7XG+EMRzIWgtSPAdyKS2xD6xgFyuQPS1R3FuzG9+CD8Xsyp0Njs0i4 IcJfqZH1TzVc7gsL86iA8duvO2W2Tx91/LstoRPg0zRAaWsN/bqYy8aTE1P2KAK5 CpeahJNX97tq/ttGCYy1jHPfgWxY6pABUJRC7SyJUt/b/jx2lnmXNnVmp+UM1Q4Z Hd3KEVMLm8rGfEm38MFb8aLhNNC6X56mmEcP7iIH2QvnRnfeEOmpbWbRg4rJGwkk VjUXfY5Cy/j/a2NGeJ3yZTQUT2rG8WX73JLqhQsoNa7LRozuJQNifrpUKX6crxfx Z2gQnurTa69SrslcJQ== -----END CERTIFICATE-----Generated at Mon Jan 26 20:03:29 2026 by rpki-client