This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft File: 1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft (raw, json) Hash identifier: EBxaoPeCa1A/kh28CYCLcNL2RMetpS4rvXHhOUV5D9g= Subject key identifier: 94:06:BC:56:63:93:BF:6C:37:2E:66:94:79:B6:90:DF:24:36:CE:FF Authority key identifier: D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD Certificate issuer: /CN=d50697943676399ac5cac6a3e476545af0df49dd Certificate serial: 019BF95229F528D627E8DF8272BFBED1B085 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft Manifest number: 0A32 Signing time: Mon 26 Jan 2026 08:01:09 +0000 Manifest this update: Mon 26 Jan 2026 08:01:09 +0000 Manifest next update: Tue 27 Jan 2026 08:01:09 +0000 Files and hashes: 1: 1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl (hash: A/Ei+x1r7mkZOogTTUWuhFdxVJghjV88jinKgdLY79g=) 2: Rb6ICVosTC_zaZ16edh9MPPlC-4.roa (hash: f7bv124K8RG4yyZpz3BCEJydd5vMDmuet5IH5Sqpc1Q=) 3: X9Dk1AunWGE1Dosy-zP1Hnz0r7o.roa (hash: /pQF82MMJDZaxsI41JYaoLCQk3D/NV9NF4tHkKVR/m4=) 4: iM_ZBvtG32QBlHfVIn2ttPitF3A.roa (hash: n0U6ZQ9IjEu52Acx8IHWzTTmN0Tm9iyKYJwGHBgAhus=) 5: y81jmZh2IG1vc4T2rX8QCQEOL9E.roa (hash: Y1jjyD/MrRS3ujVJRgR28FUQy55OTENwus5vMZGjmSg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:52:29:f5:28:d6:27:e8:df:82:72:bf:be:d1:b0:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d50697943676399ac5cac6a3e476545af0df49dd Validity Not Before: Jan 26 08:01:09 2026 GMT Not After : Jan 27 08:01:09 2026 GMT Subject: CN=9406bc566393bf6c372e669479b690df2436ceff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ec:e9:4b:91:ba:cd:68:8f:34:89:27:dd:6b: 32:3f:45:e8:05:19:19:be:20:9c:b0:18:0a:6f:43: ff:00:5f:d3:4e:dd:0c:86:5e:1f:35:18:b5:7f:b3: 71:a9:b1:07:57:a7:48:4c:79:f5:22:ee:8c:6a:46: 54:93:db:f3:ca:26:00:a7:9e:3b:27:58:88:95:54: e8:97:b3:ef:b9:23:3d:d3:b9:e4:e3:88:31:21:65: 83:3d:43:d8:03:89:c8:f4:49:3f:60:cb:41:fe:d0: 4b:bd:6f:c6:3b:c3:d4:16:12:66:9a:c1:e9:38:ea: 36:fd:19:6c:5d:7b:08:b0:05:83:1b:be:0e:2e:81: 8d:bf:96:7a:03:2b:2a:a1:34:dc:57:9b:2a:3f:33: 69:4e:fd:bb:01:86:45:da:f8:e9:92:80:3e:ae:dd: 6b:e3:f0:7f:f4:0f:a5:5a:43:4e:cb:ca:95:38:9d: 75:f2:a8:71:0b:6d:2d:c7:12:1d:51:05:1b:9b:e0: fa:9c:97:35:ed:92:4e:c7:ca:2a:51:b9:1f:06:fb: ab:ce:81:5b:2c:e3:3d:ee:23:1f:cc:b6:ab:a4:30: ab:06:df:93:d3:d5:68:1a:8d:79:92:7a:a5:5f:a3: 96:48:0f:69:00:ee:79:d3:d9:71:5e:43:07:17:93: 51:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:06:BC:56:63:93:BF:6C:37:2E:66:94:79:B6:90:DF:24:36:CE:FF X509v3 Authority Key Identifier: keyid:D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:2d:fb:63:d9:4d:3e:a7:ba:aa:16:2e:b9:d3:0e:56:85:f2: 89:dd:2a:b6:aa:a5:18:c0:10:d3:bf:c2:df:a8:a4:d7:bb:da: 6a:18:63:b4:c7:ea:29:fd:5f:18:58:bb:e1:f0:bf:93:9a:37: eb:e6:da:21:c6:c7:89:c4:67:62:00:4e:24:b3:4f:1a:5f:62: 2f:e7:01:03:b1:ad:c5:84:eb:d2:26:cc:57:7f:57:f8:46:11: 15:42:09:ab:9a:ed:38:a1:eb:56:12:27:30:ef:79:79:59:8f: 10:9a:e9:c9:61:ba:5b:27:20:db:a0:d8:4e:27:fd:05:db:4d: ca:71:ec:8a:a5:b3:25:cb:ef:28:d6:5f:aa:94:e2:ca:a4:4e: 81:4e:85:73:3d:47:b5:c6:68:42:c7:0d:55:3d:a8:b9:ca:7e: 78:7c:d1:ce:ed:14:83:ac:4c:2e:b5:ce:a1:32:1b:6c:bf:30: a4:30:a8:45:cb:cc:f6:2c:a7:01:64:06:3b:b7:01:29:28:09: 79:34:88:18:fb:b2:ac:bb:b7:db:eb:b8:e9:5d:50:80:cb:06: 28:19:28:40:11:5b:2d:d4:e1:f8:5e:66:ee:4c:b7:0d:c1:f6: e4:ea:56:29:fd:93:14:0a:b7:63:07:fb:ac:eb:8a:79:5c:74: 61:8b:7d:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5Uin1KNYn6N+Ccr++0bCFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MDY5Nzk0MzY3NjM5OWFjNWNhYzZhM2U0NzY1NDVhZjBk ZjQ5ZGQwHhcNMjYwMTI2MDgwMTA5WhcNMjYwMTI3MDgwMTA5WjAzMTEwLwYDVQQD Eyg5NDA2YmM1NjYzOTNiZjZjMzcyZTY2OTQ3OWI2OTBkZjI0MzZjZWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OzpS5G6zWiPNIkn3WsyP0XoBRkZ viCcsBgKb0P/AF/TTt0Mhl4fNRi1f7NxqbEHV6dITHn1Iu6MakZUk9vzyiYAp547 J1iIlVTol7PvuSM907nk44gxIWWDPUPYA4nI9Ek/YMtB/tBLvW/GO8PUFhJmmsHp OOo2/RlsXXsIsAWDG74OLoGNv5Z6AysqoTTcV5sqPzNpTv27AYZF2vjpkoA+rt1r 4/B/9A+lWkNOy8qVOJ118qhxC20txxIdUQUbm+D6nJc17ZJOx8oqUbkfBvurzoFb LOM97iMfzLarpDCrBt+T09VoGo15knqlX6OWSA9pAO5509lxXkMHF5NRJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJQGvFZjk79sNy5mlHm2kN8kNs7/MB8GA1UdIwQY MBaAFNUGl5Q2djmaxcrGo+R2VFrw30ndMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVFhWGxEWjJPWnJGeXNhajVIWlVXdkRmU2QwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS81ZjZhZmYtMTNiYi00ZGI4LTk1N2Yt OGQyM2FjNWNiNTAyLzEvMVFhWGxEWjJPWnJGeXNhajVIWlVXdkRmU2QwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS81ZjZhZmYtMTNiYi00ZGI4LTk1N2YtOGQyM2FjNWNiNTAy LzEvMVFhWGxEWjJPWnJGeXNhajVIWlVXdkRmU2QwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjS37Y9lN Pqe6qhYuudMOVoXyid0qtqqlGMAQ07/C36ik17vaahhjtMfqKf1fGFi74fC/k5o3 6+baIcbHicRnYgBOJLNPGl9iL+cBA7GtxYTr0ibMV39X+EYRFUIJq5rtOKHrVhIn MO95eVmPEJrpyWG6Wycg26DYTif9BdtNynHsiqWzJcvvKNZfqpTiyqROgU6Fcz1H tcZoQscNVT2oucp+eHzRzu0Ug6xMLrXOoTIbbL8wpDCoRcvM9iynAWQGO7cBKSgJ eTSIGPuyrLu32+u46V1QgMsGKBkoQBFbLdTh+F5m7ky3DcH25OpWKf2TFAq3Ywf7 rOuKeVx0YYt9/A== -----END CERTIFICATE-----Generated at Mon Jan 26 15:21:16 2026 by rpki-client