This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft File: 1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft (raw, json) Hash identifier: I0zpwaT2RmQW8OHlnAGuBSTliRC6O0FSmOS+56klLXs= Subject key identifier: 4A:BC:8F:77:8D:CC:92:97:A6:FF:D5:44:51:42:46:77:2E:2C:52:FF Authority key identifier: FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B Certificate issuer: /CN=fad7100e77ed9119d66e2321bb6711d7e760982b Certificate serial: 019BA30FBF4F900A2AF89BAFA2F999AC5603 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft Manifest number: 17D0 Signing time: Fri 09 Jan 2026 14:01:16 +0000 Manifest this update: Fri 09 Jan 2026 14:01:16 +0000 Manifest next update: Sat 10 Jan 2026 14:01:16 +0000 Files and hashes: 1: 1--f8TOFOHJxy913_bnxbbB_I8Ps.roa (hash: wDKAE8eJy4a/Xju9oL+J32sQIgyfZxer9kQNnDKALh8=) 2: 1-jH0g_JDLp_7206NgV5uijHSTJE.roa (hash: LRjP11l8Yg7jbG4bbfhfNEvQDZIpDubQ+TvWhkwjrcQ=) 3: 1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl (hash: BO8DRc3BuiPWDvHOCP7/reFNxfqEi+1kIL0+2kb6RiM=) 4: 3GG8eWEP0AsTR5hlJBndfjSVqXE.roa (hash: OqQ6t5k1StJuUPb2wymY353zmLAJ5m9iQ1cfSGHhatc=) 5: Ew6t29Ei1xqX6fCJJvzPjV0QQx8.roa (hash: JiMbHLWrOkAjKxV/HgN8hcqfDizA3AaG0pNVT8kgBVI=) 6: JNr-UC5vFynVEDZr9p42nirYUp8.roa (hash: QrXLI/7uzYtPK46SlviW+E2Eaq5t1mr6I/kJpndD+lk=) 7: OS72UUjy1jIbO6SLm4_mGk1QjoA.roa (hash: JCjobLuVUg3x2yIR7Yj0jA3s02kdH2wYADkCYAZAm6M=) 8: hlYcdx1ybU4O_N_wWLe8kEQOPAA.roa (hash: g8sRkVv7AmG02gcDiKwncGvtRS2uuD1b8FmdkJIrmVQ=) 9: iY5E0iZ2YmwSRo1oZbuozkzcREs.roa (hash: XAB0LIhnvafntszSPTz4cfq/KAQxwohiu0F5a96UkOU=) 10: qWmrXkuHj_sWsoWUwUEWOmRpZO0.roa (hash: MHfvuh3eLEasmU8bZ+QtTWQpVIX8pvTM+Puzp/lNHV0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a3:0f:bf:4f:90:0a:2a:f8:9b:af:a2:f9:99:ac:56:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fad7100e77ed9119d66e2321bb6711d7e760982b Validity Not Before: Jan 9 14:01:16 2026 GMT Not After : Jan 10 14:01:16 2026 GMT Subject: CN=4abc8f778dcc9297a6ffd544514246772e2c52ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f4:6d:ca:1d:5b:c7:51:f4:4c:0b:98:4c:54: d9:55:3d:8e:7c:32:04:8f:0c:18:a6:b8:1a:66:dd: f7:9c:25:c3:6c:ec:7a:ba:b1:b8:f6:47:c4:5e:d6: d0:c8:5e:34:ff:7b:6f:1d:76:61:85:95:02:49:13: d7:60:cb:fb:d9:d9:1e:e6:72:a5:7b:6f:60:22:67: 75:4d:3d:b2:7c:4b:5a:e6:90:eb:5a:75:7a:19:c6: 59:52:87:e5:00:b3:1a:d5:5b:4a:da:a0:5a:54:2a: 1f:4e:21:1c:ab:ab:df:f0:4c:e3:b0:09:7f:be:e9: e1:ac:34:68:cc:93:a5:5d:40:f1:2e:69:e9:be:16: e5:c8:b1:d8:31:02:08:84:34:cf:f6:e5:91:bc:80: 75:24:c6:8e:76:d1:b9:22:49:b1:40:21:29:f1:31: be:4a:bd:af:45:15:23:9d:62:e1:80:cf:83:fb:42: 43:92:04:75:49:00:f8:52:89:de:00:c8:4a:a6:b7: 3d:d9:cd:fd:c1:59:6e:48:67:bd:2f:04:68:9e:4e: 90:7c:dc:88:70:72:fa:ae:5c:0b:f9:17:89:db:06: 9f:49:a0:bb:d8:0f:43:b5:3e:bd:aa:6d:0b:57:95: 31:76:33:ee:19:8c:56:85:3c:84:47:06:2c:89:fb: 50:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:BC:8F:77:8D:CC:92:97:A6:FF:D5:44:51:42:46:77:2E:2C:52:FF X509v3 Authority Key Identifier: keyid:FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:8c:14:48:c9:25:6e:59:9e:5b:df:bb:a1:de:78:68:d1:f4: d5:94:7d:6b:40:2d:d3:9e:26:2e:2b:5b:42:1a:02:2f:45:af: bd:3c:b7:35:3f:40:d0:f5:e3:a1:5e:55:ef:73:c8:57:e8:3b: f6:ee:78:33:16:26:70:9e:ea:2d:57:30:f1:3e:b7:8e:6a:c9: a1:98:da:7f:06:9e:5c:64:27:da:b2:a2:2c:ed:22:cd:2d:1e: fe:a9:84:dd:e4:07:38:a7:07:99:58:51:de:8a:ac:85:8b:fc: ba:b8:f1:e1:f5:a1:6d:0f:c5:fd:f4:b2:81:02:99:2e:85:f6: 43:e9:fa:c2:c0:a7:60:62:95:8b:29:07:86:83:a9:17:e1:c6: 12:ac:a0:3b:36:f6:88:03:7f:46:16:e3:c7:e2:11:f2:b9:05: 01:07:99:fc:5c:ce:7b:78:b1:53:45:94:53:b4:fe:36:b1:89: d7:22:6d:a2:89:28:89:bb:03:57:78:73:e8:b1:83:01:32:28: 60:3e:10:42:71:8e:f0:23:9c:e4:4c:2f:b5:1e:88:0c:94:cf: 2c:38:c5:61:ae:46:8c:a8:0f:9a:bc:21:3c:ae:57:89:42:d6: 4d:12:18:b0:e0:b0:ba:c0:9b:17:7b:e3:0a:c7:e9:6b:61:46: a2:f0:17:6c -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZujD79PkAoq+JuvovmZrFYDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZDcxMDBlNzdlZDkxMTlkNjZlMjMyMWJiNjcxMWQ3ZTc2 MDk4MmIwHhcNMjYwMTA5MTQwMTE2WhcNMjYwMTEwMTQwMTE2WjAzMTEwLwYDVQQD Eyg0YWJjOGY3NzhkY2M5Mjk3YTZmZmQ1NDQ1MTQyNDY3NzJlMmM1MmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPRtyh1bx1H0TAuYTFTZVT2OfDIE jwwYprgaZt33nCXDbOx6urG49kfEXtbQyF40/3tvHXZhhZUCSRPXYMv72dke5nKl e29gImd1TT2yfEta5pDrWnV6GcZZUoflALMa1VtK2qBaVCofTiEcq6vf8EzjsAl/ vunhrDRozJOlXUDxLmnpvhblyLHYMQIIhDTP9uWRvIB1JMaOdtG5IkmxQCEp8TG+ Sr2vRRUjnWLhgM+D+0JDkgR1SQD4UoneAMhKprc92c39wVluSGe9LwRonk6QfNyI cHL6rlwL+ReJ2wafSaC72A9DtT69qm0LV5UxdjPuGYxWhTyERwYsiftQywIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFEq8j3eNzJKXpv/VRFFCRncuLFL/MB8GA1UdIwQY MBaAFPrXEA537ZEZ1m4jIbtnEdfnYJgrMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS10Y1FEbmZ0a1JuV2JpTWh1MmNSMS1kZ21Dcy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2UvMDFkNDExLWQ5MTUtNDI3Ny04ZmUy LTc2YjBkZGEyYmYzZS8xLzEtdGNRRG5mdGtSbldiaU1odTJjUjEtZGdtQ3MubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzNlLzAxZDQxMS1kOTE1LTQyNzctOGZlMi03NmIwZGRhMmJm M2UvMS8xLXRjUURuZnRrUm5XYmlNaHUyY1IxLWRnbUNzLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJYwU SMklblmeW9+7od54aNH01ZR9a0At054mLitbQhoCL0WvvTy3NT9A0PXjoV5V73PI V+g79u54MxYmcJ7qLVcw8T63jmrJoZjafwaeXGQn2rKiLO0izS0e/qmE3eQHOKcH mVhR3oqshYv8urjx4fWhbQ/F/fSygQKZLoX2Q+n6wsCnYGKViykHhoOpF+HGEqyg Ozb2iAN/Rhbjx+IR8rkFAQeZ/FzOe3ixU0WUU7T+NrGJ1yJtookoibsDV3hz6LGD ATIoYD4QQnGO8COc5EwvtR6IDJTPLDjFYa5GjKgPmrwhPK5XiULWTRIYsOCwusCb F3vjCsfpa2FGovAXbA== -----END CERTIFICATE-----Generated at Fri Jan 9 18:08:09 2026 by rpki-client