This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft File: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft (raw, json) Hash identifier: kpQy56sHvZP28g0c4yQUcAq393us//5RdTA/kz7O1+k= Subject key identifier: 70:CC:52:87:25:15:8C:5E:DD:07:BE:91:E9:55:9F:D6:81:0F:CD:7B Authority key identifier: FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C Certificate issuer: /CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c Certificate serial: 019BDDA4464033A5F761FFC826B427D31899 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft Manifest number: 1182 Signing time: Tue 20 Jan 2026 23:01:29 +0000 Manifest this update: Tue 20 Jan 2026 23:01:29 +0000 Manifest next update: Wed 21 Jan 2026 23:01:29 +0000 Files and hashes: 1: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl (hash: yHCF0ZNLJL9PWWFap/WGHDI2eCKRHafoIQrAFJy/hKU=) 2: QbADnR-7JONR9psZmp25EkZo4_M.roa (hash: 8N891Zzq6DPXhsamgFNwmwRuiKpJQ8ss9kc+k3yiq9U=) 3: kneTFHssdpRkfp917HvR9pp0knM.roa (hash: Q0Z0lTZO2s3Ki+igcl/rjlfo3o507lYeXHkCl1jp7DE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:dd:a4:46:40:33:a5:f7:61:ff:c8:26:b4:27:d3:18:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c Validity Not Before: Jan 20 23:01:29 2026 GMT Not After : Jan 21 23:01:29 2026 GMT Subject: CN=70cc528725158c5edd07be91e9559fd6810fcd7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:46:3e:65:86:d9:9b:34:27:f8:7f:f0:03:63: e3:39:c5:fb:ed:17:8e:86:32:18:5f:3b:e5:b3:aa: 29:8d:07:50:7e:3c:6a:e9:1b:85:47:27:c1:f4:10: f1:16:4c:37:ed:ef:e4:6a:a2:d0:7d:58:76:b2:0e: 57:ad:ac:ee:be:9c:8e:2c:96:9e:00:64:fc:71:b2: 22:92:63:03:ef:c4:ef:e7:5a:e9:45:47:ba:bf:8c: a2:69:b1:d9:14:18:f0:eb:4d:0c:34:df:e4:32:a8: 56:ad:14:34:40:3c:58:32:34:39:f8:e0:be:5c:24: d8:43:c3:f1:c3:a1:4c:cc:2b:4d:5a:3d:2e:b5:89: 16:27:ce:4f:1d:e7:d9:05:22:a8:1f:d5:37:3e:68: b2:b4:c9:af:47:d9:3b:37:60:83:5c:0e:de:96:7b: 61:27:d7:8a:4e:26:b4:5f:cd:8f:45:f4:f0:a5:b0: d6:5a:b7:c3:f7:d5:41:3c:72:45:04:46:91:4d:c0: 45:34:7d:17:1e:fe:38:cf:ec:33:c1:60:a2:4a:f7: fd:61:bf:b6:34:be:38:5a:62:e7:48:df:b1:bd:95: 5b:6d:a8:f9:35:cd:a6:76:8d:e9:bd:a3:cc:0c:1a: a8:f5:61:ff:d6:b5:56:4c:18:e3:c7:b3:b2:e7:ff: 61:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:CC:52:87:25:15:8C:5E:DD:07:BE:91:E9:55:9F:D6:81:0F:CD:7B X509v3 Authority Key Identifier: keyid:FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:6e:0d:45:18:9c:fd:f3:7f:21:7c:c9:d6:c5:bd:b9:53:18: 36:18:6e:a7:d1:5d:56:16:2d:72:8a:cd:09:c0:4b:97:75:57: 4a:1c:6c:19:17:b4:3a:b0:f7:26:71:6b:8d:4c:c1:b3:31:7b: 65:ad:53:97:13:7c:3e:8c:76:9e:fa:95:f5:e9:e5:0b:43:b5: 0f:c1:a0:ea:ee:23:43:23:28:e8:f4:e5:90:df:2b:09:93:69: 73:18:96:af:5f:74:82:36:36:ac:40:db:b8:03:40:16:5c:ce: 17:2d:07:eb:b5:18:bc:08:69:d4:c0:43:4c:c3:7e:c1:e4:f3: 8d:9f:d0:46:38:f2:4c:b8:ee:15:0e:cd:49:2e:07:73:ff:47: 3b:40:57:ae:13:f6:4b:6e:9e:de:32:38:f5:13:f8:53:d8:46: 1a:91:fa:39:40:fc:98:46:43:99:3e:40:db:9f:02:c3:82:6e: 5e:87:c1:bd:bf:7c:5c:d8:0a:2f:37:dc:46:73:83:94:02:1f: b9:2d:77:ae:72:ca:70:95:4e:aa:69:c7:61:19:2d:fe:d6:df: 32:6b:2a:d2:d3:f1:e3:0c:99:1b:76:df:07:ce:c5:e8:1e:d2: c3:93:b5:7b:ba:99:1f:9c:45:e9:66:a0:bf:c0:95:90:be:d1: 09:eb:f9:b6 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZvdpEZAM6X3Yf/IJrQn0xiZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiNzBkZTg0MGZkNmJmNGIwYWZkMTI3NGU0NGVmZDFiODY2 NTc2MmMwHhcNMjYwMTIwMjMwMTI5WhcNMjYwMTIxMjMwMTI5WjAzMTEwLwYDVQQD Eyg3MGNjNTI4NzI1MTU4YzVlZGQwN2JlOTFlOTU1OWZkNjgxMGZjZDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUY+ZYbZmzQn+H/wA2PjOcX77ReO hjIYXzvls6opjQdQfjxq6RuFRyfB9BDxFkw37e/kaqLQfVh2sg5XrazuvpyOLJae AGT8cbIikmMD78Tv51rpRUe6v4yiabHZFBjw600MNN/kMqhWrRQ0QDxYMjQ5+OC+ XCTYQ8Pxw6FMzCtNWj0utYkWJ85PHefZBSKoH9U3PmiytMmvR9k7N2CDXA7elnth J9eKTia0X82PRfTwpbDWWrfD99VBPHJFBEaRTcBFNH0XHv44z+wzwWCiSvf9Yb+2 NL44WmLnSN+xvZVbbaj5Nc2mdo3pvaPMDBqo9WH/1rVWTBjjx7Oy5/9hxwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFHDMUoclFYxe3Qe+kelVn9aBD817MB8GA1UdIwQY MBaAFPtw3oQP1r9LCv0SdORO/RuGZXYsMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS0zRGVoQV9XdjBzS19SSjA1RTc5RzRabGRpdy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEvOWEzZWFjLWY4NjItNDc4OS1hYzIx LWQ5NDQ0YTNkMGNlMC8xLzEtM0RlaEFfV3Ywc0tfUkowNUU3OUc0WmxkaXcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzRhLzlhM2VhYy1mODYyLTQ3ODktYWMyMS1kOTQ0NGEzZDBj ZTAvMS8xLTNEZWhBX1d2MHNLX1JKMDVFNzlHNFpsZGl3LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkW4N RRic/fN/IXzJ1sW9uVMYNhhup9FdVhYtcorNCcBLl3VXShxsGRe0OrD3JnFrjUzB szF7Za1TlxN8Pox2nvqV9enlC0O1D8Gg6u4jQyMo6PTlkN8rCZNpcxiWr190gjY2 rEDbuANAFlzOFy0H67UYvAhp1MBDTMN+weTzjZ/QRjjyTLjuFQ7NSS4Hc/9HO0BX rhP2S26e3jI49RP4U9hGGpH6OUD8mEZDmT5A258Cw4JuXofBvb98XNgKLzfcRnOD lAIfuS13rnLKcJVOqmnHYRkt/tbfMmsq0tPx4wyZG3bfB87F6B7Sw5O1e7qZH5xF 6Wagv8CVkL7RCev5tg== -----END CERTIFICATE-----Generated at Wed Jan 21 08:59:13 2026 by rpki-client