This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft File: 1COlvl4hykYHMq5I84Wj6hUKK-E.mft (raw, json) Hash identifier: NP2RFtDzGHaDOmpsL2ABCv9nuiI+MIl9ZpeG9TKI6XI= Subject key identifier: F9:1E:C4:CB:D3:BD:8B:62:9D:9C:C8:E0:9B:C6:16:F2:15:FB:04:F4 Authority key identifier: D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1 Certificate issuer: /CN=d423a5be5e21ca460732ae48f385a3ea150a2be1 Certificate serial: 019BCFB1F9CB3D84B4E4ACD824BCD87580BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft Manifest number: 0AA2 Signing time: Sun 18 Jan 2026 06:01:45 +0000 Manifest this update: Sun 18 Jan 2026 06:01:45 +0000 Manifest next update: Mon 19 Jan 2026 06:01:45 +0000 Files and hashes: 1: 1COlvl4hykYHMq5I84Wj6hUKK-E.crl (hash: EONCXjl50ChMnW4hWJ60beQmQCE7niomcDlouPekdIs=) 2: Ac8C988WG2rKoPAyM0PJx2rNaoE.roa (hash: 89LOHLJ7QAy8vGNQbBqFUdTxIH6fXbqoySpOcf8nHiY=) 3: IHsIqdWKW3oXqrv8CC_-_K3HeCM.roa (hash: dZCFigPRpz1prER5FdjelyGWWX2YW17+YhrDgGzAMCw=) 4: URkF_3wWv4caQ7gSHuTsb7r6MGI.roa (hash: Gjnz59P638W/IUVQMIM+Nm7HP3jZwW2uLN6LQ+PZObA=) 5: hnX6AgrOaoGB1pS6d2IohDyU9YY.roa (hash: TyBpxjx7ARYI2/qA9SgTNdxkKgP/znTGEAT9++KH4mc=) 6: vAK4daozNSO59AKfeMnlfBD0uBI.roa (hash: BWOG9qwyAhGR7urMCtstbKhY8qOFr3C+wcw1uSuJqsw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:cf:b1:f9:cb:3d:84:b4:e4:ac:d8:24:bc:d8:75:80:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d423a5be5e21ca460732ae48f385a3ea150a2be1 Validity Not Before: Jan 18 06:01:45 2026 GMT Not After : Jan 19 06:01:45 2026 GMT Subject: CN=f91ec4cbd3bd8b629d9cc8e09bc616f215fb04f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b0:7f:d6:9c:61:88:da:3f:70:e0:5e:e2:41: 85:e5:7b:26:d0:3b:76:6f:65:e8:79:61:7f:55:9a: 8f:53:99:42:62:38:cf:36:b2:65:37:43:c4:79:b4: d2:b9:78:18:83:ab:47:ac:9d:5b:05:e3:4a:07:2c: f1:b8:9c:c2:c6:21:81:74:26:72:39:92:b6:7d:ff: 60:ec:6b:59:07:07:0f:7c:1e:51:52:13:8c:ff:9f: 2c:e0:2e:1d:ff:7f:20:1c:1b:2a:fc:3b:24:3d:a6: d7:8a:48:ae:9d:23:de:7f:6d:d5:f6:17:be:da:5e: f4:a8:cb:86:66:15:02:f0:41:bc:86:8a:a4:30:e3: 08:e4:8d:31:87:5f:bc:5e:f4:aa:51:4b:c9:8a:61: 55:4b:60:14:ef:72:d8:89:46:fc:0f:aa:a3:9d:c8: 92:15:23:80:4a:56:4d:ba:a8:0c:49:ae:e7:e8:aa: 1f:5f:3f:b2:af:72:a5:c1:f4:ed:75:d3:31:a5:c4: 99:72:fe:b5:51:26:02:b9:85:67:00:db:c5:5b:61: 3c:77:26:2c:15:8e:b3:ba:0f:dd:83:67:2f:4a:be: c0:c1:a3:2b:7b:d1:78:db:78:46:fe:27:9e:3a:31: aa:70:b5:de:f7:8f:86:16:7b:9f:24:4a:25:93:d2: 04:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:1E:C4:CB:D3:BD:8B:62:9D:9C:C8:E0:9B:C6:16:F2:15:FB:04:F4 X509v3 Authority Key Identifier: keyid:D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:f2:7b:93:67:e4:d3:ea:06:69:40:c1:f7:05:06:ee:1e:0c: 5b:f2:19:75:59:c0:03:40:82:db:10:e8:da:4f:24:7c:39:89: 8a:42:11:9d:56:0d:b9:2f:12:bb:41:3f:ba:64:05:c2:5d:dc: 34:90:51:1b:1f:70:d5:50:98:27:de:13:5f:de:7c:e9:aa:a1: fc:3b:3e:56:92:c7:bc:13:27:8e:31:01:ed:1f:d9:95:d1:5a: 68:53:d3:2e:4a:0b:95:6a:e0:d6:b8:6f:bb:09:27:64:ac:e4: 0d:c6:9d:4c:aa:f1:da:89:73:dc:cd:07:d2:ea:e4:21:fd:bc: a4:01:f8:7c:fe:cb:6b:d0:0c:51:ab:68:8c:9b:3a:f9:0e:aa: d5:da:b4:ed:00:42:2f:fc:6b:bc:02:5c:68:2f:42:82:22:5b: 5a:cf:19:79:a7:58:a8:6f:57:12:e7:b3:8b:0f:c7:6f:74:1c: 01:36:0f:d8:d7:3f:55:aa:f9:8e:e3:63:48:4f:fc:80:90:c4: 02:12:cb:c2:38:60:23:ad:56:fa:6f:ec:bc:3d:a2:61:e2:f9: 0d:e7:11:44:b7:c0:b9:e5:6b:90:a6:2e:34:4b:81:e5:c5:b4: 1c:62:1b:d3:99:ce:23:65:e0:2c:5f:b6:31:63:d5:53:d8:c3: 0d:94:dd:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvPsfnLPYS05KzYJLzYdYC6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MjNhNWJlNWUyMWNhNDYwNzMyYWU0OGYzODVhM2VhMTUw YTJiZTEwHhcNMjYwMTE4MDYwMTQ1WhcNMjYwMTE5MDYwMTQ1WjAzMTEwLwYDVQQD EyhmOTFlYzRjYmQzYmQ4YjYyOWQ5Y2M4ZTA5YmM2MTZmMjE1ZmIwNGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbB/1pxhiNo/cOBe4kGF5Xsm0Dt2 b2XoeWF/VZqPU5lCYjjPNrJlN0PEebTSuXgYg6tHrJ1bBeNKByzxuJzCxiGBdCZy OZK2ff9g7GtZBwcPfB5RUhOM/58s4C4d/38gHBsq/DskPabXikiunSPef23V9he+ 2l70qMuGZhUC8EG8hoqkMOMI5I0xh1+8XvSqUUvJimFVS2AU73LYiUb8D6qjnciS FSOASlZNuqgMSa7n6KofXz+yr3KlwfTtddMxpcSZcv61USYCuYVnANvFW2E8dyYs FY6zug/dg2cvSr7AwaMre9F423hG/ieeOjGqcLXe94+GFnufJEolk9IEOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPkexMvTvYtinZzI4JvGFvIV+wT0MB8GA1UdIwQY MBaAFNQjpb5eIcpGBzKuSPOFo+oVCivhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUNPbHZsNGh5a1lITXE1STg0V2o2aFVLSy1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9hM2UzYmItZmQ5Zi00MDQyLWIyY2It ZDk0NzY2NjU3NTVhLzEvMUNPbHZsNGh5a1lITXE1STg0V2o2aFVLSy1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9hM2UzYmItZmQ5Zi00MDQyLWIyY2ItZDk0NzY2NjU3NTVh LzEvMUNPbHZsNGh5a1lITXE1STg0V2o2aFVLSy1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUPJ7k2fk 0+oGaUDB9wUG7h4MW/IZdVnAA0CC2xDo2k8kfDmJikIRnVYNuS8Su0E/umQFwl3c NJBRGx9w1VCYJ94TX9586aqh/Ds+VpLHvBMnjjEB7R/ZldFaaFPTLkoLlWrg1rhv uwknZKzkDcadTKrx2olz3M0H0urkIf28pAH4fP7La9AMUatojJs6+Q6q1dq07QBC L/xrvAJcaC9CgiJbWs8ZeadYqG9XEueziw/Hb3QcATYP2Nc/Var5juNjSE/8gJDE AhLLwjhgI61W+m/svD2iYeL5DecRRLfAueVrkKYuNEuB5cW0HGIb05nOI2XgLF+2 MWPVU9jDDZTd5w== -----END CERTIFICATE-----Generated at Sun Jan 18 09:53:25 2026 by rpki-client