This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft File: 1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft (raw, json) Hash identifier: ClbfGz9UAe6ptgOD0Xb2U7BgSRis8+W02hKB4opp+og= Subject key identifier: E2:69:E1:F5:1E:9B:0E:68:9A:59:D5:48:99:D1:19:F0:B0:32:76:A0 Authority key identifier: D6:74:C4:E1:B0:0C:E5:BF:B0:D9:6D:4C:21:EF:D0:58:D3:B5:CA:79 Certificate issuer: /CN=d674c4e1b00ce5bfb0d96d4c21efd058d3b5ca79 Certificate serial: 019BFE78A3C91CA42AEE95544486D3630C37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft Manifest number: 0B97 Signing time: Tue 27 Jan 2026 08:01:17 +0000 Manifest this update: Tue 27 Jan 2026 08:01:17 +0000 Manifest next update: Wed 28 Jan 2026 08:01:17 +0000 Files and hashes: 1: 1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl (hash: oGu+zp2oajh9ImwuRsVuvJ3jH/GiHV/ecVW349YLT6c=) 2: Xe_49qP_RwifxY8lxqIdGWlN9Yo.roa (hash: 0p7ZxsSara0zAMrBMjKosv4Q0grMmOgXjOvvhV5ruz8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 08:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:78:a3:c9:1c:a4:2a:ee:95:54:44:86:d3:63:0c:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d674c4e1b00ce5bfb0d96d4c21efd058d3b5ca79 Validity Not Before: Jan 27 08:01:17 2026 GMT Not After : Jan 28 08:01:17 2026 GMT Subject: CN=e269e1f51e9b0e689a59d54899d119f0b03276a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ee:59:fc:9a:8b:20:1b:1b:da:48:50:38:2b: a3:48:e0:ff:79:47:18:14:4c:c6:07:12:c7:86:c1: 10:b8:79:71:65:b1:0f:ea:6b:b4:84:89:9b:95:81: 0f:3f:5c:a7:dd:fa:73:f7:8c:e3:56:16:c6:f4:2e: 20:82:39:72:f9:3e:df:77:78:d9:e2:73:7e:d5:d4: 3c:7b:ed:07:aa:3e:0c:22:4d:ad:5b:62:59:18:21: 52:e8:d9:a8:35:1f:7e:7a:1f:5d:18:4b:92:50:44: 84:af:69:38:ae:13:43:a2:03:20:44:41:20:28:b4: 34:c4:68:9f:e7:63:de:6c:3c:4b:e5:e2:7d:63:df: b3:ec:4d:49:0c:c6:0b:c4:cd:58:b8:2f:26:7f:30: 42:76:eb:56:19:1a:86:4e:ed:57:31:16:3d:75:cf: f2:bb:e1:f9:8c:8f:44:5e:49:1f:39:9e:69:81:4a: 67:0f:23:74:59:1d:89:a3:1b:33:2b:da:39:dc:9c: 05:d5:2c:26:66:b4:57:70:66:34:c2:60:6c:a0:d3: 8c:24:22:df:98:3c:d8:86:93:4e:46:1e:b5:d1:5a: 02:09:05:5a:a1:f3:54:57:fb:84:a1:0b:2b:0d:59: d6:64:17:ad:16:32:56:28:61:45:15:59:b9:23:90: 0e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:69:E1:F5:1E:9B:0E:68:9A:59:D5:48:99:D1:19:F0:B0:32:76:A0 X509v3 Authority Key Identifier: keyid:D6:74:C4:E1:B0:0C:E5:BF:B0:D9:6D:4C:21:EF:D0:58:D3:B5:CA:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:a3:4f:8c:6e:03:99:5c:da:bb:d9:23:a7:8c:d5:5d:24:ab: 12:b7:6d:ec:e2:fd:9e:3b:44:12:65:46:2b:99:a3:d5:9f:12: bb:bc:e1:b3:7a:8b:9d:94:2a:bf:e6:c3:74:f2:a1:6d:1f:b3: 80:e6:4b:c4:ff:1c:ea:4a:4d:9b:31:b4:81:28:ec:52:e7:de: e9:a6:39:ed:ea:b1:3e:5d:9c:3d:f7:c6:f8:57:42:8c:a9:5b: 7a:86:f1:e9:4f:fb:9b:f7:0a:41:42:5f:27:ff:d1:71:e7:55: 22:19:c5:7f:6e:73:94:46:04:b4:99:ae:66:8d:c4:68:8d:70: 06:3e:f9:21:8f:5d:38:f6:8a:19:27:63:64:c2:9d:0d:20:91: 0c:89:d7:05:f7:19:94:3e:e5:2f:70:63:c8:3e:6b:71:74:b1: 0e:67:0c:3f:e1:8f:89:08:4d:4a:0b:19:36:15:f4:f7:d6:a5: 46:dc:51:19:95:2c:a5:64:5e:70:13:d6:a6:da:4a:eb:a7:f0: 81:86:e1:9d:68:46:3b:a3:90:28:ec:ff:16:da:43:e3:ca:59: 2f:63:d7:a3:d3:f3:72:bb:d6:7f:25:ef:8e:f3:fb:f2:65:69: 4d:79:9a:08:24:a4:1c:52:3d:1f:4e:4a:f8:a1:bc:ce:e8:c5: 74:32:57:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+eKPJHKQq7pVURIbTYww3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NzRjNGUxYjAwY2U1YmZiMGQ5NmQ0YzIxZWZkMDU4ZDNi NWNhNzkwHhcNMjYwMTI3MDgwMTE3WhcNMjYwMTI4MDgwMTE3WjAzMTEwLwYDVQQD EyhlMjY5ZTFmNTFlOWIwZTY4OWE1OWQ1NDg5OWQxMTlmMGIwMzI3NmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAje5Z/JqLIBsb2khQOCujSOD/eUcY FEzGBxLHhsEQuHlxZbEP6mu0hImblYEPP1yn3fpz94zjVhbG9C4ggjly+T7fd3jZ 4nN+1dQ8e+0Hqj4MIk2tW2JZGCFS6NmoNR9+eh9dGEuSUESEr2k4rhNDogMgREEg KLQ0xGif52PebDxL5eJ9Y9+z7E1JDMYLxM1YuC8mfzBCdutWGRqGTu1XMRY9dc/y u+H5jI9EXkkfOZ5pgUpnDyN0WR2JoxszK9o53JwF1SwmZrRXcGY0wmBsoNOMJCLf mDzYhpNORh610VoCCQVaofNUV/uEoQsrDVnWZBetFjJWKGFFFVm5I5AO2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOJp4fUemw5omlnVSJnRGfCwMnagMB8GA1UdIwQY MBaAFNZ0xOGwDOW/sNltTCHv0FjTtcp5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW5URTRiQU01Yi13MlcxTUllX1FXTk8xeW5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iYjIxZmMtYjI1Mi00YWIyLTk4Nzgt YmE1NTcyZTc3NGVkLzEvMW5URTRiQU01Yi13MlcxTUllX1FXTk8xeW5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9iYjIxZmMtYjI1Mi00YWIyLTk4NzgtYmE1NTcyZTc3NGVk LzEvMW5URTRiQU01Yi13MlcxTUllX1FXTk8xeW5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL6NPjG4D mVzau9kjp4zVXSSrErdt7OL9njtEEmVGK5mj1Z8Su7zhs3qLnZQqv+bDdPKhbR+z gOZLxP8c6kpNmzG0gSjsUufe6aY57eqxPl2cPffG+FdCjKlbeobx6U/7m/cKQUJf J//RcedVIhnFf25zlEYEtJmuZo3EaI1wBj75IY9dOPaKGSdjZMKdDSCRDInXBfcZ lD7lL3BjyD5rcXSxDmcMP+GPiQhNSgsZNhX099alRtxRGZUspWRecBPWptpK66fw gYbhnWhGO6OQKOz/FtpD48pZL2PXo9PzcrvWfyXvjvP78mVpTXmaCCSkHFI9H05K +KG8zujFdDJXmg== -----END CERTIFICATE-----Generated at Tue Jan 27 12:49:02 2026 by rpki-client