This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft File: 1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft (raw, json) Hash identifier: KPzjAsl//LTV8NyoMzYDhv24XYHdz3/5++ypVdaQRyY= Subject key identifier: 98:A9:F5:B1:FE:98:E2:55:68:48:E8:D8:B0:6A:EB:D9:5E:E0:B3:A5 Authority key identifier: D7:21:FD:9D:27:8B:64:58:E9:BF:1C:CE:BA:2C:31:A1:9F:B9:6C:FD Certificate issuer: /CN=d721fd9d278b6458e9bf1cceba2c31a19fb96cfd Certificate serial: 019BDA35C717A065FD74613B04F025444BF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft Manifest number: 083F Signing time: Tue 20 Jan 2026 07:01:55 +0000 Manifest this update: Tue 20 Jan 2026 07:01:55 +0000 Manifest next update: Wed 21 Jan 2026 07:01:55 +0000 Files and hashes: 1: 1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl (hash: Cx43DICyJgd42Rny51OJ7Rt58avPyTyESuyh3lZdAeY=) 2: Cia7XDUlVcQjhopxxsVFSxmf98Q.roa (hash: Rgit10JBl/HzmYiRu+Za82DqspSX6JZYYxG73T1zZ9k=) 3: KW64rtt74S1zhjsRECqiGcQpL7Q.roa (hash: R6F/nrfUdQaOnAWUHDehNGl6m7vmiH2zvZoykDnOykg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:da:35:c7:17:a0:65:fd:74:61:3b:04:f0:25:44:4b:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d721fd9d278b6458e9bf1cceba2c31a19fb96cfd Validity Not Before: Jan 20 07:01:55 2026 GMT Not After : Jan 21 07:01:55 2026 GMT Subject: CN=98a9f5b1fe98e2556848e8d8b06aebd95ee0b3a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b6:b6:26:c8:51:73:7d:33:03:b1:9a:87:0f: 9f:97:f7:bf:b8:d7:68:7a:a7:4c:c3:4f:ae:a8:17: 1e:2e:cb:e4:0a:a4:6e:2d:ef:34:8f:4c:e6:2f:54: 74:2e:a8:e4:3a:e3:2c:57:8f:51:6b:21:03:26:57: dc:b1:1a:1a:57:f1:eb:bb:90:44:2c:8e:97:f9:18: 6d:09:80:72:a3:c3:08:69:41:66:67:7e:e6:30:ec: fc:ac:df:3d:27:33:f3:86:01:21:f2:22:d8:51:a2: cb:01:45:0f:a0:06:15:af:26:28:af:c3:6d:17:b5: 4b:7b:61:79:0d:f1:f1:f9:f2:3d:31:48:0e:1f:c0: 18:16:bb:d3:10:8a:e3:24:fa:1f:1c:d0:c7:85:37: 62:01:d4:5c:15:ec:0a:1e:31:f1:95:14:1c:c5:6b: bb:5e:f1:df:fe:b8:0f:21:39:de:7b:c2:2f:a8:42: d4:9f:9c:e8:ab:b7:49:5a:25:d2:ba:ea:da:73:8f: 1a:db:fb:56:82:90:62:07:3a:0d:32:22:87:14:41: c5:60:7c:aa:0c:cb:fa:60:eb:63:4d:b4:7c:7e:7c: 38:f6:91:d7:06:3c:00:c3:1f:82:11:e2:8c:e8:6d: 94:cc:77:cf:85:50:18:29:ab:dc:7d:44:c1:d7:89: 48:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:A9:F5:B1:FE:98:E2:55:68:48:E8:D8:B0:6A:EB:D9:5E:E0:B3:A5 X509v3 Authority Key Identifier: keyid:D7:21:FD:9D:27:8B:64:58:E9:BF:1C:CE:BA:2C:31:A1:9F:B9:6C:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:1c:1b:4b:96:99:51:8c:d8:92:a5:42:65:f9:09:1e:69:b4: 66:42:39:2f:d4:82:ab:ce:3a:4d:19:d0:a6:70:9b:f5:4c:47: da:12:a5:3b:60:3a:50:4b:5c:5b:69:30:90:8c:b6:a2:93:b9: 3f:fe:f3:8c:5e:ca:8f:b7:44:0e:57:bc:9a:80:db:49:1c:bd: 6c:fe:8e:15:34:cb:1d:f1:61:ca:81:f3:ba:6a:a6:74:9b:77: 66:4f:e1:60:3e:77:3c:9d:b4:a1:36:55:8b:84:83:68:9a:ef: 3b:f0:32:cf:a2:b5:cd:46:43:ea:ba:1d:77:4e:7d:d9:f5:61: 2a:f3:a3:c8:62:9b:34:94:a0:31:2d:26:f1:a6:e1:3f:74:81: db:c2:0b:5d:0b:fa:2f:f8:b7:ca:cb:c0:53:1c:1b:ab:e7:c6: e9:5b:f8:0c:e4:7f:75:be:24:7f:1d:d2:b7:dc:e6:af:d9:49: 7d:7d:19:64:2a:5f:fb:e2:de:fc:a3:e9:34:0b:d8:d1:d7:7a: 19:e7:36:65:83:54:66:31:4e:c4:27:cc:54:66:80:9d:d7:f5: 83:c0:22:8c:a3:b2:f9:3f:d6:6d:32:bc:b5:07:8b:5b:5a:28: 89:9e:8a:22:92:77:f7:ca:7e:10:be:3a:93:63:0a:84:f8:18: 16:8a:84:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvaNccXoGX9dGE7BPAlREvwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MjFmZDlkMjc4YjY0NThlOWJmMWNjZWJhMmMzMWExOWZi OTZjZmQwHhcNMjYwMTIwMDcwMTU1WhcNMjYwMTIxMDcwMTU1WjAzMTEwLwYDVQQD Eyg5OGE5ZjViMWZlOThlMjU1Njg0OGU4ZDhiMDZhZWJkOTVlZTBiM2E1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLa2JshRc30zA7Gahw+fl/e/uNdo eqdMw0+uqBceLsvkCqRuLe80j0zmL1R0LqjkOuMsV49RayEDJlfcsRoaV/Hru5BE LI6X+RhtCYByo8MIaUFmZ37mMOz8rN89JzPzhgEh8iLYUaLLAUUPoAYVryYor8Nt F7VLe2F5DfHx+fI9MUgOH8AYFrvTEIrjJPofHNDHhTdiAdRcFewKHjHxlRQcxWu7 XvHf/rgPITnee8IvqELUn5zoq7dJWiXSuurac48a2/tWgpBiBzoNMiKHFEHFYHyq DMv6YOtjTbR8fnw49pHXBjwAwx+CEeKM6G2UzHfPhVAYKavcfUTB14lIrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJip9bH+mOJVaEjo2LBq69le4LOlMB8GA1UdIwQY MBaAFNch/Z0ni2RY6b8czrosMaGfuWz9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXlIOW5TZUxaRmpwdnh6T3Vpd3hvWi01YlAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi82ZDc1MmEtNTljNS00N2EwLWIzY2Qt OGY5NzliNjk5NDNmLzEvMXlIOW5TZUxaRmpwdnh6T3Vpd3hvWi01YlAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi82ZDc1MmEtNTljNS00N2EwLWIzY2QtOGY5NzliNjk5NDNm LzEvMXlIOW5TZUxaRmpwdnh6T3Vpd3hvWi01YlAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGhwbS5aZ UYzYkqVCZfkJHmm0ZkI5L9SCq846TRnQpnCb9UxH2hKlO2A6UEtcW2kwkIy2opO5 P/7zjF7Kj7dEDle8moDbSRy9bP6OFTTLHfFhyoHzumqmdJt3Zk/hYD53PJ20oTZV i4SDaJrvO/Ayz6K1zUZD6rodd0592fVhKvOjyGKbNJSgMS0m8abhP3SB28ILXQv6 L/i3ysvAUxwbq+fG6Vv4DOR/db4kfx3St9zmr9lJfX0ZZCpf++Le/KPpNAvY0dd6 Gec2ZYNUZjFOxCfMVGaAndf1g8AijKOy+T/WbTK8tQeLW1ooiZ6KIpJ398p+EL46 k2MKhPgYFoqEJA== -----END CERTIFICATE-----Generated at Tue Jan 20 09:27:10 2026 by rpki-client