This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.mft File: 1-CA6DAS4H-F2b6Qb0xtztYgYisc.mft (raw, json) Hash identifier: HzAEO+8jPbJmCCstQmp/4bjitBblafmpOianQITW8+E= Subject key identifier: 5F:0C:0B:CC:A6:3F:D0:FE:5E:62:93:3F:27:E7:66:2B:D9:A7:19:76 Authority key identifier: F8:20:3A:0C:04:B8:1F:E1:76:6F:A4:1B:D3:1B:73:B5:88:18:8A:C7 Certificate issuer: /CN=f8203a0c04b81fe1766fa41bd31b73b588188ac7 Certificate serial: 019BD62167FAC1E35798A4C44D59BEACB1DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.mft Manifest number: 17E3 Signing time: Mon 19 Jan 2026 12:01:12 +0000 Manifest this update: Mon 19 Jan 2026 12:01:12 +0000 Manifest next update: Tue 20 Jan 2026 12:01:12 +0000 Files and hashes: 1: 1-CA6DAS4H-F2b6Qb0xtztYgYisc.crl (hash: 8yM8Y0//0R02JHXOF/iB1m2/0fvqtxne9jf6Db8tSs8=) 2: 9hu7fHrkkmjPI3bYCmJsPA9MZh0.roa (hash: bfX4JCPjltuMbEEveKKx9e6WHODIPOLYoUS1Ge5P3uc=) 3: dYmQEZ2cKrbLqpv7XFpbPABN57U.roa (hash: nqNg9aI2+q6RU2gg3GpJIRCOLjZYP8tLEyC2RX+ANpk=) 4: mGPoKnzxQ_AJz3TSNkGDDAdhE78.roa (hash: uRtR0RgLCvCTy0WRec1Dco4dbai9D9t4d5nexRt8H7s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.mft rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d6:21:67:fa:c1:e3:57:98:a4:c4:4d:59:be:ac:b1:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8203a0c04b81fe1766fa41bd31b73b588188ac7 Validity Not Before: Jan 19 12:01:12 2026 GMT Not After : Jan 20 12:01:12 2026 GMT Subject: CN=5f0c0bcca63fd0fe5e62933f27e7662bd9a71976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:89:da:d4:f2:1d:56:a2:c8:74:e2:e7:cf:5c: cc:b1:6f:2a:5b:32:ea:ba:de:29:87:13:2e:13:3e: c9:cd:4b:89:8f:a3:06:e7:82:07:dd:0c:f4:0b:3c: c5:4e:c8:23:e2:08:4d:dc:7a:d4:b3:28:42:9e:d0: 95:8f:52:cb:20:1a:10:07:9e:da:b0:6a:1b:3b:32: 5a:26:d1:0b:dd:48:0e:79:66:87:ec:7e:8f:ea:13: 62:9e:cc:07:be:21:84:72:19:74:d2:72:37:29:f6: e3:11:fc:20:ce:2c:5b:37:28:98:c7:0e:eb:be:67: c4:11:d7:b7:50:4c:91:75:d0:e1:31:c9:f8:c5:fe: fe:ec:b6:91:f1:60:1b:dd:9a:7d:37:23:4c:c6:ba: f7:07:32:52:46:a0:ef:52:d5:91:07:0b:45:7f:42: 75:c4:c6:a2:3b:7d:0a:96:ec:c4:00:52:c2:ed:e0: c9:d1:29:ab:57:01:62:99:44:94:48:31:27:c1:ee: 66:b9:1b:1c:8f:2d:ba:37:2e:76:4e:ec:bd:83:2a: 9a:fc:d5:fa:92:66:f0:25:4c:37:b6:00:88:01:0e: 38:e9:5b:6e:26:34:cb:fa:4a:07:51:2b:ea:3d:cb: b2:fa:c8:fb:13:7c:c0:25:ce:23:55:73:3e:13:59: 13:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:0C:0B:CC:A6:3F:D0:FE:5E:62:93:3F:27:E7:66:2B:D9:A7:19:76 X509v3 Authority Key Identifier: keyid:F8:20:3A:0C:04:B8:1F:E1:76:6F:A4:1B:D3:1B:73:B5:88:18:8A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:93:81:2e:1a:04:c6:a3:63:5d:76:28:01:14:18:06:d6:e3: a1:4f:ae:a0:8d:d9:fd:67:21:4e:0f:e4:66:cc:e2:45:37:da: ba:c2:23:07:b6:9b:76:53:3d:37:21:4a:1c:04:9e:e7:9d:30: c2:79:5c:80:eb:8a:34:c0:c9:b9:ef:b9:c1:12:02:b7:59:78: 15:e4:22:8c:d0:1e:16:70:81:7a:8a:6c:a7:b9:5a:06:04:70: d9:bb:f9:44:f3:74:b2:b2:51:01:f1:1a:11:c2:a4:fd:fe:b3: 83:68:4b:4a:09:8b:2d:16:08:a6:a2:ec:b2:f3:d7:10:32:a9: 84:fc:8b:13:24:8a:58:a8:8e:4d:95:2f:1c:28:45:25:98:d6: dd:76:41:62:33:70:db:52:78:11:55:2e:0c:20:50:f9:34:48: 0d:26:ae:77:c9:5a:a5:2f:a3:b7:3d:9a:5f:35:db:82:db:a0: 7e:57:d7:9b:ae:d0:a3:73:60:46:00:82:a3:c3:d1:37:7e:d0: fd:aa:66:f1:65:59:ab:da:3a:cf:d1:8e:46:80:f1:df:bd:42: 04:3f:2f:8f:89:a8:ed:5b:1b:d3:c1:ea:40:65:f6:65:13:4a: 48:cf:9a:b6:17:3d:6f:72:66:0d:a8:07:ea:8d:5b:92:70:4d: ed:95:34:06 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZvWIWf6weNXmKTETVm+rLHcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MjAzYTBjMDRiODFmZTE3NjZmYTQxYmQzMWI3M2I1ODgx ODhhYzcwHhcNMjYwMTE5MTIwMTEyWhcNMjYwMTIwMTIwMTEyWjAzMTEwLwYDVQQD Eyg1ZjBjMGJjY2E2M2ZkMGZlNWU2MjkzM2YyN2U3NjYyYmQ5YTcxOTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvona1PIdVqLIdOLnz1zMsW8qWzLq ut4phxMuEz7JzUuJj6MG54IH3Qz0CzzFTsgj4ghN3HrUsyhCntCVj1LLIBoQB57a sGobOzJaJtEL3UgOeWaH7H6P6hNinswHviGEchl00nI3KfbjEfwgzixbNyiYxw7r vmfEEde3UEyRddDhMcn4xf7+7LaR8WAb3Zp9NyNMxrr3BzJSRqDvUtWRBwtFf0J1 xMaiO30KluzEAFLC7eDJ0SmrVwFimUSUSDEnwe5muRscjy26Ny52Tuy9gyqa/NX6 kmbwJUw3tgCIAQ446VtuJjTL+koHUSvqPcuy+sj7E3zAJc4jVXM+E1kTQwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFF8MC8ymP9D+XmKTPyfnZivZpxl2MB8GA1UdIwQY MBaAFPggOgwEuB/hdm+kG9Mbc7WIGIrHMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1DQTZEQVM0SC1GMmI2UWIweHR6dFlnWWlzYy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvZTE0Y2EzLWRhOGUtNGI1OC04NjNh LTMzODk2MjBjMWJkNy8xLzEtQ0E2REFTNEgtRjJiNlFiMHh0enRZZ1lpc2MubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzViL2UxNGNhMy1kYThlLTRiNTgtODYzYS0zMzg5NjIwYzFi ZDcvMS8xLUNBNkRBUzRILUYyYjZRYjB4dHp0WWdZaXNjLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH5OB LhoExqNjXXYoARQYBtbjoU+uoI3Z/WchTg/kZsziRTfausIjB7abdlM9NyFKHASe 550wwnlcgOuKNMDJue+5wRICt1l4FeQijNAeFnCBeopsp7laBgRw2bv5RPN0srJR AfEaEcKk/f6zg2hLSgmLLRYIpqLssvPXEDKphPyLEySKWKiOTZUvHChFJZjW3XZB YjNw21J4EVUuDCBQ+TRIDSaud8lapS+jtz2aXzXbgtugflfXm67Qo3NgRgCCo8PR N37Q/apm8WVZq9o6z9GORoDx371CBD8vj4mo7Vsb08HqQGX2ZRNKSM+athc9b3Jm DagH6o1bknBN7ZU0Bg== -----END CERTIFICATE-----Generated at Mon Jan 19 18:28:55 2026 by rpki-client