This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft File: 1fJk44BaPRBFNzV6FP-SasApWZw.mft (raw, json) Hash identifier: nXTyywCYd+Aq5xtG1C9HgNmSu31MaUjjLO91kZmM6Tc= Subject key identifier: CB:67:01:19:11:98:2A:56:7B:0E:EB:EC:70:1A:B1:40:35:57:8F:DB Authority key identifier: D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C Certificate issuer: /CN=d5f264e3805a3d104537357a14ff926ac029599c Certificate serial: 019C1E033B93BF903089AC9B77D713832880 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft Manifest number: 07DE Signing time: Mon 02 Feb 2026 11:00:54 +0000 Manifest this update: Mon 02 Feb 2026 11:00:54 +0000 Manifest next update: Tue 03 Feb 2026 11:00:54 +0000 Files and hashes: 1: 1fJk44BaPRBFNzV6FP-SasApWZw.crl (hash: PIFhqMqX/2hDG12nBAh298FfftcJO8i4NAqbjZw6zdc=) 2: rMIMTjbHaNV7xR9gPtw0A_pkuLU.roa (hash: NFH0+DidyU00k9B3v8wVAxHBrFD7dy/UWv2YYeeqFAo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 11:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1e:03:3b:93:bf:90:30:89:ac:9b:77:d7:13:83:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5f264e3805a3d104537357a14ff926ac029599c Validity Not Before: Feb 2 11:00:54 2026 GMT Not After : Feb 3 11:00:54 2026 GMT Subject: CN=cb67011911982a567b0eebec701ab14035578fdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:65:4c:98:2a:df:b4:09:41:13:39:11:95:01: ec:d8:c7:b0:8d:56:1e:cd:e4:b0:ee:8e:fb:76:c2: 91:6e:93:d9:0f:17:a6:cf:c0:81:97:4e:bf:26:79: cb:04:eb:8f:e6:a1:97:d9:b7:4c:9f:b5:3a:8e:88: 1f:74:10:3c:cf:b0:ae:dd:ae:c1:90:3c:cc:b2:df: 2b:f2:4f:63:46:69:89:e1:43:22:16:64:06:fa:14: 6a:2c:40:52:b5:e1:62:1d:c4:09:22:22:ec:b3:bc: 7a:78:e9:31:87:e9:fa:75:2c:04:89:4f:4f:59:0e: de:a3:3a:8d:90:7a:ab:09:8f:fa:d2:d4:e6:b5:e8: 30:82:87:d5:82:40:94:e1:5f:dd:ba:6d:68:ea:90: 0f:46:6d:1d:f1:4f:d0:3d:95:f5:b7:10:54:cc:07: ec:e3:a0:b0:b8:67:3e:d6:fb:28:af:20:61:e0:3d: 08:90:f3:3c:85:dd:75:05:7f:05:0c:ef:41:0d:fa: b7:4c:c0:1c:36:23:23:ac:22:22:6b:7b:96:f2:8d: ab:a8:ee:3b:f6:9c:32:5e:3d:14:9e:ae:84:1e:05: 29:fa:96:e1:43:37:fe:7d:ec:44:7f:43:bb:74:4e: a5:a8:41:5a:53:0a:6e:ca:cf:e0:e0:a2:58:18:f0: 21:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:67:01:19:11:98:2A:56:7B:0E:EB:EC:70:1A:B1:40:35:57:8F:DB X509v3 Authority Key Identifier: keyid:D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:21:7e:29:79:77:bc:2e:99:cf:a9:7b:8f:92:23:42:62:93: ca:4a:26:d8:c4:22:33:fe:0c:78:25:56:ec:10:e4:14:3b:5f: 53:c4:54:bb:80:8f:5d:de:05:db:77:d9:4d:48:1b:6b:3a:cc: 53:83:59:ee:21:c8:b0:2d:6f:a9:cd:49:c3:55:67:42:2a:2c: 40:b0:61:dc:90:91:be:34:98:b0:23:4e:9e:99:e6:b8:9b:ea: 63:8d:ce:b8:7e:30:ab:3d:b3:b2:8e:9d:6b:38:f4:84:2e:2e: a0:80:5b:79:e1:11:b2:05:15:5d:d5:bb:21:8f:af:8b:6d:aa: 40:bd:b9:cc:51:a3:7d:63:89:05:e8:40:b4:50:a7:11:86:2c: 63:8c:05:51:ae:a2:ec:92:f4:db:d1:2e:92:fe:9a:f5:17:30: 49:44:31:c8:40:63:ed:b1:8e:f6:3e:9d:1d:fe:76:d6:bc:35: 61:f4:c3:99:6d:f0:9c:f9:56:41:03:0f:67:e9:cc:a5:f6:99: 60:f0:6e:fa:39:dd:fc:aa:ad:49:7d:53:25:e5:b8:54:a6:2a: 7f:df:0d:e2:3b:33:a5:62:08:e5:64:fe:e5:29:ee:3d:e3:b6: 9a:5e:c7:04:b7:bb:b7:04:b6:fa:47:01:ae:06:58:ed:87:3b: 97:44:29:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZweAzuTv5Awiaybd9cTgyiAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZjI2NGUzODA1YTNkMTA0NTM3MzU3YTE0ZmY5MjZhYzAy OTU5OWMwHhcNMjYwMjAyMTEwMDU0WhcNMjYwMjAzMTEwMDU0WjAzMTEwLwYDVQQD EyhjYjY3MDExOTExOTgyYTU2N2IwZWViZWM3MDFhYjE0MDM1NTc4ZmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2VMmCrftAlBEzkRlQHs2MewjVYe zeSw7o77dsKRbpPZDxemz8CBl06/JnnLBOuP5qGX2bdMn7U6jogfdBA8z7Cu3a7B kDzMst8r8k9jRmmJ4UMiFmQG+hRqLEBSteFiHcQJIiLss7x6eOkxh+n6dSwEiU9P WQ7eozqNkHqrCY/60tTmtegwgofVgkCU4V/dum1o6pAPRm0d8U/QPZX1txBUzAfs 46CwuGc+1vsoryBh4D0IkPM8hd11BX8FDO9BDfq3TMAcNiMjrCIia3uW8o2rqO47 9pwyXj0Unq6EHgUp+pbhQzf+fexEf0O7dE6lqEFaUwpuys/g4KJYGPAhnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMtnARkRmCpWew7r7HAasUA1V4/bMB8GA1UdIwQY MBaAFNXyZOOAWj0QRTc1ehT/kmrAKVmcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWZKazQ0QmFQUkJGTnpWNkZQLVNhc0FwV1p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81ZDYzMmEtZTQ1My00MmE1LTgwNWYt M2RjZWNiY2EzNzAyLzEvMWZKazQ0QmFQUkJGTnpWNkZQLVNhc0FwV1p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC81ZDYzMmEtZTQ1My00MmE1LTgwNWYtM2RjZWNiY2EzNzAy LzEvMWZKazQ0QmFQUkJGTnpWNkZQLVNhc0FwV1p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsiF+KXl3 vC6Zz6l7j5IjQmKTykom2MQiM/4MeCVW7BDkFDtfU8RUu4CPXd4F23fZTUgbazrM U4NZ7iHIsC1vqc1Jw1VnQiosQLBh3JCRvjSYsCNOnpnmuJvqY43OuH4wqz2zso6d azj0hC4uoIBbeeERsgUVXdW7IY+vi22qQL25zFGjfWOJBehAtFCnEYYsY4wFUa6i 7JL029Eukv6a9RcwSUQxyEBj7bGO9j6dHf521rw1YfTDmW3wnPlWQQMPZ+nMpfaZ YPBu+jnd/KqtSX1TJeW4VKYqf98N4jszpWII5WT+5SnuPeO2ml7HBLe7twS2+kcB rgZY7Yc7l0Qp0g== -----END CERTIFICATE-----Generated at Mon Feb 2 17:15:14 2026 by rpki-client