This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft File: 01kqrEiVItXbGP1jkeA1qXeOo7E.mft (raw, json) Hash identifier: FkTplwDagJFfLdTNlYW6AVgFUBRu6egtBOVPotpUo9U= Subject key identifier: 19:E7:AE:B3:BF:3C:25:DC:35:E4:AA:B8:F9:95:8A:64:96:ED:67:57 Authority key identifier: D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1 Certificate issuer: /CN=d3592aac489522d5db18fd6391e035a9778ea3b1 Certificate serial: 019BFFC1D9A37D99BC5EC95E54806729072A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft Manifest number: 1533 Signing time: Tue 27 Jan 2026 14:00:52 +0000 Manifest this update: Tue 27 Jan 2026 14:00:52 +0000 Manifest next update: Wed 28 Jan 2026 14:00:52 +0000 Files and hashes: 1: 01kqrEiVItXbGP1jkeA1qXeOo7E.crl (hash: WJ5r8cr1J+5hfjlN0cvxq2gAJINrcu5BGvTdjHc/wOI=) 2: HXOFYv-072FsOVg35mkckEgbyio.roa (hash: rr27UIRFNz1qEQQUakpKnuloBOEhVERRXmaajk2GDbc=) 3: iCcCouY1S-nB4LsSEbuN21LdER8.roa (hash: b4tzlX7SLxO9i1S2FBRMsymp/F3ncDEjzvJear130vE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 14:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ff:c1:d9:a3:7d:99:bc:5e:c9:5e:54:80:67:29:07:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3592aac489522d5db18fd6391e035a9778ea3b1 Validity Not Before: Jan 27 14:00:52 2026 GMT Not After : Jan 28 14:00:52 2026 GMT Subject: CN=19e7aeb3bf3c25dc35e4aab8f9958a6496ed6757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:80:a4:4b:0b:b0:68:a2:4d:e7:b9:59:ca:40: 58:85:dc:ab:23:eb:d9:d3:ab:16:82:26:c2:8f:b5: 1e:08:25:d6:6d:18:ec:b1:3a:4f:37:cc:d0:be:c8: 85:eb:89:93:a1:d6:a8:49:d4:05:a3:1e:60:d8:01: 2e:7f:bf:5b:39:56:8e:11:d9:f6:d1:37:69:ce:de: 0b:7a:00:c2:5a:03:a9:1c:0f:d6:05:87:89:fb:19: d7:5d:c6:ba:74:7c:f0:b4:95:ec:21:06:8c:f5:53: 6c:0b:ee:8f:99:34:7c:a5:2e:af:4e:dd:90:f5:32: 09:a6:67:f8:ca:ce:f3:f6:ee:a1:0f:7b:e1:e3:c1: 18:48:73:43:5f:d7:62:9a:e6:a2:8f:aa:91:75:7d: f1:83:b7:08:31:d9:3d:9c:25:62:34:47:61:b3:48: a3:9b:b5:b5:ee:e9:2f:ac:77:86:fc:2e:6a:ae:ca: be:06:82:8a:bd:b6:d7:5b:3e:38:fc:4c:e4:c8:d9: a2:8f:c7:f8:0d:d2:70:a2:33:93:a8:00:36:68:53: 20:07:58:5c:35:7f:27:93:57:8d:5d:3e:7c:60:71: 40:8e:a6:b4:0d:58:e4:81:92:d8:b9:a2:3c:4d:8f: 72:e9:1b:66:9d:a4:02:9e:2a:90:e3:97:bc:2f:ca: f5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:E7:AE:B3:BF:3C:25:DC:35:E4:AA:B8:F9:95:8A:64:96:ED:67:57 X509v3 Authority Key Identifier: keyid:D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:6b:37:93:55:74:d5:0e:71:87:89:24:26:12:9e:f4:bc:11: dd:f4:db:f6:21:5a:ce:54:09:37:11:57:e5:d1:c0:95:d2:a1: 28:e4:7c:13:12:08:74:09:be:72:35:fc:ea:64:7f:24:e3:19: f9:54:0b:86:aa:20:74:1d:1c:dc:c0:b0:54:b7:4b:f2:ab:ad: f4:e9:05:11:cb:7d:bf:01:9d:f3:6a:9c:91:c9:42:91:00:65: f5:ed:43:63:81:01:b9:38:33:88:fd:ee:84:f1:0d:6f:50:a6: 1f:3f:ae:bf:3c:45:82:b6:96:53:8e:73:6d:63:3b:6c:d2:f7: cc:2a:bd:30:a6:e6:7e:3b:9a:b3:90:36:ff:d8:ed:b3:4f:9f: a9:90:e3:d3:db:b8:d1:ff:a4:2e:63:de:f2:97:42:ec:cb:7c: 0e:a9:7a:c0:f3:ee:88:20:48:78:ea:39:37:bd:ea:03:1c:77: aa:02:4e:40:42:95:da:8b:ec:e9:ef:dd:7d:fa:68:1b:7c:4c: 7a:d8:73:8f:b8:a6:b2:b0:d8:da:25:45:56:d0:50:e7:6e:4d: a6:c0:e3:d0:07:cf:ac:75:1f:30:74:82:b1:d8:9a:5c:1a:aa: dc:d0:c4:54:e9:69:da:50:33:a2:53:0e:2f:bf:c1:fe:11:02: 04:38:ae:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv/wdmjfZm8XsleVIBnKQcqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNTkyYWFjNDg5NTIyZDVkYjE4ZmQ2MzkxZTAzNWE5Nzc4 ZWEzYjEwHhcNMjYwMTI3MTQwMDUyWhcNMjYwMTI4MTQwMDUyWjAzMTEwLwYDVQQD EygxOWU3YWViM2JmM2MyNWRjMzVlNGFhYjhmOTk1OGE2NDk2ZWQ2NzU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4CkSwuwaKJN57lZykBYhdyrI+vZ 06sWgibCj7UeCCXWbRjssTpPN8zQvsiF64mTodaoSdQFox5g2AEuf79bOVaOEdn2 0Tdpzt4LegDCWgOpHA/WBYeJ+xnXXca6dHzwtJXsIQaM9VNsC+6PmTR8pS6vTt2Q 9TIJpmf4ys7z9u6hD3vh48EYSHNDX9dimuaij6qRdX3xg7cIMdk9nCViNEdhs0ij m7W17ukvrHeG/C5qrsq+BoKKvbbXWz44/EzkyNmij8f4DdJwojOTqAA2aFMgB1hc NX8nk1eNXT58YHFAjqa0DVjkgZLYuaI8TY9y6RtmnaQCniqQ45e8L8r1xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBnnrrO/PCXcNeSquPmVimSW7WdXMB8GA1UdIwQY MBaAFNNZKqxIlSLV2xj9Y5HgNal3jqOxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDFrcXJFaVZJdFhiR1AxamtlQTFxWGVPbzdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YjEzZmUtZjYyZi00ZTkzLTgyMWUt ZTMzYWUxMDZiNTRkLzEvMDFrcXJFaVZJdFhiR1AxamtlQTFxWGVPbzdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83YjEzZmUtZjYyZi00ZTkzLTgyMWUtZTMzYWUxMDZiNTRk LzEvMDFrcXJFaVZJdFhiR1AxamtlQTFxWGVPbzdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQms3k1V0 1Q5xh4kkJhKe9LwR3fTb9iFazlQJNxFX5dHAldKhKOR8ExIIdAm+cjX86mR/JOMZ +VQLhqogdB0c3MCwVLdL8qut9OkFEct9vwGd82qckclCkQBl9e1DY4EBuTgziP3u hPENb1CmHz+uvzxFgraWU45zbWM7bNL3zCq9MKbmfjuas5A2/9jts0+fqZDj09u4 0f+kLmPe8pdC7Mt8Dql6wPPuiCBIeOo5N73qAxx3qgJOQEKV2ovs6e/dffpoG3xM ethzj7imsrDY2iVFVtBQ525NpsDj0AfPrHUfMHSCsdiaXBqq3NDEVOlp2lAzolMO L7/B/hECBDiuLQ== -----END CERTIFICATE-----Generated at Tue Jan 27 21:33:00 2026 by rpki-client