This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft File: 1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft (raw, json) Hash identifier: EWQpbVZvaxcoLp/t7LJjrN6NO8uhNNTeZqotA+GnW8M= Subject key identifier: F7:2E:EF:2A:C5:4A:06:A6:D3:48:6F:92:55:E9:D8:CB:30:73:F1:7D Authority key identifier: FA:70:B4:2D:7A:F6:AD:78:22:2B:30:F0:5F:2B:79:13:F8:06:35:70 Certificate issuer: /CN=fa70b42d7af6ad78222b30f05f2b7913f8063570 Certificate serial: 019BFBE4D0F7C563995B95424AAB3AEA64A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 20:00:35 +0000 Manifest this update: Mon 26 Jan 2026 20:00:35 +0000 Manifest next update: Tue 27 Jan 2026 20:00:35 +0000 Files and hashes: 1: 1-nC0LXr2rXgiKzDwXyt5E_gGNXA.crl (hash: baIy0wdRUV+0+wS6OgSjczAf5lMGX4mdk/hThAu0GlY=) 2: B3jjvlnWK_ho4oeQ7H-8m6t4uX8.roa (hash: iNRcPuAK86hIo1jsy7oarAHxhqJd5nCDCcCEDbaTlTQ=) 3: IwISPZAq_lfMVYJDL-7wMWue3aU.roa (hash: z6+EXeevPDa78xk3kdWEbfuhp5KcLTsL2G6IDYHQCnA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:e4:d0:f7:c5:63:99:5b:95:42:4a:ab:3a:ea:64:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa70b42d7af6ad78222b30f05f2b7913f8063570 Validity Not Before: Jan 26 20:00:35 2026 GMT Not After : Jan 27 20:00:35 2026 GMT Subject: CN=f72eef2ac54a06a6d3486f9255e9d8cb3073f17d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a2:ee:8a:88:da:f1:8c:ef:71:e5:51:52:c3: 9a:bd:3b:4b:d6:f6:79:a9:50:be:af:ff:31:d9:95: af:66:11:1d:b7:84:63:db:88:4d:ae:21:e2:bf:42: 82:e7:ec:7a:eb:73:1c:92:17:40:d2:62:7b:ec:57: cb:4c:1a:13:05:13:10:79:33:7b:d1:18:72:22:c5: a5:ca:02:af:17:e8:89:48:6b:cf:de:60:1a:09:d0: 56:08:56:b9:0b:3e:b3:78:a3:ca:4c:53:2f:82:44: 73:4c:92:b6:6d:b6:88:1b:30:20:a0:b3:c8:52:4f: 9b:4b:aa:0f:4a:26:3a:9f:df:39:87:75:81:bd:d7: 42:84:2f:ee:e3:a8:1a:9c:61:9b:06:b5:c9:22:75: 6a:a9:8b:d7:8a:6e:35:78:28:e0:38:23:d4:3e:ca: fb:2c:b9:76:9e:66:0c:a6:86:55:50:14:74:91:ed: 7b:1b:36:dd:56:ff:5e:cd:89:7c:68:a1:f3:64:bc: c4:5e:bb:b4:84:cc:cd:59:06:33:0b:e0:e3:e4:9c: 62:52:f3:e9:f5:3b:a8:ba:ab:87:f7:39:93:13:67: 6c:72:73:7f:bf:7f:2a:3d:18:4f:a5:f4:87:51:d8: 0c:b7:58:ce:4e:14:94:f2:b0:47:74:4c:95:65:86: f0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:2E:EF:2A:C5:4A:06:A6:D3:48:6F:92:55:E9:D8:CB:30:73:F1:7D X509v3 Authority Key Identifier: keyid:FA:70:B4:2D:7A:F6:AD:78:22:2B:30:F0:5F:2B:79:13:F8:06:35:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:bc:32:cb:a8:23:f9:c9:8d:12:e8:34:7f:85:e2:b6:12:64: 90:74:b1:a2:8e:e4:94:ea:c9:09:79:d3:0d:d1:e2:4a:9d:a0: 22:03:1d:6b:10:49:37:b1:02:0a:39:ac:7c:63:f3:f5:13:a7: 1a:6d:f7:8b:81:77:0c:9d:38:51:30:33:33:40:20:e6:8a:b0: 41:ef:3b:86:1d:f9:d7:ce:e1:fa:4f:42:fd:8f:29:cc:ef:9a: b2:7d:28:51:da:67:89:44:28:d3:d6:71:29:0b:94:ef:88:a1: 21:67:e3:55:58:c8:01:e9:77:1b:fa:a8:59:f4:87:5e:3b:13: ed:87:0e:66:71:8c:36:0c:1d:6e:7f:4c:07:d3:88:93:bf:a2: 86:67:5c:22:9a:58:58:88:1f:1f:35:64:25:02:a1:da:50:66: e6:f2:3b:59:ab:7a:24:29:cd:e7:01:ef:60:26:a1:7a:54:ab: 99:19:8b:9a:cd:fa:a8:35:99:02:25:1e:4c:16:25:ba:c0:48: f5:1a:97:ab:b5:86:22:08:14:9d:97:16:f3:19:34:00:0c:d7: 18:7e:f6:04:ec:5f:28:50:e7:0d:9f:ec:42:de:a8:2a:b3:80: 52:7f:2a:8b:16:2c:2a:2c:73:b8:2a:6a:97:4d:0c:8a:85:b8: 18:b0:c4:87 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZv75ND3xWOZW5VCSqs66mSkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNzBiNDJkN2FmNmFkNzgyMjJiMzBmMDVmMmI3OTEzZjgw NjM1NzAwHhcNMjYwMTI2MjAwMDM1WhcNMjYwMTI3MjAwMDM1WjAzMTEwLwYDVQQD EyhmNzJlZWYyYWM1NGEwNmE2ZDM0ODZmOTI1NWU5ZDhjYjMwNzNmMTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6Luioja8YzvceVRUsOavTtL1vZ5 qVC+r/8x2ZWvZhEdt4Rj24hNriHiv0KC5+x663MckhdA0mJ77FfLTBoTBRMQeTN7 0RhyIsWlygKvF+iJSGvP3mAaCdBWCFa5Cz6zeKPKTFMvgkRzTJK2bbaIGzAgoLPI Uk+bS6oPSiY6n985h3WBvddChC/u46ganGGbBrXJInVqqYvXim41eCjgOCPUPsr7 LLl2nmYMpoZVUBR0ke17GzbdVv9ezYl8aKHzZLzEXru0hMzNWQYzC+Dj5JxiUvPp 9TuouquH9zmTE2dscnN/v38qPRhPpfSHUdgMt1jOThSU8rBHdEyVZYbwIQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFPcu7yrFSgam00hvklXp2Mswc/F9MB8GA1UdIwQY MBaAFPpwtC169q14Iisw8F8reRP4BjVwMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1uQzBMWHIyclhnaUt6RHdYeXQ1RV9nR05YQS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEvZDNiZmU2LTc4YjUtNDM3Yi05OGU5 LWI5MTQxNTliYThhZC8xLzEtbkMwTFhyMnJYZ2lLekR3WHl0NUVfZ0dOWEEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzZhL2QzYmZlNi03OGI1LTQzN2ItOThlOS1iOTE0MTU5YmE4 YWQvMS8xLW5DMExYcjJyWGdpS3pEd1h5dDVFX2dHTlhBLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdbwy y6gj+cmNEug0f4XithJkkHSxoo7klOrJCXnTDdHiSp2gIgMdaxBJN7ECCjmsfGPz 9ROnGm33i4F3DJ04UTAzM0Ag5oqwQe87hh35187h+k9C/Y8pzO+asn0oUdpniUQo 09ZxKQuU74ihIWfjVVjIAel3G/qoWfSHXjsT7YcOZnGMNgwdbn9MB9OIk7+ihmdc IppYWIgfHzVkJQKh2lBm5vI7Wat6JCnN5wHvYCahelSrmRmLms36qDWZAiUeTBYl usBI9RqXq7WGIggUnZcW8xk0AAzXGH72BOxfKFDnDZ/sQt6oKrOAUn8qixYsKixz uCpql00MioW4GLDEhw== -----END CERTIFICATE-----Generated at Tue Jan 27 01:19:01 2026 by rpki-client