This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/20b876-eb24-4cdc-ba96-2421aec4e718/1/1MjvOur8QtSTmZ8v5DYZO-hREU4.mft File: 1MjvOur8QtSTmZ8v5DYZO-hREU4.mft (raw, json) Hash identifier: TtujAQRXItgC9rQbJxuUsLkDgo4aulMdB2CaAEp6HTs= Subject key identifier: 0F:7A:68:D6:1B:12:DC:08:22:A4:31:D2:D1:CF:19:4C:F2:8D:4E:60 Authority key identifier: D4:C8:EF:3A:EA:FC:42:D4:93:99:9F:2F:E4:36:19:3B:E8:51:11:4E Certificate issuer: /CN=d4c8ef3aeafc42d493999f2fe436193be851114e Certificate serial: 019BFA3E12F123162F8425F52B787AEA882F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MjvOur8QtSTmZ8v5DYZO-hREU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/20b876-eb24-4cdc-ba96-2421aec4e718/1/1MjvOur8QtSTmZ8v5DYZO-hREU4.mft Manifest number: 02 Signing time: Mon 26 Jan 2026 12:18:50 +0000 Manifest this update: Mon 26 Jan 2026 12:18:50 +0000 Manifest next update: Tue 27 Jan 2026 12:18:50 +0000 Files and hashes: 1: 1MjvOur8QtSTmZ8v5DYZO-hREU4.crl (hash: rTTQYmVtyo+pua/tkRrcql2OqX23VDaZDf1oDePzw/E=) 2: kMjU5SPCHhf-fECFvz7nifCpMy4.roa (hash: nCt6rvQjRfODBx5zhXzuU3Hf/5pXaEL7+ZUSieoDSfg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/20b876-eb24-4cdc-ba96-2421aec4e718/1/1MjvOur8QtSTmZ8v5DYZO-hREU4.crl rsync://rpki.ripe.net/repository/DEFAULT/75/20b876-eb24-4cdc-ba96-2421aec4e718/1/1MjvOur8QtSTmZ8v5DYZO-hREU4.mft rsync://rpki.ripe.net/repository/DEFAULT/1MjvOur8QtSTmZ8v5DYZO-hREU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:18:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:3e:12:f1:23:16:2f:84:25:f5:2b:78:7a:ea:88:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4c8ef3aeafc42d493999f2fe436193be851114e Validity Not Before: Jan 26 12:18:50 2026 GMT Not After : Jan 27 12:18:50 2026 GMT Subject: CN=0f7a68d61b12dc0822a431d2d1cf194cf28d4e60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1e:c1:0d:0d:34:eb:08:5d:9f:93:93:34:6e: 1c:ac:64:f2:93:37:1c:69:c8:9f:e3:04:62:c5:99: 46:4b:c8:93:58:af:1c:e9:3e:e9:f1:c7:c7:d4:0a: 56:69:99:f9:7c:4e:a7:79:0a:f4:38:5c:c9:b3:df: 81:5a:26:03:77:c0:59:81:dc:07:5b:ea:5b:ea:92: b2:78:0d:9a:8e:0e:bc:e0:9d:c0:fc:ef:b8:21:59: aa:dd:7c:b4:4a:7c:f1:53:36:37:04:0a:65:30:6b: 15:1b:95:49:d4:9c:1e:dd:53:14:45:03:49:31:58: 62:64:1f:13:a8:fa:9c:24:e4:20:fd:bc:f7:f4:4c: 8d:35:44:ba:68:3e:e4:a8:93:ec:a8:d0:48:2c:ce: c8:0f:bc:18:4c:c0:8d:bb:23:66:c0:6b:7f:88:c8: 39:7f:d5:ac:39:bd:1a:de:9c:79:4d:4f:9d:02:e7: 8b:d8:6d:2d:dc:16:26:e2:21:eb:4b:b1:fc:49:91: 43:db:f0:a8:cf:8d:e0:d2:11:8f:3d:18:a7:56:16: 0c:e7:37:fa:00:80:73:32:ae:c3:f1:fe:25:48:69: 29:23:28:04:f4:1b:0f:79:4a:66:e8:48:a2:ab:b0: b6:ea:9f:76:01:d0:51:de:1f:a1:e7:7d:e1:11:c6: 31:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:7A:68:D6:1B:12:DC:08:22:A4:31:D2:D1:CF:19:4C:F2:8D:4E:60 X509v3 Authority Key Identifier: keyid:D4:C8:EF:3A:EA:FC:42:D4:93:99:9F:2F:E4:36:19:3B:E8:51:11:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MjvOur8QtSTmZ8v5DYZO-hREU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/20b876-eb24-4cdc-ba96-2421aec4e718/1/1MjvOur8QtSTmZ8v5DYZO-hREU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/20b876-eb24-4cdc-ba96-2421aec4e718/1/1MjvOur8QtSTmZ8v5DYZO-hREU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:06:fd:7e:5c:70:9c:c0:c6:e8:09:e3:2d:bd:ec:30:e3:31: fb:71:f9:8a:a0:7b:71:18:79:e3:bc:84:73:cd:b7:85:d3:89: 62:a3:c1:2f:f7:fb:48:22:d0:f9:71:13:fc:19:5a:cf:9c:c8: b1:7e:75:d5:a8:59:65:be:72:d2:07:70:fb:3c:49:be:54:94: 47:ea:77:23:53:fb:5d:39:0d:56:71:0f:0a:08:dc:02:f7:e0: 74:9a:ed:ab:6b:8c:8f:f3:6a:57:77:3d:90:a8:ef:4b:6e:09: f1:b6:2b:32:86:8e:6a:b6:d5:ad:f0:b8:9b:19:af:ae:6c:1d: 83:4d:68:e4:90:2f:90:5e:99:86:51:ea:46:cb:88:3c:9d:7b: ad:17:26:9f:7f:d9:94:da:55:fb:c1:40:8f:02:ad:47:e0:c9: 32:52:9f:65:d1:fe:73:2c:a0:a7:c6:0f:0d:46:af:82:2d:f0: a3:ba:0f:d2:4a:d8:48:d5:cc:be:77:cd:e4:74:e5:dc:c0:73: 6f:f5:43:fb:60:b7:82:94:c8:a1:81:29:4b:b7:b3:b1:19:65: da:c9:01:64:81:43:df:1b:8c:c8:d2:ac:0d:64:7f:1c:0a:cb: 45:bc:fc:2a:d8:0b:ca:b2:51:7d:bd:d0:68:3a:3a:f9:28:28: e1:9f:83:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6PhLxIxYvhCX1K3h66ogvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0YzhlZjNhZWFmYzQyZDQ5Mzk5OWYyZmU0MzYxOTNiZTg1 MTExNGUwHhcNMjYwMTI2MTIxODUwWhcNMjYwMTI3MTIxODUwWjAzMTEwLwYDVQQD EygwZjdhNjhkNjFiMTJkYzA4MjJhNDMxZDJkMWNmMTk0Y2YyOGQ0ZTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0h7BDQ006whdn5OTNG4crGTykzcc acif4wRixZlGS8iTWK8c6T7p8cfH1ApWaZn5fE6neQr0OFzJs9+BWiYDd8BZgdwH W+pb6pKyeA2ajg684J3A/O+4IVmq3Xy0SnzxUzY3BAplMGsVG5VJ1Jwe3VMURQNJ MVhiZB8TqPqcJOQg/bz39EyNNUS6aD7kqJPsqNBILM7ID7wYTMCNuyNmwGt/iMg5 f9WsOb0a3px5TU+dAueL2G0t3BYm4iHrS7H8SZFD2/Coz43g0hGPPRinVhYM5zf6 AIBzMq7D8f4lSGkpIygE9BsPeUpm6Eiiq7C26p92AdBR3h+h533hEcYxvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA96aNYbEtwIIqQx0tHPGUzyjU5gMB8GA1UdIwQY MBaAFNTI7zrq/ELUk5mfL+Q2GTvoURFOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU1qdk91cjhRdFNUbVo4djVEWVpPLWhSRVU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8yMGI4NzYtZWIyNC00Y2RjLWJhOTYt MjQyMWFlYzRlNzE4LzEvMU1qdk91cjhRdFNUbVo4djVEWVpPLWhSRVU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8yMGI4NzYtZWIyNC00Y2RjLWJhOTYtMjQyMWFlYzRlNzE4 LzEvMU1qdk91cjhRdFNUbVo4djVEWVpPLWhSRVU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWAb9flxw nMDG6AnjLb3sMOMx+3H5iqB7cRh547yEc823hdOJYqPBL/f7SCLQ+XET/Blaz5zI sX511ahZZb5y0gdw+zxJvlSUR+p3I1P7XTkNVnEPCgjcAvfgdJrtq2uMj/NqV3c9 kKjvS24J8bYrMoaOarbVrfC4mxmvrmwdg01o5JAvkF6ZhlHqRsuIPJ17rRcmn3/Z lNpV+8FAjwKtR+DJMlKfZdH+cyygp8YPDUavgi3wo7oP0krYSNXMvnfN5HTl3MBz b/VD+2C3gpTIoYEpS7ezsRll2skBZIFD3xuMyNKsDWR/HArLRbz8KtgLyrJRfb3Q aDo6+Sgo4Z+DHw== -----END CERTIFICATE-----Generated at Mon Jan 26 22:58:29 2026 by rpki-client