This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.mft File: 1fXn3dxHxxBEhlvFzcJYfv2rC5w.mft (raw, json) Hash identifier: +6XubFru8y+oxmLpYpaIwldgcylzhNdk+uiJFk5umRg= Subject key identifier: 41:7E:F6:1A:AC:EA:F1:FD:A4:1F:9F:E1:BB:4B:61:0D:55:F0:CB:B6 Authority key identifier: D5:F5:E7:DD:DC:47:C7:10:44:86:5B:C5:CD:C2:58:7E:FD:AB:0B:9C Certificate issuer: /CN=d5f5e7dddc47c71044865bc5cdc2587efdab0b9c Certificate serial: 019BFB4017046AA41B04977D9052B1030515 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fXn3dxHxxBEhlvFzcJYfv2rC5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.mft Manifest number: 097F Signing time: Mon 26 Jan 2026 17:00:39 +0000 Manifest this update: Mon 26 Jan 2026 17:00:39 +0000 Manifest next update: Tue 27 Jan 2026 17:00:39 +0000 Files and hashes: 1: 1fXn3dxHxxBEhlvFzcJYfv2rC5w.crl (hash: So5L41pES1OfuCaN/1FYPnDS7ke1k/mEMu6VYSWTo/U=) 2: zlePSr6zYlrhgCFQW-qZhuoxEwk.roa (hash: ebo4B4GxIfR5oraws5Tn/cPpRYE1VsqUuELBHVvUXok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.mft rsync://rpki.ripe.net/repository/DEFAULT/1fXn3dxHxxBEhlvFzcJYfv2rC5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:40:17:04:6a:a4:1b:04:97:7d:90:52:b1:03:05:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5f5e7dddc47c71044865bc5cdc2587efdab0b9c Validity Not Before: Jan 26 17:00:39 2026 GMT Not After : Jan 27 17:00:39 2026 GMT Subject: CN=417ef61aaceaf1fda41f9fe1bb4b610d55f0cbb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:53:65:af:e1:31:d8:c0:a5:b6:bc:15:a1:98: 62:e7:37:39:5b:44:54:8f:9a:ab:c6:82:7c:f6:c9: 8b:60:c4:d2:60:4c:85:d1:66:d9:ce:9e:1b:8c:80: ba:f3:b1:0d:b5:f2:7a:b9:b1:fa:50:0f:0b:9f:ee: f7:c9:78:a5:48:06:77:f5:b2:0a:95:4d:73:b9:1c: 85:87:80:eb:67:f8:af:db:da:69:46:cc:64:b4:9c: e7:8e:f0:5e:44:7f:fd:8d:39:6f:35:58:90:38:45: d0:2c:11:00:67:5a:2c:6d:f1:6c:9a:b5:6b:6f:6a: ed:e8:5f:eb:2d:ec:21:d1:3d:9a:dc:0c:9b:34:0d: 83:fd:fc:29:74:4a:43:c8:1c:84:b1:64:c9:0c:84: 2f:1c:7b:13:7f:11:62:92:68:50:15:29:d4:a7:c4: 1b:6a:e2:ef:30:5b:75:3e:fa:9d:43:b7:ee:ab:32: 4b:a4:f9:ec:10:0c:d1:84:33:bf:7b:80:e3:38:bc: f3:13:aa:f0:9d:89:b1:b4:13:7c:5a:87:62:92:f2: 00:52:ed:d6:99:47:f0:fe:40:b8:e7:ac:49:23:8f: fe:f9:00:30:97:57:23:7d:c7:cd:33:51:b5:e1:cf: 30:e3:ec:bd:d5:5c:6d:ee:ec:80:69:fb:09:0c:d2: 59:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:7E:F6:1A:AC:EA:F1:FD:A4:1F:9F:E1:BB:4B:61:0D:55:F0:CB:B6 X509v3 Authority Key Identifier: keyid:D5:F5:E7:DD:DC:47:C7:10:44:86:5B:C5:CD:C2:58:7E:FD:AB:0B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fXn3dxHxxBEhlvFzcJYfv2rC5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:77:f0:7c:83:bb:86:5a:da:d7:62:6b:d4:24:3e:a7:fa:70: f5:7c:ec:29:73:24:ff:e2:fd:d9:ff:f5:88:44:d9:8c:29:f9: 04:e5:c9:2e:a2:6c:0c:d0:8c:57:f1:17:08:5e:78:1c:f9:43: ba:53:ff:e7:d7:0a:c3:83:e9:ef:30:e0:a7:79:73:e9:4e:84: 42:27:e7:b5:ed:c7:8a:a7:1e:73:9d:43:6b:73:70:71:0c:38: d4:91:c3:37:37:24:21:96:39:96:e6:7f:3a:5f:24:21:e9:f7: ac:59:d8:61:51:e0:3e:84:0f:ec:60:e1:f3:e7:f6:c5:24:2d: f0:7c:74:68:cc:fb:61:2a:2d:3a:62:1b:47:2f:7c:cf:05:47: df:69:16:15:80:38:66:8e:bc:75:19:18:9b:82:71:b2:d2:aa: 23:a9:3c:06:41:86:87:ae:9a:19:19:01:b8:b5:b7:c8:b2:80: 85:d7:0d:16:3a:ee:8e:87:55:f8:30:8d:4e:90:c2:3e:3f:34: 97:57:3c:98:7a:86:f0:97:cf:6e:6f:ae:4d:e1:59:7d:81:95: 85:0e:8d:d8:ce:b2:1e:0e:3c:42:4b:8c:72:67:bb:b0:04:94: d1:2b:a1:cd:ba:8c:ef:19:69:f3:33:05:e8:0b:ef:1c:87:87: 37:30:e1:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7QBcEaqQbBJd9kFKxAwUVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZjVlN2RkZGM0N2M3MTA0NDg2NWJjNWNkYzI1ODdlZmRh YjBiOWMwHhcNMjYwMTI2MTcwMDM5WhcNMjYwMTI3MTcwMDM5WjAzMTEwLwYDVQQD Eyg0MTdlZjYxYWFjZWFmMWZkYTQxZjlmZTFiYjRiNjEwZDU1ZjBjYmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVNlr+Ex2MCltrwVoZhi5zc5W0RU j5qrxoJ89smLYMTSYEyF0WbZzp4bjIC687ENtfJ6ubH6UA8Ln+73yXilSAZ39bIK lU1zuRyFh4DrZ/iv29ppRsxktJznjvBeRH/9jTlvNViQOEXQLBEAZ1osbfFsmrVr b2rt6F/rLewh0T2a3AybNA2D/fwpdEpDyByEsWTJDIQvHHsTfxFikmhQFSnUp8Qb auLvMFt1PvqdQ7fuqzJLpPnsEAzRhDO/e4DjOLzzE6rwnYmxtBN8WodikvIAUu3W mUfw/kC456xJI4/++QAwl1cjfcfNM1G14c8w4+y91Vxt7uyAafsJDNJZ2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEF+9hqs6vH9pB+f4btLYQ1V8Mu2MB8GA1UdIwQY MBaAFNX1593cR8cQRIZbxc3CWH79qwucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWZYbjNkeEh4eEJFaGx2RnpjSllmdjJyQzV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy84MjZmYWYtMzdiNC00MzhmLThmOTAt MjlmZTdjYzY2YzhkLzEvMWZYbjNkeEh4eEJFaGx2RnpjSllmdjJyQzV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy84MjZmYWYtMzdiNC00MzhmLThmOTAtMjlmZTdjYzY2Yzhk LzEvMWZYbjNkeEh4eEJFaGx2RnpjSllmdjJyQzV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYnfwfIO7 hlra12Jr1CQ+p/pw9XzsKXMk/+L92f/1iETZjCn5BOXJLqJsDNCMV/EXCF54HPlD ulP/59cKw4Pp7zDgp3lz6U6EQifnte3Hiqcec51Da3NwcQw41JHDNzckIZY5luZ/ Ol8kIen3rFnYYVHgPoQP7GDh8+f2xSQt8Hx0aMz7YSotOmIbRy98zwVH32kWFYA4 Zo68dRkYm4JxstKqI6k8BkGGh66aGRkBuLW3yLKAhdcNFjrujodV+DCNTpDCPj80 l1c8mHqG8JfPbm+uTeFZfYGVhQ6N2M6yHg48QkuMcme7sASU0SuhzbqM7xlp8zMF 6AvvHIeHNzDhDg== -----END CERTIFICATE-----Generated at Mon Jan 26 22:40:20 2026 by rpki-client