This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft File: 1-3nCbzFXU0UVnIQO0nioeKklZhU.mft (raw, json) Hash identifier: ap3DInl7O6SD4HfWMJ0DpDKqj/Ek3hzFgFLwU1zUsUE= Subject key identifier: CD:17:06:F1:DF:77:5B:D9:28:FD:DD:1D:BE:6B:7B:96:A0:7A:41:94 Authority key identifier: FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15 Certificate issuer: /CN=fb79c26f31575345159c840ed278a878a9256615 Certificate serial: 019BFCF842E62745643201CE7C0C63E4307F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft Manifest number: 17F4 Signing time: Tue 27 Jan 2026 01:01:26 +0000 Manifest this update: Tue 27 Jan 2026 01:01:26 +0000 Manifest next update: Wed 28 Jan 2026 01:01:26 +0000 Files and hashes: 1: 1-3nCbzFXU0UVnIQO0nioeKklZhU.crl (hash: X78aeSewZ+N+O+t36gc/kbDSO7REMLHUVTfZIOuFDOc=) 2: 5yW1J3G-SRoAia8ARctoGLWzIYc.roa (hash: X09RAO+Iokxl6DD0+XywUvUr2qss8psh9a8kzzRJ8CA=) 3: BuRUOF7mMOX9LaFv1V3QhA-5u7w.roa (hash: Jk587wQ/RfxSBQigyNcTI8jkJxFSiSHzC0v2gfYkHEo=) 4: KnVR_9VrWrMYjNqmZyI3AyOyCfQ.roa (hash: smZSmUpd6ByBf72zK69AbaDDhM3Jk9l+boOyjSHXOmU=) 5: RIk8mcO0XUHeY1yE3bLpyK41RDc.roa (hash: 7ot83Q70csEm6+GFN6TqnACE6Bsk3KoPtGK0mmsksq0=) 6: UCM287_6vaVTmxRbaeLhFXJu-zI.roa (hash: Dd8R2yXONvmf0J4ib+h5UGhtmlZ7wExXG0YcP5XCyOQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.crl rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:f8:42:e6:27:45:64:32:01:ce:7c:0c:63:e4:30:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb79c26f31575345159c840ed278a878a9256615 Validity Not Before: Jan 27 01:01:26 2026 GMT Not After : Jan 28 01:01:26 2026 GMT Subject: CN=cd1706f1df775bd928fddd1dbe6b7b96a07a4194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:34:9c:52:26:67:d1:d1:17:17:a7:1b:f5:c9: 2f:2a:6b:b8:3a:80:89:37:6c:b9:8a:6f:69:84:b6: 65:54:ab:5e:7f:ed:9a:c5:03:a6:c1:1f:c4:b6:41: ab:44:0e:58:ba:6d:33:a3:9c:f7:bc:69:dc:03:0e: 95:5d:8b:23:b7:6a:89:bb:e4:33:1a:2e:5f:47:b1: 01:7b:f7:d2:16:ba:e8:c3:bc:eb:81:c5:17:68:cc: 93:69:ee:12:f2:f4:48:26:37:6e:2c:69:14:24:28: a6:06:e9:37:f0:69:aa:26:b7:4c:2d:99:e2:01:1b: 6d:67:46:f9:67:57:2c:87:2d:c8:f2:94:48:73:d3: 98:95:f1:0d:db:84:32:37:87:8f:f6:2a:9e:16:6c: bf:1d:ec:e8:4f:9f:29:ff:bd:2a:68:42:47:02:c3: 8e:9a:b0:07:ab:0d:a0:3f:f3:09:9b:ce:95:f4:93: a9:47:47:f9:5b:dc:b8:0a:30:0b:0f:54:37:6c:34: 02:96:53:f0:1a:9d:07:bc:34:f5:18:97:c4:89:bb: 7a:29:a4:e2:f3:8a:4b:56:c1:32:fc:7f:77:25:ed: 43:fc:d7:37:ae:2e:e0:db:d5:40:e9:90:ad:4c:c7: 8f:d9:2a:72:d9:12:b5:d0:1e:a6:fc:c6:9b:87:6c: dc:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:17:06:F1:DF:77:5B:D9:28:FD:DD:1D:BE:6B:7B:96:A0:7A:41:94 X509v3 Authority Key Identifier: keyid:FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:53:3c:87:7f:80:f1:bb:94:f2:89:54:ef:a0:ba:bd:f5:f5: 1a:6a:31:23:85:36:4a:8a:77:d1:9a:8b:7a:4a:4b:02:60:10: af:08:9d:a5:b5:c7:a8:9f:9f:a8:31:00:9a:e0:2c:54:dc:1b: 3f:9b:86:6a:05:ba:f2:cf:5c:f7:2c:63:9a:66:d4:16:30:e6: 07:19:1d:13:99:a4:15:1a:0e:23:68:e2:78:2e:7f:4a:de:ef: ae:1b:3c:c1:5a:30:1a:a7:e3:50:8c:64:41:60:51:4d:ce:a4: 08:63:72:c9:96:86:36:06:5f:f9:69:cf:f3:a8:1f:0e:e4:f4: e1:aa:36:45:ab:8b:0d:0a:31:07:d3:f2:2e:25:ff:d3:e7:13: 95:de:4c:23:ab:0d:12:bc:7f:84:ee:c5:2c:a8:85:a8:3e:cc: 36:3d:e9:4a:34:a0:be:cf:e7:ee:22:e4:0c:3c:08:d2:2f:92: 48:db:39:7c:4a:69:a3:93:c3:d1:de:b9:1f:7d:b5:60:fb:02: 08:3f:cb:cf:10:84:9f:8c:48:2e:84:22:0c:6f:1b:e8:41:f2: 1e:78:09:51:e7:e5:87:05:b2:43:67:bf:23:38:1f:f1:12:64: 97:e7:68:b1:60:ed:dd:ac:03:38:46:b4:59:a1:03:33:97:c3: c0:85:2d:6a -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZv8+ELmJ0VkMgHOfAxj5DB/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiNzljMjZmMzE1NzUzNDUxNTljODQwZWQyNzhhODc4YTky NTY2MTUwHhcNMjYwMTI3MDEwMTI2WhcNMjYwMTI4MDEwMTI2WjAzMTEwLwYDVQQD EyhjZDE3MDZmMWRmNzc1YmQ5MjhmZGRkMWRiZTZiN2I5NmEwN2E0MTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDScUiZn0dEXF6cb9ckvKmu4OoCJ N2y5im9phLZlVKtef+2axQOmwR/EtkGrRA5Yum0zo5z3vGncAw6VXYsjt2qJu+Qz Gi5fR7EBe/fSFrrow7zrgcUXaMyTae4S8vRIJjduLGkUJCimBuk38GmqJrdMLZni ARttZ0b5Z1cshy3I8pRIc9OYlfEN24QyN4eP9iqeFmy/HezoT58p/70qaEJHAsOO mrAHqw2gP/MJm86V9JOpR0f5W9y4CjALD1Q3bDQCllPwGp0HvDT1GJfEibt6KaTi 84pLVsEy/H93Je1D/Nc3ri7g29VA6ZCtTMeP2Spy2RK10B6m/Mabh2zcUQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFM0XBvHfd1vZKP3dHb5re5agekGUMB8GA1UdIwQY MBaAFPt5wm8xV1NFFZyEDtJ4qHipJWYVMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS0zbkNiekZYVTBVVm5JUU8wbmlvZUtrbFpoVS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAvMTJkNjkxLTM3YTQtNGIxNS1hN2Vh LWJkMzdkYTBlNDQ3Yy8xLzEtM25DYnpGWFUwVVZuSVFPMG5pb2VLa2xaaFUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzgwLzEyZDY5MS0zN2E0LTRiMTUtYTdlYS1iZDM3ZGEwZTQ0 N2MvMS8xLTNuQ2J6RlhVMFVWbklRTzBuaW9lS2tsWmhVLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUlM8 h3+A8buU8olU76C6vfX1GmoxI4U2Sop30ZqLekpLAmAQrwidpbXHqJ+fqDEAmuAs VNwbP5uGagW68s9c9yxjmmbUFjDmBxkdE5mkFRoOI2jieC5/St7vrhs8wVowGqfj UIxkQWBRTc6kCGNyyZaGNgZf+WnP86gfDuT04ao2RauLDQoxB9PyLiX/0+cTld5M I6sNErx/hO7FLKiFqD7MNj3pSjSgvs/n7iLkDDwI0i+SSNs5fEppo5PD0d65H321 YPsCCD/LzxCEn4xILoQiDG8b6EHyHngJUeflhwWyQ2e/Izgf8RJkl+dosWDt3awD OEa0WaEDM5fDwIUtag== -----END CERTIFICATE-----Generated at Tue Jan 27 07:47:26 2026 by rpki-client