This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/1-hYOda3W6_b0RYEyFHf6uS0i5E8.mft File: 1-hYOda3W6_b0RYEyFHf6uS0i5E8.mft (raw, json) Hash identifier: MTTklKqp9tjA4ZcUA2Q+yBpCZ1KCuXtPYyGq37vjT8w= Subject key identifier: 0B:3B:AD:DD:92:22:5B:EC:27:E0:7A:9A:A5:87:51:E3:C0:57:03:FC Authority key identifier: FA:16:0E:75:AD:D6:EB:F6:F4:45:81:32:14:77:FA:B9:2D:22:E4:4F Certificate issuer: /CN=fa160e75add6ebf6f44581321477fab92d22e44f Certificate serial: 019C1C83F0B432879A46470B11F25E35DDC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hYOda3W6_b0RYEyFHf6uS0i5E8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/1-hYOda3W6_b0RYEyFHf6uS0i5E8.mft Manifest number: 0F Signing time: Mon 02 Feb 2026 04:02:14 +0000 Manifest this update: Mon 02 Feb 2026 04:02:14 +0000 Manifest next update: Tue 03 Feb 2026 04:02:14 +0000 Files and hashes: 1: 1-hYOda3W6_b0RYEyFHf6uS0i5E8.crl (hash: VBqrC6tJKF2PEjHk+PnKl+A8GiNUak1exJmIRkfXjJM=) 2: thQigH6iIZFTzygl3Rx0-Gq-vvI.asa (hash: 0qoZ/U/Zc4qr6dxGiq1WxSNmVGjBwb4uBW1cZmhhZq0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/1-hYOda3W6_b0RYEyFHf6uS0i5E8.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/1-hYOda3W6_b0RYEyFHf6uS0i5E8.mft rsync://rpki.ripe.net/repository/DEFAULT/1-hYOda3W6_b0RYEyFHf6uS0i5E8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1c:83:f0:b4:32:87:9a:46:47:0b:11:f2:5e:35:dd:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa160e75add6ebf6f44581321477fab92d22e44f Validity Not Before: Feb 2 04:02:14 2026 GMT Not After : Feb 3 04:02:14 2026 GMT Subject: CN=0b3baddd92225bec27e07a9aa58751e3c05703fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:97:37:41:91:e0:6b:4e:1c:74:f2:f5:19:1d: f3:8e:71:5a:d7:4b:7f:9f:97:66:89:61:87:1f:f9: 5b:0b:81:dd:de:96:9f:06:c9:bd:ae:b2:7c:48:85: c0:e2:fd:f4:62:28:c6:9d:b1:fc:7b:5d:1b:5d:8d: 68:e7:39:64:6b:70:05:7f:ca:9a:d4:ac:6f:79:89: 89:cb:82:ea:c5:ad:e8:56:41:28:10:1c:cd:f5:4f: 21:60:3d:c2:49:ac:57:c6:76:ff:13:46:04:27:0d: 79:ee:96:d1:2b:c0:93:c7:fe:1a:59:3d:1c:16:19: b9:0d:69:87:92:04:c6:d1:cd:a3:f8:cd:ac:f3:f2: 6f:b8:ac:38:07:f4:85:6b:5b:8b:38:84:50:3b:9e: fe:f5:ec:57:33:6b:11:38:46:24:0f:2a:66:4f:77: eb:99:2d:16:5b:67:a2:25:10:0b:ba:d4:91:04:e3: 66:74:17:41:3d:5d:c3:d6:c0:23:9e:fd:2b:59:1e: 62:90:62:22:60:ab:03:f9:2d:60:3d:31:8c:ad:4b: 41:01:a9:2d:c1:d0:63:78:a7:fd:a1:1b:23:06:c5: 91:43:a7:79:00:40:a9:41:62:28:0a:0b:67:79:47: 37:2e:9a:ac:e8:80:01:ac:a3:e9:e1:52:22:98:e9: c9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:3B:AD:DD:92:22:5B:EC:27:E0:7A:9A:A5:87:51:E3:C0:57:03:FC X509v3 Authority Key Identifier: keyid:FA:16:0E:75:AD:D6:EB:F6:F4:45:81:32:14:77:FA:B9:2D:22:E4:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hYOda3W6_b0RYEyFHf6uS0i5E8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/1-hYOda3W6_b0RYEyFHf6uS0i5E8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/1-hYOda3W6_b0RYEyFHf6uS0i5E8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:af:4f:83:87:27:07:09:73:eb:b5:ad:2a:2f:f9:45:d7:44: c8:e1:e1:01:6b:fe:cb:f9:00:5f:29:46:0b:15:bf:f1:e9:cb: aa:f4:b3:ac:f8:ec:22:bb:0a:a2:ea:aa:7f:4a:31:c8:da:da: af:d2:3f:65:54:46:84:02:33:4f:5f:87:98:0a:cf:df:85:21: 95:09:4c:84:be:c9:86:72:f6:f7:d4:e7:8d:db:8b:b9:97:3b: 62:fd:0a:9e:9e:19:20:23:88:e1:26:b2:03:a5:b2:8b:16:e6: 1a:3e:52:47:48:57:94:96:a7:f1:84:0d:9b:a0:bd:9f:67:bf: 32:c8:da:cf:05:15:29:10:0e:55:5c:9e:de:5d:dc:f6:e6:8f: 51:07:ec:35:a3:03:9e:41:2a:04:57:47:a1:9f:07:da:10:9c: e3:69:b5:bd:7e:29:54:69:30:4c:a3:d5:35:74:03:ee:ca:48: d3:f8:09:17:6b:23:16:d4:19:46:2d:85:fb:99:6f:3c:d6:0d: d9:b0:0e:96:62:78:a7:f3:f8:11:f8:ff:27:e7:c7:7f:42:50: 91:df:63:28:97:26:4d:52:d3:8b:5c:f6:98:44:cb:fc:49:f6: cf:91:c2:7d:7b:33:57:8a:93:81:9d:09:d3:b2:73:33:ae:5e: 4a:8e:9a:fc -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZwcg/C0MoeaRkcLEfJeNd3FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMTYwZTc1YWRkNmViZjZmNDQ1ODEzMjE0NzdmYWI5MmQy MmU0NGYwHhcNMjYwMjAyMDQwMjE0WhcNMjYwMjAzMDQwMjE0WjAzMTEwLwYDVQQD EygwYjNiYWRkZDkyMjI1YmVjMjdlMDdhOWFhNTg3NTFlM2MwNTcwM2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Zc3QZHga04cdPL1GR3zjnFa10t/ n5dmiWGHH/lbC4Hd3pafBsm9rrJ8SIXA4v30YijGnbH8e10bXY1o5zlka3AFf8qa 1KxveYmJy4Lqxa3oVkEoEBzN9U8hYD3CSaxXxnb/E0YEJw157pbRK8CTx/4aWT0c Fhm5DWmHkgTG0c2j+M2s8/JvuKw4B/SFa1uLOIRQO57+9exXM2sROEYkDypmT3fr mS0WW2eiJRALutSRBONmdBdBPV3D1sAjnv0rWR5ikGIiYKsD+S1gPTGMrUtBAakt wdBjeKf9oRsjBsWRQ6d5AECpQWIoCgtneUc3Lpqs6IABrKPp4VIimOnJdQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFAs7rd2SIlvsJ+B6mqWHUePAVwP8MB8GA1UdIwQY MBaAFPoWDnWt1uv29EWBMhR3+rktIuRPMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1oWU9kYTNXNl9iMFJZRXlGSGY2dVMwaTVFOC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYvNDg5ZTgyLTQ3NjktNDZmOC1iNGQ2 LTU5MjBiOTgxNDQxOS8xLzEtaFlPZGEzVzZfYjBSWUV5RkhmNnVTMGk1RTgubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzlmLzQ4OWU4Mi00NzY5LTQ2ZjgtYjRkNi01OTIwYjk4MTQ0 MTkvMS8xLWhZT2RhM1c2X2IwUllFeUZIZjZ1UzBpNUU4LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeK9P g4cnBwlz67WtKi/5RddEyOHhAWv+y/kAXylGCxW/8enLqvSzrPjsIrsKouqqf0ox yNrar9I/ZVRGhAIzT1+HmArP34UhlQlMhL7JhnL299TnjduLuZc7Yv0Knp4ZICOI 4SayA6WyixbmGj5SR0hXlJan8YQNm6C9n2e/MsjazwUVKRAOVVye3l3c9uaPUQfs NaMDnkEqBFdHoZ8H2hCc42m1vX4pVGkwTKPVNXQD7spI0/gJF2sjFtQZRi2F+5lv PNYN2bAOlmJ4p/P4Efj/J+fHf0JQkd9jKJcmTVLTi1z2mETL/En2z5HCfXszV4qT gZ0J07JzM65eSo6a/A== -----END CERTIFICATE-----Generated at Mon Feb 2 08:07:50 2026 by rpki-client