This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft File: 1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft (raw, json) Hash identifier: NcNyVwkblII6qg61CNg+vCRT1HwxrWRo3ALp4nDgueI= Subject key identifier: FE:2B:A8:53:DF:9D:37:98:60:4D:87:F7:24:E7:0B:9E:6E:49:92:43 Authority key identifier: FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08 Certificate issuer: /CN=fbd32968aaaa919c52791ffb07f93436b74fd508 Certificate serial: 019BF9C067268424AA51103238FFC8922A7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft Manifest number: 0C43 Signing time: Mon 26 Jan 2026 10:01:34 +0000 Manifest this update: Mon 26 Jan 2026 10:01:34 +0000 Manifest next update: Tue 27 Jan 2026 10:01:34 +0000 Files and hashes: 1: 1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl (hash: 8vtIX2MFb3u7275HmKLYlsIIG70wDBLzGggeODtkEek=) 2: 3hEZWyItuy9dwAtzmZ-AFWLhT5w.roa (hash: L+BYsmG/Ibo7acCTPtDZVtgHekYwJ5+kmxxZnt4e2i8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:c0:67:26:84:24:aa:51:10:32:38:ff:c8:92:2a:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbd32968aaaa919c52791ffb07f93436b74fd508 Validity Not Before: Jan 26 10:01:34 2026 GMT Not After : Jan 27 10:01:34 2026 GMT Subject: CN=fe2ba853df9d3798604d87f724e70b9e6e499243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3e:b9:89:54:01:12:4b:94:24:4d:73:a4:2e: be:63:98:a7:52:9e:a3:3d:61:d5:8e:91:b2:69:ef: 58:a5:ae:c0:3a:31:1d:73:5b:ab:b2:b1:25:bf:69: a2:c8:a2:47:c5:30:bf:99:32:c8:67:44:26:3e:60: 21:1d:e1:5f:4a:1f:84:26:fa:9c:fb:2f:62:bc:c2: fe:4c:e9:f5:18:b9:01:6f:69:8c:1b:ad:3f:4b:32: 58:76:1b:e2:24:cd:30:88:79:3c:40:3e:8c:59:e5: 06:2e:69:65:a0:52:62:08:92:55:c0:47:02:9e:2b: 4d:d9:8c:9f:e7:dc:5c:4d:b4:d9:df:c1:0b:7a:23: 39:de:6c:28:0f:4f:14:bf:4a:95:c4:e7:55:33:d0: fb:19:17:79:77:94:80:4e:44:0a:e5:3a:cf:19:77: 06:9b:94:1b:3e:ad:f9:e3:04:ef:a3:f6:e6:eb:1b: 9a:7a:51:1f:4b:70:bc:8c:ed:3d:3f:47:a6:bf:fe: a6:eb:0c:7b:04:3c:0c:54:c3:b9:96:6e:36:a4:3d: c5:f2:82:d6:b6:60:e4:50:95:4f:55:69:a2:07:ea: 2e:80:82:04:93:d2:00:62:af:9d:43:4f:7c:a8:7e: 24:ef:bb:ed:54:27:88:29:bd:2b:5b:e0:00:cf:97: b4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:2B:A8:53:DF:9D:37:98:60:4D:87:F7:24:E7:0B:9E:6E:49:92:43 X509v3 Authority Key Identifier: keyid:FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:fe:fe:0e:c7:be:fc:0f:5f:10:e0:c6:fb:70:d3:aa:c9:ae: 7d:9a:e5:df:d1:8b:18:1b:18:4f:41:f0:61:fb:36:6f:6e:34: bc:82:bd:cc:77:64:ca:3d:eb:08:cb:7b:cf:9a:61:af:5f:35: cc:b0:5f:80:7e:2d:8f:3c:35:67:dc:d5:f2:11:40:3c:79:7a: d0:31:20:55:7f:d1:91:bb:6b:42:77:61:bf:84:0c:38:97:11: 68:6c:43:40:f5:92:8d:d2:15:ee:82:3b:7e:71:2f:e8:0e:dd: 93:68:cb:f7:6c:5d:e4:d1:58:ed:32:a2:81:2b:5c:ea:fd:60: 7c:b7:ec:c9:33:43:9f:ba:2c:ca:e0:f1:22:92:8e:74:93:87: 7e:75:28:da:c9:0e:e1:85:f8:ae:5b:56:77:51:1e:83:10:0c: b8:a1:1c:a6:b4:21:8b:87:08:34:c1:41:8e:21:8a:6d:cc:80: 03:f4:19:12:96:be:66:b2:92:ad:94:79:90:10:15:51:99:71: f2:03:2a:d9:fd:12:77:f3:eb:f2:45:1a:c3:b8:3b:33:5c:3a: ad:fa:40:1e:56:05:61:f3:e1:28:de:92:28:f8:42:2c:63:39: 87:64:cc:59:0c:6d:b4:c5:36:72:7d:3e:2c:eb:3a:2f:b3:f1: f1:96:b5:74 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZv5wGcmhCSqURAyOP/Ikip8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiZDMyOTY4YWFhYTkxOWM1Mjc5MWZmYjA3ZjkzNDM2Yjc0 ZmQ1MDgwHhcNMjYwMTI2MTAwMTM0WhcNMjYwMTI3MTAwMTM0WjAzMTEwLwYDVQQD EyhmZTJiYTg1M2RmOWQzNzk4NjA0ZDg3ZjcyNGU3MGI5ZTZlNDk5MjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3j65iVQBEkuUJE1zpC6+Y5inUp6j PWHVjpGyae9Ypa7AOjEdc1ursrElv2miyKJHxTC/mTLIZ0QmPmAhHeFfSh+EJvqc +y9ivML+TOn1GLkBb2mMG60/SzJYdhviJM0wiHk8QD6MWeUGLmlloFJiCJJVwEcC nitN2Yyf59xcTbTZ38ELeiM53mwoD08Uv0qVxOdVM9D7GRd5d5SATkQK5TrPGXcG m5QbPq354wTvo/bm6xuaelEfS3C8jO09P0emv/6m6wx7BDwMVMO5lm42pD3F8oLW tmDkUJVPVWmiB+ougIIEk9IAYq+dQ098qH4k77vtVCeIKb0rW+AAz5e0GQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFP4rqFPfnTeYYE2H9yTnC55uSZJDMB8GA1UdIwQY MBaAFPvTKWiqqpGcUnkf+wf5NDa3T9UIMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS05TXBhS3Fxa1p4U2VSXzdCX2swTnJkUDFRZy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAvNzIzYjE1LWZhYWMtNDFmZi1hMWFh LTg4NzM5ZTMzNTA1My8xLzEtOU1wYUtxcWtaeFNlUl83Ql9rME5yZFAxUWcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2EwLzcyM2IxNS1mYWFjLTQxZmYtYTFhYS04ODczOWUzMzUw NTMvMS8xLTlNcGFLcXFrWnhTZVJfN0JfazBOcmRQMVFnLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzv7+ Dse+/A9fEODG+3DTqsmufZrl39GLGBsYT0HwYfs2b240vIK9zHdkyj3rCMt7z5ph r181zLBfgH4tjzw1Z9zV8hFAPHl60DEgVX/RkbtrQndhv4QMOJcRaGxDQPWSjdIV 7oI7fnEv6A7dk2jL92xd5NFY7TKigStc6v1gfLfsyTNDn7osyuDxIpKOdJOHfnUo 2skO4YX4rltWd1EegxAMuKEcprQhi4cINMFBjiGKbcyAA/QZEpa+ZrKSrZR5kBAV UZlx8gMq2f0Sd/Pr8kUaw7g7M1w6rfpAHlYFYfPhKN6SKPhCLGM5h2TMWQxttMU2 cn0+LOs6L7Px8Za1dA== -----END CERTIFICATE-----Generated at Mon Jan 26 13:30:31 2026 by rpki-client