This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft File: 1FurIIZT1CYevyAvYDYzQRmEYFU.mft (raw, json) Hash identifier: 2eOhpgQz3DG9ZXK4G+4uDHOvaXvksNt0snJj+RtfsCs= Subject key identifier: 67:8D:26:58:2C:A0:57:0D:24:C0:DC:C8:80:F8:3A:95:69:E9:CF:CA Authority key identifier: D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55 Certificate issuer: /CN=d45bab208653d4261ebf202f6036334119846055 Certificate serial: 019BDEB6961612EB336AB3710C049FE5BE4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft Manifest number: 1448 Signing time: Wed 21 Jan 2026 04:01:06 +0000 Manifest this update: Wed 21 Jan 2026 04:01:06 +0000 Manifest next update: Thu 22 Jan 2026 04:01:06 +0000 Files and hashes: 1: 1FurIIZT1CYevyAvYDYzQRmEYFU.crl (hash: aJcKVZr71uCNCiAgWt5mD2D2uJ8QwT3ZA438csLYvGs=) 2: 3KIe1YS7QLLqz4eqT1TIg8Y0lHA.roa (hash: E01qUWDxs3w8/EkHXVeEMazo/S6sr6Nl2XEVde5Y+Qw=) 3: BmDJr6NVvMRZJfVxWJAT8OCM7fY.roa (hash: 5dcydJfHt2J/Yp4bz6hC2PeHwVc0JR/YkXEsIrJj0IQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 04:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:de:b6:96:16:12:eb:33:6a:b3:71:0c:04:9f:e5:be:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45bab208653d4261ebf202f6036334119846055 Validity Not Before: Jan 21 04:01:06 2026 GMT Not After : Jan 22 04:01:06 2026 GMT Subject: CN=678d26582ca0570d24c0dcc880f83a9569e9cfca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:39:88:c1:31:6f:b6:4c:87:2c:27:b0:9d:9e: 70:2d:ea:70:a5:af:84:a2:ec:95:85:f6:1c:a2:30: 2d:17:e5:9e:fe:df:44:0f:e2:16:84:87:30:8e:aa: 15:bb:5e:88:1f:fd:84:4a:83:29:c5:c7:65:7e:ba: 99:71:8c:f6:09:d5:c6:f8:8a:cb:62:66:e4:bf:d3: ac:0e:23:7a:d3:a7:76:68:b8:8e:a2:e2:8b:a5:9a: 2f:aa:46:b2:fa:ea:33:35:3f:1d:ac:c4:4b:c6:df: a1:48:b8:05:e3:fb:28:56:6f:dc:38:40:55:a2:a9: fe:c2:64:77:32:20:16:53:95:28:fb:d8:4d:18:3a: b3:82:5d:55:6f:de:f7:13:5d:3a:7c:a7:9b:ef:eb: f1:d2:6c:14:11:ba:38:42:5c:4e:45:32:93:39:42: 8b:d5:61:d6:39:09:29:a8:5b:eb:56:93:d6:ff:39: ee:38:1c:ca:c1:fc:3b:24:06:34:2e:c7:ff:e0:16: f6:cc:e3:13:2a:f9:31:52:c1:06:33:a9:6d:69:61: 49:75:bd:df:f3:07:47:cd:02:4c:ca:b6:a5:78:45: db:f4:37:a7:4f:92:85:c1:c5:2a:41:a4:92:a8:37: f4:2b:16:ae:27:f5:cf:e2:91:a4:c3:ab:3c:63:cb: 4f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:8D:26:58:2C:A0:57:0D:24:C0:DC:C8:80:F8:3A:95:69:E9:CF:CA X509v3 Authority Key Identifier: keyid:D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:9d:17:af:20:20:05:66:6c:0d:be:86:0c:ba:2b:79:ac:c1: ed:2d:8e:27:ab:9a:aa:2d:36:98:ec:46:69:fe:ae:82:7f:db: d6:34:64:f7:16:c1:3c:4c:fe:95:df:a9:81:c4:b8:9c:df:bc: 5a:76:9c:cd:06:7c:6f:fb:e9:0b:ca:2b:93:54:3b:8a:52:db: e6:a0:aa:48:b9:51:7e:4f:6d:d8:47:8c:c6:16:d7:30:e3:9f: 57:af:66:71:bf:6e:df:53:c5:c7:08:df:5c:66:4c:36:a5:b2: 8b:d7:84:d1:6b:0c:ca:4c:c4:db:2c:ec:17:9e:be:55:f9:b2: 7d:85:31:e1:1c:92:49:6a:ca:63:ca:48:33:15:20:86:36:8a: 77:a5:5d:17:4f:e0:74:fe:4a:08:7b:2a:f7:88:1e:8a:e4:25: f2:3f:b0:49:64:c9:ad:62:55:c1:cf:fe:36:8e:e8:75:8b:1e: 0d:c6:e5:e3:49:26:2e:82:4d:02:e3:b1:60:df:38:6d:b9:92: d7:e2:2c:f7:5e:0e:66:9f:21:54:25:ca:bb:00:27:1a:0d:0d: bd:55:41:b7:d4:78:5a:73:4d:b2:6c:97:6c:4f:4f:11:b6:68: 11:d7:2d:6e:db:bc:b4:4a:f2:69:b5:5a:5c:87:c0:c2:32:c1: 97:d4:8c:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvetpYWEuszarNxDASf5b5OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NWJhYjIwODY1M2Q0MjYxZWJmMjAyZjYwMzYzMzQxMTk4 NDYwNTUwHhcNMjYwMTIxMDQwMTA2WhcNMjYwMTIyMDQwMTA2WjAzMTEwLwYDVQQD Eyg2NzhkMjY1ODJjYTA1NzBkMjRjMGRjYzg4MGY4M2E5NTY5ZTljZmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TmIwTFvtkyHLCewnZ5wLepwpa+E ouyVhfYcojAtF+We/t9ED+IWhIcwjqoVu16IH/2ESoMpxcdlfrqZcYz2CdXG+IrL Ymbkv9OsDiN606d2aLiOouKLpZovqkay+uozNT8drMRLxt+hSLgF4/soVm/cOEBV oqn+wmR3MiAWU5Uo+9hNGDqzgl1Vb973E106fKeb7+vx0mwUEbo4QlxORTKTOUKL 1WHWOQkpqFvrVpPW/znuOBzKwfw7JAY0Lsf/4Bb2zOMTKvkxUsEGM6ltaWFJdb3f 8wdHzQJMyraleEXb9DenT5KFwcUqQaSSqDf0KxauJ/XP4pGkw6s8Y8tPrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGeNJlgsoFcNJMDcyID4OpVp6c/KMB8GA1UdIwQY MBaAFNRbqyCGU9QmHr8gL2A2M0EZhGBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUZ1cklJWlQxQ1lldnlBdllEWXpRUm1FWUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wYWVjMWYtNjA2NS00ZDg4LTg0NTQt MTI0ZDNmYjM5MDZhLzEvMUZ1cklJWlQxQ1lldnlBdllEWXpRUm1FWUZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8wYWVjMWYtNjA2NS00ZDg4LTg0NTQtMTI0ZDNmYjM5MDZh LzEvMUZ1cklJWlQxQ1lldnlBdllEWXpRUm1FWUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGZ0XryAg BWZsDb6GDLoreazB7S2OJ6uaqi02mOxGaf6ugn/b1jRk9xbBPEz+ld+pgcS4nN+8 WnaczQZ8b/vpC8ork1Q7ilLb5qCqSLlRfk9t2EeMxhbXMOOfV69mcb9u31PFxwjf XGZMNqWyi9eE0WsMykzE2yzsF56+VfmyfYUx4RySSWrKY8pIMxUghjaKd6VdF0/g dP5KCHsq94geiuQl8j+wSWTJrWJVwc/+No7odYseDcbl40kmLoJNAuOxYN84bbmS 1+Is914OZp8hVCXKuwAnGg0NvVVBt9R4WnNNsmyXbE9PEbZoEdctbtu8tEryabVa XIfAwjLBl9SM/Q== -----END CERTIFICATE-----Generated at Wed Jan 21 14:44:13 2026 by rpki-client