This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft File: 1_fxawWhEjFRpnekesLY2QYd85A.mft (raw, json) Hash identifier: S6mcE84XzwTo4fY1v6aLtyuiZ5mhbDsUyUG9yH9FFLM= Subject key identifier: 1B:5A:3C:AF:90:25:83:51:DE:2C:67:CA:A8:C2:0E:DB:F3:3B:C8:B2 Authority key identifier: D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90 Certificate issuer: /CN=d7f7f16b05a1123151a677a47ac2d8d9061df390 Certificate serial: 019BFE0AC6753FFA68929D511229E9169AA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft Manifest number: 17F3 Signing time: Tue 27 Jan 2026 06:01:17 +0000 Manifest this update: Tue 27 Jan 2026 06:01:17 +0000 Manifest next update: Wed 28 Jan 2026 06:01:17 +0000 Files and hashes: 1: 1_fxawWhEjFRpnekesLY2QYd85A.crl (hash: 1783wxEUVMvUc1rg/lp1z9/oV/E7uR9x03yRE/yHoEs=) 2: TphEoqHx74oTxzeHIHgNhG40Etg.roa (hash: eKwF4mECICMY1eNS1Z8I/zufgWJJE+arH3zmPUlUZ9U=) 3: kOKbG2uwlgUTF9jmaFzt7vMoGYE.roa (hash: XPUsHAjyze1ymKKQjjk6fHKi5djr0xICcWZpDJI1q+M=) 4: m8_a0R-In6zPsMQtCZU7ofRpJV8.roa (hash: 9Klia2LNkTjTOYme1PTO2tY3GfAWev/ji3owResFBFg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 06:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:0a:c6:75:3f:fa:68:92:9d:51:12:29:e9:16:9a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7f7f16b05a1123151a677a47ac2d8d9061df390 Validity Not Before: Jan 27 06:01:17 2026 GMT Not After : Jan 28 06:01:17 2026 GMT Subject: CN=1b5a3caf90258351de2c67caa8c20edbf33bc8b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:03:6f:35:c1:ce:63:ab:db:db:83:8c:da:ec: cf:31:df:1e:a8:95:e1:94:ed:60:44:2c:a6:fb:a8: a2:8f:91:45:e9:c4:db:d9:25:5b:8b:4d:58:47:96: 40:85:bc:6e:b7:94:79:4b:b8:28:c3:53:9e:53:b0: e1:90:62:7d:7f:0a:fd:f7:0f:79:c2:e7:19:35:a6: 11:87:ba:0a:36:45:df:f3:f2:33:04:3a:0e:c4:b5: 30:4b:6b:83:a7:c9:6a:33:a2:c9:18:fc:4c:1c:c7: 85:58:45:b3:32:69:58:0e:5d:59:c4:1d:17:66:64: ba:9f:fb:c8:a3:82:e0:f5:a1:6c:b6:27:80:b4:aa: 0d:cf:85:cf:7a:72:c0:b4:54:e2:d8:9e:75:51:d4: 89:be:55:9e:89:9c:e2:09:0e:06:a7:68:95:c4:01: 32:08:d0:4e:9d:66:be:5e:96:e9:37:76:cb:d5:f0: 86:cf:38:8a:a5:9d:b1:25:ed:2a:8a:b1:b5:f0:e7: 91:df:1f:aa:ed:a8:15:43:37:52:aa:63:81:90:1b: e9:04:bb:61:1d:8f:21:41:39:ff:bb:cd:95:80:6d: 2f:d9:83:83:16:34:81:01:36:a7:e6:42:76:cd:ca: 5d:82:85:f6:c2:7b:6e:10:df:d7:0f:eb:95:92:8d: 66:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:5A:3C:AF:90:25:83:51:DE:2C:67:CA:A8:C2:0E:DB:F3:3B:C8:B2 X509v3 Authority Key Identifier: keyid:D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:27:7a:74:07:8e:0f:00:6b:00:6c:67:0a:96:02:7a:e7:f4: a9:f8:90:a0:eb:f3:9a:6d:c3:83:cc:0c:c8:1e:df:77:85:1b: 03:36:23:8a:db:61:31:a2:9f:89:a8:e9:9d:cc:42:e6:e7:62: e4:bc:d5:53:4f:11:01:47:88:1f:58:b1:a6:db:fd:8a:7f:14: ad:2b:26:0c:2b:8d:23:63:c9:d0:38:f0:14:ea:09:ba:56:c5: 72:10:06:89:40:cd:45:e4:1c:3d:59:f1:3c:88:bf:a0:8b:d4: 0e:9b:ba:c2:0b:a8:c9:b6:85:af:5b:92:3e:5b:c5:b6:ac:fd: fd:48:42:5a:9b:31:11:dc:59:7b:19:22:00:e7:2e:e0:7f:ea: 82:22:33:23:a1:3b:b8:83:a2:46:29:24:63:9c:f2:62:b1:2f: ad:29:12:a2:0a:46:f3:73:ba:49:3f:3b:40:c1:02:a2:84:a7: 8a:4c:1b:bf:f5:69:b2:ba:e0:7d:8e:75:33:ae:18:b0:ab:9c: f3:26:57:59:5e:eb:19:e3:7c:da:42:5f:35:68:ff:15:c7:a8: 5d:ea:db:0a:7e:f8:72:26:02:87:0f:0c:1f:69:2c:2d:74:44: fe:db:7c:2e:eb:b7:6c:8a:07:db:45:b9:c7:4d:79:ee:90:70: 8b:c0:0a:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+CsZ1P/pokp1REinpFpqgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3ZjdmMTZiMDVhMTEyMzE1MWE2NzdhNDdhYzJkOGQ5MDYx ZGYzOTAwHhcNMjYwMTI3MDYwMTE3WhcNMjYwMTI4MDYwMTE3WjAzMTEwLwYDVQQD EygxYjVhM2NhZjkwMjU4MzUxZGUyYzY3Y2FhOGMyMGVkYmYzM2JjOGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQNvNcHOY6vb24OM2uzPMd8eqJXh lO1gRCym+6iij5FF6cTb2SVbi01YR5ZAhbxut5R5S7gow1OeU7DhkGJ9fwr99w95 wucZNaYRh7oKNkXf8/IzBDoOxLUwS2uDp8lqM6LJGPxMHMeFWEWzMmlYDl1ZxB0X ZmS6n/vIo4Lg9aFstieAtKoNz4XPenLAtFTi2J51UdSJvlWeiZziCQ4Gp2iVxAEy CNBOnWa+XpbpN3bL1fCGzziKpZ2xJe0qirG18OeR3x+q7agVQzdSqmOBkBvpBLth HY8hQTn/u82VgG0v2YODFjSBATan5kJ2zcpdgoX2wntuEN/XD+uVko1mBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBtaPK+QJYNR3ixnyqjCDtvzO8iyMB8GA1UdIwQY MBaAFNf38WsFoRIxUaZ3pHrC2NkGHfOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMV9meGF3V2hFakZScG5la2VzTFkyUVlkODVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wMjI3YjctNTRjYS00ZjU2LWJlMjYt NmNiZTk0OTUzMmU0LzEvMV9meGF3V2hFakZScG5la2VzTFkyUVlkODVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8wMjI3YjctNTRjYS00ZjU2LWJlMjYtNmNiZTk0OTUzMmU0 LzEvMV9meGF3V2hFakZScG5la2VzTFkyUVlkODVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAECd6dAeO DwBrAGxnCpYCeuf0qfiQoOvzmm3Dg8wMyB7fd4UbAzYjitthMaKfiajpncxC5udi 5LzVU08RAUeIH1ixptv9in8UrSsmDCuNI2PJ0DjwFOoJulbFchAGiUDNReQcPVnx PIi/oIvUDpu6wguoybaFr1uSPlvFtqz9/UhCWpsxEdxZexkiAOcu4H/qgiIzI6E7 uIOiRikkY5zyYrEvrSkSogpG83O6ST87QMECooSnikwbv/VpsrrgfY51M64YsKuc 8yZXWV7rGeN82kJfNWj/FceoXerbCn74ciYChw8MH2ksLXRE/tt8Luu3bIoH20W5 x0157pBwi8AKcQ== -----END CERTIFICATE-----Generated at Tue Jan 27 13:05:25 2026 by rpki-client