This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft File: 1fBlyL23j_KU98VFSXHb-r-2wYQ.mft (raw, json) Hash identifier: b1o3m7Sh9q0w3sHwpQroZD9xnXEMVuA291hMM0fRzeA= Subject key identifier: DE:24:7A:81:27:90:BF:44:B9:A9:0B:8D:5B:C1:FB:06:37:F1:49:02 Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84 Certificate issuer: /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184 Certificate serial: 019C27E1F9F23EB7C77A644A8EA0700B45E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft Manifest number: 12FE Signing time: Wed 04 Feb 2026 09:00:46 +0000 Manifest this update: Wed 04 Feb 2026 09:00:46 +0000 Manifest next update: Thu 05 Feb 2026 09:00:46 +0000 Files and hashes: 1: 1fBlyL23j_KU98VFSXHb-r-2wYQ.crl (hash: yRNYz8UA5KqADdyZuLNw8lXVnUbGPUkczSlbmxfoZdI=) 2: XzhQllg1Ngl309aRqikGgBtFojI.roa (hash: aZqPKeTFPYPjagSFs0ZOP4Bb2ybWfYzLdU16fXavbpc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:27:e1:f9:f2:3e:b7:c7:7a:64:4a:8e:a0:70:0b:45:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184 Validity Not Before: Feb 4 09:00:46 2026 GMT Not After : Feb 5 09:00:46 2026 GMT Subject: CN=de247a812790bf44b9a90b8d5bc1fb0637f14902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b1:e7:5c:c4:74:0c:6b:d1:e9:75:6e:d7:7e: 64:13:84:7d:d2:a7:af:24:e5:ae:56:d7:ff:60:bb: 43:eb:50:eb:53:83:6a:60:5f:30:6b:15:3f:95:b0: 84:a4:74:a7:b3:77:02:0c:cc:ab:a4:eb:42:ba:a0: 56:e0:ad:2d:4f:26:ab:ff:bc:21:45:ba:76:c2:34: 4d:3a:7b:0a:1c:89:ba:83:af:56:3d:64:ce:ed:65: 08:66:9f:0a:74:90:f7:26:9d:59:18:e4:1e:19:ae: e5:fd:d1:77:ee:46:ce:f4:93:b1:c4:9d:7d:c0:82: 97:dd:0d:a2:f3:5d:db:0b:02:9d:51:3d:f4:22:b7: d3:f1:96:ba:58:cf:d4:c6:b8:a8:eb:97:b1:a1:5e: aa:b6:a7:6c:bd:ce:2a:fd:e4:03:52:7f:fd:d9:21: fb:c1:a7:bc:65:66:3b:19:47:c9:45:e0:71:b1:e0: 38:c7:4d:aa:5c:5d:82:03:87:03:95:b9:e4:88:92: d4:e2:ce:56:23:ac:e9:3f:42:1b:26:8b:20:b1:23: ed:5a:73:08:fa:ef:4a:17:cc:84:56:1c:b9:02:6b: fa:7e:61:c3:96:52:b5:66:3f:9a:ee:d3:73:3a:29: 89:e7:36:67:b0:5a:d5:2f:ca:89:ed:9b:b7:26:1a: d1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:24:7A:81:27:90:BF:44:B9:A9:0B:8D:5B:C1:FB:06:37:F1:49:02 X509v3 Authority Key Identifier: keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:25:12:fe:d3:a4:11:b5:8b:40:29:86:ae:5a:a7:9f:bc:16: 93:b6:5b:ac:a4:54:bd:36:c4:f4:56:c1:2e:23:36:6c:e3:c5: cf:9d:58:14:ef:9a:fb:78:1b:2d:1e:a7:90:7e:e2:91:e2:7f: c0:d2:3e:de:76:82:05:0a:c0:24:3e:77:b3:0a:3e:6f:e6:0b: 39:bb:9e:61:4e:86:d3:1a:11:62:dd:df:2e:a0:6f:bd:b2:7e: 0c:9c:62:59:1d:f2:ac:ae:85:68:cb:cb:c0:43:52:22:d3:8e: 69:11:1e:d8:d3:67:c0:59:f9:65:77:6e:d7:64:34:0a:ef:30: 56:89:8c:65:83:db:aa:3c:d8:74:de:7a:a7:6e:81:c4:ce:42: 4a:d2:3c:f3:3e:ef:c7:c5:6f:f8:d3:68:e1:22:61:25:0b:9a: 59:02:22:09:5e:7a:47:47:9c:b5:61:f9:f1:0f:dd:b7:2e:80: 35:1a:6c:1a:81:d0:dd:9d:00:ed:12:59:93:54:ee:1d:cb:2e: 95:27:de:fa:53:01:1e:cf:26:88:91:6f:d1:d1:be:2d:a9:21: 7a:40:56:4c:22:fd:3e:f4:0c:c2:aa:c2:02:a9:fa:b8:97:40: b4:45:9c:70:bc:20:97:73:5f:31:bb:6b:e5:d0:c5:ae:23:cf: fd:9c:e5:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwn4fnyPrfHemRKjqBwC0XoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZjA2NWM4YmRiNzhmZjI5NGY3YzU0NTQ5NzFkYmZhYmZi NmMxODQwHhcNMjYwMjA0MDkwMDQ2WhcNMjYwMjA1MDkwMDQ2WjAzMTEwLwYDVQQD EyhkZTI0N2E4MTI3OTBiZjQ0YjlhOTBiOGQ1YmMxZmIwNjM3ZjE0OTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbHnXMR0DGvR6XVu135kE4R90qev JOWuVtf/YLtD61DrU4NqYF8waxU/lbCEpHSns3cCDMyrpOtCuqBW4K0tTyar/7wh Rbp2wjRNOnsKHIm6g69WPWTO7WUIZp8KdJD3Jp1ZGOQeGa7l/dF37kbO9JOxxJ19 wIKX3Q2i813bCwKdUT30IrfT8Za6WM/Uxrio65exoV6qtqdsvc4q/eQDUn/92SH7 wae8ZWY7GUfJReBxseA4x02qXF2CA4cDlbnkiJLU4s5WI6zpP0IbJosgsSPtWnMI +u9KF8yEVhy5Amv6fmHDllK1Zj+a7tNzOimJ5zZnsFrVL8qJ7Zu3JhrRmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN4keoEnkL9EuakLjVvB+wY38UkCMB8GA1UdIwQY MBaAFNXwZci9t4/ylPfFRUlx2/q/tsGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWZCbHlMMjNqX0tVOThWRlNYSGItci0yd1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9mMjc3ZWEtNzI2YS00MDUyLThlNWIt MzVhNWRjMmM3OTJjLzEvMWZCbHlMMjNqX0tVOThWRlNYSGItci0yd1lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9mMjc3ZWEtNzI2YS00MDUyLThlNWItMzVhNWRjMmM3OTJj LzEvMWZCbHlMMjNqX0tVOThWRlNYSGItci0yd1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATSUS/tOk EbWLQCmGrlqnn7wWk7ZbrKRUvTbE9FbBLiM2bOPFz51YFO+a+3gbLR6nkH7ikeJ/ wNI+3naCBQrAJD53swo+b+YLObueYU6G0xoRYt3fLqBvvbJ+DJxiWR3yrK6FaMvL wENSItOOaREe2NNnwFn5ZXdu12Q0Cu8wVomMZYPbqjzYdN56p26BxM5CStI88z7v x8Vv+NNo4SJhJQuaWQIiCV56R0ectWH58Q/dty6ANRpsGoHQ3Z0A7RJZk1TuHcsu lSfe+lMBHs8miJFv0dG+LakhekBWTCL9PvQMwqrCAqn6uJdAtEWccLwgl3NfMbtr 5dDFriPP/Zzlxw== -----END CERTIFICATE-----Generated at Wed Feb 4 15:09:55 2026 by rpki-client