This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft File: 1IVV-aUnJ_a89xXLR1CipKbDUWE.mft (raw, json) Hash identifier: fFtUfhBVvratN4ONHkRQurmJhy9DWvO4fwiUn7a++cQ= Subject key identifier: CC:76:F6:85:E0:FE:AF:45:23:88:44:9E:B3:00:45:AA:00:3B:2D:6D Authority key identifier: D4:85:55:F9:A5:27:27:F6:BC:F7:15:CB:47:50:A2:A4:A6:C3:51:61 Certificate issuer: /CN=d48555f9a52727f6bcf715cb4750a2a4a6c35161 Certificate serial: 019BDEED87E612C553DA8CE15984D101BE59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft Manifest number: 17DF Signing time: Wed 21 Jan 2026 05:01:07 +0000 Manifest this update: Wed 21 Jan 2026 05:01:07 +0000 Manifest next update: Thu 22 Jan 2026 05:01:07 +0000 Files and hashes: 1: 1IVV-aUnJ_a89xXLR1CipKbDUWE.crl (hash: WEHKBc0mp/dh9Py6tmSurBBYeabnE37pDBbg1Ie9mvI=) 2: Citg7qmp5SFz0X_DakT70Agy58A.roa (hash: suNo82Y9tPBibDI6nJIgvkFyxyp4RTbZM/6snuEOgFo=) 3: E6-KUD7DRI_0w_-xYTRlsYMzOAY.roa (hash: fNcbRaDAR/ECLiVIt5ZdhOFIfcxlGWzAHM9UPEfw0U0=) 4: X0ur3LhvwaGbR0SSZ5X6a-FSnjA.roa (hash: IToaXqDk0KkIsGrmapc6E0mxayDrae727bDiBQN47vQ=) 5: pgKqZWjn8bJ132yin6103Bat9Vc.roa (hash: M83Fju8fgneb3OZm/YtaPkJlVKYgDt3W/DPj1+xb3L4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:de:ed:87:e6:12:c5:53:da:8c:e1:59:84:d1:01:be:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d48555f9a52727f6bcf715cb4750a2a4a6c35161 Validity Not Before: Jan 21 05:01:07 2026 GMT Not After : Jan 22 05:01:07 2026 GMT Subject: CN=cc76f685e0feaf452388449eb30045aa003b2d6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7b:18:83:45:8e:6a:2a:cf:cf:e2:ea:13:52: 52:20:5c:6d:75:e6:9b:8f:c3:dd:85:f8:ea:37:6a: 17:f4:af:cc:a2:06:3b:ff:19:0d:38:5d:23:c0:e6: 1d:bb:2b:13:70:c4:84:39:38:73:4e:a3:87:45:2b: 51:a6:c6:e4:ed:33:33:e3:79:b7:26:98:99:8f:d5: e1:a2:31:3d:8a:5c:43:10:2e:22:f0:df:29:b1:c2: 0a:1c:cc:26:64:3a:cf:f2:34:e4:85:01:24:9d:c3: 14:fb:90:d4:c7:59:61:18:19:e1:ff:53:3b:3e:44: 3d:6b:17:7e:90:28:74:2b:04:2d:c0:de:f7:f2:4d: 3d:67:f8:7d:97:d2:ef:ae:5e:68:b4:72:39:4c:69: 80:d3:00:bd:6a:fe:54:07:93:71:ca:a8:02:dc:85: 48:de:a0:e5:fb:07:7c:8b:37:be:1c:5e:f2:3f:35: fa:e7:a7:d9:1c:79:ef:d3:d8:43:ce:d6:45:1b:d3: cb:ad:2b:d4:94:fb:79:cf:7b:8b:76:bc:e2:7b:eb: 98:85:51:9b:b6:75:67:da:a6:6a:fb:53:5b:b3:bc: f1:08:13:37:8a:dd:37:8f:37:9a:2d:de:07:89:a3: 99:b8:d1:e9:ce:c0:ab:a4:20:1b:c4:ec:2f:01:e0: dc:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:76:F6:85:E0:FE:AF:45:23:88:44:9E:B3:00:45:AA:00:3B:2D:6D X509v3 Authority Key Identifier: keyid:D4:85:55:F9:A5:27:27:F6:BC:F7:15:CB:47:50:A2:A4:A6:C3:51:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:36:73:6c:ba:62:e3:87:3c:12:fd:64:11:17:19:95:81:2d: f9:6b:ce:ee:1d:a7:22:b1:a2:5f:e6:52:c4:63:01:0f:c9:3a: 61:47:1b:17:e7:12:35:4f:1d:2e:53:81:4a:e5:0a:cf:69:0f: fc:41:e6:3b:c0:70:7e:84:28:da:38:bc:fe:cb:e0:94:4d:57: f5:b2:85:23:3f:26:35:c6:6b:93:04:da:b3:2c:58:82:d9:b0: ba:3a:8c:a5:e1:68:00:55:db:0d:ec:f2:51:2c:71:43:dc:7a: ca:6a:9d:d5:92:25:c4:c9:c3:fb:77:0e:79:c6:cc:7f:c6:83: 4d:2e:ba:84:ed:34:7c:35:68:d9:7f:8a:06:33:88:3f:93:0a: 67:fa:cd:03:ff:a6:53:58:1b:45:01:a1:80:f4:f6:d5:de:6b: 31:12:9e:41:77:f4:52:67:11:e0:c0:2f:29:14:02:1f:86:82: 15:b5:86:88:1a:02:b9:97:b5:e4:9c:5b:f8:cc:56:28:29:58: df:bc:7e:60:b2:5a:8f:ea:72:96:bc:76:a8:f3:57:ae:e9:ed: f7:15:62:63:43:92:50:ee:7c:ad:b9:c3:82:6d:74:d4:d2:80: 39:6a:c5:0b:ae:46:2e:81:6b:48:6c:45:3c:4a:05:c6:f4:9a: c9:a7:5f:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZve7YfmEsVT2ozhWYTRAb5ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ODU1NWY5YTUyNzI3ZjZiY2Y3MTVjYjQ3NTBhMmE0YTZj MzUxNjEwHhcNMjYwMTIxMDUwMTA3WhcNMjYwMTIyMDUwMTA3WjAzMTEwLwYDVQQD EyhjYzc2ZjY4NWUwZmVhZjQ1MjM4ODQ0OWViMzAwNDVhYTAwM2IyZDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HsYg0WOairPz+LqE1JSIFxtdeab j8PdhfjqN2oX9K/MogY7/xkNOF0jwOYduysTcMSEOThzTqOHRStRpsbk7TMz43m3 JpiZj9XhojE9ilxDEC4i8N8pscIKHMwmZDrP8jTkhQEkncMU+5DUx1lhGBnh/1M7 PkQ9axd+kCh0KwQtwN738k09Z/h9l9Lvrl5otHI5TGmA0wC9av5UB5NxyqgC3IVI 3qDl+wd8ize+HF7yPzX656fZHHnv09hDztZFG9PLrSvUlPt5z3uLdrzie+uYhVGb tnVn2qZq+1Nbs7zxCBM3it03jzeaLd4HiaOZuNHpzsCrpCAbxOwvAeDcJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMx29oXg/q9FI4hEnrMARaoAOy1tMB8GA1UdIwQY MBaAFNSFVfmlJyf2vPcVy0dQoqSmw1FhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlWVi1hVW5KX2E4OXhYTFIxQ2lwS2JEVVdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9lNDU1NzctNjViMS00ZDQzLTg1M2Et MDJhYmY4NTcyZmNiLzEvMUlWVi1hVW5KX2E4OXhYTFIxQ2lwS2JEVVdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9lNDU1NzctNjViMS00ZDQzLTg1M2EtMDJhYmY4NTcyZmNi LzEvMUlWVi1hVW5KX2E4OXhYTFIxQ2lwS2JEVVdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHDZzbLpi 44c8Ev1kERcZlYEt+WvO7h2nIrGiX+ZSxGMBD8k6YUcbF+cSNU8dLlOBSuUKz2kP /EHmO8BwfoQo2ji8/svglE1X9bKFIz8mNcZrkwTasyxYgtmwujqMpeFoAFXbDezy USxxQ9x6ymqd1ZIlxMnD+3cOecbMf8aDTS66hO00fDVo2X+KBjOIP5MKZ/rNA/+m U1gbRQGhgPT21d5rMRKeQXf0UmcR4MAvKRQCH4aCFbWGiBoCuZe15Jxb+MxWKClY 37x+YLJaj+pylrx2qPNXrunt9xViY0OSUO58rbnDgm101NKAOWrFC65GLoFrSGxF PEoFxvSayadfnQ== -----END CERTIFICATE-----Generated at Wed Jan 21 07:51:23 2026 by rpki-client