This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/82ec13-82cf-4eb7-b1e4-9a55885e5f66/1/1-LnOH73nyKTFjBblVGQ66nPn0Vg.mft File: 1-LnOH73nyKTFjBblVGQ66nPn0Vg.mft (raw, json) Hash identifier: iz9ElYu4pwf9QzSfAoop4qGGMcXAw18I/44AkTxcepQ= Subject key identifier: C1:DD:94:D5:7D:93:E9:F9:30:F3:CA:78:4F:35:C0:5D:12:05:29:30 Authority key identifier: F8:B9:CE:1F:BD:E7:C8:A4:C5:8C:16:E5:54:64:3A:EA:73:E7:D1:58 Certificate issuer: /CN=f8b9ce1fbde7c8a4c58c16e554643aea73e7d158 Certificate serial: 019BFBE4DF294E6621F73C5CD978C864BFE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LnOH73nyKTFjBblVGQ66nPn0Vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/82ec13-82cf-4eb7-b1e4-9a55885e5f66/1/1-LnOH73nyKTFjBblVGQ66nPn0Vg.mft Manifest number: 03 Signing time: Mon 26 Jan 2026 20:00:39 +0000 Manifest this update: Mon 26 Jan 2026 20:00:39 +0000 Manifest next update: Tue 27 Jan 2026 20:00:39 +0000 Files and hashes: 1: 1-LnOH73nyKTFjBblVGQ66nPn0Vg.crl (hash: aArjadthjkTp3uyQmtJuRmNY9i/lVeLnDydlkBJCXrs=) 2: Wlc1mb_xj0DVaYUUDsBCwlVjTTI.roa (hash: OHp7KIYzafsL5kJAIldfo0uoA+OMQo8MF+eM1s5TkVM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/82ec13-82cf-4eb7-b1e4-9a55885e5f66/1/1-LnOH73nyKTFjBblVGQ66nPn0Vg.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/82ec13-82cf-4eb7-b1e4-9a55885e5f66/1/1-LnOH73nyKTFjBblVGQ66nPn0Vg.mft rsync://rpki.ripe.net/repository/DEFAULT/1-LnOH73nyKTFjBblVGQ66nPn0Vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:e4:df:29:4e:66:21:f7:3c:5c:d9:78:c8:64:bf:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8b9ce1fbde7c8a4c58c16e554643aea73e7d158 Validity Not Before: Jan 26 20:00:39 2026 GMT Not After : Jan 27 20:00:39 2026 GMT Subject: CN=c1dd94d57d93e9f930f3ca784f35c05d12052930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:82:e9:ba:e4:1b:ed:ef:73:f0:bd:b2:29:57: a1:d9:f0:51:00:20:57:db:20:8e:fb:3b:10:b3:20: 54:d9:41:d5:a8:a9:2f:61:95:a0:89:04:ef:4d:1e: 44:22:6c:ac:e2:3f:20:e7:05:f9:cc:1f:42:0c:db: ab:f5:5a:c6:17:9e:bc:e1:55:9a:68:31:cd:d7:b5: ca:76:1a:da:89:d9:e5:60:c6:7a:5a:fe:b9:61:d3: 75:9b:68:49:d9:c0:8e:96:4c:fb:33:d0:43:7b:19: 0c:af:89:63:0b:19:55:74:14:e1:cd:0f:cc:8a:f5: a1:54:c0:9c:5e:fe:50:aa:f9:b4:47:0e:73:0a:91: e1:10:ac:15:b3:98:95:46:fc:6f:19:cb:a0:c7:79: dc:ed:0b:ed:c9:de:e9:01:dc:69:09:f5:22:12:52: 54:7e:55:33:a2:3b:02:de:f8:11:dc:4b:17:3e:bd: 18:23:84:5d:15:42:6b:f0:6a:51:92:0f:ac:12:54: 28:81:0b:9f:e0:66:4e:01:16:18:50:4d:d9:c6:c3: b6:1e:1c:36:b5:f1:d2:6c:a2:0a:ee:9b:46:ce:a7: 61:32:e8:70:33:de:44:a5:ca:b9:1e:5c:3f:1f:d0: ba:61:98:67:33:19:a5:60:af:b4:1c:a2:d5:c2:9b: 67:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:DD:94:D5:7D:93:E9:F9:30:F3:CA:78:4F:35:C0:5D:12:05:29:30 X509v3 Authority Key Identifier: keyid:F8:B9:CE:1F:BD:E7:C8:A4:C5:8C:16:E5:54:64:3A:EA:73:E7:D1:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LnOH73nyKTFjBblVGQ66nPn0Vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/82ec13-82cf-4eb7-b1e4-9a55885e5f66/1/1-LnOH73nyKTFjBblVGQ66nPn0Vg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/82ec13-82cf-4eb7-b1e4-9a55885e5f66/1/1-LnOH73nyKTFjBblVGQ66nPn0Vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:fa:98:c8:77:db:5b:20:75:09:ce:80:07:2d:fc:48:8d:5b: 8b:e4:3a:d5:98:dd:b6:28:2d:57:a8:6a:bb:17:d8:8e:e9:2b: 4d:7e:87:81:0a:6d:98:4e:33:2e:69:35:d3:8f:a5:6d:b5:76: 4f:f2:eb:5c:d7:62:2c:80:93:46:11:0c:f3:f7:68:5c:26:64: 29:af:0c:c3:53:8e:27:fb:30:7a:fc:fe:8b:cd:4c:26:57:1a: 31:08:5c:e9:df:02:17:df:1d:1a:0e:bb:4b:24:19:5f:b2:39: d4:f5:9f:90:0f:06:32:1b:1c:bb:78:80:1c:95:39:4a:8a:5b: 1c:74:ca:db:61:4b:db:c2:79:7e:1b:0b:7c:78:8f:09:d1:9d: d4:5b:dd:ab:04:8b:db:e0:44:28:c8:10:a8:1e:dc:ca:52:2e: 38:60:a6:35:12:92:d0:64:8f:c9:f4:c3:f3:0b:45:a3:f1:24: f0:83:8f:10:3d:b3:2e:a4:0f:2f:5e:61:ff:a3:f7:a0:1c:a8: 74:20:f7:60:79:ad:88:e0:b6:8c:99:fa:9a:98:1f:46:05:2d: cf:e0:94:6a:53:a7:cb:dd:d5:10:46:42:22:c9:34:a3:ab:1f: 51:c3:4d:61:93:c8:94:76:50:f7:74:5f:64:9f:bc:4d:84:6f: 63:b4:d6:53 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZv75N8pTmYh9zxc2XjIZL/oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YjljZTFmYmRlN2M4YTRjNThjMTZlNTU0NjQzYWVhNzNl N2QxNTgwHhcNMjYwMTI2MjAwMDM5WhcNMjYwMTI3MjAwMDM5WjAzMTEwLwYDVQQD EyhjMWRkOTRkNTdkOTNlOWY5MzBmM2NhNzg0ZjM1YzA1ZDEyMDUyOTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoLpuuQb7e9z8L2yKVeh2fBRACBX 2yCO+zsQsyBU2UHVqKkvYZWgiQTvTR5EImys4j8g5wX5zB9CDNur9VrGF5684VWa aDHN17XKdhraidnlYMZ6Wv65YdN1m2hJ2cCOlkz7M9BDexkMr4ljCxlVdBThzQ/M ivWhVMCcXv5Qqvm0Rw5zCpHhEKwVs5iVRvxvGcugx3nc7Qvtyd7pAdxpCfUiElJU flUzojsC3vgR3EsXPr0YI4RdFUJr8GpRkg+sElQogQuf4GZOARYYUE3ZxsO2Hhw2 tfHSbKIK7ptGzqdhMuhwM95Epcq5Hlw/H9C6YZhnMxmlYK+0HKLVwptncQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFMHdlNV9k+n5MPPKeE81wF0SBSkwMB8GA1UdIwQY MBaAFPi5zh+958ikxYwW5VRkOupz59FYMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1Mbk9INzNueUtURmpCYmxWR1E2Nm5QbjBWZy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWQvODJlYzEzLTgyY2YtNGViNy1iMWU0 LTlhNTU4ODVlNWY2Ni8xLzEtTG5PSDczbnlLVEZqQmJsVkdRNjZuUG4wVmcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2FkLzgyZWMxMy04MmNmLTRlYjctYjFlNC05YTU1ODg1ZTVm NjYvMS8xLUxuT0g3M255S1RGakJibFZHUTY2blBuMFZnLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkfqY yHfbWyB1Cc6ABy38SI1bi+Q61ZjdtigtV6hquxfYjukrTX6HgQptmE4zLmk104+l bbV2T/LrXNdiLICTRhEM8/doXCZkKa8Mw1OOJ/swevz+i81MJlcaMQhc6d8CF98d Gg67SyQZX7I51PWfkA8GMhscu3iAHJU5SopbHHTK22FL28J5fhsLfHiPCdGd1Fvd qwSL2+BEKMgQqB7cylIuOGCmNRKS0GSPyfTD8wtFo/Ek8IOPED2zLqQPL15h/6P3 oByodCD3YHmtiOC2jJn6mpgfRgUtz+CUalOny93VEEZCIsk0o6sfUcNNYZPIlHZQ 93RfZJ+8TYRvY7TWUw== -----END CERTIFICATE-----Generated at Tue Jan 27 03:05:45 2026 by rpki-client