This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft File: h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft (raw, json) Hash identifier: 90vmzfF8LXUFh1l5nLFnjk2e9abBSWqrqWHN8PrXXUg= Subject key identifier: 95:5E:0D:A1:94:EA:23:3B:8D:1C:5F:F1:F1:01:44:CB:13:83:34:38 Authority key identifier: 87:51:05:4D:FB:FD:AD:22:C4:9E:6B:BA:DA:B3:A1:8F:42:A1:C3:64 Certificate issuer: /CN=8751054dfbfdad22c49e6bbadab3a18f42a1c364 Certificate serial: 019BD5EA64D983D6010253844D51D925E0F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h1EFTfv9rSLEnmu62rOhj0Khw2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft Manifest number: 0170 Signing time: Mon 19 Jan 2026 11:01:06 +0000 Manifest this update: Mon 19 Jan 2026 11:01:06 +0000 Manifest next update: Tue 20 Jan 2026 11:01:06 +0000 Files and hashes: 1: H6uqUGEMkw_GDxczJD1M696P_zE.roa (hash: nWnw8H8sn82+YCkD2O0kI6uMQ5WeKNqhPpnI/ZrVopY=) 2: h1EFTfv9rSLEnmu62rOhj0Khw2Q.crl (hash: 9L+jmCehyOgkQJsnKGGyauc91pvCvQ4Ax700XslfK2w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/h1EFTfv9rSLEnmu62rOhj0Khw2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d5:ea:64:d9:83:d6:01:02:53:84:4d:51:d9:25:e0:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8751054dfbfdad22c49e6bbadab3a18f42a1c364 Validity Not Before: Jan 19 11:01:06 2026 GMT Not After : Jan 20 11:01:06 2026 GMT Subject: CN=955e0da194ea233b8d1c5ff1f10144cb13833438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:84:ad:8c:a6:36:38:3c:c5:16:2d:db:4f:af: 1f:18:d2:f9:8f:88:fa:01:69:81:5d:62:1c:14:99: 4d:6e:b6:40:dd:0f:21:34:0d:a3:af:76:a5:e5:63: 2e:02:b8:51:6f:92:73:e1:94:1e:fe:8b:89:1b:1c: 04:15:56:11:df:a9:4f:af:4f:73:91:ce:85:cc:a9: 69:99:8e:a1:1f:28:d5:43:df:8d:2e:96:55:3e:a0: fa:4b:0a:57:bf:68:78:8a:59:94:8c:36:29:3a:11: 29:a6:b7:36:19:ad:74:4d:71:08:1c:cc:7e:e8:0a: 2f:86:7b:a2:6c:0f:72:c4:b7:0b:d3:b5:65:7d:7e: 4c:8f:0b:b4:86:04:27:56:bc:d0:bf:a0:ac:64:b8: ff:c8:d1:e7:36:84:fc:ae:54:54:42:77:a8:e2:ea: 06:2f:76:44:ee:fe:e8:b5:a3:74:89:30:dc:e8:d4: e7:e1:5e:6a:07:d2:0d:e3:41:23:38:bd:28:17:64: 4b:38:38:60:a4:c0:36:10:a3:1b:c8:a6:53:6a:23: cf:af:43:1f:c3:ed:f0:37:86:85:d9:4b:33:96:99: e3:69:44:4a:f9:c4:aa:40:eb:13:fc:35:0d:e4:60: 63:f1:de:99:79:a9:73:81:b0:29:fe:2b:7c:05:a8: 0a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:5E:0D:A1:94:EA:23:3B:8D:1C:5F:F1:F1:01:44:CB:13:83:34:38 X509v3 Authority Key Identifier: keyid:87:51:05:4D:FB:FD:AD:22:C4:9E:6B:BA:DA:B3:A1:8F:42:A1:C3:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1EFTfv9rSLEnmu62rOhj0Khw2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:09:56:38:46:8c:87:d2:ef:43:5c:96:70:14:24:7e:73:48: d7:f7:08:16:c3:cf:70:65:cf:e4:a7:61:e0:7d:4d:b4:f6:86: 5a:b9:8f:13:55:20:72:c8:33:26:dd:34:aa:07:1d:22:bd:ce: be:c2:2f:44:21:82:7d:1d:d5:fa:87:01:fd:6d:da:a6:41:af: 7d:d4:92:82:17:c1:20:ea:f5:d7:1a:c3:34:e4:e2:59:16:50: 70:e8:cb:40:6b:03:10:ad:0f:e2:42:11:39:04:75:d9:41:86: 60:12:fe:4c:11:86:56:08:73:72:bb:90:a0:9a:ce:d7:d8:af: 49:16:ff:e7:62:8e:31:7c:de:8c:b7:47:4f:c2:a1:61:63:13: 36:1d:87:72:61:7e:ad:ba:a1:77:a5:ac:69:81:8a:29:ad:16: 3b:28:e4:25:57:53:5a:be:75:65:96:1a:03:3d:3c:66:9d:b4: 6b:99:de:c9:ad:72:50:9b:f0:0e:03:6f:2a:0c:37:ee:77:1b: 3f:a5:d5:a7:d4:23:f5:5b:83:64:40:5c:3c:36:97:28:2d:0d: 92:ab:e9:07:80:7e:62:69:fe:91:38:67:ee:76:57:af:92:91: cc:7c:51:14:53:3d:ac:57:4b:3a:eb:0b:78:98:af:ed:02:8c: a8:e3:e8:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvV6mTZg9YBAlOETVHZJeDxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NTEwNTRkZmJmZGFkMjJjNDllNmJiYWRhYjNhMThmNDJh MWMzNjQwHhcNMjYwMTE5MTEwMTA2WhcNMjYwMTIwMTEwMTA2WjAzMTEwLwYDVQQD Eyg5NTVlMGRhMTk0ZWEyMzNiOGQxYzVmZjFmMTAxNDRjYjEzODMzNDM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4StjKY2ODzFFi3bT68fGNL5j4j6 AWmBXWIcFJlNbrZA3Q8hNA2jr3al5WMuArhRb5Jz4ZQe/ouJGxwEFVYR36lPr09z kc6FzKlpmY6hHyjVQ9+NLpZVPqD6SwpXv2h4ilmUjDYpOhEpprc2Ga10TXEIHMx+ 6AovhnuibA9yxLcL07VlfX5Mjwu0hgQnVrzQv6CsZLj/yNHnNoT8rlRUQneo4uoG L3ZE7v7otaN0iTDc6NTn4V5qB9IN40EjOL0oF2RLODhgpMA2EKMbyKZTaiPPr0Mf w+3wN4aF2UszlpnjaURK+cSqQOsT/DUN5GBj8d6ZealzgbAp/it8BagKIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJVeDaGU6iM7jRxf8fEBRMsTgzQ4MB8GA1UdIwQY MBaAFIdRBU37/a0ixJ5rutqzoY9CocNkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDFFRlRmdjlyU0xFbm11NjJyT2hqMEtodzJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xZGE3ZWMtMWMzNC00NjQ3LTllODMt NzU3OWU4NWExYTQ5LzEvaDFFRlRmdjlyU0xFbm11NjJyT2hqMEtodzJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8xZGE3ZWMtMWMzNC00NjQ3LTllODMtNzU3OWU4NWExYTQ5 LzEvaDFFRlRmdjlyU0xFbm11NjJyT2hqMEtodzJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHglWOEaM h9LvQ1yWcBQkfnNI1/cIFsPPcGXP5Kdh4H1NtPaGWrmPE1UgcsgzJt00qgcdIr3O vsIvRCGCfR3V+ocB/W3apkGvfdSSghfBIOr11xrDNOTiWRZQcOjLQGsDEK0P4kIR OQR12UGGYBL+TBGGVghzcruQoJrO19ivSRb/52KOMXzejLdHT8KhYWMTNh2HcmF+ rbqhd6WsaYGKKa0WOyjkJVdTWr51ZZYaAz08Zp20a5neya1yUJvwDgNvKgw37ncb P6XVp9Qj9VuDZEBcPDaXKC0NkqvpB4B+Ymn+kThn7nZXr5KRzHxRFFM9rFdLOusL eJiv7QKMqOPoPg== -----END CERTIFICATE-----Generated at Mon Jan 19 19:01:56 2026 by rpki-client