This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft File: 1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft (raw, json) Hash identifier: 0iCUCGTePechzDuidGQOrzEnvrAgJwXiWoxLgbhVfFE= Subject key identifier: A2:25:C6:2C:BC:39:10:DB:60:8C:AE:6A:92:B5:AA:A2:FE:62:0A:F3 Authority key identifier: FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC Certificate issuer: /CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc Certificate serial: 019BFBE5483CE96657736CA06550A39BA512 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft Manifest number: 17EF Signing time: Mon 26 Jan 2026 20:01:05 +0000 Manifest this update: Mon 26 Jan 2026 20:01:05 +0000 Manifest next update: Tue 27 Jan 2026 20:01:05 +0000 Files and hashes: 1: 1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl (hash: oGz6skyRGeAsDa3DkKNiC9w0ppKlncIiDvsnUxrb77s=) 2: IJjjXp-NnXkuXMqifqVCpQIFmVM.roa (hash: FAQDxmr60QdwQ78woSv2S5TsR/jufKqQ3EBTR4pkvxw=) 3: QJ9BmvbVTtS7A8Ks_kSD4dd3-hw.roa (hash: YikTmuc2uFJ3g6A35GBcQPgqdQmjHo//OB0ZeNSHvUk=) 4: x7kr8s7NqU4B3f01PUE6TDdXkmw.roa (hash: D0Z4Gt2OJKdDOlJ+V6cYS0q2kZL9EpP1fRqlwgKU8FE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:e5:48:3c:e9:66:57:73:6c:a0:65:50:a3:9b:a5:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc Validity Not Before: Jan 26 20:01:05 2026 GMT Not After : Jan 27 20:01:05 2026 GMT Subject: CN=a225c62cbc3910db608cae6a92b5aaa2fe620af3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:96:1f:85:7f:18:b5:84:16:fc:d0:10:d1:3f: e3:33:84:7a:28:0b:3c:d1:7f:fa:7c:20:64:e3:78: ae:cc:99:18:51:8b:db:1a:e3:28:00:38:a7:76:68: e4:68:4e:2f:d7:ad:3a:78:3d:d7:56:a5:86:25:db: 94:04:ab:7d:9c:72:fa:fb:aa:81:65:d2:58:f6:4b: bd:05:4b:44:cb:c9:a3:a4:c1:e0:1a:80:21:c3:cc: d3:e8:20:32:a3:9a:5d:2f:65:a6:42:e0:8c:4d:62: 53:ef:cd:50:0b:6c:1d:41:55:0d:06:c0:af:a5:fa: 46:a7:4e:83:d4:f8:6e:9f:f6:83:2a:91:be:5f:ab: 3d:7e:a3:64:b7:09:e4:3e:fd:d1:f2:6b:82:c9:c2: ac:1b:a1:63:50:8f:39:55:62:cc:d8:66:b6:16:e2: 2c:28:9f:f8:80:2d:87:1e:33:17:a6:2b:5d:fc:68: e0:33:72:1b:90:af:36:03:8b:61:0e:94:b1:e0:b8: 1f:41:6c:7c:80:3a:7e:9b:ce:38:53:7d:8c:3a:1d: a8:3a:ce:16:b7:69:97:7a:79:0f:18:a7:00:43:75: 31:37:66:f3:ff:77:93:da:86:a6:5e:90:3f:02:b2: 68:d7:4f:d4:4f:d7:cc:98:ae:17:d7:61:cb:7b:4d: 95:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:25:C6:2C:BC:39:10:DB:60:8C:AE:6A:92:B5:AA:A2:FE:62:0A:F3 X509v3 Authority Key Identifier: keyid:FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:f5:35:d2:90:80:04:19:06:15:cd:6c:cc:9d:b9:6a:26:59: ee:db:4f:90:b8:41:50:fb:02:b9:66:7e:55:4d:d4:d8:a6:9b: ce:95:46:89:f4:be:77:e3:fc:27:50:77:ad:e5:f1:53:bb:c9: 1a:10:b9:af:7b:c8:9d:00:e1:36:aa:2a:be:83:c2:bd:9b:f1: 45:4e:02:2a:35:b8:89:68:40:ca:3a:de:af:2e:f2:43:b3:c5: 60:45:4e:34:77:44:41:00:12:8f:fd:47:94:e2:3b:a2:3f:fb: 1d:34:50:2b:7f:8e:4b:2e:d1:5b:d9:10:c0:d7:fc:b2:2d:e0: 52:d8:e4:cf:12:8d:e7:72:cb:1f:d7:81:20:ae:a1:ab:7f:f1: a4:a2:6e:3e:d5:9a:41:9c:ab:bb:90:48:02:ab:04:fd:ba:d7: 14:62:5f:dc:fb:e7:74:2b:bc:4d:b1:d3:45:41:75:40:b3:c2: 41:60:3d:eb:d3:b9:1b:f4:d7:65:88:66:a7:59:ae:0d:f8:75: 9f:b9:0e:2e:a3:47:cc:8f:c6:37:1e:ce:b1:14:4e:fd:96:cf: 83:00:d7:2f:29:93:c6:60:c5:eb:39:54:a5:44:16:87:bf:9e: 8f:45:2e:81:03:a5:77:27:83:a9:bf:de:48:cb:44:da:20:f9: 9f:6d:c8:8f -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZv75Ug86WZXc2ygZVCjm6USMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMWU5YjRlOGRjNDliZTNhYmE1OTc0MjVhZWZkOGIzYTUz NjJmZmMwHhcNMjYwMTI2MjAwMTA1WhcNMjYwMTI3MjAwMTA1WjAzMTEwLwYDVQQD EyhhMjI1YzYyY2JjMzkxMGRiNjA4Y2FlNmE5MmI1YWFhMmZlNjIwYWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5YfhX8YtYQW/NAQ0T/jM4R6KAs8 0X/6fCBk43iuzJkYUYvbGuMoADindmjkaE4v1606eD3XVqWGJduUBKt9nHL6+6qB ZdJY9ku9BUtEy8mjpMHgGoAhw8zT6CAyo5pdL2WmQuCMTWJT781QC2wdQVUNBsCv pfpGp06D1Phun/aDKpG+X6s9fqNktwnkPv3R8muCycKsG6FjUI85VWLM2Ga2FuIs KJ/4gC2HHjMXpitd/GjgM3IbkK82A4thDpSx4LgfQWx8gDp+m844U32MOh2oOs4W t2mXenkPGKcAQ3UxN2bz/3eT2oamXpA/ArJo10/UT9fMmK4X12HLe02VTwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFKIlxiy8ORDbYIyuapK1qqL+YgrzMB8GA1UdIwQY MBaAFPoem06NxJvjq6WXQlrv2LOlNi/8MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1oNmJUbzNFbS1PcnBaZENXdV9ZczZVMkxfdy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUvNDcwN2I0LTAwMzItNGFjNy1iY2M3 LTQwYzFhNzI3MDJlZi8xLzEtaDZiVG8zRW0tT3JwWmRDV3VfWXM2VTJMX3cubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2M1LzQ3MDdiNC0wMDMyLTRhYzctYmNjNy00MGMxYTcyNzAy ZWYvMS8xLWg2YlRvM0VtLU9ycFpkQ1d1X1lzNlUyTF93LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAvU1 0pCABBkGFc1szJ25aiZZ7ttPkLhBUPsCuWZ+VU3U2KabzpVGifS+d+P8J1B3reXx U7vJGhC5r3vInQDhNqoqvoPCvZvxRU4CKjW4iWhAyjrery7yQ7PFYEVONHdEQQAS j/1HlOI7oj/7HTRQK3+OSy7RW9kQwNf8si3gUtjkzxKN53LLH9eBIK6hq3/xpKJu PtWaQZyru5BIAqsE/brXFGJf3PvndCu8TbHTRUF1QLPCQWA969O5G/TXZYhmp1mu Dfh1n7kOLqNHzI/GNx7OsRRO/ZbPgwDXLymTxmDF6zlUpUQWh7+ej0UugQOldyeD qb/eSMtE2iD5n23Ijw== -----END CERTIFICATE-----Generated at Tue Jan 27 06:08:10 2026 by rpki-client