This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.mft File: r1vEnV8BojWvkonPSSav_vevkrA.mft (raw, json) Hash identifier: LFBLsDaTXBXhNu1M2PE+QTSO2whjbZCtoWYOWMt+bxs= Subject key identifier: 36:ED:ED:AA:9A:F9:0B:8D:67:12:41:BD:F1:95:DD:7E:E7:57:BA:39 Authority key identifier: AF:5B:C4:9D:5F:01:A2:35:AF:92:89:CF:49:26:AF:FE:F7:AF:92:B0 Certificate issuer: /CN=af5bc49d5f01a235af9289cf4926affef7af92b0 Certificate serial: 019BAD25468D3CC429FBB64A793DB51872CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1vEnV8BojWvkonPSSav_vevkrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.mft Manifest number: 17C1 Signing time: Sun 11 Jan 2026 13:00:59 +0000 Manifest this update: Sun 11 Jan 2026 13:00:59 +0000 Manifest next update: Mon 12 Jan 2026 13:00:59 +0000 Files and hashes: 1: KeMni_7tMd8WW03JhhJAoiRDaZc.roa (hash: J+/LqFSqApR1P/gNsOZB6B78O8nvHtR7KNZNBA4Da8s=) 2: r1vEnV8BojWvkonPSSav_vevkrA.crl (hash: rX5aVsRhh8dlJKJKf00hqj3gY5q6yYyHNSo9EM180Ag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.mft rsync://rpki.ripe.net/repository/DEFAULT/r1vEnV8BojWvkonPSSav_vevkrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ad:25:46:8d:3c:c4:29:fb:b6:4a:79:3d:b5:18:72:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af5bc49d5f01a235af9289cf4926affef7af92b0 Validity Not Before: Jan 11 13:00:59 2026 GMT Not After : Jan 12 13:00:59 2026 GMT Subject: CN=36ededaa9af90b8d671241bdf195dd7ee757ba39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ed:9d:01:40:a0:d1:2d:28:fa:9c:10:cc:08: 05:67:3f:e0:a5:7e:4b:13:ae:16:b0:ca:59:62:a0: a1:94:1a:83:9e:65:ed:d6:59:85:1c:ce:b7:0d:3a: c0:77:fa:79:ad:3c:41:c0:fe:29:4a:23:82:5d:00: 45:e4:7f:64:a9:34:2f:44:48:60:c2:99:b8:b7:20: 28:e3:8e:7a:66:e5:d9:c7:8a:dd:e0:81:a0:e4:a3: ba:21:67:a8:c0:53:4b:5c:32:99:e2:b1:35:38:18: 9a:17:5f:2c:35:c8:53:06:fa:94:88:10:a9:1e:35: 02:f8:98:0b:06:ec:94:05:96:cc:19:db:60:0a:54: 87:8f:44:3b:5e:9d:67:44:98:02:fc:a4:0e:40:62: db:1b:97:be:38:26:8e:e5:4c:c1:a3:0f:27:e1:5d: 30:5c:b6:56:78:e4:6f:32:28:02:65:5b:6f:86:87: 91:e6:c0:d7:c5:bd:cf:a3:55:e7:63:ff:58:ac:83: e1:6e:8f:ad:a4:22:3b:a2:92:55:34:ef:9a:98:f4: 92:cb:3e:44:0d:1d:f4:60:0b:27:07:61:df:fa:4b: 2b:b2:0b:58:45:20:59:c7:b6:6b:40:ec:d4:43:5d: 58:46:7d:e4:04:66:38:99:a4:fe:a6:cb:1a:63:46: ea:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:ED:ED:AA:9A:F9:0B:8D:67:12:41:BD:F1:95:DD:7E:E7:57:BA:39 X509v3 Authority Key Identifier: keyid:AF:5B:C4:9D:5F:01:A2:35:AF:92:89:CF:49:26:AF:FE:F7:AF:92:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1vEnV8BojWvkonPSSav_vevkrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:0a:f5:00:a8:21:a3:a1:d3:bf:25:3c:da:37:f3:79:b0:a9: 17:37:c0:f3:b2:c8:9f:a9:0c:b4:93:7d:82:de:d8:07:52:8b: 52:99:6d:1d:a2:e6:0c:47:49:41:c7:6e:4a:e2:fd:e5:b9:23: 85:1d:ef:ab:d5:1d:da:20:d6:0f:9e:be:c8:b8:f6:c0:24:bf: 6a:b6:c4:4a:5e:85:3f:b5:75:ef:87:e3:90:85:35:af:2a:c9: 9f:c4:6d:1a:31:0a:3f:a5:35:ff:3d:cb:25:d3:b8:a9:00:b1: 23:26:cd:8b:7e:9c:6e:a6:7b:26:a1:45:0e:fd:ff:a6:24:31: ff:3a:f5:7d:17:fd:dd:47:b5:e3:12:3f:37:bf:0d:6f:8d:56: 5f:7d:ea:6c:b6:f9:f4:27:b9:65:d1:64:db:bd:ba:3d:d6:06: 20:82:be:33:66:75:50:b2:66:72:26:f6:5b:ff:f0:5f:68:9d: b1:17:5a:15:41:ee:18:3f:e5:17:0a:0e:fa:22:04:6f:6c:cc: 8b:87:da:10:6d:53:63:2c:8a:7c:fb:20:ee:83:4f:7d:b2:f5: 1d:63:24:69:ad:b8:c9:84:d8:46:0e:07:9e:47:f9:42:04:0a: f2:73:76:83:02:0e:bd:f5:46:c5:49:cf:54:66:f8:01:61:f6: bc:ca:74:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZutJUaNPMQp+7ZKeT21GHLKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNWJjNDlkNWYwMWEyMzVhZjkyODljZjQ5MjZhZmZlZjdh ZjkyYjAwHhcNMjYwMTExMTMwMDU5WhcNMjYwMTEyMTMwMDU5WjAzMTEwLwYDVQQD EygzNmVkZWRhYTlhZjkwYjhkNjcxMjQxYmRmMTk1ZGQ3ZWU3NTdiYTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsu2dAUCg0S0o+pwQzAgFZz/gpX5L E64WsMpZYqChlBqDnmXt1lmFHM63DTrAd/p5rTxBwP4pSiOCXQBF5H9kqTQvREhg wpm4tyAo4456ZuXZx4rd4IGg5KO6IWeowFNLXDKZ4rE1OBiaF18sNchTBvqUiBCp HjUC+JgLBuyUBZbMGdtgClSHj0Q7Xp1nRJgC/KQOQGLbG5e+OCaO5UzBow8n4V0w XLZWeORvMigCZVtvhoeR5sDXxb3Po1XnY/9YrIPhbo+tpCI7opJVNO+amPSSyz5E DR30YAsnB2Hf+ksrsgtYRSBZx7ZrQOzUQ11YRn3kBGY4maT+pssaY0bq+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDbt7aqa+QuNZxJBvfGV3X7nV7o5MB8GA1UdIwQY MBaAFK9bxJ1fAaI1r5KJz0kmr/73r5KwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjF2RW5WOEJvald2a29uUFNTYXZfdmV2a3JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9mMmZiZDgtZDZlMS00N2FkLWFhMjEt MTQ3ZTQ1NzI4NzNhLzEvcjF2RW5WOEJvald2a29uUFNTYXZfdmV2a3JBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9mMmZiZDgtZDZlMS00N2FkLWFhMjEtMTQ3ZTQ1NzI4NzNh LzEvcjF2RW5WOEJvald2a29uUFNTYXZfdmV2a3JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoQr1AKgh o6HTvyU82jfzebCpFzfA87LIn6kMtJN9gt7YB1KLUpltHaLmDEdJQcduSuL95bkj hR3vq9Ud2iDWD56+yLj2wCS/arbESl6FP7V174fjkIU1ryrJn8RtGjEKP6U1/z3L JdO4qQCxIybNi36cbqZ7JqFFDv3/piQx/zr1fRf93Ue14xI/N78Nb41WX33qbLb5 9Ce5ZdFk2726PdYGIIK+M2Z1ULJmcib2W//wX2idsRdaFUHuGD/lFwoO+iIEb2zM i4faEG1TYyyKfPsg7oNPfbL1HWMkaa24yYTYRg4Hnkf5QgQK8nN2gwIOvfVGxUnP VGb4AWH2vMp0QA== -----END CERTIFICATE-----Generated at Sun Jan 11 18:17:16 2026 by rpki-client