This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft File: k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft (raw, json) Hash identifier: c/vbNIk1SDasptFqFCWOzdvyflOHIaGW+1I12GRuaBc= Subject key identifier: 06:C8:33:F4:9A:15:1E:F6:1E:3F:80:B4:4A:12:62:C9:18:03:E3:2D Authority key identifier: 93:51:5F:25:98:6E:4B:57:2A:78:B1:09:D9:95:C9:DD:F5:DA:12:66 Certificate issuer: /CN=93515f25986e4b572a78b109d995c9ddf5da1266 Certificate serial: 019BFF1D170EDB9B0EF7FC9E5FA3E248FDEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft Manifest number: 10AE Signing time: Tue 27 Jan 2026 11:00:55 +0000 Manifest this update: Tue 27 Jan 2026 11:00:55 +0000 Manifest next update: Wed 28 Jan 2026 11:00:55 +0000 Files and hashes: 1: k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl (hash: EsN1a0+sCatD4m+fxROnxkKn18beLmxgDDUCxadGW18=) 2: uj3jB1h_BPelT0gTa2jTECaTC_E.roa (hash: 2myfgj9WZ6r4hpUffwkXe16EkwdfIe0OAsHUggJVE+c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ff:1d:17:0e:db:9b:0e:f7:fc:9e:5f:a3:e2:48:fd:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93515f25986e4b572a78b109d995c9ddf5da1266 Validity Not Before: Jan 27 11:00:55 2026 GMT Not After : Jan 28 11:00:55 2026 GMT Subject: CN=06c833f49a151ef61e3f80b44a1262c91803e32d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0b:c5:8e:c6:2b:c7:11:91:bf:ac:32:58:a3: 01:6d:1d:35:7a:6b:dd:71:ce:36:a0:7b:17:9b:83: 4f:ba:1d:33:82:a7:cd:da:b4:10:83:96:07:d7:b3: 88:8b:df:31:0a:5f:92:f5:86:fb:ee:08:cb:bc:da: 75:30:e2:03:cd:8b:e2:e9:e7:b0:31:9d:7d:51:37: e1:cd:f7:92:c0:44:9c:92:ad:b5:39:8f:d9:8c:c1: 4f:5c:ed:c6:b5:cb:e2:0b:64:59:18:79:14:8c:c0: 84:17:38:77:44:59:77:e6:b7:e7:65:7b:49:df:a9: af:1e:01:49:c5:15:d1:e5:f9:b7:67:9b:e1:86:cd: 14:b5:db:7b:dc:4b:53:53:b3:0a:ac:80:2b:3a:62: b4:50:50:c8:a0:02:d2:0e:c9:6a:fe:fb:9c:18:01: af:8e:ec:43:15:1f:87:a7:0d:95:5b:47:6e:fb:c6: 5a:3e:00:11:89:ea:19:77:3d:e7:db:69:40:16:14: 1d:f9:cf:0c:7b:3c:4e:4f:22:53:6b:58:67:67:01: b4:7c:dc:19:4e:6c:4f:91:e0:b8:0e:90:bc:b8:41: 1e:bd:6f:66:de:03:96:5b:e1:73:19:be:34:14:1a: dc:1f:80:ed:00:5d:f4:4e:03:df:61:63:60:49:c0: 6f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:C8:33:F4:9A:15:1E:F6:1E:3F:80:B4:4A:12:62:C9:18:03:E3:2D X509v3 Authority Key Identifier: keyid:93:51:5F:25:98:6E:4B:57:2A:78:B1:09:D9:95:C9:DD:F5:DA:12:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:8d:c9:22:60:fe:01:bf:25:03:8d:a1:5b:92:27:28:c2:8a: 22:8a:1e:e8:54:bc:ca:03:b7:b2:69:90:a1:1d:bd:94:4b:cf: f7:91:c4:f7:a6:60:34:ea:db:4e:9c:53:0b:4c:c0:12:48:32: c3:66:29:38:52:2c:86:8d:d8:89:90:1f:5d:cc:a6:e9:c5:68: 81:92:2a:76:eb:86:9f:54:39:7d:81:bc:c5:8a:13:b8:67:37: 7f:0d:63:36:f0:dd:58:34:0e:36:c7:70:07:33:e7:35:0a:92: 27:cf:ab:bf:6a:75:8c:0a:df:f0:e0:8c:05:7d:1b:28:2f:19: 45:6f:ad:cd:d9:d1:80:5d:c6:2d:a1:4e:4c:8b:f3:91:fa:f8: 26:04:30:bc:37:d2:4e:09:9b:1f:23:df:42:a5:ab:ff:e5:ea: 91:43:1c:54:c2:74:af:13:ca:a2:4c:cb:21:c6:42:74:78:d9: 5a:24:35:62:fa:03:2b:27:e2:b5:26:79:01:8d:ea:2e:ff:ca: 78:00:57:c6:bf:b1:ec:e3:d1:5b:60:dc:9f:fe:a2:b1:33:a7: e9:88:f8:66:7d:af:4f:9a:4a:55:50:a0:a6:3c:fe:ea:46:0c: 10:de:4b:bf:eb:41:cb:95:fb:94:16:59:ac:1c:b2:1e:bf:0c: 08:81:eb:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv/HRcO25sO9/yeX6PiSP3vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNTE1ZjI1OTg2ZTRiNTcyYTc4YjEwOWQ5OTVjOWRkZjVk YTEyNjYwHhcNMjYwMTI3MTEwMDU1WhcNMjYwMTI4MTEwMDU1WjAzMTEwLwYDVQQD EygwNmM4MzNmNDlhMTUxZWY2MWUzZjgwYjQ0YTEyNjJjOTE4MDNlMzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQvFjsYrxxGRv6wyWKMBbR01emvd cc42oHsXm4NPuh0zgqfN2rQQg5YH17OIi98xCl+S9Yb77gjLvNp1MOIDzYvi6eew MZ19UTfhzfeSwESckq21OY/ZjMFPXO3GtcviC2RZGHkUjMCEFzh3RFl35rfnZXtJ 36mvHgFJxRXR5fm3Z5vhhs0Utdt73EtTU7MKrIArOmK0UFDIoALSDslq/vucGAGv juxDFR+Hpw2VW0du+8ZaPgARieoZdz3n22lAFhQd+c8MezxOTyJTa1hnZwG0fNwZ TmxPkeC4DpC8uEEevW9m3gOWW+FzGb40FBrcH4DtAF30TgPfYWNgScBvmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAbIM/SaFR72Hj+AtEoSYskYA+MtMB8GA1UdIwQY MBaAFJNRXyWYbktXKnixCdmVyd312hJmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazFGZkpaaHVTMWNxZUxFSjJaWEozZlhhRW1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS84NGIwM2ItNTYxOS00MjcyLTk0N2Yt MTNkNTEzMjhhOWY3LzEvazFGZkpaaHVTMWNxZUxFSjJaWEozZlhhRW1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS84NGIwM2ItNTYxOS00MjcyLTk0N2YtMTNkNTEzMjhhOWY3 LzEvazFGZkpaaHVTMWNxZUxFSjJaWEozZlhhRW1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk43JImD+ Ab8lA42hW5InKMKKIooe6FS8ygO3smmQoR29lEvP95HE96ZgNOrbTpxTC0zAEkgy w2YpOFIsho3YiZAfXcym6cVogZIqduuGn1Q5fYG8xYoTuGc3fw1jNvDdWDQONsdw BzPnNQqSJ8+rv2p1jArf8OCMBX0bKC8ZRW+tzdnRgF3GLaFOTIvzkfr4JgQwvDfS TgmbHyPfQqWr/+XqkUMcVMJ0rxPKokzLIcZCdHjZWiQ1YvoDKyfitSZ5AY3qLv/K eABXxr+x7OPRW2Dcn/6isTOn6Yj4Zn2vT5pKVVCgpjz+6kYMEN5Lv+tBy5X7lBZZ rByyHr8MCIHrXg== -----END CERTIFICATE-----Generated at Tue Jan 27 12:44:21 2026 by rpki-client