This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft File: hR1ONNTkhTnBcEUdTiYTiIf26SI.mft (raw, json) Hash identifier: mSyqEkuJJm2CSlqRNAvmFTEOpe1ZBkeWQkpj9v2mLyQ= Subject key identifier: 15:2A:B7:2D:D2:1E:0E:08:1B:08:85:99:CD:30:8A:AC:7F:9C:CE:8C Authority key identifier: 85:1D:4E:34:D4:E4:85:39:C1:70:45:1D:4E:26:13:88:87:F6:E9:22 Certificate issuer: /CN=851d4e34d4e48539c170451d4e26138887f6e922 Certificate serial: 019BFC8A585F0919D745E99CB0FF5B55F9F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft Manifest number: 1398 Signing time: Mon 26 Jan 2026 23:01:23 +0000 Manifest this update: Mon 26 Jan 2026 23:01:23 +0000 Manifest next update: Tue 27 Jan 2026 23:01:23 +0000 Files and hashes: 1: 7Ybe3VwVebBn_3Dp58ErIFU2DCI.roa (hash: uLq5WfI4V9hrlBMvr6SbcLDBsN0jQny54rAkYdIdE3k=) 2: XkEF2FpoYMDNdSJQTi_LayA4Ol4.roa (hash: XlXxPv3rPuv4OjwQn/aSmAl+EcMC4mB71Uh0o84lUwM=) 3: hR1ONNTkhTnBcEUdTiYTiIf26SI.crl (hash: 6znw4OtBiImK/3v53O2aCVZZTWW1ZW/Rw8r3KRkFEEg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:8a:58:5f:09:19:d7:45:e9:9c:b0:ff:5b:55:f9:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=851d4e34d4e48539c170451d4e26138887f6e922 Validity Not Before: Jan 26 23:01:23 2026 GMT Not After : Jan 27 23:01:23 2026 GMT Subject: CN=152ab72dd21e0e081b088599cd308aac7f9cce8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:23:f1:7f:e5:23:51:66:4b:78:b8:1a:af:99: 66:7c:1b:c3:38:7b:2b:0f:89:1e:47:95:79:88:26: 95:5d:7f:05:5c:e3:13:e2:a7:d4:30:76:86:48:f1: 0b:ff:ef:e1:f8:e6:8a:42:55:7d:ba:a3:9d:07:e6: dd:85:b5:30:a4:e3:95:d4:09:96:b4:65:c3:f6:66: c9:97:20:fa:58:29:b2:94:c4:21:ca:50:15:9f:7a: b6:c2:30:8f:7b:13:19:69:94:ef:bf:6e:d0:b1:11: 9a:96:c6:7d:73:1a:0f:3b:74:e7:a3:90:a4:f0:84: 49:a6:3e:52:82:da:8d:be:61:ff:41:3c:a3:32:2a: 9e:c0:6c:4b:22:db:44:36:af:00:7b:ff:ab:79:62: 38:a6:a6:68:ec:c1:4c:22:2c:d1:6b:d1:3c:59:c9: cc:ca:18:e6:93:53:8d:59:f4:be:33:7f:f2:7a:94: c4:42:0f:c4:ec:5a:93:1f:d4:e9:9d:ef:c3:9b:79: 38:f5:31:6d:db:81:ef:b7:ce:0d:d0:82:78:91:d1: 62:14:cf:56:96:4f:f7:57:60:f2:c5:56:97:69:86: ef:df:80:1b:e1:99:77:3d:33:54:c1:04:23:1b:b2: b3:de:36:0a:4d:23:a5:2e:51:78:ce:20:d2:d6:17: 39:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:2A:B7:2D:D2:1E:0E:08:1B:08:85:99:CD:30:8A:AC:7F:9C:CE:8C X509v3 Authority Key Identifier: keyid:85:1D:4E:34:D4:E4:85:39:C1:70:45:1D:4E:26:13:88:87:F6:E9:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:e9:84:f8:6c:cf:65:0c:bb:8d:ba:4d:e5:0a:ea:05:76:e1: 7c:09:4f:76:b3:23:b3:de:f0:a8:9f:f5:a2:64:b8:0d:0c:37: c8:d2:46:40:84:14:35:14:4a:ad:cb:f7:79:05:53:9a:e0:27: d7:db:b6:9e:aa:c7:28:ce:22:76:53:84:04:43:c1:89:ba:68: a2:62:66:92:a5:f2:0f:19:38:f8:42:2f:1b:a9:9c:8f:6a:7c: b1:94:97:2c:03:d3:4b:42:9a:33:47:56:d8:db:17:ca:30:22: a6:f8:07:0b:3a:4c:31:48:1c:14:28:a3:7d:4c:31:15:e1:74: c1:0c:01:75:0f:c4:7a:52:86:dd:13:a1:7a:d1:0f:80:3c:68: 96:e7:2d:0b:b4:14:77:87:85:6c:8a:8d:0c:15:34:8b:71:84: 9b:3f:0c:80:7b:d6:cb:f9:c3:d2:5a:b6:87:f5:c3:2b:b3:38: 10:19:dc:85:90:83:5f:7d:f5:44:5f:08:af:39:f3:2d:b3:f9: 5b:60:3d:c8:37:ff:3e:9d:5a:96:ca:6c:0d:91:81:27:3d:51: 45:e2:a1:34:d0:51:db:df:41:30:11:d5:20:09:b0:14:46:21: a0:fc:c9:f3:0a:39:9f:a7:a3:f2:f8:73:20:9e:18:1c:ff:d1: 3a:41:50:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8ilhfCRnXRemcsP9bVfnwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MWQ0ZTM0ZDRlNDg1MzljMTcwNDUxZDRlMjYxMzg4ODdm NmU5MjIwHhcNMjYwMTI2MjMwMTIzWhcNMjYwMTI3MjMwMTIzWjAzMTEwLwYDVQQD EygxNTJhYjcyZGQyMWUwZTA4MWIwODg1OTljZDMwOGFhYzdmOWNjZThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CPxf+UjUWZLeLgar5lmfBvDOHsr D4keR5V5iCaVXX8FXOMT4qfUMHaGSPEL/+/h+OaKQlV9uqOdB+bdhbUwpOOV1AmW tGXD9mbJlyD6WCmylMQhylAVn3q2wjCPexMZaZTvv27QsRGalsZ9cxoPO3Tno5Ck 8IRJpj5SgtqNvmH/QTyjMiqewGxLIttENq8Ae/+reWI4pqZo7MFMIizRa9E8WcnM yhjmk1ONWfS+M3/yepTEQg/E7FqTH9Tpne/Dm3k49TFt24Hvt84N0IJ4kdFiFM9W lk/3V2DyxVaXaYbv34Ab4Zl3PTNUwQQjG7Kz3jYKTSOlLlF4ziDS1hc5iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBUqty3SHg4IGwiFmc0wiqx/nM6MMB8GA1UdIwQY MBaAFIUdTjTU5IU5wXBFHU4mE4iH9ukiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFIxT05OVGtoVG5CY0VVZFRpWVRpSWYyNlNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9iZjE1ODktNmFkZi00NGIzLTk3NDYt ODFjNDA1NTE0OGUwLzEvaFIxT05OVGtoVG5CY0VVZFRpWVRpSWYyNlNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9iZjE1ODktNmFkZi00NGIzLTk3NDYtODFjNDA1NTE0OGUw LzEvaFIxT05OVGtoVG5CY0VVZFRpWVRpSWYyNlNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuemE+GzP ZQy7jbpN5QrqBXbhfAlPdrMjs97wqJ/1omS4DQw3yNJGQIQUNRRKrcv3eQVTmuAn 19u2nqrHKM4idlOEBEPBibpoomJmkqXyDxk4+EIvG6mcj2p8sZSXLAPTS0KaM0dW 2NsXyjAipvgHCzpMMUgcFCijfUwxFeF0wQwBdQ/EelKG3ROhetEPgDxoluctC7QU d4eFbIqNDBU0i3GEmz8MgHvWy/nD0lq2h/XDK7M4EBnchZCDX331RF8IrznzLbP5 W2A9yDf/Pp1alspsDZGBJz1RReKhNNBR299BMBHVIAmwFEYhoPzJ8wo5n6ej8vhz IJ4YHP/ROkFQjg== -----END CERTIFICATE-----Generated at Tue Jan 27 03:10:51 2026 by rpki-client