This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft File: RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft (raw, json) Hash identifier: m03s1Uva47K00shOVLteGA7UNz98jwsYNGmJ6R3RLZM= Subject key identifier: F7:CC:37:EE:04:98:FB:9D:AA:41:71:66:09:F8:36:FB:A6:A1:74:90 Authority key identifier: 44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96 Certificate issuer: /CN=441d4b92dd150364c65b7d21299028678b0a5296 Certificate serial: 019BFA64E62087CEAC7D91E291B821418737 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft Manifest number: 17F3 Signing time: Mon 26 Jan 2026 13:01:15 +0000 Manifest this update: Mon 26 Jan 2026 13:01:15 +0000 Manifest next update: Tue 27 Jan 2026 13:01:15 +0000 Files and hashes: 1: 36DzStGfXWJaTvy_DFt5js-qBkY.roa (hash: 8LA/a3S6Q/+rbVsFghMDCmBix0HHSJzG0POoZHw8My4=) 2: 9yn0ZWrwWlwVQcTY4DZrDaNSuqU.roa (hash: XESXJFfuiD+BaGLEcM4v4ajEMguCnVi9qwOcF7gca0c=) 3: E1fZi9ctnO61xdkwBdXsEigsazY.roa (hash: AfabkRw7EM5b0Hf4k7+LAG9L1ed9yMxYQaK/+/5IZY8=) 4: RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl (hash: 9lk5hz7rAMTG777x03dgwd+iSuJO23m/jLMvW7DkCC0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:64:e6:20:87:ce:ac:7d:91:e2:91:b8:21:41:87:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=441d4b92dd150364c65b7d21299028678b0a5296 Validity Not Before: Jan 26 13:01:15 2026 GMT Not After : Jan 27 13:01:15 2026 GMT Subject: CN=f7cc37ee0498fb9daa41716609f836fba6a17490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2d:5e:df:fe:86:a8:e5:6c:d9:d8:0f:f4:cf: e9:e6:29:32:e2:7f:b0:b2:53:8f:61:6f:ea:d3:16: 2b:10:49:85:d3:72:74:7c:39:cd:79:0f:31:d4:38: 26:f3:91:e5:17:19:41:4b:eb:19:96:aa:8f:43:4f: 4d:33:5c:d3:bd:e2:85:09:d0:09:59:15:38:cf:ba: 72:6b:0e:7c:23:19:31:88:17:1a:60:e6:39:8e:8d: bc:49:0c:b6:b5:6d:ce:fc:ff:c4:54:01:94:08:4d: d1:99:69:72:03:7e:95:43:d7:7d:da:01:26:13:95: 73:ef:d6:e0:79:0a:92:ba:89:f3:78:1c:f0:c7:12: 09:36:ce:98:d2:44:70:24:b9:b7:58:a9:e9:a9:0e: 77:7b:ae:b5:46:7e:92:1c:72:c1:8a:e8:64:fc:44: 76:29:68:e2:b5:0c:1c:15:3f:3f:84:f2:b3:09:ec: 45:29:1d:11:44:4e:30:b1:3b:ad:e6:68:e7:43:24: da:4c:97:6b:a6:d5:52:56:c7:39:c7:fc:24:ee:b5: dc:4a:62:42:09:af:af:b1:c4:da:83:e6:84:c6:b0: 4b:ef:59:a4:00:46:3b:a6:a6:ac:cf:c6:fc:2e:48: ed:91:b4:1b:86:1e:e9:3a:18:2a:e3:03:20:95:b7: 83:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:CC:37:EE:04:98:FB:9D:AA:41:71:66:09:F8:36:FB:A6:A1:74:90 X509v3 Authority Key Identifier: keyid:44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:f8:f2:02:2d:91:d8:8a:61:c4:8a:97:02:5b:41:23:aa:f1: dd:62:9e:d3:ac:14:9e:13:58:5b:39:78:b9:56:29:53:c9:d4: 38:29:a9:2a:65:14:3b:ac:f2:1d:fa:a4:4d:f5:b4:bf:52:27: fa:20:54:97:89:38:0a:e6:97:93:1c:71:67:37:e8:fb:a2:2b: 33:ba:39:7d:d3:38:56:f6:1a:cf:d9:a7:b0:14:7d:c2:a2:d9: 98:7d:00:a0:9e:5f:58:36:ff:11:8b:ca:90:36:57:fe:4e:c0: 8f:f3:fa:d9:1d:e8:d2:d6:c3:20:37:d3:79:df:2b:f8:20:15: a8:98:67:97:73:ce:54:9b:37:fa:2c:19:01:2d:ec:98:f3:bb: a3:94:14:71:b2:d1:8b:85:d8:13:df:04:27:f2:ab:fb:85:4c: 2a:b2:5d:cf:e3:20:55:d3:2a:c2:4b:ca:8b:5d:24:21:39:fd: 78:18:2f:73:bf:f6:9b:88:11:5c:64:67:41:aa:f9:38:dd:78: ff:a8:cd:86:a9:9e:93:a6:29:df:38:78:10:66:1d:62:a8:14: b6:cd:37:99:88:e4:4a:a7:c0:66:b9:94:24:fb:a0:23:17:15: 7d:72:60:17:c9:ea:14:c3:ab:03:85:5b:0c:03:0c:35:03:70: eb:85:42:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6ZOYgh86sfZHikbghQYc3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0MWQ0YjkyZGQxNTAzNjRjNjViN2QyMTI5OTAyODY3OGIw YTUyOTYwHhcNMjYwMTI2MTMwMTE1WhcNMjYwMTI3MTMwMTE1WjAzMTEwLwYDVQQD EyhmN2NjMzdlZTA0OThmYjlkYWE0MTcxNjYwOWY4MzZmYmE2YTE3NDkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsi1e3/6GqOVs2dgP9M/p5iky4n+w slOPYW/q0xYrEEmF03J0fDnNeQ8x1Dgm85HlFxlBS+sZlqqPQ09NM1zTveKFCdAJ WRU4z7pyaw58IxkxiBcaYOY5jo28SQy2tW3O/P/EVAGUCE3RmWlyA36VQ9d92gEm E5Vz79bgeQqSuonzeBzwxxIJNs6Y0kRwJLm3WKnpqQ53e661Rn6SHHLBiuhk/ER2 KWjitQwcFT8/hPKzCexFKR0RRE4wsTut5mjnQyTaTJdrptVSVsc5x/wk7rXcSmJC Ca+vscTag+aExrBL71mkAEY7pqasz8b8LkjtkbQbhh7pOhgq4wMglbeD1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPfMN+4EmPudqkFxZgn4NvumoXSQMB8GA1UdIwQY MBaAFEQdS5LdFQNkxlt9ISmQKGeLClKWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkIxTGt0MFZBMlRHVzMwaEtaQW9aNHNLVXBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS81ZDQ1NGItOWQxZC00ZTdkLWFlNzMt N2Y1ZjRkNjA0NzMxLzEvUkIxTGt0MFZBMlRHVzMwaEtaQW9aNHNLVXBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS81ZDQ1NGItOWQxZC00ZTdkLWFlNzMtN2Y1ZjRkNjA0NzMx LzEvUkIxTGt0MFZBMlRHVzMwaEtaQW9aNHNLVXBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZfjyAi2R 2IphxIqXAltBI6rx3WKe06wUnhNYWzl4uVYpU8nUOCmpKmUUO6zyHfqkTfW0v1In +iBUl4k4CuaXkxxxZzfo+6IrM7o5fdM4VvYaz9mnsBR9wqLZmH0AoJ5fWDb/EYvK kDZX/k7Aj/P62R3o0tbDIDfTed8r+CAVqJhnl3POVJs3+iwZAS3smPO7o5QUcbLR i4XYE98EJ/Kr+4VMKrJdz+MgVdMqwkvKi10kITn9eBgvc7/2m4gRXGRnQar5ON14 /6jNhqmek6Yp3zh4EGYdYqgUts03mYjkSqfAZrmUJPugIxcVfXJgF8nqFMOrA4Vb DAMMNQNw64VCrg== -----END CERTIFICATE-----Generated at Mon Jan 26 22:11:35 2026 by rpki-client