This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft File: 1-qe1orkHCRPTSTKBX-tH42Mf318.mft (raw, json) Hash identifier: 0eUZK/woaNa+Psld58Bhr+qlqGaKkLBdjyrLD2Eik6U= Subject key identifier: 65:22:0C:11:99:30:E9:D7:9D:F7:D2:05:40:42:D6:57:00:93:B2:5E Authority key identifier: FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F Certificate issuer: /CN=faa7b5a2b9070913d34932815feb47e3631fdf5f Certificate serial: 019BFBAEF51CD08D84ECC23E3DE5E5F81528 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft Manifest number: 15C6 Signing time: Mon 26 Jan 2026 19:01:45 +0000 Manifest this update: Mon 26 Jan 2026 19:01:45 +0000 Manifest next update: Tue 27 Jan 2026 19:01:45 +0000 Files and hashes: 1: 1-qe1orkHCRPTSTKBX-tH42Mf318.crl (hash: tE0MrfbiZ0w2l5R7sbPbU7/ycb7u/yHy0EErubEmCms=) 2: z8zovr62ahngZe9eyLY1UmJJA_E.roa (hash: h9t0xBYGXyCoUtS+tRL/Tqf5YaJCLff6uGboBY8MeD8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:ae:f5:1c:d0:8d:84:ec:c2:3e:3d:e5:e5:f8:15:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faa7b5a2b9070913d34932815feb47e3631fdf5f Validity Not Before: Jan 26 19:01:45 2026 GMT Not After : Jan 27 19:01:45 2026 GMT Subject: CN=65220c119930e9d79df7d2054042d6570093b25e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:11:53:a7:8d:14:8a:a7:bc:c0:1f:28:46:65: f9:a0:98:8d:0e:f3:fd:65:26:6b:0d:67:f7:c6:88: 4b:40:1c:11:53:3c:53:71:3a:7e:b4:73:0b:45:74: f8:09:42:29:9f:c7:2d:67:5b:b4:d6:88:ac:60:f9: c2:b1:1e:5a:86:75:60:7a:e3:93:6f:4b:d2:d8:78: ca:43:1b:31:a8:6d:c1:d6:f4:18:04:ca:73:67:6f: e2:93:35:8d:d4:a5:d4:4d:d4:64:16:3f:95:2e:03: 10:b5:1f:23:db:00:dd:9d:57:79:a8:89:38:04:07: 7e:39:43:40:d3:20:9d:1d:77:37:47:4f:ba:e7:33: 5c:f8:a9:45:c1:85:f2:24:5c:4b:3e:f2:56:27:57: 70:35:01:d8:5f:36:c3:4b:95:e7:63:a5:62:51:b9: 1e:f5:f6:c0:ed:6b:53:e3:4e:b2:4b:d4:3e:2f:9b: 84:8f:05:f2:43:73:4f:ed:04:8c:6f:02:99:f0:79: 6d:c5:58:78:60:5c:f2:d3:3d:93:c5:a0:dc:66:28: 98:d5:cb:71:79:3d:58:16:2c:e4:19:6e:64:01:21: 58:0e:47:10:11:ab:9e:0f:c3:e8:e3:38:23:bf:45: c6:1b:91:98:9d:e6:ef:23:ad:e8:de:62:65:bb:78: 70:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:22:0C:11:99:30:E9:D7:9D:F7:D2:05:40:42:D6:57:00:93:B2:5E X509v3 Authority Key Identifier: keyid:FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:c4:ce:3d:d8:1e:c6:7e:b3:94:c3:56:22:0a:46:30:60:42: 3a:e3:d1:fd:5f:1e:9e:fe:fc:1e:82:cb:01:ea:4e:be:98:47: 4f:e2:d2:f5:a9:53:27:ea:f0:13:11:f6:77:92:74:ee:3b:b7: cd:24:00:c2:7f:b5:8e:ed:b3:81:2b:65:06:58:63:6c:a9:05: 47:b0:93:8a:ff:04:c6:20:b7:0c:07:e7:4e:3d:6b:c0:47:af: ca:41:a0:71:d9:b8:68:30:58:7b:e4:a4:55:62:db:18:df:c4: ed:5d:63:83:b5:8e:c2:ab:bf:24:0d:7b:4d:ef:4b:8b:1a:6b: 50:1c:2f:21:18:1d:68:c3:db:0c:53:7b:c7:66:fa:67:9a:97: 55:0a:00:80:5f:e0:46:14:e6:ea:89:93:c1:c7:91:83:a4:84: f8:1e:71:93:a4:e5:71:a5:8a:6e:10:18:61:63:0d:4a:f7:45: 65:36:03:ee:39:e6:de:3e:73:ba:64:42:39:d5:4f:2f:92:8b: 60:4a:56:31:86:5d:71:63:24:25:76:bc:f5:23:bb:bc:50:d5: d1:13:7d:0c:c6:76:04:e4:19:11:0e:10:35:97:4f:21:c5:af: 54:40:61:69:71:d0:88:ac:36:74:ad:05:92:1c:83:8c:5d:f2: 45:b8:bf:c2 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZv7rvUc0I2E7MI+PeXl+BUoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhYTdiNWEyYjkwNzA5MTNkMzQ5MzI4MTVmZWI0N2UzNjMx ZmRmNWYwHhcNMjYwMTI2MTkwMTQ1WhcNMjYwMTI3MTkwMTQ1WjAzMTEwLwYDVQQD Eyg2NTIyMGMxMTk5MzBlOWQ3OWRmN2QyMDU0MDQyZDY1NzAwOTNiMjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxFTp40Uiqe8wB8oRmX5oJiNDvP9 ZSZrDWf3xohLQBwRUzxTcTp+tHMLRXT4CUIpn8ctZ1u01oisYPnCsR5ahnVgeuOT b0vS2HjKQxsxqG3B1vQYBMpzZ2/ikzWN1KXUTdRkFj+VLgMQtR8j2wDdnVd5qIk4 BAd+OUNA0yCdHXc3R0+65zNc+KlFwYXyJFxLPvJWJ1dwNQHYXzbDS5XnY6ViUbke 9fbA7WtT406yS9Q+L5uEjwXyQ3NP7QSMbwKZ8HltxVh4YFzy0z2TxaDcZiiY1ctx eT1YFizkGW5kASFYDkcQEaueD8Po4zgjv0XGG5GYnebvI63o3mJlu3hwiQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFGUiDBGZMOnXnffSBUBC1lcAk7JeMB8GA1UdIwQY MBaAFPqntaK5BwkT00kygV/rR+NjH99fMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1xZTFvcmtIQ1JQVFNUS0JYLXRINDJNZjMxOC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWQvNTFhZDU0LWRkMzAtNGYzNS05MDZj LTgxMWRjYjdjNDRmYy8xLzEtcWUxb3JrSENSUFRTVEtCWC10SDQyTWYzMTgubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2VkLzUxYWQ1NC1kZDMwLTRmMzUtOTA2Yy04MTFkY2I3YzQ0 ZmMvMS8xLXFlMW9ya0hDUlBUU1RLQlgtdEg0Mk1mMzE4LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATcTO Pdgexn6zlMNWIgpGMGBCOuPR/V8env78HoLLAepOvphHT+LS9alTJ+rwExH2d5J0 7ju3zSQAwn+1ju2zgStlBlhjbKkFR7CTiv8ExiC3DAfnTj1rwEevykGgcdm4aDBY e+SkVWLbGN/E7V1jg7WOwqu/JA17Te9LixprUBwvIRgdaMPbDFN7x2b6Z5qXVQoA gF/gRhTm6omTwceRg6SE+B5xk6TlcaWKbhAYYWMNSvdFZTYD7jnm3j5zumRCOdVP L5KLYEpWMYZdcWMkJXa89SO7vFDV0RN9DMZ2BOQZEQ4QNZdPIcWvVEBhaXHQiKw2 dK0FkhyDjF3yRbi/wg== -----END CERTIFICATE-----Generated at Mon Jan 26 22:40:35 2026 by rpki-client