This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.mft File: 1XgxwfXmACVCvOut7yQSithG6vk.mft (raw, json) Hash identifier: uSRAjlcHzvCNuMZ+4P4V+DllFNf/h7f6AWrgi0/ZMyg= Subject key identifier: A7:A8:B6:EB:3A:26:0D:53:5B:2D:95:E0:96:32:61:08:98:B6:E1:02 Authority key identifier: D5:78:31:C1:F5:E6:00:25:42:BC:EB:AD:EF:24:12:8A:D8:46:EA:F9 Certificate issuer: /CN=d57831c1f5e6002542bcebadef24128ad846eaf9 Certificate serial: 019BDE117E165799A7CC17BD6B3016EA99B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1XgxwfXmACVCvOut7yQSithG6vk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.mft Manifest number: 029F Signing time: Wed 21 Jan 2026 01:00:46 +0000 Manifest this update: Wed 21 Jan 2026 01:00:46 +0000 Manifest next update: Thu 22 Jan 2026 01:00:46 +0000 Files and hashes: 1: 1XgxwfXmACVCvOut7yQSithG6vk.crl (hash: Gor/FKlE5JhbeGdbgG4AKSp/55TvGwDwdAWKErFk++s=) 2: edoHN6_JsP-n0lJvF27iJ8eI6P4.roa (hash: 8NDkYnaMysyzTRQRKzPfGA1yeZmwSTwDWWtshuRs65s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.mft rsync://rpki.ripe.net/repository/DEFAULT/1XgxwfXmACVCvOut7yQSithG6vk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 01:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:de:11:7e:16:57:99:a7:cc:17:bd:6b:30:16:ea:99:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d57831c1f5e6002542bcebadef24128ad846eaf9 Validity Not Before: Jan 21 01:00:46 2026 GMT Not After : Jan 22 01:00:46 2026 GMT Subject: CN=a7a8b6eb3a260d535b2d95e09632610898b6e102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:16:b6:ba:1b:7e:6f:b0:2c:cb:56:b9:ce:d8: 61:90:3a:b2:c4:ba:79:f9:e9:3f:a5:78:b1:0c:4f: fc:00:39:ac:55:56:fe:c8:19:19:ad:de:a5:b3:6b: 29:20:fd:cf:26:be:01:33:0a:c3:cb:20:23:75:5f: c1:5e:3b:4c:6d:41:2f:9e:9c:72:61:5b:71:74:7f: 53:e5:40:5c:d9:4c:d7:4e:c7:b1:aa:53:f4:95:90: b7:6b:d3:2c:34:5e:78:d0:aa:8f:75:6c:4b:6f:c6: 79:e5:bc:0e:a1:b1:69:0d:47:3c:d7:ae:ff:6c:5a: 99:47:59:d6:0f:e6:b0:e1:e5:77:57:b5:75:b4:a4: 37:7d:40:85:8a:90:40:b0:c1:87:f4:77:c9:a8:e8: f0:01:78:ef:83:6a:43:b1:30:65:4a:fb:43:ab:3a: 18:31:c1:bb:58:be:db:b9:aa:c7:cc:9c:f6:bf:35: 64:48:52:ff:9e:5c:85:a4:3d:f8:b9:7e:6d:27:9b: 56:30:be:53:6e:ad:93:27:7b:0d:e6:30:58:25:99: e3:03:b9:4c:6e:32:bd:94:a2:6d:5a:b8:54:65:1b: 9c:4b:43:8d:59:8c:fd:78:84:37:67:13:3d:97:78: 20:fe:7a:aa:e2:7f:8d:2e:b0:c0:0e:0d:e7:d7:e0: 37:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A8:B6:EB:3A:26:0D:53:5B:2D:95:E0:96:32:61:08:98:B6:E1:02 X509v3 Authority Key Identifier: keyid:D5:78:31:C1:F5:E6:00:25:42:BC:EB:AD:EF:24:12:8A:D8:46:EA:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1XgxwfXmACVCvOut7yQSithG6vk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:23:d4:c9:7f:66:6c:c9:37:04:3d:20:0e:d6:73:e8:27:bd: d6:57:9e:84:d4:73:c0:ef:92:9a:5e:a3:73:df:3e:cd:f2:20: 52:4c:f0:42:05:8f:be:60:22:67:e8:c6:67:f6:67:09:03:de: 37:32:26:d5:c3:12:87:77:65:04:32:12:30:d8:fd:8d:27:62: de:83:ad:2a:38:71:bd:9a:f1:b9:46:f9:00:08:12:6c:a1:27: ee:b7:f1:b8:c0:e1:08:87:dd:8a:ae:fc:a3:e2:55:13:30:ef: 57:7f:db:ff:0b:c5:1f:4c:16:32:a6:55:0f:93:19:d3:f3:48: c2:ec:98:3e:9c:64:bb:8d:5b:c3:e3:23:55:f9:83:a6:f9:1e: 00:80:d2:12:b1:7c:3f:f3:ea:78:83:67:03:e6:a7:8e:44:f6: 56:81:af:51:75:94:93:d9:34:4c:00:8e:98:e2:fc:ef:53:33: 1b:1e:7e:43:2c:0f:09:95:11:50:e0:08:31:a9:54:4d:fb:62: 29:77:8a:d7:0a:d8:e3:72:13:50:ca:ba:b9:9d:20:e3:1f:8c: 46:16:23:54:71:42:ed:10:3a:2e:a6:2c:8a:56:83:b8:47:bd: 10:c9:07:bd:c8:5d:0c:b5:7e:9e:8d:f1:52:cd:d4:cc:31:35: 07:41:17:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZveEX4WV5mnzBe9azAW6pmxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1NzgzMWMxZjVlNjAwMjU0MmJjZWJhZGVmMjQxMjhhZDg0 NmVhZjkwHhcNMjYwMTIxMDEwMDQ2WhcNMjYwMTIyMDEwMDQ2WjAzMTEwLwYDVQQD EyhhN2E4YjZlYjNhMjYwZDUzNWIyZDk1ZTA5NjMyNjEwODk4YjZlMTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBa2uht+b7Asy1a5zthhkDqyxLp5 +ek/pXixDE/8ADmsVVb+yBkZrd6ls2spIP3PJr4BMwrDyyAjdV/BXjtMbUEvnpxy YVtxdH9T5UBc2UzXTsexqlP0lZC3a9MsNF540KqPdWxLb8Z55bwOobFpDUc8167/ bFqZR1nWD+aw4eV3V7V1tKQ3fUCFipBAsMGH9HfJqOjwAXjvg2pDsTBlSvtDqzoY McG7WL7buarHzJz2vzVkSFL/nlyFpD34uX5tJ5tWML5Tbq2TJ3sN5jBYJZnjA7lM bjK9lKJtWrhUZRucS0ONWYz9eIQ3ZxM9l3gg/nqq4n+NLrDADg3n1+A3wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKeotus6Jg1TWy2V4JYyYQiYtuECMB8GA1UdIwQY MBaAFNV4McH15gAlQrzrre8kEorYRur5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVhneHdmWG1BQ1ZDdk91dDd5UVNpdGhHNnZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9iMTk2NGEtMzBhZS00NDgyLTg0NWQt NzQ2MzY1ZGJhNWJiLzEvMVhneHdmWG1BQ1ZDdk91dDd5UVNpdGhHNnZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9iMTk2NGEtMzBhZS00NDgyLTg0NWQtNzQ2MzY1ZGJhNWJi LzEvMVhneHdmWG1BQ1ZDdk91dDd5UVNpdGhHNnZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADiPUyX9m bMk3BD0gDtZz6Ce91leehNRzwO+Sml6jc98+zfIgUkzwQgWPvmAiZ+jGZ/ZnCQPe NzIm1cMSh3dlBDISMNj9jSdi3oOtKjhxvZrxuUb5AAgSbKEn7rfxuMDhCIfdiq78 o+JVEzDvV3/b/wvFH0wWMqZVD5MZ0/NIwuyYPpxku41bw+MjVfmDpvkeAIDSErF8 P/PqeINnA+anjkT2VoGvUXWUk9k0TACOmOL871MzGx5+QywPCZURUOAIMalUTfti KXeK1wrY43ITUMq6uZ0g4x+MRhYjVHFC7RA6LqYsilaDuEe9EMkHvchdDLV+no3x Us3UzDE1B0EXRA== -----END CERTIFICATE-----Generated at Wed Jan 21 11:27:06 2026 by rpki-client