This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.mft File: 1N33M6X21zWr8n6JKuDlANVyffM.mft (raw, json) Hash identifier: KeiDl7slIUrvvDv0pRBNNuS4HsNBQ6Xnmkaw+72bYWc= Subject key identifier: 0E:0E:73:B3:F9:08:05:2D:06:3A:31:A2:34:F5:BB:E1:C5:B2:18:B3 Authority key identifier: D4:DD:F7:33:A5:F6:D7:35:AB:F2:7E:89:2A:E0:E5:00:D5:72:7D:F3 Certificate issuer: /CN=d4ddf733a5f6d735abf27e892ae0e500d5727df3 Certificate serial: 019BF96209F7986294FDFA83CF8C19820095 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1N33M6X21zWr8n6JKuDlANVyffM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.mft Manifest number: 02 Signing time: Mon 26 Jan 2026 08:18:30 +0000 Manifest this update: Mon 26 Jan 2026 08:18:30 +0000 Manifest next update: Tue 27 Jan 2026 08:18:30 +0000 Files and hashes: 1: 1N33M6X21zWr8n6JKuDlANVyffM.crl (hash: 7Wz6Hd9a5qC6Va1Fld/H5pfQvPe9M7vwbN38TDnBgYk=) 2: iKbr2LK5J82gYuXSxnRiW9ytVSU.roa (hash: SB/v/t0GxNGoad1gEDHjAA4/1IulHpKzS+RYj669lVk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.mft rsync://rpki.ripe.net/repository/DEFAULT/1N33M6X21zWr8n6JKuDlANVyffM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:62:09:f7:98:62:94:fd:fa:83:cf:8c:19:82:00:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4ddf733a5f6d735abf27e892ae0e500d5727df3 Validity Not Before: Jan 26 08:18:30 2026 GMT Not After : Jan 27 08:18:30 2026 GMT Subject: CN=0e0e73b3f908052d063a31a234f5bbe1c5b218b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:cd:f5:71:94:23:8f:e5:80:b3:f9:55:03:f9: b5:b8:9a:4f:6d:15:5e:7e:a6:9e:88:ad:f8:56:0c: aa:b1:80:c7:68:2b:81:8b:fa:74:f5:51:81:c5:36: 5c:b1:e7:52:0e:3b:fd:eb:58:46:83:82:1d:b6:a8: a4:3d:bf:21:34:31:f4:61:4a:45:a9:e9:d4:e4:02: 3c:51:d3:a3:34:cf:4d:16:30:d9:9f:6b:b7:b3:e2: ba:3e:8b:fd:04:ff:8d:10:c9:6d:72:03:ca:b5:7d: 94:e2:8d:e5:c5:f5:8e:80:3d:a0:59:f4:48:01:4b: 2d:e7:93:85:0b:77:da:8a:cd:89:a7:f9:cf:45:1a: b8:8b:7f:ef:fd:4d:b4:6c:e0:fc:88:63:5a:7d:7e: ce:fa:8e:56:68:07:61:7b:e7:7a:46:f2:f0:ee:c7: d7:e6:25:eb:ae:0b:eb:a1:25:07:57:9d:9d:ec:bb: 8d:41:3e:76:84:e4:b2:7d:4d:32:99:f4:06:5f:f7: 80:01:b8:a1:8b:11:2f:b9:b0:21:35:e7:d1:d1:47: 45:94:71:09:65:98:fe:03:35:a1:0c:c4:1e:77:0c: a7:60:d4:7a:91:32:4f:ac:8a:f6:ba:a0:17:70:d9: 55:43:0a:8e:3e:cc:c2:45:27:21:1e:b4:ff:0c:2f: 76:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:0E:73:B3:F9:08:05:2D:06:3A:31:A2:34:F5:BB:E1:C5:B2:18:B3 X509v3 Authority Key Identifier: keyid:D4:DD:F7:33:A5:F6:D7:35:AB:F2:7E:89:2A:E0:E5:00:D5:72:7D:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1N33M6X21zWr8n6JKuDlANVyffM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:f9:9b:ff:f1:b5:e0:7b:5d:ee:1f:6b:c6:50:62:45:d6:cd: 3c:2a:b2:03:da:6e:3f:e2:7e:3c:52:c0:c8:1d:a6:13:45:38: 89:af:90:c3:90:03:10:8f:7b:50:ba:a4:8c:61:9e:9f:95:f6: ae:58:45:da:2b:a8:bb:7a:b8:ed:22:85:14:af:30:fb:19:6d: 20:2a:a5:7e:fb:f2:03:99:28:3b:98:54:60:b6:46:b6:6b:c6: 25:aa:50:8a:f0:2f:fb:1a:03:b6:42:08:76:bd:c4:3c:1a:8c: d4:1c:41:fe:96:02:ce:bd:73:19:ee:c4:b2:a7:40:71:1e:99: 0d:8f:5d:bd:76:48:14:5e:28:f1:f7:6b:97:f2:66:33:db:d6: 61:1d:42:77:fc:d4:e6:ea:46:f5:a1:ab:7d:65:9d:51:16:40: 4d:75:a0:b3:4f:4d:d2:69:9b:32:a8:ed:97:bf:5c:6b:ea:ac: 9b:89:df:12:07:9a:ec:4d:f1:da:ac:1f:38:3b:8a:2c:01:a7: f4:ab:16:72:81:bd:f3:28:dd:62:4d:20:f0:92:28:43:1c:09: df:2d:1f:14:e3:95:97:c1:31:bc:14:e1:40:8c:39:d0:71:b5: 58:58:7d:1a:02:f1:f7:43:50:4a:00:5a:8a:8c:cc:ce:56:69: 33:a7:3f:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5Ygn3mGKU/fqDz4wZggCVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ZGRmNzMzYTVmNmQ3MzVhYmYyN2U4OTJhZTBlNTAwZDU3 MjdkZjMwHhcNMjYwMTI2MDgxODMwWhcNMjYwMTI3MDgxODMwWjAzMTEwLwYDVQQD EygwZTBlNzNiM2Y5MDgwNTJkMDYzYTMxYTIzNGY1YmJlMWM1YjIxOGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4831cZQjj+WAs/lVA/m1uJpPbRVe fqaeiK34VgyqsYDHaCuBi/p09VGBxTZcsedSDjv961hGg4IdtqikPb8hNDH0YUpF qenU5AI8UdOjNM9NFjDZn2u3s+K6Pov9BP+NEMltcgPKtX2U4o3lxfWOgD2gWfRI AUst55OFC3fais2Jp/nPRRq4i3/v/U20bOD8iGNafX7O+o5WaAdhe+d6RvLw7sfX 5iXrrgvroSUHV52d7LuNQT52hOSyfU0ymfQGX/eAAbihixEvubAhNefR0UdFlHEJ ZZj+AzWhDMQedwynYNR6kTJPrIr2uqAXcNlVQwqOPszCRSchHrT/DC92ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA4Oc7P5CAUtBjoxojT1u+HFshizMB8GA1UdIwQY MBaAFNTd9zOl9tc1q/J+iSrg5QDVcn3zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU4zM002WDIxeldyOG42Skt1RGxBTlZ5ZmZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9kODQ2NmUtMjRiZS00YTZkLWI1NWYt ZWZlNTk5YmY1ZDg3LzEvMU4zM002WDIxeldyOG42Skt1RGxBTlZ5ZmZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9kODQ2NmUtMjRiZS00YTZkLWI1NWYtZWZlNTk5YmY1ZDg3 LzEvMU4zM002WDIxeldyOG42Skt1RGxBTlZ5ZmZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi/mb//G1 4Htd7h9rxlBiRdbNPCqyA9puP+J+PFLAyB2mE0U4ia+Qw5ADEI97ULqkjGGen5X2 rlhF2iuou3q47SKFFK8w+xltICqlfvvyA5koO5hUYLZGtmvGJapQivAv+xoDtkII dr3EPBqM1BxB/pYCzr1zGe7EsqdAcR6ZDY9dvXZIFF4o8fdrl/JmM9vWYR1Cd/zU 5upG9aGrfWWdURZATXWgs09N0mmbMqjtl79ca+qsm4nfEgea7E3x2qwfODuKLAGn 9KsWcoG98yjdYk0g8JIoQxwJ3y0fFOOVl8ExvBThQIw50HG1WFh9GgLx90NQSgBa iozMzlZpM6c/Zg== -----END CERTIFICATE-----Generated at Mon Jan 26 13:44:28 2026 by rpki-client