This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft File: 1-VkY92suBLF1FE4jy-SKY8yaqo8.mft (raw, json) Hash identifier: GEplHkDU7U3pVcAHgifgI5Cjl089jInrJLUytv0GXGk= Subject key identifier: 06:97:A7:C7:3C:8E:C6:68:71:C8:12:F3:84:AB:EC:4C:20:F0:6B:F3 Authority key identifier: F9:59:18:F7:6B:2E:04:B1:75:14:4E:23:CB:E4:8A:63:CC:9A:AA:8F Certificate issuer: /CN=f95918f76b2e04b175144e23cbe48a63cc9aaa8f Certificate serial: 019BFC1CD124AF813BA7F38853F45A006FE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft Manifest number: 0BA3 Signing time: Mon 26 Jan 2026 21:01:45 +0000 Manifest this update: Mon 26 Jan 2026 21:01:45 +0000 Manifest next update: Tue 27 Jan 2026 21:01:45 +0000 Files and hashes: 1: 1-VkY92suBLF1FE4jy-SKY8yaqo8.crl (hash: p/lxNheu8+6IgdC/ImSrJ2XSJfIjjZSa2rCKw0iBf6Y=) 2: WOVURcgrOmo7CFBcFUmHZlO20Y8.roa (hash: wePf8ahRzSpTcfeEJN249YcPQyh2uGg5TQezwCJoWwo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 21:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:1c:d1:24:af:81:3b:a7:f3:88:53:f4:5a:00:6f:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f95918f76b2e04b175144e23cbe48a63cc9aaa8f Validity Not Before: Jan 26 21:01:45 2026 GMT Not After : Jan 27 21:01:45 2026 GMT Subject: CN=0697a7c73c8ec66871c812f384abec4c20f06bf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2d:6a:2d:64:1b:2e:61:a2:fa:ed:75:e0:b7: 48:0e:c2:0d:6d:c0:2d:1c:53:8f:fa:c1:5e:0e:6d: 4f:d5:87:5c:e0:1f:4e:49:81:51:23:53:9b:cb:1c: 62:a5:88:60:c6:04:77:a5:fe:40:14:ce:86:ed:40: 40:c3:d0:dc:0b:a2:53:d7:ff:eb:c9:63:e0:13:15: a6:2e:78:58:8a:a8:4e:ec:87:a6:c1:41:e8:dc:df: a0:79:95:c5:97:95:21:ac:a0:84:a8:95:0c:4b:b5: 8c:b6:37:38:88:50:ef:17:7a:7c:38:e1:a5:7b:3b: 98:63:39:97:47:ca:b8:e7:a3:7a:db:a4:73:e5:fe: b5:9a:49:76:30:31:86:5b:bd:bb:10:f6:23:da:3f: c4:4e:ee:f2:86:3f:e9:02:60:aa:a1:1d:e5:b2:2a: 5f:22:ad:be:d3:73:35:73:c4:e3:d0:d4:5c:af:36: 66:60:45:86:37:66:11:13:31:17:25:53:54:33:74: 20:e6:75:a8:a9:ff:a7:1a:3c:28:3f:8f:82:c0:58: bc:54:7a:0b:95:c1:d0:07:10:ca:0b:43:6f:87:aa: b7:4e:0d:0b:cb:a9:38:c9:a0:42:45:72:3c:d5:cd: 01:6b:c9:10:de:64:7e:f7:f7:c9:a8:9d:95:a5:c7: eb:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:97:A7:C7:3C:8E:C6:68:71:C8:12:F3:84:AB:EC:4C:20:F0:6B:F3 X509v3 Authority Key Identifier: keyid:F9:59:18:F7:6B:2E:04:B1:75:14:4E:23:CB:E4:8A:63:CC:9A:AA:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:62:5a:d6:54:6a:99:fc:f0:1d:90:75:c1:94:59:89:cf:21: 06:d0:ca:4a:a6:7e:4c:01:44:ff:a6:fd:e5:0c:b4:3c:a0:a7: 28:e0:d4:da:17:69:fd:c1:42:3a:57:93:e6:ab:06:6a:4a:b1: d6:ce:d4:a0:19:a9:11:13:8c:ca:1b:f0:a0:31:f1:6b:13:4d: 8b:8e:ee:d8:da:28:71:39:87:d8:cf:1a:1c:21:98:6a:f1:c5: dd:d8:e7:03:d4:56:5f:35:a9:e5:3c:75:22:3b:b6:8d:72:a3: 2c:9b:77:bc:c3:89:28:76:f1:f1:4d:de:af:85:15:e1:41:14: fd:71:63:59:21:7f:12:d5:b1:a7:a9:f7:e1:a8:97:8e:b5:6f: d1:8a:41:27:b2:18:87:57:ab:f4:57:69:2e:17:30:a1:76:c4: 41:e9:e8:c2:24:02:71:2d:a9:6b:6e:40:19:5b:f4:a2:b0:43: a3:eb:e8:ed:cd:45:7d:92:94:35:46:86:f6:10:66:96:5c:77: 87:0c:69:d3:28:48:ac:d6:5e:d1:10:52:4b:92:db:c0:f5:04: 77:e6:77:a5:a9:c3:11:f7:d9:14:f6:3e:9a:00:73:c8:19:00: ba:ce:0c:88:3e:3b:ee:c8:09:ed:21:15:9d:1a:a2:38:2e:86: e0:e7:b9:6a -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZv8HNEkr4E7p/OIU/RaAG/iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NTkxOGY3NmIyZTA0YjE3NTE0NGUyM2NiZTQ4YTYzY2M5 YWFhOGYwHhcNMjYwMTI2MjEwMTQ1WhcNMjYwMTI3MjEwMTQ1WjAzMTEwLwYDVQQD EygwNjk3YTdjNzNjOGVjNjY4NzFjODEyZjM4NGFiZWM0YzIwZjA2YmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzS1qLWQbLmGi+u114LdIDsINbcAt HFOP+sFeDm1P1Ydc4B9OSYFRI1ObyxxipYhgxgR3pf5AFM6G7UBAw9DcC6JT1//r yWPgExWmLnhYiqhO7IemwUHo3N+geZXFl5UhrKCEqJUMS7WMtjc4iFDvF3p8OOGl ezuYYzmXR8q456N626Rz5f61mkl2MDGGW727EPYj2j/ETu7yhj/pAmCqoR3lsipf Iq2+03M1c8Tj0NRcrzZmYEWGN2YREzEXJVNUM3Qg5nWoqf+nGjwoP4+CwFi8VHoL lcHQBxDKC0Nvh6q3Tg0Ly6k4yaBCRXI81c0Ba8kQ3mR+9/fJqJ2VpcfrtQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFAaXp8c8jsZoccgS84Sr7Ewg8GvzMB8GA1UdIwQY MBaAFPlZGPdrLgSxdRROI8vkimPMmqqPMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1Wa1k5MnN1QkxGMUZFNGp5LVNLWTh5YXFvOC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmEvMjVkMDkyLTgxYTQtNDdmMy1iZGM2 LTE5Nzc4Yzg3ZmVkNS8xLzEtVmtZOTJzdUJMRjFGRTRqeS1TS1k4eWFxbzgubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2ZhLzI1ZDA5Mi04MWE0LTQ3ZjMtYmRjNi0xOTc3OGM4N2Zl ZDUvMS8xLVZrWTkyc3VCTEYxRkU0anktU0tZOHlhcW84LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoWJa 1lRqmfzwHZB1wZRZic8hBtDKSqZ+TAFE/6b95Qy0PKCnKODU2hdp/cFCOleT5qsG akqx1s7UoBmpEROMyhvwoDHxaxNNi47u2NoocTmH2M8aHCGYavHF3djnA9RWXzWp 5Tx1Iju2jXKjLJt3vMOJKHbx8U3er4UV4UEU/XFjWSF/EtWxp6n34aiXjrVv0YpB J7IYh1er9FdpLhcwoXbEQenowiQCcS2pa25AGVv0orBDo+vo7c1FfZKUNUaG9hBm llx3hwxp0yhIrNZe0RBSS5LbwPUEd+Z3panDEffZFPY+mgBzyBkAus4MiD477sgJ 7SEVnRqiOC6G4Oe5ag== -----END CERTIFICATE-----Generated at Tue Jan 27 07:17:19 2026 by rpki-client