This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft File: 1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft (raw, json) Hash identifier: L0o5hQtqyuFaKjTHnLDdoD0hl9Hlgx9z9Kf6hZ7NyzM= Subject key identifier: 16:BF:32:23:18:6E:0C:FB:15:3D:F8:2D:42:4C:A6:AA:5A:12:8B:D8 Authority key identifier: F8:A4:15:94:A9:2A:9A:E0:5C:65:A0:4F:80:3D:41:1A:4F:88:42:3F Certificate issuer: /CN=f8a41594a92a9ae05c65a04f803d411a4f88423f Certificate serial: 019BB6CD6748B7663D03B8535286CE689EE7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft Manifest number: 13D2 Signing time: Tue 13 Jan 2026 10:01:13 +0000 Manifest this update: Tue 13 Jan 2026 10:01:13 +0000 Manifest next update: Wed 14 Jan 2026 10:01:13 +0000 Files and hashes: 1: 1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl (hash: LMUYS3IcubGo2G/kza2h800MoQ2nhsrAV7/wwQE8stw=) 2: 9I37uSLgJ82CVvmcGNoEOygvMrc.roa (hash: GiAAMKbm7ExVR7C4dV6ZH1ILNv0tH+m6b13CkfxQEmk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 10:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b6:cd:67:48:b7:66:3d:03:b8:53:52:86:ce:68:9e:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8a41594a92a9ae05c65a04f803d411a4f88423f Validity Not Before: Jan 13 10:01:13 2026 GMT Not After : Jan 14 10:01:13 2026 GMT Subject: CN=16bf3223186e0cfb153df82d424ca6aa5a128bd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:cc:f4:a5:35:52:76:7c:c6:ac:89:65:78:51: ee:e4:4c:06:94:ca:33:40:21:f5:66:41:5b:25:0f: ab:37:e1:15:55:48:d7:b8:9c:7c:2c:4c:22:22:cb: db:b1:ce:1a:dd:dd:22:73:49:de:22:15:e4:21:38: 7a:d3:1c:86:f5:1d:c2:26:6d:b5:26:ec:9f:84:db: 33:ba:8e:b8:e1:ae:fc:52:b8:65:17:27:ab:64:ec: 06:b7:97:c0:10:b2:f5:81:e6:f6:3f:72:40:fa:0a: a0:2a:6e:43:22:3d:49:8c:85:db:d1:03:c5:3c:14: 78:98:3b:89:27:44:01:f3:ca:2c:20:0a:5a:11:5b: 5c:4d:29:ba:d7:52:0b:eb:02:61:52:4d:b9:31:14: 04:9a:d9:9f:08:8a:2c:af:00:be:a2:4f:d4:be:16: 6c:6b:cb:9b:de:fa:56:d8:f1:ff:5e:70:76:f2:d5: 6a:b9:82:77:3c:18:ba:2b:80:18:99:68:f8:63:19: 4f:0f:66:c1:99:35:d4:c0:9b:ca:e1:cd:0b:5a:81: 3c:99:83:0c:01:29:b6:d9:bb:a6:d7:eb:42:58:d9: a8:93:72:b8:70:91:b1:f9:c5:3b:6d:04:b0:33:7f: 17:ce:48:4d:c5:be:85:f0:69:90:8e:b2:2a:9b:97: 76:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:BF:32:23:18:6E:0C:FB:15:3D:F8:2D:42:4C:A6:AA:5A:12:8B:D8 X509v3 Authority Key Identifier: keyid:F8:A4:15:94:A9:2A:9A:E0:5C:65:A0:4F:80:3D:41:1A:4F:88:42:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:40:2a:98:a0:5d:f8:58:37:42:d0:85:a3:fa:80:0f:70:c4: c9:8f:0d:18:1b:42:e6:15:26:99:8c:f8:ea:64:e1:55:71:07: 12:9c:c8:92:4a:bc:cb:6b:61:43:6e:cf:28:33:15:27:70:44: e4:34:21:37:92:98:01:26:20:fe:1e:a5:ca:55:33:2b:e1:0c: fa:3e:d4:61:f6:bf:86:ff:59:23:bc:66:83:93:01:99:67:a7: 13:a1:7c:dc:6f:aa:70:b0:10:4d:d2:67:e3:61:bd:41:ec:f8: 5d:8d:e8:6e:2f:aa:25:17:20:df:4f:f3:8b:f4:52:e3:af:49: f6:9a:c1:30:a2:66:f8:6e:ab:e1:56:1e:2c:0c:93:51:68:c5: a5:2c:b9:ea:86:da:65:71:d3:95:a3:37:71:2e:f5:51:df:88: 6f:75:5b:6f:97:8a:7a:ab:43:6a:a3:74:eb:c2:3c:a4:7b:9b: 4b:6a:1a:0b:ef:41:8f:11:f8:e7:97:c1:ae:4f:41:0c:b2:52: 8c:0f:ad:25:41:6c:ba:ad:f6:6c:a4:85:f3:3a:73:43:38:e4: de:d0:7d:28:63:8e:c4:b2:b2:a6:9b:f0:2a:b0:13:a0:bd:7c: 40:6c:68:00:d5:fe:d1:cd:6e:c5:12:f6:84:64:79:ca:45:39: 68:cc:12:a7 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZu2zWdIt2Y9A7hTUobOaJ7nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YTQxNTk0YTkyYTlhZTA1YzY1YTA0ZjgwM2Q0MTFhNGY4 ODQyM2YwHhcNMjYwMTEzMTAwMTEzWhcNMjYwMTE0MTAwMTEzWjAzMTEwLwYDVQQD EygxNmJmMzIyMzE4NmUwY2ZiMTUzZGY4MmQ0MjRjYTZhYTVhMTI4YmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cz0pTVSdnzGrIlleFHu5EwGlMoz QCH1ZkFbJQ+rN+EVVUjXuJx8LEwiIsvbsc4a3d0ic0neIhXkITh60xyG9R3CJm21 JuyfhNszuo644a78UrhlFyerZOwGt5fAELL1geb2P3JA+gqgKm5DIj1JjIXb0QPF PBR4mDuJJ0QB88osIApaEVtcTSm611IL6wJhUk25MRQEmtmfCIosrwC+ok/UvhZs a8ub3vpW2PH/XnB28tVquYJ3PBi6K4AYmWj4YxlPD2bBmTXUwJvK4c0LWoE8mYMM ASm22bum1+tCWNmok3K4cJGx+cU7bQSwM38XzkhNxb6F8GmQjrIqm5d2HQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBa/MiMYbgz7FT34LUJMpqpaEovYMB8GA1UdIwQY MBaAFPikFZSpKprgXGWgT4A9QRpPiEI/MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LUVZsS2txbXVCY1phQlBnRDFCR2stSVFqOC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvNjMwMzYyLTI5MGYtNDZiYy04NDQ2 LTZhN2MzYmEzMTQxMC8xLzEtS1FWbEtrcW11QmNaYUJQZ0QxQkdrLUlRajgubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzBhLzYzMDM2Mi0yOTBmLTQ2YmMtODQ0Ni02YTdjM2JhMzE0 MTAvMS8xLUtRVmxLa3FtdUJjWmFCUGdEMUJHay1JUWo4LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJkAq mKBd+Fg3QtCFo/qAD3DEyY8NGBtC5hUmmYz46mThVXEHEpzIkkq8y2thQ27PKDMV J3BE5DQhN5KYASYg/h6lylUzK+EM+j7UYfa/hv9ZI7xmg5MBmWenE6F83G+qcLAQ TdJn42G9Qez4XY3obi+qJRcg30/zi/RS469J9prBMKJm+G6r4VYeLAyTUWjFpSy5 6obaZXHTlaM3cS71Ud+Ib3Vbb5eKeqtDaqN068I8pHubS2oaC+9BjxH455fBrk9B DLJSjA+tJUFsuq32bKSF8zpzQzjk3tB9KGOOxLKyppvwKrAToL18QGxoANX+0c1u xRL2hGR5ykU5aMwSpw== -----END CERTIFICATE-----Generated at Tue Jan 13 14:41:54 2026 by rpki-client