This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft File: 1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft (raw, json) Hash identifier: H38eDesdvKfMImgUR/83vrMxBFXfSWy/V8SrIBcc1K4= Subject key identifier: CA:34:B5:94:62:6E:68:BB:B8:BF:F2:03:59:09:C0:21:D5:DD:23:32 Authority key identifier: F8:AA:7E:47:B9:1A:62:95:CB:F7:18:C1:F2:DD:B0:A2:5C:27:6E:B2 Certificate issuer: /CN=f8aa7e47b91a6295cbf718c1f2ddb0a25c276eb2 Certificate serial: 019BB696463127ACE3D511A29CBEDA2173D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft Manifest number: 14FD Signing time: Tue 13 Jan 2026 09:01:00 +0000 Manifest this update: Tue 13 Jan 2026 09:01:00 +0000 Manifest next update: Wed 14 Jan 2026 09:01:00 +0000 Files and hashes: 1: 1-Kp-R7kaYpXL9xjB8t2wolwnbrI.crl (hash: W7FzeQQorhciAxfcsWZNaHIV7SqkEJAIpEQ+lDdEaO8=) 2: xMdg9tf8PX3rEEL_NSkeA_5BMoE.roa (hash: Fuv5QDlGS8lpVHre1lLFiZmSKdkP1J409k7DUxmhGPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft rsync://rpki.ripe.net/repository/DEFAULT/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 09:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b6:96:46:31:27:ac:e3:d5:11:a2:9c:be:da:21:73:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8aa7e47b91a6295cbf718c1f2ddb0a25c276eb2 Validity Not Before: Jan 13 09:01:00 2026 GMT Not After : Jan 14 09:01:00 2026 GMT Subject: CN=ca34b594626e68bbb8bff2035909c021d5dd2332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f4:dd:df:40:b8:cd:79:2d:88:f6:b3:5a:c4: c3:5e:d1:78:13:15:62:13:ec:b6:c8:7e:88:f6:ae: 6f:d4:2e:1c:2e:43:88:d7:8b:a5:73:03:44:53:b0: 31:5d:7a:a4:18:5c:22:c5:5b:4f:8e:56:2c:74:35: 75:21:03:48:15:f1:dc:89:d7:67:67:e9:9d:68:b4: 3f:22:f8:d9:7b:6f:73:b3:4c:76:c1:54:1f:9a:12: 77:78:5d:5b:10:6e:a0:f1:ec:e4:74:9f:e4:b8:88: 8f:42:15:aa:98:9b:61:9f:64:43:66:4b:f1:b1:60: dd:fc:eb:8c:a9:d3:fb:96:8f:8a:93:e2:59:82:eb: 29:fb:c7:22:1d:0d:23:a0:55:93:74:c2:cf:76:f9: 7f:2f:17:f9:03:d0:30:1c:34:38:ab:1f:89:a1:81: 8e:c8:7f:68:c3:5e:b0:d4:07:9f:39:c1:68:b2:e7: e8:e3:bd:05:13:99:cc:97:6a:6c:67:72:cb:2a:35: a5:e9:6f:0f:c1:60:91:0f:cc:7f:b4:bf:50:5b:02: ac:0b:98:bc:d3:59:ea:23:f4:f4:5c:52:2d:30:a5: 10:78:4f:7c:4a:5e:a2:7d:9e:7b:99:29:29:46:72: 40:11:bc:f7:df:e4:04:aa:7b:94:9a:db:9b:a8:13: b9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:34:B5:94:62:6E:68:BB:B8:BF:F2:03:59:09:C0:21:D5:DD:23:32 X509v3 Authority Key Identifier: keyid:F8:AA:7E:47:B9:1A:62:95:CB:F7:18:C1:F2:DD:B0:A2:5C:27:6E:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:22:0c:be:ca:01:c4:cb:a5:c7:80:16:99:76:19:ea:cc:8d: 5b:be:b2:3f:f3:be:e4:ce:db:15:ed:45:88:a7:17:cc:91:3e: b4:8d:95:8d:19:c8:85:b3:2e:c8:32:ff:a6:28:19:72:56:88: 9f:91:1d:39:25:a9:52:38:30:39:6e:35:79:b8:0f:aa:7d:7c: 8e:c5:e2:37:23:71:83:cd:2a:e7:44:77:c9:fb:17:7e:1a:85: e2:cc:e2:ae:76:9c:b9:90:9b:b9:17:fb:28:f1:81:d5:04:c8: 79:e8:04:70:5a:1a:38:e3:c9:67:53:68:58:50:71:53:4c:d2: cb:86:03:41:8b:be:bb:6b:57:56:b2:0b:b5:ca:34:2b:60:14: 1a:98:d8:5c:2f:eb:12:1c:c6:95:19:74:a8:11:e7:db:75:0b: 64:4e:ad:72:20:9c:fa:d4:25:fc:8a:87:7d:31:6e:1d:01:c9: 6c:ef:f8:9c:35:9c:ec:d8:fe:02:a3:9a:b4:f3:11:7e:a1:ff: 93:cd:dc:f8:a8:9d:04:f8:42:75:66:6c:eb:dd:ef:8f:51:b3: bf:4a:f4:f1:85:09:08:c9:96:7a:08:77:0f:f1:71:73:08:f4: f6:e1:be:be:61:26:a4:09:40:f3:d4:6b:42:86:29:cd:0e:48: b9:aa:03:f9 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZu2lkYxJ6zj1RGinL7aIXPQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YWE3ZTQ3YjkxYTYyOTVjYmY3MThjMWYyZGRiMGEyNWMy NzZlYjIwHhcNMjYwMTEzMDkwMTAwWhcNMjYwMTE0MDkwMTAwWjAzMTEwLwYDVQQD EyhjYTM0YjU5NDYyNmU2OGJiYjhiZmYyMDM1OTA5YzAyMWQ1ZGQyMzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPTd30C4zXktiPazWsTDXtF4ExVi E+y2yH6I9q5v1C4cLkOI14ulcwNEU7AxXXqkGFwixVtPjlYsdDV1IQNIFfHciddn Z+mdaLQ/IvjZe29zs0x2wVQfmhJ3eF1bEG6g8ezkdJ/kuIiPQhWqmJthn2RDZkvx sWDd/OuMqdP7lo+Kk+JZgusp+8ciHQ0joFWTdMLPdvl/Lxf5A9AwHDQ4qx+JoYGO yH9ow16w1AefOcFosufo470FE5nMl2psZ3LLKjWl6W8PwWCRD8x/tL9QWwKsC5i8 01nqI/T0XFItMKUQeE98Sl6ifZ57mSkpRnJAEbz33+QEqnuUmtubqBO5DQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFMo0tZRibmi7uL/yA1kJwCHV3SMyMB8GA1UdIwQY MBaAFPiqfke5GmKVy/cYwfLdsKJcJ26yMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LcC1SN2thWXBYTDl4akI4dDJ3b2x3bmJySS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvZGU0OTRmLTUxMjktNDlmOS05Mjll LTk3MGM4M2U5NmNiYy8xLzEtS3AtUjdrYVlwWEw5eGpCOHQyd29sd25ickkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzBmL2RlNDk0Zi01MTI5LTQ5ZjktOTI5ZS05NzBjODNlOTZj YmMvMS8xLUtwLVI3a2FZcFhMOXhqQjh0MndvbHduYnJJLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHCIM vsoBxMulx4AWmXYZ6syNW76yP/O+5M7bFe1FiKcXzJE+tI2VjRnIhbMuyDL/pigZ claIn5EdOSWpUjgwOW41ebgPqn18jsXiNyNxg80q50R3yfsXfhqF4szirnacuZCb uRf7KPGB1QTIeegEcFoaOOPJZ1NoWFBxU0zSy4YDQYu+u2tXVrILtco0K2AUGpjY XC/rEhzGlRl0qBHn23ULZE6tciCc+tQl/IqHfTFuHQHJbO/4nDWc7Nj+AqOatPMR fqH/k83c+KidBPhCdWZs693vj1Gzv0r08YUJCMmWegh3D/Fxcwj09uG+vmEmpAlA 89RrQoYpzQ5IuaoD+Q== -----END CERTIFICATE-----Generated at Tue Jan 13 12:32:31 2026 by rpki-client