This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft File: 1P9RiRrUTBZt7roTFZZsmh2DkJc.mft (raw, json) Hash identifier: cT7cFiyXfVTfLnshXk0xSHnhFEk0KNbt9PLNj8NSrD0= Subject key identifier: 32:11:83:3B:D0:42:4A:16:C1:56:1F:75:97:C8:FA:0B:0F:28:B2:AF Authority key identifier: D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97 Certificate issuer: /CN=d4ff51891ad44c166deeba1315966c9a1d839097 Certificate serial: 019BAF139D09E4CD22AA19273AA5E34D340A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft Manifest number: 044F Signing time: Sun 11 Jan 2026 22:00:56 +0000 Manifest this update: Sun 11 Jan 2026 22:00:56 +0000 Manifest next update: Mon 12 Jan 2026 22:00:56 +0000 Files and hashes: 1: 1P9RiRrUTBZt7roTFZZsmh2DkJc.crl (hash: iyP6svFnBJu3BUX23Ew1dsm3rQ2mZw8zYzenH9ufly4=) 2: Z41uijNFQ0G-iZW7PiDpJ2EAmv0.roa (hash: AfUXmqvyv0xkNeTqOicnT0Mi5qeFfpzbGMDou/p87aU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.crl rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 22:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:af:13:9d:09:e4:cd:22:aa:19:27:3a:a5:e3:4d:34:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4ff51891ad44c166deeba1315966c9a1d839097 Validity Not Before: Jan 11 22:00:56 2026 GMT Not After : Jan 12 22:00:56 2026 GMT Subject: CN=3211833bd0424a16c1561f7597c8fa0b0f28b2af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:97:f5:af:0e:de:d8:4b:a3:6b:7a:9a:8a:0c: 1b:94:e3:36:82:c0:a6:cf:8e:72:b4:a5:3c:4f:35: 44:3e:93:c4:06:7e:2a:ec:34:b1:ff:83:28:8b:6a: 44:c9:85:75:24:1c:b3:d9:57:27:a5:60:cd:9a:f0: be:51:fd:e8:b6:a2:38:0d:30:42:6c:32:3b:ac:f0: 33:ec:6b:bd:9d:e7:5e:ee:39:4b:fc:31:ce:92:8f: 95:53:44:58:ae:d6:f1:50:c3:57:af:19:33:6f:b4: e1:1e:1d:ae:c2:90:7c:36:12:c6:a6:29:f1:26:4a: 16:e7:d1:d6:7d:eb:65:e5:ea:7b:a5:42:9b:af:f2: 5f:69:a8:53:c8:e8:6e:d5:a4:85:5c:ce:16:a5:77: fd:68:fc:33:2f:ff:bb:3b:4e:58:ae:0d:3f:7b:e0: 32:05:0a:c5:d0:ee:cf:32:94:41:78:ea:a2:44:c5: 7c:f8:fe:7f:0d:54:4e:c8:cc:90:59:1a:18:b3:fd: a1:c0:d4:60:58:b9:b7:db:7b:44:f2:1b:a8:f6:12: 77:1c:2a:a6:f4:e6:46:13:31:28:72:f0:65:d1:42: 9d:5e:c9:38:50:51:df:90:86:1e:61:ac:34:0b:b2: ed:9f:23:39:25:c3:e2:8d:6d:4d:e7:d9:37:ca:fb: 54:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:11:83:3B:D0:42:4A:16:C1:56:1F:75:97:C8:FA:0B:0F:28:B2:AF X509v3 Authority Key Identifier: keyid:D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:4a:d0:4a:e0:44:44:5b:11:45:49:5c:10:63:39:6a:f1:75: e4:16:95:4e:86:8b:bf:d5:e2:04:a0:b8:a9:a8:50:d0:69:f4: 2c:92:ec:9f:f3:25:2e:70:d0:4f:84:c3:b8:2f:cf:02:39:76: 93:c4:af:81:8f:33:40:7b:82:c0:81:ae:b8:05:eb:85:a7:f4: 5f:51:b6:3b:fe:4d:53:2f:e2:d3:73:51:1a:07:dd:0e:2f:49: e6:e4:cf:dd:a6:1d:64:5e:ba:3a:75:5b:bc:a3:ae:51:de:33: e6:ea:3b:ac:85:14:a3:19:98:db:53:ce:eb:00:a6:50:37:96: f8:22:7f:d7:ee:01:7b:41:76:42:b3:2b:d3:80:ab:81:81:cd: ef:1f:73:17:5d:8c:1b:ff:bd:c7:12:6b:fe:7e:5e:cb:97:af: e8:b4:4b:83:a9:3e:ea:73:a7:fe:c3:26:d0:f2:4f:3c:50:38: 4f:e0:a0:c5:85:b5:8a:77:cc:f4:7c:a0:f6:92:8a:e6:18:51: 8a:52:17:30:84:07:51:f8:13:d2:7d:c1:23:15:5c:e0:c8:4a: 2d:96:7a:56:f6:4e:2e:9d:83:41:43:11:60:c7:ac:cb:4c:7c: bf:42:b8:8a:89:8b:d9:62:cf:9f:40:df:01:b4:02:12:00:37: 29:0c:0c:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuvE50J5M0iqhknOqXjTTQKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ZmY1MTg5MWFkNDRjMTY2ZGVlYmExMzE1OTY2YzlhMWQ4 MzkwOTcwHhcNMjYwMTExMjIwMDU2WhcNMjYwMTEyMjIwMDU2WjAzMTEwLwYDVQQD EygzMjExODMzYmQwNDI0YTE2YzE1NjFmNzU5N2M4ZmEwYjBmMjhiMmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZf1rw7e2Euja3qaigwblOM2gsCm z45ytKU8TzVEPpPEBn4q7DSx/4Moi2pEyYV1JByz2VcnpWDNmvC+Uf3otqI4DTBC bDI7rPAz7Gu9nede7jlL/DHOko+VU0RYrtbxUMNXrxkzb7ThHh2uwpB8NhLGpinx JkoW59HWfetl5ep7pUKbr/JfaahTyOhu1aSFXM4WpXf9aPwzL/+7O05Yrg0/e+Ay BQrF0O7PMpRBeOqiRMV8+P5/DVROyMyQWRoYs/2hwNRgWLm323tE8huo9hJ3HCqm 9OZGEzEocvBl0UKdXsk4UFHfkIYeYaw0C7LtnyM5JcPijW1N59k3yvtUnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDIRgzvQQkoWwVYfdZfI+gsPKLKvMB8GA1UdIwQY MBaAFNT/UYka1EwWbe66ExWWbJodg5CXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVA5UmlSclVUQlp0N3JvVEZaWnNtaDJEa0pjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8xOTk1ZTAtZjQ1MC00OTU4LThhMmQt Y2E4MGJhZGQ3OWJmLzEvMVA5UmlSclVUQlp0N3JvVEZaWnNtaDJEa0pjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8xOTk1ZTAtZjQ1MC00OTU4LThhMmQtY2E4MGJhZGQ3OWJm LzEvMVA5UmlSclVUQlp0N3JvVEZaWnNtaDJEa0pjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn0rQSuBE RFsRRUlcEGM5avF15BaVToaLv9XiBKC4qahQ0Gn0LJLsn/MlLnDQT4TDuC/PAjl2 k8SvgY8zQHuCwIGuuAXrhaf0X1G2O/5NUy/i03NRGgfdDi9J5uTP3aYdZF66OnVb vKOuUd4z5uo7rIUUoxmY21PO6wCmUDeW+CJ/1+4Be0F2QrMr04CrgYHN7x9zF12M G/+9xxJr/n5ey5ev6LRLg6k+6nOn/sMm0PJPPFA4T+CgxYW1infM9Hyg9pKK5hhR ilIXMIQHUfgT0n3BIxVc4MhKLZZ6VvZOLp2DQUMRYMesy0x8v0K4iomL2WLPn0Df AbQCEgA3KQwMjg== -----END CERTIFICATE-----Generated at Mon Jan 12 06:02:41 2026 by rpki-client