This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft File: 1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft (raw, json) Hash identifier: 04b4VeLgxFCEWRumt1KdgSSqODD5ktDnrAOjMFld+O0= Subject key identifier: C2:14:87:36:2D:22:62:FC:CF:D6:CB:B8:D8:87:58:1E:75:08:B8:09 Authority key identifier: F9:60:C7:AB:3C:4B:CC:3F:CA:83:E4:93:31:67:7B:44:BB:7A:94:6F Certificate issuer: /CN=f960c7ab3c4bcc3fca83e49331677b44bb7a946f Certificate serial: 019BAE0101227E86232394373338ADD76EF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft Manifest number: 02D1 Signing time: Sun 11 Jan 2026 17:00:59 +0000 Manifest this update: Sun 11 Jan 2026 17:00:59 +0000 Manifest next update: Mon 12 Jan 2026 17:00:59 +0000 Files and hashes: 1: 1-WDHqzxLzD_Kg-STMWd7RLt6lG8.crl (hash: /fF9/G+y7JOUzKD1ZJl847t5wHuAddzzZzD3L/x1/lM=) 2: Om8hYJFWIm8pdYISoMz7ReVcWUI.roa (hash: c7dJNXWNQCnqpXhattRk9ZyKNskwQkIBWvzcQA9kNBw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.crl rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft rsync://rpki.ripe.net/repository/DEFAULT/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 17:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:01:01:22:7e:86:23:23:94:37:33:38:ad:d7:6e:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f960c7ab3c4bcc3fca83e49331677b44bb7a946f Validity Not Before: Jan 11 17:00:59 2026 GMT Not After : Jan 12 17:00:59 2026 GMT Subject: CN=c21487362d2262fccfd6cbb8d887581e7508b809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fa:c9:2c:86:8e:b3:03:c6:36:d0:da:54:1f: 40:9f:9c:dc:67:31:ae:54:f8:e8:1a:d2:b0:94:49: c6:9b:a8:03:d1:ac:44:32:7c:98:ae:d4:da:cb:88: 4f:17:e9:1e:9b:6e:45:27:87:2c:f7:0f:6f:d2:74: 1b:c6:30:28:92:10:42:70:1a:5e:c1:e7:83:ee:b5: ff:c4:04:40:a7:fc:cc:ae:de:9d:d7:1d:8f:65:02: 72:19:cc:63:80:31:11:bc:6b:0e:85:52:9a:e2:80: 1d:d9:8e:a1:90:4e:3c:db:29:50:01:18:3c:35:db: 30:4a:b7:34:81:07:04:3b:0e:57:55:8e:e8:1c:53: b0:1f:ae:0d:d2:0a:8a:ad:e0:84:f5:b6:fe:1b:1e: b6:05:66:96:7c:9c:da:58:0e:3c:7b:f4:8a:93:10: 72:13:69:a8:7f:f0:cb:e6:c7:8c:91:04:ec:d7:a0: 08:e5:d3:a5:ff:66:43:f2:e4:06:82:54:81:92:25: e2:d8:db:7f:11:f5:1c:74:bc:d2:b9:fc:66:91:da: 10:b8:96:74:3a:97:c2:e6:9a:56:52:ce:1c:ff:8f: ea:a6:d0:b8:d2:d6:67:b2:0e:87:e6:c2:6b:d3:87: cb:01:1a:2f:3b:eb:a4:1c:f2:83:6b:16:6e:7e:57: 96:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:14:87:36:2D:22:62:FC:CF:D6:CB:B8:D8:87:58:1E:75:08:B8:09 X509v3 Authority Key Identifier: keyid:F9:60:C7:AB:3C:4B:CC:3F:CA:83:E4:93:31:67:7B:44:BB:7A:94:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:2d:2a:e0:d6:a7:9f:b0:66:e7:77:ca:e6:f3:f8:dc:12:3b: f7:68:1e:b9:bf:4a:fe:1e:73:a2:63:5e:ae:33:5b:e1:f6:b6: d3:01:ca:47:f5:02:49:4d:63:c4:ca:1c:a2:d1:20:c3:f5:76: 10:30:68:d1:22:23:73:e9:35:ee:ba:82:fb:d8:ff:f8:a3:1c: a8:8a:57:2d:bf:0f:2d:e5:e1:49:18:d0:95:8d:0d:03:88:6c: f1:ac:7f:a2:bb:d6:b4:9d:3b:0b:34:fd:7e:f6:62:a9:60:28: a1:5e:b4:ba:4c:46:f0:0f:de:7e:81:b9:8e:e0:18:13:d4:2d: 68:10:99:88:99:cf:b8:86:40:ad:bf:f1:da:b9:87:3b:1d:74: 87:24:b9:b1:bb:8a:eb:b5:25:6e:ef:f3:11:04:d1:6c:e2:b9: 54:6b:e5:35:cb:22:37:bb:03:84:af:8f:79:66:0a:8c:43:73: 5e:09:11:6e:f2:df:ed:c6:7f:2a:28:e8:d6:b6:c7:b1:98:d4: d5:b2:7d:95:f8:26:0e:36:fa:0a:47:ed:4d:13:4b:9a:97:7a: f4:c6:cb:53:48:e7:e2:7f:32:6d:53:e6:85:3e:16:d2:33:60: 18:fa:0e:57:fd:f7:60:00:39:c0:f2:15:e3:86:89:db:dc:25: 30:45:35:46 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZuuAQEifoYjI5Q3Mzit1273MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NjBjN2FiM2M0YmNjM2ZjYTgzZTQ5MzMxNjc3YjQ0YmI3 YTk0NmYwHhcNMjYwMTExMTcwMDU5WhcNMjYwMTEyMTcwMDU5WjAzMTEwLwYDVQQD EyhjMjE0ODczNjJkMjI2MmZjY2ZkNmNiYjhkODg3NTgxZTc1MDhiODA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufrJLIaOswPGNtDaVB9An5zcZzGu VPjoGtKwlEnGm6gD0axEMnyYrtTay4hPF+kem25FJ4cs9w9v0nQbxjAokhBCcBpe weeD7rX/xARAp/zMrt6d1x2PZQJyGcxjgDERvGsOhVKa4oAd2Y6hkE482ylQARg8 NdswSrc0gQcEOw5XVY7oHFOwH64N0gqKreCE9bb+Gx62BWaWfJzaWA48e/SKkxBy E2mof/DL5seMkQTs16AI5dOl/2ZD8uQGglSBkiXi2Nt/EfUcdLzSufxmkdoQuJZ0 OpfC5ppWUs4c/4/qptC40tZnsg6H5sJr04fLARovO+ukHPKDaxZufleWiwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFMIUhzYtImL8z9bLuNiHWB51CLgJMB8GA1UdIwQY MBaAFPlgx6s8S8w/yoPkkzFne0S7epRvMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1XREhxenhMekRfS2ctU1RNV2Q3Ukx0NmxHOC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIvZWU0N2RlLTMzNWEtNDk5OS1iNjEz LTI2OTBiNTVmNTBmZC8xLzEtV0RIcXp4THpEX0tnLVNUTVdkN1JMdDZsRzgubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzYyL2VlNDdkZS0zMzVhLTQ5OTktYjYxMy0yNjkwYjU1ZjUw ZmQvMS8xLVdESHF6eEx6RF9LZy1TVE1XZDdSTHQ2bEc4LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHS0q 4Nann7Bm53fK5vP43BI792geub9K/h5zomNerjNb4fa20wHKR/UCSU1jxMocotEg w/V2EDBo0SIjc+k17rqC+9j/+KMcqIpXLb8PLeXhSRjQlY0NA4hs8ax/orvWtJ07 CzT9fvZiqWAooV60ukxG8A/efoG5juAYE9QtaBCZiJnPuIZArb/x2rmHOx10hyS5 sbuK67Ulbu/zEQTRbOK5VGvlNcsiN7sDhK+PeWYKjENzXgkRbvLf7cZ/Kijo1rbH sZjU1bJ9lfgmDjb6CkftTRNLmpd69MbLU0jn4n8ybVPmhT4W0jNgGPoOV/33YAA5 wPIV44aJ29wlMEU1Rg== -----END CERTIFICATE-----Generated at Mon Jan 12 01:50:06 2026 by rpki-client