This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.mft File: 1MpV0uO5FjzEiLb3q-Yusm56jDg.mft (raw, json) Hash identifier: +9EHivct+tuuX7iQubgbhktGbL+sNX6kVtLeRqrCA/U= Subject key identifier: F0:9A:C8:CF:45:8C:08:C2:E0:2D:07:AA:59:75:F4:29:D3:E7:F5:AB Authority key identifier: D4:CA:55:D2:E3:B9:16:3C:C4:88:B6:F7:AB:E6:2E:B2:6E:7A:8C:38 Certificate issuer: /CN=d4ca55d2e3b9163cc488b6f7abe62eb26e7a8c38 Certificate serial: 019B8FF6DA54AD5BF61929BC9C4BEE121FC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MpV0uO5FjzEiLb3q-Yusm56jDg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.mft Manifest number: 068D Signing time: Mon 05 Jan 2026 21:01:18 +0000 Manifest this update: Mon 05 Jan 2026 21:01:18 +0000 Manifest next update: Tue 06 Jan 2026 21:01:18 +0000 Files and hashes: 1: 1MpV0uO5FjzEiLb3q-Yusm56jDg.crl (hash: l9mXDeBfFojzUUlWg9yYI61bnuEXN4o9+G40TuXcsBc=) 2: UrtdSIofhaNFKk3JSuwNs4gGVYM.roa (hash: ggNMIGKU56jLb1aZj1uZ1UliAG9bzA5REzJSwfmL/7I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.crl rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.mft rsync://rpki.ripe.net/repository/DEFAULT/1MpV0uO5FjzEiLb3q-Yusm56jDg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 17:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8f:f6:da:54:ad:5b:f6:19:29:bc:9c:4b:ee:12:1f:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4ca55d2e3b9163cc488b6f7abe62eb26e7a8c38 Validity Not Before: Jan 5 21:01:18 2026 GMT Not After : Jan 6 21:01:18 2026 GMT Subject: CN=f09ac8cf458c08c2e02d07aa5975f429d3e7f5ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3e:89:8a:0c:d8:bb:39:bb:70:a3:a7:c5:62: be:9c:ce:4e:67:69:b0:48:fe:0e:e0:51:9a:33:80: af:a1:f3:35:c7:64:6d:7c:d0:0f:87:c0:0e:ef:7e: 6c:13:a6:13:d6:20:cc:bb:68:cb:88:26:95:1c:e0: 75:74:37:72:b2:27:84:42:e3:9c:52:c8:3a:66:b6: 60:90:b2:5f:61:bf:bf:c5:02:12:01:3f:9a:7a:60: fa:a4:fc:48:d0:96:dc:13:79:16:2c:a9:e6:48:3c: 2e:e8:79:12:ab:ee:3e:3e:7b:e2:7e:37:6f:9c:92: 0d:2a:8a:0e:6d:67:5c:72:dc:a4:1c:2d:b4:f1:61: 90:78:ad:8f:70:88:f9:59:a6:91:9c:4d:a0:fd:36: db:08:8c:56:12:7e:1c:42:94:c2:13:90:93:8c:32: 63:4e:eb:b8:6f:1c:ad:df:7f:44:f7:e9:42:fd:ff: 84:b6:8b:42:f7:d5:a0:ff:2a:0c:c7:f3:fb:2b:e5: 54:f1:7e:76:89:ca:f5:28:c8:fa:96:34:ef:44:75: 97:16:ae:a7:3a:50:bd:55:5c:26:e9:98:88:2d:83: 78:2b:72:fb:f0:8b:97:b8:2c:60:ea:da:78:5c:3a: ac:77:36:b5:4e:51:5a:b4:03:e6:88:f5:d9:25:26: 9d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:9A:C8:CF:45:8C:08:C2:E0:2D:07:AA:59:75:F4:29:D3:E7:F5:AB X509v3 Authority Key Identifier: keyid:D4:CA:55:D2:E3:B9:16:3C:C4:88:B6:F7:AB:E6:2E:B2:6E:7A:8C:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MpV0uO5FjzEiLb3q-Yusm56jDg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:f5:91:ab:32:96:5b:42:5c:df:79:6d:3e:ec:c6:11:02:67: a4:bc:4e:15:38:e2:bf:09:f8:a2:b5:7e:ee:c0:14:a3:25:43: 2c:69:90:8e:37:88:66:39:de:a9:e7:de:f5:65:0c:43:a9:93: 27:7a:32:06:55:43:21:48:1b:98:38:29:ba:d2:c3:d9:ac:1a: 65:62:f7:ce:de:a6:fe:99:b9:a7:3a:af:18:a8:d5:ec:50:66: 71:5e:8c:7a:f9:9c:3c:3a:42:67:29:10:49:9b:96:cf:0d:68: b6:a8:59:e6:42:e3:7a:26:e8:d3:14:4e:38:1a:52:54:39:75: 44:81:97:af:ad:19:fb:41:c2:c2:67:2e:a4:f0:bb:0e:61:63: 63:38:6d:4b:e3:d4:19:5d:a6:3c:b0:67:c9:1e:68:cd:95:7a: 61:b9:fc:8c:ca:2a:54:84:44:b0:93:de:9d:e3:c0:28:38:03: 30:d7:09:ec:55:90:1c:e2:9d:b0:c7:5b:4c:73:c6:0c:7c:bc: 70:d7:5b:19:10:c1:10:db:0c:bf:8e:ac:9a:96:91:d3:c5:2b: 2b:93:d7:39:19:c5:3a:47:0d:27:dd:ff:5e:c1:d7:29:3b:ba: a5:6e:1d:e5:c6:ec:46:5d:46:25:3b:8d:34:6d:d8:1d:46:63: be:1d:a1:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuP9tpUrVv2GSm8nEvuEh/EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Y2E1NWQyZTNiOTE2M2NjNDg4YjZmN2FiZTYyZWIyNmU3 YThjMzgwHhcNMjYwMTA1MjEwMTE4WhcNMjYwMTA2MjEwMTE4WjAzMTEwLwYDVQQD EyhmMDlhYzhjZjQ1OGMwOGMyZTAyZDA3YWE1OTc1ZjQyOWQzZTdmNWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2D6JigzYuzm7cKOnxWK+nM5OZ2mw SP4O4FGaM4CvofM1x2RtfNAPh8AO735sE6YT1iDMu2jLiCaVHOB1dDdysieEQuOc Usg6ZrZgkLJfYb+/xQISAT+aemD6pPxI0JbcE3kWLKnmSDwu6HkSq+4+Pnvifjdv nJINKooObWdcctykHC208WGQeK2PcIj5WaaRnE2g/TbbCIxWEn4cQpTCE5CTjDJj Tuu4bxyt339E9+lC/f+EtotC99Wg/yoMx/P7K+VU8X52icr1KMj6ljTvRHWXFq6n OlC9VVwm6ZiILYN4K3L78IuXuCxg6tp4XDqsdza1TlFatAPmiPXZJSadBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPCayM9FjAjC4C0Hqll19CnT5/WrMB8GA1UdIwQY MBaAFNTKVdLjuRY8xIi296vmLrJueow4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU1wVjB1TzVGanpFaUxiM3EtWXVzbTU2akRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xYzYwNWItMTdiMy00ODMzLWEwM2Et YTRmMDEyOTNjYzA1LzEvMU1wVjB1TzVGanpFaUxiM3EtWXVzbTU2akRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xYzYwNWItMTdiMy00ODMzLWEwM2EtYTRmMDEyOTNjYzA1 LzEvMU1wVjB1TzVGanpFaUxiM3EtWXVzbTU2akRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQvWRqzKW W0Jc33ltPuzGEQJnpLxOFTjivwn4orV+7sAUoyVDLGmQjjeIZjneqefe9WUMQ6mT J3oyBlVDIUgbmDgputLD2awaZWL3zt6m/pm5pzqvGKjV7FBmcV6MevmcPDpCZykQ SZuWzw1otqhZ5kLjeibo0xROOBpSVDl1RIGXr60Z+0HCwmcupPC7DmFjYzhtS+PU GV2mPLBnyR5ozZV6Ybn8jMoqVIREsJPenePAKDgDMNcJ7FWQHOKdsMdbTHPGDHy8 cNdbGRDBENsMv46smpaR08UrK5PXORnFOkcNJ93/XsHXKTu6pW4d5cbsRl1GJTuN NG3YHUZjvh2h8Q== -----END CERTIFICATE-----Generated at Tue Jan 6 02:15:42 2026 by rpki-client