This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft File: 1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft (raw, json) Hash identifier: wyUdm+AuAP/5iWBIbKVd/PULBQBBQveLqcY6azsQYjo= Subject key identifier: E1:C0:74:F2:03:74:2D:FF:80:EE:15:36:AB:A2:00:A3:C3:57:A7:6C Authority key identifier: D4:7D:79:C7:8A:83:06:99:78:1B:3E:43:31:BE:09:25:97:C3:4B:90 Certificate issuer: /CN=d47d79c78a830699781b3e4331be092597c34b90 Certificate serial: 019BB21561D019DB6CF7FCB97550F424F3DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1H15x4qDBpl4Gz5DMb4JJZfDS5A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft Manifest number: 17C5 Signing time: Mon 12 Jan 2026 12:01:44 +0000 Manifest this update: Mon 12 Jan 2026 12:01:44 +0000 Manifest next update: Tue 13 Jan 2026 12:01:44 +0000 Files and hashes: 1: 1H15x4qDBpl4Gz5DMb4JJZfDS5A.crl (hash: DU75EDVcy7VJqzTxONTMq9Yy/GGRsIHty047VyRodIs=) 2: UjFwX21JbiqjDw7jVogurOY6vK0.roa (hash: StMP6W4VJaKc6UNnpuMnvzgEyfJwsKnjjavPWXE2/og=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft rsync://rpki.ripe.net/repository/DEFAULT/1H15x4qDBpl4Gz5DMb4JJZfDS5A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 12:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b2:15:61:d0:19:db:6c:f7:fc:b9:75:50:f4:24:f3:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d47d79c78a830699781b3e4331be092597c34b90 Validity Not Before: Jan 12 12:01:44 2026 GMT Not After : Jan 13 12:01:44 2026 GMT Subject: CN=e1c074f203742dff80ee1536aba200a3c357a76c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bf:4b:95:75:a5:55:05:a6:ee:8a:85:4c:0c: 12:fa:a2:e5:2f:96:58:de:08:5e:c8:df:f2:44:38: 47:fd:ce:d2:17:02:32:b2:f6:8f:0e:74:c6:e1:8f: e7:c4:41:0c:f6:07:a3:53:c4:ef:fe:68:fc:83:fc: 61:b3:d2:02:7b:2c:30:09:4c:34:73:4d:90:49:a8: 05:69:e5:dc:b0:72:95:6c:d5:e6:db:bf:de:dc:59: 7d:24:1e:f4:81:4f:34:14:5f:b6:65:f3:d6:c0:30: ca:18:df:df:3d:31:c2:17:3b:bc:54:37:1e:3a:9e: 4b:e0:68:bf:7d:62:47:e1:53:27:ea:a8:29:c2:dc: 9c:e7:d3:63:1b:0b:0a:54:36:ea:b0:c1:5b:49:3c: 17:06:5c:a2:c9:94:31:ca:18:fb:43:0c:29:03:2e: dc:a2:d6:39:d2:c8:c0:08:06:fe:d7:cb:51:4e:12: de:ef:06:fa:3c:b1:83:35:03:97:f3:51:55:da:4e: b7:7b:5c:97:59:6e:b9:94:c5:68:95:4d:2d:67:d1: 5f:5a:4c:22:a2:dd:9d:7e:6a:6b:f9:bf:27:95:fb: e4:2b:ee:2a:7e:fd:39:33:6c:ea:d9:c2:6d:91:89: 43:b6:0e:9f:7e:5e:1c:7f:57:e4:cc:bd:e7:36:c4: e1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C0:74:F2:03:74:2D:FF:80:EE:15:36:AB:A2:00:A3:C3:57:A7:6C X509v3 Authority Key Identifier: keyid:D4:7D:79:C7:8A:83:06:99:78:1B:3E:43:31:BE:09:25:97:C3:4B:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1H15x4qDBpl4Gz5DMb4JJZfDS5A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:2c:b0:03:3a:32:02:cc:af:da:23:e6:ea:32:4b:05:65:70: 0f:3a:50:e2:23:44:9b:b5:1c:c8:16:69:08:34:f5:c2:da:ec: e4:93:c7:90:c6:bc:24:fd:63:d5:57:b6:7f:c2:1f:e9:5f:74: c0:5d:69:ba:5a:29:d6:ea:38:12:1e:f5:d4:29:be:a5:42:d4: 35:b7:56:a3:f1:3d:0a:11:cc:e1:50:ae:85:04:a8:8d:6f:58: 72:8d:a0:5f:86:50:51:b8:af:00:03:a5:4c:00:99:9f:ef:a6: 34:6f:f8:d5:60:02:ef:f1:1d:3d:27:48:63:c7:84:89:27:52: 1f:cc:0a:91:82:94:c6:f3:58:3e:3d:fe:ac:45:79:66:53:bd: 9d:6e:57:40:bd:9f:90:1e:ce:18:e3:af:71:e6:73:37:7c:be: 8e:de:53:d8:e7:c1:ba:77:1a:92:ca:7f:c8:3b:47:ad:49:83: a8:7d:a9:c2:4c:d0:2a:0c:1e:33:1c:7a:34:fe:65:a4:e3:88: ff:7a:ba:61:f9:c6:7c:c7:73:5f:ab:79:2e:ce:e5:54:ed:c2: a7:03:3d:48:21:2c:b2:27:38:d8:93:44:df:bb:7a:38:b5:a4: 71:34:92:c5:48:d6:6a:7f:36:29:5f:18:8e:6e:31:b0:f8:48: f1:61:f2:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuyFWHQGdts9/y5dVD0JPPbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0N2Q3OWM3OGE4MzA2OTk3ODFiM2U0MzMxYmUwOTI1OTdj MzRiOTAwHhcNMjYwMTEyMTIwMTQ0WhcNMjYwMTEzMTIwMTQ0WjAzMTEwLwYDVQQD EyhlMWMwNzRmMjAzNzQyZGZmODBlZTE1MzZhYmEyMDBhM2MzNTdhNzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyL9LlXWlVQWm7oqFTAwS+qLlL5ZY 3gheyN/yRDhH/c7SFwIysvaPDnTG4Y/nxEEM9gejU8Tv/mj8g/xhs9ICeywwCUw0 c02QSagFaeXcsHKVbNXm27/e3Fl9JB70gU80FF+2ZfPWwDDKGN/fPTHCFzu8VDce Op5L4Gi/fWJH4VMn6qgpwtyc59NjGwsKVDbqsMFbSTwXBlyiyZQxyhj7QwwpAy7c otY50sjACAb+18tRThLe7wb6PLGDNQOX81FV2k63e1yXWW65lMVolU0tZ9FfWkwi ot2dfmpr+b8nlfvkK+4qfv05M2zq2cJtkYlDtg6ffl4cf1fkzL3nNsThXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOHAdPIDdC3/gO4VNquiAKPDV6dsMB8GA1UdIwQY MBaAFNR9eceKgwaZeBs+QzG+CSWXw0uQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUgxNXg0cURCcGw0R3o1RE1iNEpKWmZEUzVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lMzlhNDItNjdiNy00NzNjLTgzY2Qt MTk2NDU1NTI0YTYyLzEvMUgxNXg0cURCcGw0R3o1RE1iNEpKWmZEUzVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9lMzlhNDItNjdiNy00NzNjLTgzY2QtMTk2NDU1NTI0YTYy LzEvMUgxNXg0cURCcGw0R3o1RE1iNEpKWmZEUzVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfSywAzoy Asyv2iPm6jJLBWVwDzpQ4iNEm7UcyBZpCDT1wtrs5JPHkMa8JP1j1Ve2f8If6V90 wF1pulop1uo4Eh711Cm+pULUNbdWo/E9ChHM4VCuhQSojW9Yco2gX4ZQUbivAAOl TACZn++mNG/41WAC7/EdPSdIY8eEiSdSH8wKkYKUxvNYPj3+rEV5ZlO9nW5XQL2f kB7OGOOvceZzN3y+jt5T2OfBuncaksp/yDtHrUmDqH2pwkzQKgweMxx6NP5lpOOI /3q6YfnGfMdzX6t5Ls7lVO3CpwM9SCEssic42JNE37t6OLWkcTSSxUjWan82KV8Y jm4xsPhI8WHy+A== -----END CERTIFICATE-----Generated at Mon Jan 12 17:32:35 2026 by rpki-client