This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft File: ssC9r63qeNzjEvhi3fQrG9TE9kU.mft (raw, json) Hash identifier: JeL1hcxEca3pvckpBVQ0lDJWlYpbyF4Qqe+RhS0f6As= Subject key identifier: 42:03:B5:BF:40:DA:0F:51:70:F8:39:85:81:52:70:7F:3E:99:F3:E0 Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45 Certificate issuer: /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645 Certificate serial: 019BF763E466C582C5CCE16C06A2467BCA3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft Manifest number: 1158 Signing time: Sun 25 Jan 2026 23:01:17 +0000 Manifest this update: Sun 25 Jan 2026 23:01:17 +0000 Manifest next update: Mon 26 Jan 2026 23:01:17 +0000 Files and hashes: 1: 3JNSQLDSVjMCAeXDdRfs56ArU_A.roa (hash: rZTM/BDsvJUHVVJdlV2ux5RuYfvV5Fs0/F1F4geykB8=) 2: maD4ZOo_rUs8z8qAY9Uyjs0wQzk.roa (hash: +0Yc2a4Hcin9UDFGbH7GTi45lPLvJT0qe8vgESqSU1M=) 3: sFtpmEwf8BZ7WD7WnZcVk65ZP4c.roa (hash: m7H1o/4M+RauJJ9zEivTYaIxQJNTjYvvSZKIkxe1inE=) 4: ssC9r63qeNzjEvhi3fQrG9TE9kU.crl (hash: 90NtnTj8yzRmm/MN68Zq0SR8bCSVZJdJnYwlEPB0+5k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:e4:66:c5:82:c5:cc:e1:6c:06:a2:46:7b:ca:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645 Validity Not Before: Jan 25 23:01:17 2026 GMT Not After : Jan 26 23:01:17 2026 GMT Subject: CN=4203b5bf40da0f5170f839858152707f3e99f3e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b6:4b:20:00:87:cc:17:d8:f1:39:28:06:a3: 9b:ed:60:f0:fe:9a:61:73:86:f6:04:37:79:d0:ab: 7d:0d:4b:d3:ce:9a:4e:c7:06:da:0c:4e:7c:45:67: d3:97:7c:3b:14:93:de:26:14:4f:c9:a3:be:e1:19: 7d:d2:5b:62:79:98:70:88:73:21:54:ef:d9:2e:54: 3f:a0:2b:1d:d3:44:02:0f:07:0a:ad:53:c1:7c:77: 3e:74:0d:a1:f4:2e:91:e7:5e:57:df:32:d6:07:c3: a3:09:a5:c4:b1:bc:35:7b:70:cf:00:e5:fa:3a:2e: cf:3b:0f:5d:00:73:86:b9:a9:7e:74:49:16:86:be: 0e:70:17:71:4a:4e:64:02:ac:78:c6:e9:e6:16:d7: 34:0c:37:6f:71:6c:10:23:9f:de:3b:fe:f7:e1:4a: f7:ba:5c:9c:77:5b:4d:a1:e6:9a:4d:9e:30:bb:96: 56:3d:d8:c5:dc:f8:74:96:29:4d:4e:79:a5:95:69: e5:d8:72:7f:d2:40:74:69:f0:4c:78:82:df:5d:ae: d3:1c:80:f0:32:76:6f:24:94:0f:ac:e0:6a:5a:ce: b9:13:08:45:45:0b:cd:f9:97:b0:b0:d2:70:09:1f: 0b:b7:3f:1e:ab:d8:b5:b8:8d:82:d2:87:58:c7:b9: 9a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:03:B5:BF:40:DA:0F:51:70:F8:39:85:81:52:70:7F:3E:99:F3:E0 X509v3 Authority Key Identifier: keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:d3:8f:8a:36:25:a1:4c:40:1d:03:0d:a4:c4:ad:56:3c:41: f6:8b:54:c6:47:f2:ea:a8:15:68:d2:0d:23:b9:60:b7:08:64: d3:f4:85:60:7d:36:b6:ba:e6:84:a3:e8:03:91:eb:a9:50:33: 42:fb:51:e0:fc:95:22:aa:a9:5e:7e:17:3d:0e:23:c3:3a:1b: d7:ee:63:be:ef:3c:30:3c:fe:fe:20:19:d4:1f:6f:0d:93:23: 11:f8:79:8c:7a:88:8b:19:29:ad:82:62:c0:59:90:41:c4:fd: 1d:4f:30:d1:d4:0d:56:a5:a7:87:5d:eb:00:47:5f:f8:79:e3: 3f:6e:ec:6e:fd:39:1f:79:ba:d9:ce:fa:56:20:ca:e3:9a:d7: 1f:de:c8:7e:0b:07:e2:d2:86:21:35:a6:d0:54:57:df:5e:7c: 33:38:55:c3:98:d2:3c:fd:46:b8:e0:8f:04:84:c0:f6:86:c3: 3f:69:28:2b:0d:2f:12:e9:50:be:4b:f5:1f:1e:d9:1f:a6:19: dd:3b:c3:58:10:96:15:46:81:2a:11:74:b5:8b:5f:47:74:ee: da:c4:28:60:5e:2a:5b:19:e1:eb:91:3f:fd:72:3c:83:26:f3: 29:a9:fe:d4:f5:87:d4:9a:71:12:c3:6f:e1:14:3d:ac:2c:bd: f5:f3:2e:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y+RmxYLFzOFsBqJGe8o7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyYzBiZGFmYWRlYTc4ZGNlMzEyZjg2MmRkZjQyYjFiZDRj NGY2NDUwHhcNMjYwMTI1MjMwMTE3WhcNMjYwMTI2MjMwMTE3WjAzMTEwLwYDVQQD Eyg0MjAzYjViZjQwZGEwZjUxNzBmODM5ODU4MTUyNzA3ZjNlOTlmM2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLZLIACHzBfY8TkoBqOb7WDw/pph c4b2BDd50Kt9DUvTzppOxwbaDE58RWfTl3w7FJPeJhRPyaO+4Rl90ltieZhwiHMh VO/ZLlQ/oCsd00QCDwcKrVPBfHc+dA2h9C6R515X3zLWB8OjCaXEsbw1e3DPAOX6 Oi7POw9dAHOGual+dEkWhr4OcBdxSk5kAqx4xunmFtc0DDdvcWwQI5/eO/734Ur3 ulycd1tNoeaaTZ4wu5ZWPdjF3Ph0lilNTnmllWnl2HJ/0kB0afBMeILfXa7THIDw MnZvJJQPrOBqWs65EwhFRQvN+ZewsNJwCR8Ltz8eq9i1uI2C0odYx7ma1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEIDtb9A2g9RcPg5hYFScH8+mfPgMB8GA1UdIwQY MBaAFLLAva+t6njc4xL4Yt30KxvUxPZFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3NDOXI2M3FlTnpqRXZoaTNmUXJHOVRFOWtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xZjM3MTItY2YyYy00ODZlLTk1YjMt ZmNjMzM2ZWVkOGQ3LzEvc3NDOXI2M3FlTnpqRXZoaTNmUXJHOVRFOWtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8xZjM3MTItY2YyYy00ODZlLTk1YjMtZmNjMzM2ZWVkOGQ3 LzEvc3NDOXI2M3FlTnpqRXZoaTNmUXJHOVRFOWtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqdOPijYl oUxAHQMNpMStVjxB9otUxkfy6qgVaNINI7lgtwhk0/SFYH02trrmhKPoA5HrqVAz QvtR4PyVIqqpXn4XPQ4jwzob1+5jvu88MDz+/iAZ1B9vDZMjEfh5jHqIixkprYJi wFmQQcT9HU8w0dQNVqWnh13rAEdf+HnjP27sbv05H3m62c76ViDK45rXH97IfgsH 4tKGITWm0FRX3158MzhVw5jSPP1GuOCPBITA9obDP2koKw0vEulQvkv1Hx7ZH6YZ 3TvDWBCWFUaBKhF0tYtfR3Tu2sQoYF4qWxnh65E//XI8gybzKan+1PWH1JpxEsNv 4RQ9rCy99fMugQ== -----END CERTIFICATE-----Generated at Mon Jan 26 04:25:11 2026 by rpki-client