This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft File: StRn8W0JUeQwcTgyxsdZVh52BB8.mft (raw, json) Hash identifier: SqIlU2PfYih36MdKvOO1VV7M+hXR9akT32EEA8d7A54= Subject key identifier: 18:DD:E9:9B:14:F7:FB:2F:4A:28:FA:8B:38:C9:F7:E3:3F:83:06:71 Authority key identifier: 4A:D4:67:F1:6D:09:51:E4:30:71:38:32:C6:C7:59:56:1E:76:04:1F Certificate issuer: /CN=4ad467f16d0951e430713832c6c759561e76041f Certificate serial: 019BF6BF4F1C2EA4405963D282D6A44DBA85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 20:01:31 +0000 Manifest this update: Sun 25 Jan 2026 20:01:31 +0000 Manifest next update: Mon 26 Jan 2026 20:01:31 +0000 Files and hashes: 1: LA87c0N0jLLIJNyaAxdsrLDiRKc.roa (hash: 4oqbXXgz6mLbQ2FF6T8Y0DHtnqReuO9S3IDQ8izJVL4=) 2: StRn8W0JUeQwcTgyxsdZVh52BB8.crl (hash: idFkL77f8HCbXmIyyVOCCdkQjy0Ua1HglIGzi86j5NQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:4f:1c:2e:a4:40:59:63:d2:82:d6:a4:4d:ba:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ad467f16d0951e430713832c6c759561e76041f Validity Not Before: Jan 25 20:01:31 2026 GMT Not After : Jan 26 20:01:31 2026 GMT Subject: CN=18dde99b14f7fb2f4a28fa8b38c9f7e33f830671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:10:28:e1:75:68:66:1c:1b:49:8c:7c:42:d9: ef:db:8e:55:b7:86:9e:12:21:d2:f0:20:15:0c:11: 58:2b:0e:09:1e:0a:5f:4a:57:42:79:fd:0a:12:b8: 61:f1:ca:a9:69:ae:ac:e3:3d:9b:61:f5:e2:40:94: 27:53:e6:3f:77:30:8a:2a:c7:31:62:ea:56:d2:45: a5:65:c6:ca:d0:4a:77:17:dc:2d:a3:d8:49:b3:cd: 96:00:a3:17:32:b9:9c:85:20:b6:a5:ad:e9:33:12: 8d:51:78:69:82:1c:dc:4f:6d:88:92:31:cc:de:b4: 5d:d2:26:e0:dc:c9:b2:55:f3:77:e9:c8:2b:3d:cb: c7:d4:c9:e1:4a:34:05:7e:2d:4e:39:b5:75:2c:0c: 54:32:6d:2b:07:6d:3d:b1:cf:80:86:c3:66:cc:cc: ae:b2:9c:dc:26:07:00:55:32:85:50:79:60:b4:f2: 1c:59:13:99:d2:30:ad:5e:77:45:04:8f:01:59:74: 51:0f:12:2e:26:a8:79:e9:3e:1d:9e:67:6e:8a:05: 1a:d6:77:ab:a5:c3:61:5f:df:54:de:26:96:bc:34: 6c:56:73:53:11:46:a5:71:51:c7:84:4c:09:e8:50: a9:ff:f7:d4:bd:68:07:f6:ff:1c:50:66:2c:3a:e9: 8c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:DD:E9:9B:14:F7:FB:2F:4A:28:FA:8B:38:C9:F7:E3:3F:83:06:71 X509v3 Authority Key Identifier: keyid:4A:D4:67:F1:6D:09:51:E4:30:71:38:32:C6:C7:59:56:1E:76:04:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:5f:39:b4:17:05:79:1b:00:af:a5:00:00:ff:57:18:a7:65: 9a:7b:a0:ca:5b:47:0d:1b:08:58:eb:44:ad:f5:cc:b0:9a:a7: b2:51:33:18:7c:18:cc:44:f6:79:53:f5:8f:7b:03:92:b1:37: aa:44:2b:3c:1b:25:31:82:2f:fb:f7:4f:15:a7:44:f4:25:c4: a0:56:17:9f:91:0a:43:76:0b:a6:a7:e8:b9:26:dc:51:e7:5a: d7:ac:1c:cc:1e:9f:c0:ad:5a:c6:ed:dc:5a:a9:89:40:56:9a: c0:17:07:5f:7d:f9:5e:54:c3:b7:03:5b:ca:45:fe:c1:97:ee: 0d:63:b6:04:07:8d:5d:51:14:35:bb:cf:4b:74:b9:f7:f0:83: f5:95:e2:44:33:16:88:63:45:6a:11:0f:d3:1f:9a:78:b0:72: c9:73:83:13:6d:1e:6e:7d:ee:9b:51:60:32:f0:54:a4:d6:63: 80:0b:9c:99:de:ec:32:b0:35:15:df:24:d8:c7:24:a5:14:70: 27:f2:56:08:24:2b:b1:1f:2a:b5:0e:0c:f3:4a:07:35:1a:cf: f8:14:43:aa:96:8b:67:d1:58:60:11:e3:d6:d1:6f:65:b9:ea: 7b:08:69:ae:04:d8:77:41:ba:8d:b1:0c:1c:78:a3:01:4a:ef: b1:8b:a6:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2v08cLqRAWWPSgtakTbqFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhZDQ2N2YxNmQwOTUxZTQzMDcxMzgzMmM2Yzc1OTU2MWU3 NjA0MWYwHhcNMjYwMTI1MjAwMTMxWhcNMjYwMTI2MjAwMTMxWjAzMTEwLwYDVQQD EygxOGRkZTk5YjE0ZjdmYjJmNGEyOGZhOGIzOGM5ZjdlMzNmODMwNjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohAo4XVoZhwbSYx8Qtnv245Vt4ae EiHS8CAVDBFYKw4JHgpfSldCef0KErhh8cqpaa6s4z2bYfXiQJQnU+Y/dzCKKscx YupW0kWlZcbK0Ep3F9wto9hJs82WAKMXMrmchSC2pa3pMxKNUXhpghzcT22IkjHM 3rRd0ibg3MmyVfN36cgrPcvH1MnhSjQFfi1OObV1LAxUMm0rB209sc+AhsNmzMyu spzcJgcAVTKFUHlgtPIcWROZ0jCtXndFBI8BWXRRDxIuJqh56T4dnmduigUa1ner pcNhX99U3iaWvDRsVnNTEUalcVHHhEwJ6FCp//fUvWgH9v8cUGYsOumMzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBjd6ZsU9/svSij6izjJ9+M/gwZxMB8GA1UdIwQY MBaAFErUZ/FtCVHkMHE4MsbHWVYedgQfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3RSbjhXMEpVZVF3Y1RneXhzZFpWaDUyQkI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8zMzg2MDUtNGRiNC00ZWRlLWEzMTAt NTY0MjM1M2Q0MzFhLzEvU3RSbjhXMEpVZVF3Y1RneXhzZFpWaDUyQkI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8zMzg2MDUtNGRiNC00ZWRlLWEzMTAtNTY0MjM1M2Q0MzFh LzEvU3RSbjhXMEpVZVF3Y1RneXhzZFpWaDUyQkI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmV85tBcF eRsAr6UAAP9XGKdlmnugyltHDRsIWOtErfXMsJqnslEzGHwYzET2eVP1j3sDkrE3 qkQrPBslMYIv+/dPFadE9CXEoFYXn5EKQ3YLpqfouSbcUeda16wczB6fwK1axu3c WqmJQFaawBcHX335XlTDtwNbykX+wZfuDWO2BAeNXVEUNbvPS3S59/CD9ZXiRDMW iGNFahEP0x+aeLByyXODE20ebn3um1FgMvBUpNZjgAucmd7sMrA1Fd8k2MckpRRw J/JWCCQrsR8qtQ4M80oHNRrP+BRDqpaLZ9FYYBHj1tFvZbnqewhprgTYd0G6jbEM HHijAUrvsYumbg== -----END CERTIFICATE-----Generated at Mon Jan 26 06:08:33 2026 by rpki-client