This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft File: sEsc31Bs5emTfnf4Jj7PbdslWwU.mft (raw, json) Hash identifier: v/UHVO7g+bStKmq015euVc3gD73fg/lgz8un+z/aGds= Subject key identifier: 8F:40:14:36:8E:EB:05:94:67:90:72:A2:8B:BE:8F:55:0C:88:5C:E6 Authority key identifier: B0:4B:1C:DF:50:6C:E5:E9:93:7E:77:F8:26:3E:CF:6D:DB:25:5B:05 Certificate issuer: /CN=b04b1cdf506ce5e9937e77f8263ecf6ddb255b05 Certificate serial: 019BF5AC817918C080C2FE979C2C670C98C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft Manifest number: 1644 Signing time: Sun 25 Jan 2026 15:01:21 +0000 Manifest this update: Sun 25 Jan 2026 15:01:21 +0000 Manifest next update: Mon 26 Jan 2026 15:01:21 +0000 Files and hashes: 1: cMQiZnAEZAcj3C0lkcgvF6RD5y8.roa (hash: 42uo0Cj9Z9TNuXBZG2n2ywXXuk81qWLkR5LdFIJRmv0=) 2: sEsc31Bs5emTfnf4Jj7PbdslWwU.crl (hash: iPxlQN4GXcjv65gOMjBx2tzqIT/VlYvtS59KDE6LwZ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:81:79:18:c0:80:c2:fe:97:9c:2c:67:0c:98:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b04b1cdf506ce5e9937e77f8263ecf6ddb255b05 Validity Not Before: Jan 25 15:01:21 2026 GMT Not After : Jan 26 15:01:21 2026 GMT Subject: CN=8f4014368eeb0594679072a28bbe8f550c885ce6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:85:58:67:97:f9:4e:47:7d:39:43:78:3c:60: c3:e8:70:24:a7:8e:4e:fc:ce:43:dc:49:f8:09:e3: 7e:c1:31:58:fc:ec:38:8f:86:38:bf:fa:b0:a5:e9: 39:52:c5:a0:25:d3:b0:2b:03:ac:88:46:96:bf:41: e9:47:c5:f2:b0:06:8a:c9:24:c4:61:c1:3f:75:a5: c3:32:6a:a3:52:c2:d8:e1:c5:81:2c:ed:25:dc:25: 7c:45:1c:a5:1b:d0:35:e3:3f:39:71:24:a1:7b:f9: ab:63:5d:c0:b5:e5:d2:ee:79:0f:c5:a2:91:62:32: ff:34:13:ab:c5:4a:c5:95:b8:38:a3:5c:37:15:cd: 44:b9:90:14:fd:22:f8:a3:fa:2d:6a:7d:d1:d5:64: 8f:28:76:8e:a0:e9:18:c4:b7:93:01:53:53:ec:c3: de:d5:cb:e4:f6:75:11:5a:d4:ec:ef:cd:17:2c:df: 04:20:97:94:3f:33:5b:1f:c6:25:a2:42:42:24:6a: 69:ae:10:54:90:a8:06:47:f6:af:c2:e1:5c:dd:af: a8:75:21:26:87:74:1a:6b:76:9d:46:be:a2:f1:56: e8:05:59:aa:67:fb:64:2d:9e:72:cf:35:6e:2b:cd: 99:29:d0:18:2e:5c:04:35:8a:d9:14:a9:fd:e3:a2: f4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:40:14:36:8E:EB:05:94:67:90:72:A2:8B:BE:8F:55:0C:88:5C:E6 X509v3 Authority Key Identifier: keyid:B0:4B:1C:DF:50:6C:E5:E9:93:7E:77:F8:26:3E:CF:6D:DB:25:5B:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:07:3c:19:58:99:c7:d8:e7:62:76:b7:69:74:7c:d2:03:3e: aa:d0:fc:42:fa:d8:12:33:f5:f8:17:24:5c:56:8d:1b:ca:31: 92:ef:1d:a6:9c:46:a4:80:b1:a9:2c:35:63:b4:84:29:cc:60: 35:f5:6b:1f:1e:96:de:a2:33:a9:8c:e9:7a:18:ea:06:1b:a5: 2a:83:5e:5e:62:9d:6d:c4:dc:5e:3c:53:ac:60:88:50:db:df: 51:55:eb:b0:98:42:82:00:8e:e4:87:27:8f:54:b4:66:24:63: fb:e0:1e:00:ef:06:4f:a5:10:32:69:90:bc:af:35:71:21:ef: 3e:95:77:5d:c6:71:cf:68:a1:bd:21:78:9f:96:a2:b7:c4:cb: 08:87:1e:b7:8b:47:af:a1:c0:54:39:60:17:20:6d:0c:ea:c9: 9e:60:01:f5:f9:b5:a2:b6:7c:e6:8f:16:09:e1:6b:74:d3:44: 7a:ae:c7:36:84:0a:b6:d7:5c:b7:18:ec:5a:36:d1:b7:3d:d0: 7f:5b:65:c7:54:31:ef:46:fb:a2:d1:1e:1b:d9:bf:b9:17:81: 36:f1:4a:7b:2b:80:4f:e1:5b:cf:b4:cc:20:7f:1b:f6:7f:b5: 99:33:c6:dd:a2:f0:f8:62:3d:34:77:83:cb:ed:54:f0:c8:53: 08:22:cd:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rIF5GMCAwv6XnCxnDJjAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNGIxY2RmNTA2Y2U1ZTk5MzdlNzdmODI2M2VjZjZkZGIy NTViMDUwHhcNMjYwMTI1MTUwMTIxWhcNMjYwMTI2MTUwMTIxWjAzMTEwLwYDVQQD Eyg4ZjQwMTQzNjhlZWIwNTk0Njc5MDcyYTI4YmJlOGY1NTBjODg1Y2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oVYZ5f5Tkd9OUN4PGDD6HAkp45O /M5D3En4CeN+wTFY/Ow4j4Y4v/qwpek5UsWgJdOwKwOsiEaWv0HpR8XysAaKySTE YcE/daXDMmqjUsLY4cWBLO0l3CV8RRylG9A14z85cSShe/mrY13AteXS7nkPxaKR YjL/NBOrxUrFlbg4o1w3Fc1EuZAU/SL4o/otan3R1WSPKHaOoOkYxLeTAVNT7MPe 1cvk9nURWtTs780XLN8EIJeUPzNbH8YlokJCJGpprhBUkKgGR/avwuFc3a+odSEm h3Qaa3adRr6i8VboBVmqZ/tkLZ5yzzVuK82ZKdAYLlwENYrZFKn946L04QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI9AFDaO6wWUZ5Byoou+j1UMiFzmMB8GA1UdIwQY MBaAFLBLHN9QbOXpk353+CY+z23bJVsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0VzYzMxQnM1ZW1UZm5mNEpqN1BiZHNsV3dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi84MzliMzQtMzUyOS00MzhiLTg3ZDAt Y2U1MDE5MjY0ODk1LzEvc0VzYzMxQnM1ZW1UZm5mNEpqN1BiZHNsV3dVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi84MzliMzQtMzUyOS00MzhiLTg3ZDAtY2U1MDE5MjY0ODk1 LzEvc0VzYzMxQnM1ZW1UZm5mNEpqN1BiZHNsV3dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASgc8GViZ x9jnYna3aXR80gM+qtD8QvrYEjP1+BckXFaNG8oxku8dppxGpICxqSw1Y7SEKcxg NfVrHx6W3qIzqYzpehjqBhulKoNeXmKdbcTcXjxTrGCIUNvfUVXrsJhCggCO5Icn j1S0ZiRj++AeAO8GT6UQMmmQvK81cSHvPpV3XcZxz2ihvSF4n5ait8TLCIcet4tH r6HAVDlgFyBtDOrJnmAB9fm1orZ85o8WCeFrdNNEeq7HNoQKttdctxjsWjbRtz3Q f1tlx1Qx70b7otEeG9m/uReBNvFKeyuAT+Fbz7TMIH8b9n+1mTPG3aLw+GI9NHeD y+1U8MhTCCLNJA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:56:48 2026 by rpki-client