This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft File: sWq92UIPBLqcHNLDTcezUpiK-Nk.mft (raw, json) Hash identifier: z+QxzRVBjg/ktHJp7fOHxXFNlGe04v+406ThH7sbBqQ= Subject key identifier: DE:99:9C:9E:9B:0B:3F:1A:F9:ED:6A:2D:B8:DD:80:1E:C6:DC:5A:BC Authority key identifier: B1:6A:BD:D9:42:0F:04:BA:9C:1C:D2:C3:4D:C7:B3:52:98:8A:F8:D9 Certificate issuer: /CN=b16abdd9420f04ba9c1cd2c34dc7b352988af8d9 Certificate serial: 019BF76378E25E9A2F7B28EF8D72EBCCB2ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft Manifest number: 1526 Signing time: Sun 25 Jan 2026 23:00:49 +0000 Manifest this update: Sun 25 Jan 2026 23:00:49 +0000 Manifest next update: Mon 26 Jan 2026 23:00:49 +0000 Files and hashes: 1: 0WZc2xB5hVDGIEXjZ-HhqIhObPU.roa (hash: yv7agGUqeUNNQCncCwHxi4NpbbYoTQ6AYByrG78CfM4=) 2: sWq92UIPBLqcHNLDTcezUpiK-Nk.crl (hash: ZHznfAH0bERXu5Vrgfn2ZFux9e3AzAx5QWwWAHCZ0jc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.crl rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:78:e2:5e:9a:2f:7b:28:ef:8d:72:eb:cc:b2:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b16abdd9420f04ba9c1cd2c34dc7b352988af8d9 Validity Not Before: Jan 25 23:00:49 2026 GMT Not After : Jan 26 23:00:49 2026 GMT Subject: CN=de999c9e9b0b3f1af9ed6a2db8dd801ec6dc5abc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:d6:89:50:11:a6:2a:e4:7a:27:75:6e:e0:c9: e5:ac:3b:bd:57:7f:d0:36:48:96:b7:71:7b:17:49: d1:a1:f6:75:28:ea:4a:22:0d:05:98:26:65:e2:aa: b6:9c:f8:c3:ce:2c:bc:88:06:99:52:84:4f:ec:55: 95:ac:2a:0d:7a:b3:20:98:c0:86:a7:ef:2d:63:90: e7:a1:bd:36:ca:9b:46:ba:f6:04:4b:55:a0:d3:01: 5e:dc:28:b5:06:3f:e7:77:cd:d8:04:d7:68:e4:a2: 50:3c:4f:f8:46:62:ba:bf:42:94:71:d1:51:56:6d: c8:f8:ae:29:03:cd:06:40:b3:9a:2c:e3:74:da:31: 78:62:bd:4c:09:0c:9d:71:0d:e5:33:ce:e8:e2:de: 5e:a3:aa:1e:75:23:02:78:ac:00:cd:c9:f6:42:0d: 59:a8:09:7f:94:47:2e:00:9e:ca:9c:61:07:81:3f: 36:d7:bc:59:3c:e5:74:29:a2:3c:29:f0:9b:04:cc: 0d:b7:13:6f:1c:68:80:8b:57:69:35:76:96:26:da: 5b:a9:52:19:17:c2:9e:3b:84:b8:eb:6c:ef:25:52: 2f:60:2b:7a:99:af:6a:27:b4:02:b2:b1:b1:b7:0f: bc:71:d9:e7:6d:33:56:2c:bd:4d:70:32:e2:7c:c0: 11:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:99:9C:9E:9B:0B:3F:1A:F9:ED:6A:2D:B8:DD:80:1E:C6:DC:5A:BC X509v3 Authority Key Identifier: keyid:B1:6A:BD:D9:42:0F:04:BA:9C:1C:D2:C3:4D:C7:B3:52:98:8A:F8:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:f2:40:28:17:39:43:07:3d:e9:19:1f:c1:b4:18:8b:55:38: 76:87:cf:fd:0c:76:58:c0:85:1b:a1:5a:68:db:d0:d3:c6:76: ae:10:2b:2f:3d:88:cc:48:91:77:2d:a4:24:f3:ce:4c:5d:fc: 0d:f9:d7:5b:53:32:2d:a2:7f:2a:e3:45:27:45:11:44:8e:03: 3a:5d:36:55:44:0c:05:c1:12:32:7f:35:9a:16:2f:e5:92:a3: 8e:55:ee:1a:4b:ce:f0:39:89:99:68:d8:af:a2:13:d6:58:d4: bb:44:5b:dc:b6:cb:1a:49:84:c5:39:75:1e:ec:f6:58:45:7e: ff:e2:48:de:41:f9:19:df:cb:55:1d:53:85:69:13:ec:5b:8f: 01:af:b4:f0:06:e5:8e:4f:cd:6b:f9:1e:b2:4f:d0:bc:a5:a6: 49:9c:a5:bf:a6:b4:c9:c6:32:5b:3e:26:49:ab:c1:4d:2e:3e: af:62:33:52:5e:92:9d:05:8f:70:3a:26:fd:99:8d:b1:6f:40: 6b:a5:c5:0b:50:7a:4c:7c:24:7d:ab:16:1f:a2:24:59:70:32: 38:14:c6:03:84:fd:dd:73:1a:03:9c:4d:55:4b:4a:b4:4d:c8: d5:3e:4b:ed:03:40:6b:b4:10:10:eb:45:95:a1:da:ee:0c:af: f9:6f:79:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y3jiXpoveyjvjXLrzLLtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNmFiZGQ5NDIwZjA0YmE5YzFjZDJjMzRkYzdiMzUyOTg4 YWY4ZDkwHhcNMjYwMTI1MjMwMDQ5WhcNMjYwMTI2MjMwMDQ5WjAzMTEwLwYDVQQD EyhkZTk5OWM5ZTliMGIzZjFhZjllZDZhMmRiOGRkODAxZWM2ZGM1YWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6daJUBGmKuR6J3Vu4MnlrDu9V3/Q NkiWt3F7F0nRofZ1KOpKIg0FmCZl4qq2nPjDziy8iAaZUoRP7FWVrCoNerMgmMCG p+8tY5Dnob02yptGuvYES1Wg0wFe3Ci1Bj/nd83YBNdo5KJQPE/4RmK6v0KUcdFR Vm3I+K4pA80GQLOaLON02jF4Yr1MCQydcQ3lM87o4t5eo6oedSMCeKwAzcn2Qg1Z qAl/lEcuAJ7KnGEHgT8217xZPOV0KaI8KfCbBMwNtxNvHGiAi1dpNXaWJtpbqVIZ F8KeO4S462zvJVIvYCt6ma9qJ7QCsrGxtw+8cdnnbTNWLL1NcDLifMARXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN6ZnJ6bCz8a+e1qLbjdgB7G3Fq8MB8GA1UdIwQY MBaAFLFqvdlCDwS6nBzSw03Hs1KYivjZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1dxOTJVSVBCTHFjSE5MRFRjZXpVcGlLLU5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yYWRjMzktMzYzMC00MjVmLWFmMjkt ZmJiMGQzYzEwNDIzLzEvc1dxOTJVSVBCTHFjSE5MRFRjZXpVcGlLLU5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8yYWRjMzktMzYzMC00MjVmLWFmMjktZmJiMGQzYzEwNDIz LzEvc1dxOTJVSVBCTHFjSE5MRFRjZXpVcGlLLU5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHvJAKBc5 Qwc96RkfwbQYi1U4dofP/Qx2WMCFG6FaaNvQ08Z2rhArLz2IzEiRdy2kJPPOTF38 DfnXW1MyLaJ/KuNFJ0URRI4DOl02VUQMBcESMn81mhYv5ZKjjlXuGkvO8DmJmWjY r6IT1ljUu0Rb3LbLGkmExTl1Huz2WEV+/+JI3kH5Gd/LVR1ThWkT7FuPAa+08Abl jk/Na/kesk/QvKWmSZylv6a0ycYyWz4mSavBTS4+r2IzUl6SnQWPcDom/ZmNsW9A a6XFC1B6THwkfasWH6IkWXAyOBTGA4T93XMaA5xNVUtKtE3I1T5L7QNAa7QQEOtF laHa7gyv+W95WA== -----END CERTIFICATE-----Generated at Mon Jan 26 06:08:36 2026 by rpki-client