This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft File: Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft (raw, json) Hash identifier: P4b7zrEtSAs3dJtaFJt2mnrBIC4Lclg/8nFX59vHLjk= Subject key identifier: 9B:AA:BB:F8:9E:66:4E:F4:BB:13:0E:54:49:B4:5B:49:27:0C:B5:DD Authority key identifier: 4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8 Certificate issuer: /CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8 Certificate serial: 019BF42C1271EAEE18D718AE2C6FF9124290 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft Manifest number: 177A Signing time: Sun 25 Jan 2026 08:01:27 +0000 Manifest this update: Sun 25 Jan 2026 08:01:27 +0000 Manifest next update: Mon 26 Jan 2026 08:01:27 +0000 Files and hashes: 1: IIlVo0fidTvQqKtqFi9ULMHfipo.roa (hash: kjOe1mZ+Dl42eBxnVxbtE/VrvseR8cEoFJ+of+SOdBo=) 2: Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl (hash: /inBfZpOGhRxN6DT2+3PyjZFaQi3gfY2dp66mGDBqfE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2c:12:71:ea:ee:18:d7:18:ae:2c:6f:f9:12:42:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8 Validity Not Before: Jan 25 08:01:27 2026 GMT Not After : Jan 26 08:01:27 2026 GMT Subject: CN=9baabbf89e664ef4bb130e5449b45b49270cb5dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:57:c7:75:1e:33:ce:e5:a6:aa:a6:cd:60:da: 6f:fc:85:f3:17:87:1f:e1:8a:2e:af:2f:93:7a:5a: ce:c1:0d:54:92:02:51:f1:8c:6b:79:93:c5:95:97: 2f:db:26:7e:73:ca:d4:2d:11:ef:2b:6c:2f:2b:42: 1f:e9:4b:6f:da:98:6f:18:e4:8a:b9:16:46:d7:b2: 4c:1f:30:3e:b3:0b:3f:f4:cf:a9:2c:a6:eb:1b:fb: e0:c6:cf:e3:52:8b:17:3d:5a:1d:64:c8:3d:c1:c9: 21:69:d5:86:6e:83:9a:0a:16:d4:7a:22:ff:bf:ab: e4:e8:3d:91:18:ba:c5:11:78:c7:ca:2f:f8:65:16: 71:6f:50:8f:82:4f:e7:82:d8:78:71:da:11:f1:e5: 8e:02:b4:10:f4:c0:58:d4:6d:61:30:f2:86:79:05: de:83:1b:77:0e:9a:a9:64:fd:f3:3a:53:ce:63:72: fc:92:26:02:50:1c:29:e0:e2:7c:d2:16:b7:49:b3: 34:6b:07:ba:9c:9f:bd:7e:e3:f5:e5:57:8d:46:2d: a9:19:f1:e6:23:00:73:8a:49:0f:32:8a:97:59:7f: 26:f7:91:f5:c2:e8:48:4d:0e:b3:23:41:3f:a2:8b: 79:56:da:f1:3c:9d:41:32:17:8c:36:45:72:01:85: 1f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:AA:BB:F8:9E:66:4E:F4:BB:13:0E:54:49:B4:5B:49:27:0C:B5:DD X509v3 Authority Key Identifier: keyid:4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:a4:c9:30:d0:4c:0d:06:4e:68:af:e0:4c:92:bd:35:1b:15: 9a:4b:6b:5a:a9:7e:40:67:c1:71:96:89:ec:0f:66:e2:ed:dc: 80:d4:b5:72:54:b4:9d:ea:03:54:6a:be:bf:7a:bf:70:26:78: ac:a4:b7:0d:4f:ee:5c:cd:5d:9e:e5:0e:73:fa:b0:a4:a0:e4: e7:ac:1d:ef:f5:50:df:74:34:66:d0:22:83:c2:88:1f:53:bb: 9c:3b:4c:f0:48:a4:c3:a5:b5:16:08:4a:60:50:be:b1:9e:54: 0a:06:f5:46:98:4c:40:f1:e8:3f:45:09:f0:f6:1f:81:83:d8: 90:60:a0:0f:da:15:99:fa:a5:c9:1b:9b:ed:5d:ee:0e:f5:13: d4:a8:c2:7a:ec:76:42:be:93:47:ec:fa:af:45:d7:1a:0e:29: 7a:9f:63:f5:ba:d0:90:1b:47:9b:7f:23:24:24:8a:94:34:a0: 58:7a:ac:aa:26:02:b3:4f:ca:bb:34:3b:d2:9c:e1:44:bb:25: 12:8c:3f:6e:af:c8:85:16:29:ed:a7:45:ec:cb:50:6f:a5:ed: 66:d4:a8:8c:19:92:50:b0:89:57:d5:3e:4e:b9:ba:c2:54:71: 9a:36:94:65:2e:96:3f:a2:ca:53:91:cc:25:23:ac:92:64:c1: 38:09:6a:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0LBJx6u4Y1xiuLG/5EkKQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhOWRiMDBjYjE0YTM0YTE5M2Y4NGFjYTE0NGIyYWViMWYz YzAyYzgwHhcNMjYwMTI1MDgwMTI3WhcNMjYwMTI2MDgwMTI3WjAzMTEwLwYDVQQD Eyg5YmFhYmJmODllNjY0ZWY0YmIxMzBlNTQ0OWI0NWI0OTI3MGNiNWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1fHdR4zzuWmqqbNYNpv/IXzF4cf 4Youry+TelrOwQ1UkgJR8YxreZPFlZcv2yZ+c8rULRHvK2wvK0If6Utv2phvGOSK uRZG17JMHzA+sws/9M+pLKbrG/vgxs/jUosXPVodZMg9wckhadWGboOaChbUeiL/ v6vk6D2RGLrFEXjHyi/4ZRZxb1CPgk/ngth4cdoR8eWOArQQ9MBY1G1hMPKGeQXe gxt3DpqpZP3zOlPOY3L8kiYCUBwp4OJ80ha3SbM0awe6nJ+9fuP15VeNRi2pGfHm IwBzikkPMoqXWX8m95H1wuhITQ6zI0E/oot5VtrxPJ1BMheMNkVyAYUfmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJuqu/ieZk70uxMOVEm0W0knDLXdMB8GA1UdIwQY MBaAFEqdsAyxSjShk/hKyhRLKusfPALIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3Ayd0RMRktOS0dULUVyS0ZFc3E2eDg4QXNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy83NjEyYjAtM2UyNC00Y2U3LWExY2Et YzFjNjYwNzhlNWJhLzEvU3Ayd0RMRktOS0dULUVyS0ZFc3E2eDg4QXNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy83NjEyYjAtM2UyNC00Y2U3LWExY2EtYzFjNjYwNzhlNWJh LzEvU3Ayd0RMRktOS0dULUVyS0ZFc3E2eDg4QXNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn6TJMNBM DQZOaK/gTJK9NRsVmktrWql+QGfBcZaJ7A9m4u3cgNS1clS0neoDVGq+v3q/cCZ4 rKS3DU/uXM1dnuUOc/qwpKDk56wd7/VQ33Q0ZtAig8KIH1O7nDtM8Eikw6W1FghK YFC+sZ5UCgb1RphMQPHoP0UJ8PYfgYPYkGCgD9oVmfqlyRub7V3uDvUT1KjCeux2 Qr6TR+z6r0XXGg4pep9j9brQkBtHm38jJCSKlDSgWHqsqiYCs0/KuzQ70pzhRLsl Eow/bq/IhRYp7adF7MtQb6XtZtSojBmSULCJV9U+Trm6wlRxmjaUZS6WP6LKU5HM JSOskmTBOAlqIQ== -----END CERTIFICATE-----Generated at Sun Jan 25 17:37:38 2026 by rpki-client