This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft File: S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft (raw, json) Hash identifier: thOfurK8DwhwilqGC3KBCtGrpao+4HAGyNQKfoHfEYU= Subject key identifier: A5:1D:E5:BD:6B:F0:8A:1F:52:37:BA:E3:E7:5E:D9:FE:DF:31:7D:B3 Authority key identifier: 4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02 Certificate issuer: /CN=4b8d822165e7f01f722c973967f7554605240802 Certificate serial: 019BF4628674F738EB801C3B311324C744E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft Manifest number: 150B Signing time: Sun 25 Jan 2026 09:00:56 +0000 Manifest this update: Sun 25 Jan 2026 09:00:56 +0000 Manifest next update: Mon 26 Jan 2026 09:00:56 +0000 Files and hashes: 1: S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl (hash: FP9ci3IPiVUlgvUF7JW1g0czNINLYqo+Z7BangIflk0=) 2: ZAwG4slSo_crrpDyRxFQR5KzVSg.roa (hash: /umphik0flgGmW1X9Vcc9LyWPZGDY2w5rPPzdD1TwmI=) 3: p8AQxyNR8nBVLYkz7FBkK4j0I2U.roa (hash: +Weoe1wjLZlER3uzL/qeXZKi4Mx1xgBcnOBbv/qCT8k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:86:74:f7:38:eb:80:1c:3b:31:13:24:c7:44:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b8d822165e7f01f722c973967f7554605240802 Validity Not Before: Jan 25 09:00:56 2026 GMT Not After : Jan 26 09:00:56 2026 GMT Subject: CN=a51de5bd6bf08a1f5237bae3e75ed9fedf317db3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b5:fa:7f:00:6c:83:c8:1c:22:86:a6:8e:8a: 64:53:9d:1a:a2:b3:85:61:5b:eb:e5:a0:70:55:67: f4:ee:2e:da:37:f0:12:74:8b:16:c3:c8:55:4d:2a: 9a:c4:f1:46:e0:0f:6f:d6:28:a4:3f:ce:96:80:b2: 4f:49:7a:56:69:b8:ad:df:1b:a7:65:68:d8:db:19: f5:39:fb:39:58:e9:51:f4:84:ea:7c:fe:52:4d:2a: e9:99:0b:06:ff:26:c6:10:15:0a:7e:3c:43:19:38: 93:36:31:c9:15:7a:88:f2:53:38:4a:b5:7e:c3:2f: 00:63:7a:be:3b:2c:91:e1:d5:3d:41:17:44:1c:a2: 13:85:f7:dc:10:9d:cc:e9:ce:8a:89:fd:3d:a5:8d: 95:c2:05:12:0b:cb:fb:61:6d:66:69:86:9b:96:00: 0a:70:c3:2e:eb:93:53:60:90:7f:7f:d2:12:af:23: ed:c1:2b:bb:ce:0e:f1:68:25:dd:83:c6:1f:b0:be: 52:07:43:fa:8e:ab:0c:54:81:99:64:c2:57:9e:b8: 86:d1:96:9b:54:6f:2e:b0:ad:5d:d1:15:ec:bf:81: e4:11:44:93:3a:15:40:37:2d:85:c6:e2:2a:11:fe: 6a:a1:12:a4:99:9e:28:12:ba:0b:fc:8b:5d:e1:19: 44:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:1D:E5:BD:6B:F0:8A:1F:52:37:BA:E3:E7:5E:D9:FE:DF:31:7D:B3 X509v3 Authority Key Identifier: keyid:4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:d9:3a:73:27:fc:e0:6e:3e:c0:08:98:ae:c6:d1:f0:b8:ee: 68:cd:fa:ab:5d:ef:cf:a5:96:7a:8b:e9:72:77:ca:a5:de:d7: b0:8b:ae:bf:16:45:64:34:43:5a:82:4a:4b:7b:aa:dd:05:ad: 53:54:58:a5:ef:a9:ab:75:0d:22:0c:65:2c:09:c3:f5:42:7f: ae:d4:a6:be:97:b6:0f:f3:35:33:2d:56:36:0b:b0:be:d1:06: e0:a6:3b:cc:00:9e:b8:b5:5a:19:24:cd:25:0a:78:85:09:05: 36:e4:f8:44:0c:53:17:6b:99:02:c5:80:7c:00:da:aa:3e:07: b4:5f:ba:29:ee:0f:2f:47:05:5d:55:70:9d:8e:80:14:14:0c: a5:a8:a2:44:1f:8d:5e:7f:c5:57:4c:cd:32:cc:3a:49:a5:85: 9b:41:79:70:cf:26:3b:1c:64:da:0a:03:34:73:a5:62:1f:a4: d0:d5:ac:79:22:41:7f:a3:d6:25:3e:b2:2c:09:a3:a4:53:58: d4:36:c8:40:ec:4d:e1:fa:7b:df:7a:22:83:a8:16:23:c0:12: a0:4a:29:a9:42:00:a5:f6:ea:79:ac:00:eb:93:47:7e:23:86: f9:39:d1:32:32:3c:30:8c:05:cd:3e:a7:f0:d0:f2:df:47:25: c7:48:72:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YoZ09zjrgBw7MRMkx0TmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiOGQ4MjIxNjVlN2YwMWY3MjJjOTczOTY3Zjc1NTQ2MDUy NDA4MDIwHhcNMjYwMTI1MDkwMDU2WhcNMjYwMTI2MDkwMDU2WjAzMTEwLwYDVQQD EyhhNTFkZTViZDZiZjA4YTFmNTIzN2JhZTNlNzVlZDlmZWRmMzE3ZGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbX6fwBsg8gcIoamjopkU50aorOF YVvr5aBwVWf07i7aN/ASdIsWw8hVTSqaxPFG4A9v1iikP86WgLJPSXpWabit3xun ZWjY2xn1Ofs5WOlR9ITqfP5STSrpmQsG/ybGEBUKfjxDGTiTNjHJFXqI8lM4SrV+ wy8AY3q+OyyR4dU9QRdEHKIThffcEJ3M6c6Kif09pY2VwgUSC8v7YW1maYablgAK cMMu65NTYJB/f9ISryPtwSu7zg7xaCXdg8YfsL5SB0P6jqsMVIGZZMJXnriG0Zab VG8usK1d0RXsv4HkEUSTOhVANy2FxuIqEf5qoRKkmZ4oEroL/Itd4RlEBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKUd5b1r8IofUje64+de2f7fMX2zMB8GA1UdIwQY MBaAFEuNgiFl5/AfciyXOWf3VUYFJAgCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzQyQ0lXWG44Qjl5TEpjNVpfZFZSZ1VrQ0FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zMmU3NzYtOGYzNi00ZDE2LTk1NmEt NWFmOTU4Y2VhZjZlLzEvUzQyQ0lXWG44Qjl5TEpjNVpfZFZSZ1VrQ0FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8zMmU3NzYtOGYzNi00ZDE2LTk1NmEtNWFmOTU4Y2VhZjZl LzEvUzQyQ0lXWG44Qjl5TEpjNVpfZFZSZ1VrQ0FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAENk6cyf8 4G4+wAiYrsbR8LjuaM36q13vz6WWeovpcnfKpd7XsIuuvxZFZDRDWoJKS3uq3QWt U1RYpe+pq3UNIgxlLAnD9UJ/rtSmvpe2D/M1My1WNguwvtEG4KY7zACeuLVaGSTN JQp4hQkFNuT4RAxTF2uZAsWAfADaqj4HtF+6Ke4PL0cFXVVwnY6AFBQMpaiiRB+N Xn/FV0zNMsw6SaWFm0F5cM8mOxxk2goDNHOlYh+k0NWseSJBf6PWJT6yLAmjpFNY 1DbIQOxN4fp733oig6gWI8ASoEopqUIApfbqeawA65NHfiOG+TnRMjI8MIwFzT6n 8NDy30clx0hyhg== -----END CERTIFICATE-----Generated at Sun Jan 25 11:49:43 2026 by rpki-client