This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft File: rSQ9z_DLOCEff-fbP5ExabRM9FY.mft (raw, json) Hash identifier: sln8/FH6j9wZ4la5D+Txaa74Z6CVs3sVr0gm6h9bSso= Subject key identifier: FA:52:07:17:99:9F:A7:5A:68:F4:93:50:65:11:1B:06:0D:33:AA:1C Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Certificate serial: 019BF7D21165825CF434DCD4DB7F797F3316 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft Manifest number: 0D21 Signing time: Mon 26 Jan 2026 01:01:37 +0000 Manifest this update: Mon 26 Jan 2026 01:01:37 +0000 Manifest next update: Tue 27 Jan 2026 01:01:37 +0000 Files and hashes: 1: 35OSfnIHBzgeVNUOnTTlLCJ-41Q.asa (hash: AtHm41TjTKHIFJ2bQdWE7+1O/PQj6BaIk8dinW6LOjs=) 2: 4kD5axCPDSh_OTr3bDY6hTRuR-Y.asa (hash: dytt7ty1MYNg2mHD9RN1VQfKWAI0ZZD9QAq0LJCg/iM=) 3: 5vGd1hrRUgjw-VsLzTylini_B7Q.roa (hash: sg0Um8p6l1c6gl4UvV5+SwzisrScl+Xsl5xaWUIwQqQ=) 4: 7_Kx6Ctl8DaaoL5p_Ek3ZtApVT4.asa (hash: 8uOvnBvZoQsY2783oMLIp4UXHsh3oz2EmqHH8OrzbmU=) 5: PMb5QpHERgutl-yC5RQn75DTGLw.asa (hash: J3iqeMWpp9y9r2qafPxIekHw1hn9lS8glb6D3OYiiTQ=) 6: QGAJExkL2FvXDViXp-Coxz1ISyE.roa (hash: KqS/q7o4Pi5DS6O8i7jT3UhmWb+gbQp5j9Y+K8+kuI8=) 7: RkZNyp9wmYxkjqAQhf5rttwR3xU.asa (hash: f/5DtLEb4wh+D+8sMIfmagBhhWS2Yg6kDyhzQs/zOTY=) 8: Wa9n9eRgAcHbz76J6WcZiGS-Bbo.roa (hash: 11efmsxVKEDPybIj7bqcT7q0gfbmOyOH1LpPDuuPMuI=) 9: _L8djGrh0ltiLv6oZ1X7HHqdI7c.roa (hash: DwVvmmhzGeOduCfg7065EWl2MWaIL6OeqmDXyYbnFWc=) 10: a71loKb002beeu3NMgeo4_rsWxQ.roa (hash: 5opUCJlO31ducmOW5I+SCqLYIdXJCf8s+Rf/KTfLWQE=) 11: jk_vo45DTCE6Qch6NeSYYIx2UVA.roa (hash: Y3KIabgiInfNA/NNjT/XlQnKjIR2mWc9rhmGkHb5FNU=) 12: k2hSi2ktn1RbhMfBtzCDueEGIkY.roa (hash: x5d5j8eNv5Fwu5BVRBGFqtr5FQuqOiyNVXsyTIPzWhw=) 13: nqCowGB0ICzLbyaA3M41ICLCHf8.asa (hash: vdGJUwM6cjDv1l7k94p+qDqZhellVdm1aKK/aatWVNA=) 14: rSQ9z_DLOCEff-fbP5ExabRM9FY.crl (hash: ujpbRLnyr+YgayMxiBcg68I28B5Cb1knHa7Tk1C+eTQ=) 15: w8W811TbOURa8f5-mcUpSAfk2n0.asa (hash: b96roN8WeCshD8FoZxjRFm4baoilKTWmZSNLBHUvnfc=) 16: x6T6GqRVAh0o9EoIdLMe4raaS10.asa (hash: MNgMjRK2BIwfms49ydVNFTqMQqZeRrZembCusJ+wf3I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d2:11:65:82:5c:f4:34:dc:d4:db:7f:79:7f:33:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Validity Not Before: Jan 26 01:01:37 2026 GMT Not After : Jan 27 01:01:37 2026 GMT Subject: CN=fa520717999fa75a68f4935065111b060d33aa1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:45:07:3b:80:6e:59:35:81:42:af:76:9e:fe: ee:7e:37:b6:bf:5a:53:60:7d:84:12:a3:4a:e9:42: 97:6e:bc:1e:f2:08:7a:c9:d3:b0:1b:c6:ca:8f:38: c2:8a:84:3b:dd:17:05:fb:31:8e:ff:ca:40:70:02: 9e:ef:d9:ec:de:fe:03:4c:c9:2c:e0:64:8f:38:40: 0f:61:6c:5e:4a:09:e9:b7:c4:36:b7:44:e4:bf:86: f8:e9:af:f3:3e:09:5c:01:41:c1:f2:c4:8a:c3:49: 61:b9:32:d9:68:82:88:b3:cf:ed:32:27:58:a9:5a: 2f:ca:c7:f6:60:fc:c8:1f:ce:5e:c9:2a:5d:4e:33: f1:ee:40:49:f3:a3:c1:fa:b3:cb:ba:b0:2d:cc:85: 10:e2:17:4c:8a:80:a5:93:6f:62:b7:46:26:88:ec: 4a:29:7a:a9:34:38:f6:7c:5f:f9:14:f3:e3:7a:2c: dc:68:7e:4d:aa:bd:63:ec:63:d6:4f:84:e9:78:a6: bc:cb:be:7b:e2:81:16:d3:fb:d6:44:1d:1a:ba:0f: ed:ad:8b:03:4a:d1:a2:31:68:76:67:fa:3b:41:e5: 5f:06:32:20:61:c6:37:f0:7f:d7:35:d3:42:9e:6d: 36:50:d9:30:91:ad:6e:34:d7:34:62:2d:ae:27:0e: dc:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:52:07:17:99:9F:A7:5A:68:F4:93:50:65:11:1B:06:0D:33:AA:1C X509v3 Authority Key Identifier: keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:54:2f:c2:f9:c2:4b:35:8b:99:ce:b5:eb:df:62:0f:0b:a2: 84:26:f2:17:75:33:f6:6b:49:1a:7f:5b:37:b7:52:9f:24:23: c5:cc:49:d5:86:60:72:08:87:d9:83:13:1d:a9:1b:93:48:47: bc:e5:41:f8:f5:e1:35:5a:3f:ac:2d:d6:d9:37:67:ad:c6:c1: 71:d5:ba:47:4f:98:33:f0:e0:93:c1:0c:bf:da:7f:d3:be:ca: ef:b6:08:72:58:eb:d7:49:5a:a2:5a:16:0a:fe:f7:09:01:ce: 36:c2:89:9b:4c:fb:78:63:58:02:d6:28:5f:c5:79:45:ce:a2: 50:53:0e:c7:7f:8d:a9:a9:ca:d2:28:b8:20:e9:af:68:d5:62: 23:26:83:c6:3a:92:12:b5:05:20:e7:cf:df:a2:8c:e9:d3:95: 84:36:7f:82:fb:42:07:64:cd:6c:2a:3b:f3:d8:81:ca:d5:5f: 5e:04:20:37:95:f7:79:a1:40:49:4a:93:ce:79:34:ed:ad:58: ea:0a:cb:35:29:df:53:eb:a4:b1:28:13:fd:26:24:3d:c7:b8: dc:bf:95:bf:c9:ad:5a:c1:d1:9b:a8:47:5b:5c:cf:1b:8c:52: ae:c3:69:bc:4d:56:2d:f5:8a:c9:fc:15:6a:57:3a:11:50:7d: 54:89:73:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30hFlglz0NNzU2395fzMWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMjQzZGNmZjBjYjM4MjExZjdmZTdkYjNmOTEzMTY5YjQ0 Y2Y0NTYwHhcNMjYwMTI2MDEwMTM3WhcNMjYwMTI3MDEwMTM3WjAzMTEwLwYDVQQD EyhmYTUyMDcxNzk5OWZhNzVhNjhmNDkzNTA2NTExMWIwNjBkMzNhYTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEUHO4BuWTWBQq92nv7ufje2v1pT YH2EEqNK6UKXbrwe8gh6ydOwG8bKjzjCioQ73RcF+zGO/8pAcAKe79ns3v4DTMks 4GSPOEAPYWxeSgnpt8Q2t0Tkv4b46a/zPglcAUHB8sSKw0lhuTLZaIKIs8/tMidY qVovysf2YPzIH85eySpdTjPx7kBJ86PB+rPLurAtzIUQ4hdMioClk29it0YmiOxK KXqpNDj2fF/5FPPjeizcaH5Nqr1j7GPWT4TpeKa8y7574oEW0/vWRB0aug/trYsD StGiMWh2Z/o7QeVfBjIgYcY38H/XNdNCnm02UNkwka1uNNc0Yi2uJw7cnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPpSBxeZn6daaPSTUGURGwYNM6ocMB8GA1UdIwQY MBaAFK0kPc/wyzghH3/n2z+RMWm0TPRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMt YjlmMjk4YTc5OGU0LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMtYjlmMjk4YTc5OGU0 LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACVQvwvnC SzWLmc61699iDwuihCbyF3Uz9mtJGn9bN7dSnyQjxcxJ1YZgcgiH2YMTHakbk0hH vOVB+PXhNVo/rC3W2TdnrcbBcdW6R0+YM/Dgk8EMv9p/077K77YIcljr10laoloW Cv73CQHONsKJm0z7eGNYAtYoX8V5Rc6iUFMOx3+NqanK0ii4IOmvaNViIyaDxjqS ErUFIOfP36KM6dOVhDZ/gvtCB2TNbCo789iBytVfXgQgN5X3eaFASUqTznk07a1Y 6grLNSnfU+uksSgT/SYkPce43L+Vv8mtWsHRm6hHW1zPG4xSrsNpvE1WLfWKyfwV alc6EVB9VIlzzw== -----END CERTIFICATE-----Generated at Mon Jan 26 09:02:09 2026 by rpki-client