This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft File: _Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft (raw, json) Hash identifier: 4Pi+ZzYGetWhs3PiBTe19WR500Fs23rgZsMXAYXC/5s= Subject key identifier: 34:83:D9:03:0A:BA:05:C9:9F:32:B6:4E:E3:0B:3D:8F:EB:E1:DA:24 Authority key identifier: FD:2A:F9:06:0C:1F:42:C6:28:FC:FB:8F:07:81:D7:A5:BC:21:FC:02 Certificate issuer: /CN=fd2af9060c1f42c628fcfb8f0781d7a5bc21fc02 Certificate serial: 019BF6BEC98E01E8099DEEFB2E40A53AA407 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 20:00:57 +0000 Manifest this update: Sun 25 Jan 2026 20:00:57 +0000 Manifest next update: Mon 26 Jan 2026 20:00:57 +0000 Files and hashes: 1: _Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl (hash: tC7a1s+t2VbOxgRh0ifM99knqjlRPtBdTVP3js10E0E=) 2: k9c2O8_Xy_eChgcz-yhyQZaZprY.roa (hash: +knLZsYjdnVF7uKOf0qT11DuyDMhYqWK5WJnzaJ/tgc=) 3: r4XvX6Ei1LluIE8pavjpEdLLxJ4.roa (hash: KL22Fozq8IVy1aV+io1l46k9R+MjRQle/pBvY+h3kcU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:c9:8e:01:e8:09:9d:ee:fb:2e:40:a5:3a:a4:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd2af9060c1f42c628fcfb8f0781d7a5bc21fc02 Validity Not Before: Jan 25 20:00:57 2026 GMT Not After : Jan 26 20:00:57 2026 GMT Subject: CN=3483d9030aba05c99f32b64ee30b3d8febe1da24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e5:ed:0e:a9:36:cb:c5:00:98:5c:0e:11:60: f8:af:73:98:a6:c6:03:d3:96:aa:48:85:ce:64:f6: 81:4d:f9:33:d7:fb:2a:ea:93:41:e3:22:bb:6f:20: 2f:c8:b5:b1:82:b8:97:a3:b8:af:3a:3d:83:41:bd: 48:3a:60:39:82:61:15:a9:78:fa:fb:c2:d9:bd:5b: 98:f7:94:ea:2a:14:48:b4:a3:01:3d:02:3d:08:a1: 0e:d3:96:05:0f:01:1c:8a:b9:49:8a:cd:18:97:ba: e0:68:1d:6a:24:98:e6:6e:ba:5e:04:f5:6f:40:33: da:5f:d1:25:b6:ee:45:a4:76:cf:a4:59:ac:8e:70: 08:3a:63:ae:9e:df:45:99:dc:eb:a2:6f:dd:af:7f: 60:bb:58:4a:4b:7c:84:18:19:81:fa:58:26:1f:1b: a1:5d:e1:0d:b6:2c:19:4f:d5:2b:29:76:53:10:aa: c3:af:b1:dc:2a:45:b7:43:05:05:98:45:7c:86:f6: a1:80:68:17:cd:8f:86:5c:bb:2c:56:ab:b1:ae:6b: d4:47:b4:5d:b9:bc:06:fd:ac:4a:2a:c8:75:f2:18: 1c:38:9a:63:f6:6e:e2:7a:af:07:92:ce:1c:7a:21: b3:09:0a:62:bc:9f:ba:67:ea:01:6c:05:72:e5:f4: c1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:83:D9:03:0A:BA:05:C9:9F:32:B6:4E:E3:0B:3D:8F:EB:E1:DA:24 X509v3 Authority Key Identifier: keyid:FD:2A:F9:06:0C:1F:42:C6:28:FC:FB:8F:07:81:D7:A5:BC:21:FC:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:e3:76:3a:75:3d:0b:c3:e8:84:bf:1c:c7:86:73:30:65:0a: ad:d4:2f:c9:ab:e7:df:0b:f3:0d:6b:16:66:d4:59:03:09:41: dc:58:8e:2e:53:d6:ea:b9:8a:1c:e7:f8:fa:25:3f:3b:9f:77: 39:39:7a:b4:e1:11:d6:ea:01:a3:7d:fd:99:52:26:af:57:73: 81:44:67:9b:f9:7a:38:81:cc:01:39:56:dc:0c:7f:80:f2:be: 24:ec:62:15:5a:51:54:89:ef:03:f6:58:dc:6a:23:4b:32:a2: c2:64:9b:56:03:a9:4e:00:04:4c:b3:b4:bd:26:68:08:62:1b: db:4d:40:96:ed:ba:c5:18:ad:44:c6:00:9e:ef:61:f3:c8:59: 4c:d1:fe:31:4e:56:b5:e7:46:3e:24:0d:f4:44:3e:11:b2:df: 2b:6d:a6:c9:7a:41:4d:f9:9e:72:93:b5:b5:02:dd:13:6b:42: f2:1f:e4:99:8f:8f:ec:c6:2a:3b:08:34:27:27:9e:da:17:d0: b1:79:f3:09:e0:d1:5d:97:52:db:4c:93:41:2f:f5:b7:0d:14: fb:37:76:26:19:7c:c5:e7:93:07:9f:d0:6e:00:e9:48:34:54: 94:f0:8f:70:9d:4b:61:eb:d7:37:21:70:b4:d6:c1:29:ea:9d: 08:88:a1:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vsmOAegJne77LkClOqQHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMmFmOTA2MGMxZjQyYzYyOGZjZmI4ZjA3ODFkN2E1YmMy MWZjMDIwHhcNMjYwMTI1MjAwMDU3WhcNMjYwMTI2MjAwMDU3WjAzMTEwLwYDVQQD EygzNDgzZDkwMzBhYmEwNWM5OWYzMmI2NGVlMzBiM2Q4ZmViZTFkYTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+XtDqk2y8UAmFwOEWD4r3OYpsYD 05aqSIXOZPaBTfkz1/sq6pNB4yK7byAvyLWxgriXo7ivOj2DQb1IOmA5gmEVqXj6 +8LZvVuY95TqKhRItKMBPQI9CKEO05YFDwEcirlJis0Yl7rgaB1qJJjmbrpeBPVv QDPaX9Eltu5FpHbPpFmsjnAIOmOunt9Fmdzrom/dr39gu1hKS3yEGBmB+lgmHxuh XeENtiwZT9UrKXZTEKrDr7HcKkW3QwUFmEV8hvahgGgXzY+GXLssVquxrmvUR7Rd ubwG/axKKsh18hgcOJpj9m7ieq8Hks4ceiGzCQpivJ+6Z+oBbAVy5fTBYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDSD2QMKugXJnzK2TuMLPY/r4dokMB8GA1UdIwQY MBaAFP0q+QYMH0LGKPz7jweB16W8IfwCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1NyNUJnd2ZRc1lvX1B1UEI0SFhwYndoX0FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hOThlNGEtNDVhYS00MDhjLWI4MDct YmZjZjlhOTIyYThiLzEvX1NyNUJnd2ZRc1lvX1B1UEI0SFhwYndoX0FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9hOThlNGEtNDVhYS00MDhjLWI4MDctYmZjZjlhOTIyYThi LzEvX1NyNUJnd2ZRc1lvX1B1UEI0SFhwYndoX0FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPeN2OnU9 C8PohL8cx4ZzMGUKrdQvyavn3wvzDWsWZtRZAwlB3FiOLlPW6rmKHOf4+iU/O593 OTl6tOER1uoBo339mVImr1dzgURnm/l6OIHMATlW3Ax/gPK+JOxiFVpRVInvA/ZY 3GojSzKiwmSbVgOpTgAETLO0vSZoCGIb201Alu26xRitRMYAnu9h88hZTNH+MU5W tedGPiQN9EQ+EbLfK22myXpBTfmecpO1tQLdE2tC8h/kmY+P7MYqOwg0Jyee2hfQ sXnzCeDRXZdS20yTQS/1tw0U+zd2Jhl8xeeTB5/QbgDpSDRUlPCPcJ1LYevXNyFw tNbBKeqdCIih3w== -----END CERTIFICATE-----Generated at Sun Jan 25 23:54:38 2026 by rpki-client