This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft File: SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft (raw, json) Hash identifier: hh7pRsxAUmY0ZyK8vZIj2G/oBYJwbeP0iEewS+uI8hk= Subject key identifier: 53:E7:E8:D9:99:41:1F:5D:0A:59:47:61:12:16:EC:F6:60:EC:E8:3E Authority key identifier: 4B:1A:23:8E:04:3F:E0:63:A7:23:B6:31:59:01:53:93:A6:4A:FC:EB Certificate issuer: /CN=4b1a238e043fe063a723b63159015393a64afceb Certificate serial: 019BF83F988A32FE2EDCEF4DB9149C1C1093 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft Manifest number: 0715 Signing time: Mon 26 Jan 2026 03:01:15 +0000 Manifest this update: Mon 26 Jan 2026 03:01:15 +0000 Manifest next update: Tue 27 Jan 2026 03:01:15 +0000 Files and hashes: 1: L4GTgn9egBv7X8ozBy3W1tdX8eU.roa (hash: WLET1VlxTbzpa1IgY9ty4OjbAIQ5DWuzb+zM7ZHvhBc=) 2: SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl (hash: WrfEnwOJcU3ubX/ktxxf1ppnzmPSns0NilG1qRPgy1Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:98:8a:32:fe:2e:dc:ef:4d:b9:14:9c:1c:10:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b1a238e043fe063a723b63159015393a64afceb Validity Not Before: Jan 26 03:01:15 2026 GMT Not After : Jan 27 03:01:15 2026 GMT Subject: CN=53e7e8d999411f5d0a5947611216ecf660ece83e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:32:2f:16:21:24:c8:69:70:ea:c6:31:cc:b8: f7:ee:94:85:bd:f3:0a:ae:d2:79:7b:07:58:57:80: e1:51:d8:fb:f3:d6:38:7d:f2:06:c2:72:ac:07:bd: de:f2:82:dd:a9:58:38:2a:78:73:be:b1:70:e9:f9: 40:72:c0:9b:59:fb:0c:e4:fb:a5:9a:28:7c:d9:4f: 0e:4c:05:24:fb:73:e3:92:8e:ba:c1:e8:7c:ce:1d: 4d:a8:83:70:7e:77:21:a1:75:25:e9:5d:d2:c7:08: 28:63:4a:ea:23:8c:49:0c:c3:20:25:c6:23:59:39: e6:df:cf:c1:2f:da:3a:8f:a7:8f:c2:37:d0:61:61: b1:d0:13:9b:90:9e:94:c2:a0:13:0e:96:2f:64:b5: 16:1f:1a:a1:86:d4:70:05:48:05:3e:4e:e8:35:13: b3:b0:f1:69:89:51:52:0d:1b:f9:29:7f:56:a4:54: 05:0c:99:34:5d:6c:30:be:80:21:57:75:aa:17:53: 9d:28:06:9c:71:ad:cc:40:14:28:8e:12:42:bf:3e: a3:ef:2b:11:02:ea:e5:c3:88:bd:9c:ae:0c:88:98: 8d:24:ae:db:ad:de:35:dc:e3:08:16:e4:da:9f:a4: 5e:8a:74:38:b9:1a:55:57:44:5f:6e:c0:11:0e:79: 25:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:E7:E8:D9:99:41:1F:5D:0A:59:47:61:12:16:EC:F6:60:EC:E8:3E X509v3 Authority Key Identifier: keyid:4B:1A:23:8E:04:3F:E0:63:A7:23:B6:31:59:01:53:93:A6:4A:FC:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:d7:4b:f3:ce:79:18:bc:e6:5e:09:38:d5:38:56:62:48:6b: 08:e4:71:8e:55:81:fa:2c:c5:60:2b:e8:3e:1a:9d:61:13:47: 75:2d:3e:9f:1d:db:dd:e7:8c:0c:7f:18:85:a1:90:9e:63:26: 78:47:f6:d4:e5:b7:c9:01:3d:09:cb:45:2b:53:1f:ad:74:8b: ae:e5:fe:fc:00:01:32:28:a1:e3:ea:d6:27:2a:59:81:de:52: 9b:9d:12:39:bf:03:9c:f7:0f:0e:00:04:7e:cb:48:be:10:42: 15:5a:d1:c0:ae:15:4a:69:36:0c:04:e2:c1:e5:73:24:3d:66: 5d:6d:9f:3c:26:e3:2a:fd:52:53:b2:f4:8d:77:46:fd:db:79: 9f:15:17:d5:d7:f9:b8:a5:00:1d:48:52:02:fa:c8:5d:d8:cf: 9d:f7:8a:c4:d5:fc:24:52:be:57:07:d0:a1:e3:99:81:da:a0: d3:49:bc:02:86:da:0b:df:07:ef:b8:30:5e:a2:97:95:5d:37: 2e:34:31:17:de:14:14:00:3b:dd:42:8d:b5:b5:9d:b7:8c:8d: bb:de:35:1e:f0:fe:78:c0:a9:1c:89:c1:95:8c:a6:d9:44:1c: 0e:3d:5e:84:ac:f8:ba:b4:d2:38:9c:5c:72:ef:4e:8b:11:1e: 9d:5c:c7:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P5iKMv4u3O9NuRScHBCTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiMWEyMzhlMDQzZmUwNjNhNzIzYjYzMTU5MDE1MzkzYTY0 YWZjZWIwHhcNMjYwMTI2MDMwMTE1WhcNMjYwMTI3MDMwMTE1WjAzMTEwLwYDVQQD Eyg1M2U3ZThkOTk5NDExZjVkMGE1OTQ3NjExMjE2ZWNmNjYwZWNlODNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTIvFiEkyGlw6sYxzLj37pSFvfMK rtJ5ewdYV4DhUdj789Y4ffIGwnKsB73e8oLdqVg4KnhzvrFw6flAcsCbWfsM5Pul mih82U8OTAUk+3Pjko66weh8zh1NqINwfnchoXUl6V3SxwgoY0rqI4xJDMMgJcYj WTnm38/BL9o6j6ePwjfQYWGx0BObkJ6UwqATDpYvZLUWHxqhhtRwBUgFPk7oNROz sPFpiVFSDRv5KX9WpFQFDJk0XWwwvoAhV3WqF1OdKAacca3MQBQojhJCvz6j7ysR Aurlw4i9nK4MiJiNJK7brd413OMIFuTan6ReinQ4uRpVV0RfbsARDnkldQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFPn6NmZQR9dCllHYRIW7PZg7Og+MB8GA1UdIwQY MBaAFEsaI44EP+BjpyO2MVkBU5OmSvzrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3hvampnUV80R09uSTdZeFdRRlRrNlpLX09zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi85YTFlNmYtMmUxYy00NzQzLWE3YTYt MDZmMzY2MjhjOGExLzEvU3hvampnUV80R09uSTdZeFdRRlRrNlpLX09zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi85YTFlNmYtMmUxYy00NzQzLWE3YTYtMDZmMzY2MjhjOGEx LzEvU3hvampnUV80R09uSTdZeFdRRlRrNlpLX09zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVddL8855 GLzmXgk41ThWYkhrCORxjlWB+izFYCvoPhqdYRNHdS0+nx3b3eeMDH8YhaGQnmMm eEf21OW3yQE9CctFK1MfrXSLruX+/AABMiih4+rWJypZgd5Sm50SOb8DnPcPDgAE fstIvhBCFVrRwK4VSmk2DATiweVzJD1mXW2fPCbjKv1SU7L0jXdG/dt5nxUX1df5 uKUAHUhSAvrIXdjPnfeKxNX8JFK+VwfQoeOZgdqg00m8AobaC98H77gwXqKXlV03 LjQxF94UFAA73UKNtbWdt4yNu941HvD+eMCpHInBlYym2UQcDj1ehKz4urTSOJxc cu9OixEenVzHqQ== -----END CERTIFICATE-----Generated at Mon Jan 26 10:18:45 2026 by rpki-client