This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft File: sx0cKJHYgEaaINi38Y5M2GVDAEY.mft (raw, json) Hash identifier: /gUAJQQgLR4yVMLAakHKlcf3Gog4IuCESMF7XTnKcf4= Subject key identifier: 3B:C7:5C:15:63:36:77:2A:76:8A:3C:60:D6:14:DD:DD:76:E8:01:04 Authority key identifier: B3:1D:1C:28:91:D8:80:46:9A:20:D8:B7:F1:8E:4C:D8:65:43:00:46 Certificate issuer: /CN=b31d1c2891d880469a20d8b7f18e4cd865430046 Certificate serial: 019BF6BF1FB0E63B77568C57817F37B20B04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sx0cKJHYgEaaINi38Y5M2GVDAEY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft Manifest number: 04CB Signing time: Sun 25 Jan 2026 20:01:18 +0000 Manifest this update: Sun 25 Jan 2026 20:01:18 +0000 Manifest next update: Mon 26 Jan 2026 20:01:18 +0000 Files and hashes: 1: nZ-MC578XDNoxF9WT_GxSRoreCI.roa (hash: P9N+z+cz6t9cJMJHuc2G7Ay4P8kV4Zg2jsXlf/jTUFo=) 2: sx0cKJHYgEaaINi38Y5M2GVDAEY.crl (hash: iVxG74kX4NK341yV0jkY+A/AXgSYhxGI4jM7n+VKB3s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.crl rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft rsync://rpki.ripe.net/repository/DEFAULT/sx0cKJHYgEaaINi38Y5M2GVDAEY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:1f:b0:e6:3b:77:56:8c:57:81:7f:37:b2:0b:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b31d1c2891d880469a20d8b7f18e4cd865430046 Validity Not Before: Jan 25 20:01:18 2026 GMT Not After : Jan 26 20:01:18 2026 GMT Subject: CN=3bc75c156336772a768a3c60d614dddd76e80104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:25:11:cf:e9:16:5c:9f:73:ec:36:97:3a:52: d8:f1:22:f9:87:42:9e:76:69:a7:7b:5f:a8:35:df: 24:dc:03:52:5b:ec:8c:c8:78:46:fc:8f:41:82:da: e7:4a:10:f4:72:f3:6e:2a:6b:e5:74:38:37:e8:b6: f5:cb:23:86:85:5d:af:ec:03:ff:72:a4:9f:44:af: b8:e2:c7:03:1d:c2:a5:17:28:77:b7:60:98:e6:ef: e1:03:83:53:b0:f2:39:cd:ef:ae:5f:21:09:3e:c5: b2:03:15:e9:a8:e0:51:b8:c9:a9:ae:60:60:98:6b: f7:d0:87:f6:31:cd:a4:a7:2d:9d:e2:b9:e9:06:fd: 46:bf:42:49:aa:75:d8:5b:ac:de:73:73:d0:a4:bb: f0:6b:ed:a5:fc:b5:29:ca:4c:04:03:a4:00:6e:e4: bf:63:18:60:2d:8d:39:ef:61:76:6a:2d:3c:4c:d7: 47:fd:dd:14:ad:3c:97:84:b7:cc:0a:f1:2c:df:d4: c2:c8:4b:01:f6:e5:45:fa:7d:0b:ca:41:11:52:a5: 62:b3:8f:29:3a:d4:92:5c:58:90:9b:9d:ba:9f:7f: a7:2d:8a:b6:13:10:b8:95:09:3a:59:1b:18:51:b9: 48:0a:8d:78:27:ad:09:08:2a:e4:6b:04:49:3b:00: 4b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:C7:5C:15:63:36:77:2A:76:8A:3C:60:D6:14:DD:DD:76:E8:01:04 X509v3 Authority Key Identifier: keyid:B3:1D:1C:28:91:D8:80:46:9A:20:D8:B7:F1:8E:4C:D8:65:43:00:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sx0cKJHYgEaaINi38Y5M2GVDAEY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:2d:4a:d8:5d:08:28:98:9b:78:f0:74:7b:cc:ea:0b:5c:ae: d9:51:c6:85:23:61:4c:4c:cc:24:63:cc:98:35:d0:f7:8f:19: 73:9e:14:59:2f:19:92:07:3f:6d:5f:ed:f4:33:a2:07:97:f7: 9b:43:81:a2:f2:b7:76:86:43:f2:00:80:bb:47:ab:a3:8e:97: 8e:3b:a1:c9:09:1e:b4:c0:7c:a8:f3:0c:39:c0:75:92:5b:f9: 50:86:f8:36:4b:ac:a9:9f:83:6d:bd:61:a9:b7:4e:46:4b:6b: 90:b9:33:ca:71:65:05:7a:c5:d2:97:fb:5f:04:52:f9:22:eb: 05:7a:02:cc:e4:9f:7c:d7:3e:a1:05:a3:1a:ac:e7:db:f1:54: 88:4f:14:b2:ce:fe:57:bd:b1:f6:3c:f6:8e:ab:8f:30:3a:45: 57:d9:93:3c:77:3e:cc:85:fb:20:6b:40:4b:42:d2:79:da:0d: ae:6e:78:62:6a:a1:5b:f2:13:45:59:2a:d1:6c:de:0c:5b:79: cb:8e:a9:91:df:33:49:ce:8b:0d:fb:f2:95:6d:e3:ba:c8:3e: 7d:f7:2e:b6:71:de:a0:ea:01:f2:56:22:a5:60:b2:68:da:97: f7:08:cf:ec:ee:e8:8f:82:f7:f7:88:ed:ef:f7:47:7f:7a:53: e7:59:80:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vx+w5jt3VoxXgX83sgsEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMWQxYzI4OTFkODgwNDY5YTIwZDhiN2YxOGU0Y2Q4NjU0 MzAwNDYwHhcNMjYwMTI1MjAwMTE4WhcNMjYwMTI2MjAwMTE4WjAzMTEwLwYDVQQD EygzYmM3NWMxNTYzMzY3NzJhNzY4YTNjNjBkNjE0ZGRkZDc2ZTgwMTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSURz+kWXJ9z7DaXOlLY8SL5h0Ke dmmne1+oNd8k3ANSW+yMyHhG/I9BgtrnShD0cvNuKmvldDg36Lb1yyOGhV2v7AP/ cqSfRK+44scDHcKlFyh3t2CY5u/hA4NTsPI5ze+uXyEJPsWyAxXpqOBRuMmprmBg mGv30If2Mc2kpy2d4rnpBv1Gv0JJqnXYW6zec3PQpLvwa+2l/LUpykwEA6QAbuS/ YxhgLY0572F2ai08TNdH/d0UrTyXhLfMCvEs39TCyEsB9uVF+n0LykERUqVis48p OtSSXFiQm526n3+nLYq2ExC4lQk6WRsYUblICo14J60JCCrkawRJOwBLQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDvHXBVjNncqdoo8YNYU3d126AEEMB8GA1UdIwQY MBaAFLMdHCiR2IBGmiDYt/GOTNhlQwBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3gwY0tKSFlnRWFhSU5pMzhZNU0yR1ZEQUVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy83NzUwMTctYTQ1Yi00NjM3LWEzYTAt YWYxYTBlMDBmODIzLzEvc3gwY0tKSFlnRWFhSU5pMzhZNU0yR1ZEQUVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy83NzUwMTctYTQ1Yi00NjM3LWEzYTAtYWYxYTBlMDBmODIz LzEvc3gwY0tKSFlnRWFhSU5pMzhZNU0yR1ZEQUVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQy1K2F0I KJibePB0e8zqC1yu2VHGhSNhTEzMJGPMmDXQ948Zc54UWS8Zkgc/bV/t9DOiB5f3 m0OBovK3doZD8gCAu0ero46XjjuhyQketMB8qPMMOcB1klv5UIb4NkusqZ+Dbb1h qbdORktrkLkzynFlBXrF0pf7XwRS+SLrBXoCzOSffNc+oQWjGqzn2/FUiE8Uss7+ V72x9jz2jquPMDpFV9mTPHc+zIX7IGtAS0LSedoNrm54YmqhW/ITRVkq0WzeDFt5 y46pkd8zSc6LDfvylW3jusg+ffcutnHeoOoB8lYipWCyaNqX9wjP7O7oj4L394jt 7/dHf3pT51mAhg== -----END CERTIFICATE-----Generated at Mon Jan 26 05:13:13 2026 by rpki-client