This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft File: SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft (raw, json) Hash identifier: 1ZTJH0Da5nSrQD5idISF4mz7HCMr/0eVTL0nKqsxwXQ= Subject key identifier: AC:2D:93:21:BC:92:6F:A2:2C:01:44:A5:61:AF:5A:D3:20:E1:10:E2 Authority key identifier: 4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19 Certificate issuer: /CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819 Certificate serial: 019BF83F790BE242F322CE67DEA699512B28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft Manifest number: 17EB Signing time: Mon 26 Jan 2026 03:01:07 +0000 Manifest this update: Mon 26 Jan 2026 03:01:07 +0000 Manifest next update: Tue 27 Jan 2026 03:01:07 +0000 Files and hashes: 1: FXM0lZ9RW8MVyeNhLRa0gA27Yz8.roa (hash: AOWqH2G8p3eNy+r9FYww+1k4v48/EVkof2UT4jbdqII=) 2: ScbfsojaaHjN1VPlqjt62kAyKyQ.roa (hash: lQ50zLidvT+ypigEP+SJVNAGB7dMGWzSVTcP7sdJtfU=) 3: SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl (hash: xo/VP1ZoCuL7S98VH4x5YRbERKUWysMQ+RQLkwOZKh8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:79:0b:e2:42:f3:22:ce:67:de:a6:99:51:2b:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819 Validity Not Before: Jan 26 03:01:07 2026 GMT Not After : Jan 27 03:01:07 2026 GMT Subject: CN=ac2d9321bc926fa22c0144a561af5ad320e110e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:29:ca:af:3e:62:9e:36:fb:80:a6:d9:e1:c7: de:96:a6:71:4e:a2:89:36:e1:f3:1f:03:ee:af:64: b5:27:6a:59:ea:bb:89:68:ad:cc:df:12:eb:79:6d: df:4c:16:79:87:d3:84:c9:8a:ec:3e:60:41:48:66: 6b:a3:1e:da:5d:80:7f:35:6e:17:fc:15:4c:a6:20: 3a:5f:0d:55:74:cd:66:4a:aa:67:40:d2:16:bd:b9: fb:56:ef:35:43:91:c1:62:ec:86:11:c3:e5:15:87: 6c:c7:32:88:50:f7:3c:14:2d:8a:64:c3:63:cd:74: 1c:fe:74:c9:36:33:31:b1:0e:d6:54:8a:96:0c:18: 2a:c0:55:c4:8f:88:0c:9e:2a:eb:d4:f2:dc:bc:06: 45:d7:77:12:d6:e5:60:80:4e:15:6b:16:c8:03:1c: 24:da:b7:40:b6:bd:d0:56:64:83:1b:06:97:92:88: 1c:42:df:8f:66:23:8e:7e:a7:32:a3:64:c8:d8:0e: 24:aa:75:05:e4:a8:66:76:14:80:71:ed:73:a7:fc: 4a:70:f1:a8:1d:66:cb:02:2e:b3:a2:94:ac:88:37: 68:f2:95:b9:97:ea:5e:af:20:08:70:93:80:48:ea: 86:7a:90:f4:f6:0a:5d:11:8a:fc:e9:67:92:7d:a3: fa:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:2D:93:21:BC:92:6F:A2:2C:01:44:A5:61:AF:5A:D3:20:E1:10:E2 X509v3 Authority Key Identifier: keyid:4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:2a:c6:c0:b0:47:76:a9:99:08:ac:52:6d:25:81:c3:83:c1: e8:91:91:87:50:69:95:ba:13:da:39:94:d8:ba:8c:f2:b8:c1: f8:40:0b:7f:bf:97:d0:ed:dd:78:0a:7e:aa:7d:0c:c3:8a:bd: 46:82:89:08:e5:62:f5:40:47:0c:d6:71:dc:20:4e:17:c4:db: d0:fa:f2:fd:63:3c:a3:27:3c:f4:70:09:5a:fc:bd:70:b0:cd: 79:32:8d:b9:74:d9:e7:9d:57:d4:15:b6:38:89:fa:1c:6c:e4: e6:0f:28:2b:f3:98:a9:01:66:bd:3b:d6:8d:2c:75:e0:43:3c: 63:e2:a3:57:92:af:e3:94:c2:eb:c3:91:07:70:e2:e1:59:cd: 28:6b:50:0d:7e:3e:2d:45:59:c7:8d:34:94:ff:0d:6a:25:57: db:00:63:19:12:fa:69:80:e2:36:5c:88:b5:d8:21:a5:6a:e8: ce:83:be:17:c9:41:89:70:77:2e:34:e9:ae:8f:64:5b:f6:c6: d1:66:25:7b:60:a5:a7:27:2f:48:89:0a:ae:c4:06:50:cf:9c: 9d:a1:3d:1f:f1:63:e7:f2:21:9e:cc:a2:fd:db:66:cc:b7:2d: 1d:0f:45:f3:b0:a3:0f:e1:9b:78:da:bf:34:ee:2a:9d:a8:d9: 42:52:07:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P3kL4kLzIs5n3qaZUSsoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhYzJiYzBlM2U1OTMzMmY0YmUyYzU4ZmYyNWExODYxZjVm ZGU4MTkwHhcNMjYwMTI2MDMwMTA3WhcNMjYwMTI3MDMwMTA3WjAzMTEwLwYDVQQD EyhhYzJkOTMyMWJjOTI2ZmEyMmMwMTQ0YTU2MWFmNWFkMzIwZTExMGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoynKrz5injb7gKbZ4cfelqZxTqKJ NuHzHwPur2S1J2pZ6ruJaK3M3xLreW3fTBZ5h9OEyYrsPmBBSGZrox7aXYB/NW4X /BVMpiA6Xw1VdM1mSqpnQNIWvbn7Vu81Q5HBYuyGEcPlFYdsxzKIUPc8FC2KZMNj zXQc/nTJNjMxsQ7WVIqWDBgqwFXEj4gMnirr1PLcvAZF13cS1uVggE4VaxbIAxwk 2rdAtr3QVmSDGwaXkogcQt+PZiOOfqcyo2TI2A4kqnUF5KhmdhSAce1zp/xKcPGo HWbLAi6zopSsiDdo8pW5l+peryAIcJOASOqGepD09gpdEYr86WeSfaP6IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKwtkyG8km+iLAFEpWGvWtMg4RDiMB8GA1UdIwQY MBaAFErCvA4+WTMvS+LFj/JaGGH1/egZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3NLOERqNVpNeTlMNHNXUDhsb1lZZlg5NkJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80OGFmZTAtNWExOC00ZDk5LTkxYjYt ODA3M2RjZTA5NjI4LzEvU3NLOERqNVpNeTlMNHNXUDhsb1lZZlg5NkJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC80OGFmZTAtNWExOC00ZDk5LTkxYjYtODA3M2RjZTA5NjI4 LzEvU3NLOERqNVpNeTlMNHNXUDhsb1lZZlg5NkJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZSrGwLBH dqmZCKxSbSWBw4PB6JGRh1BplboT2jmU2LqM8rjB+EALf7+X0O3deAp+qn0Mw4q9 RoKJCOVi9UBHDNZx3CBOF8Tb0Pry/WM8oyc89HAJWvy9cLDNeTKNuXTZ551X1BW2 OIn6HGzk5g8oK/OYqQFmvTvWjSx14EM8Y+KjV5Kv45TC68ORB3Di4VnNKGtQDX4+ LUVZx400lP8NaiVX2wBjGRL6aYDiNlyItdghpWrozoO+F8lBiXB3LjTpro9kW/bG 0WYle2ClpycvSIkKrsQGUM+cnaE9H/Fj5/Ihnsyi/dtmzLctHQ9F87CjD+GbeNq/ NO4qnajZQlIHPQ== -----END CERTIFICATE-----Generated at Mon Jan 26 12:25:32 2026 by rpki-client