This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft File: 2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft (raw, json) Hash identifier: kJr/qhSVmvrhx1s11dPOkVrY9sAkanE6CjsS3ktg1ek= Subject key identifier: 67:23:B1:6C:20:E8:02:8E:18:15:53:FA:BB:AC:6C:92:8E:86:6A:C5 Authority key identifier: DA:CA:83:EB:1F:AF:97:73:D3:50:C7:DC:E6:12:CA:28:14:84:E7:FC Certificate issuer: /CN=daca83eb1faf9773d350c7dce612ca281484e7fc Certificate serial: 019BF3BDDB71B0270A31C0CFDCF4990E54BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sqD6x-vl3PTUMfc5hLKKBSE5_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft Manifest number: BB Signing time: Sun 25 Jan 2026 06:01:04 +0000 Manifest this update: Sun 25 Jan 2026 06:01:04 +0000 Manifest next update: Mon 26 Jan 2026 06:01:04 +0000 Files and hashes: 1: 2sqD6x-vl3PTUMfc5hLKKBSE5_w.crl (hash: hWCeE4tYJBQQUI2JE5j3Oaaq4E9oDgNV2OXKcLJ2DrY=) 2: szRLM3Az0xzE-SZ2cP8IE4cXA8c.asa (hash: CVKDj1/53BYjcVJSpA6JPeV/CJrhFA+lF2cwIdYQJr8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.crl rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft rsync://rpki.ripe.net/repository/DEFAULT/2sqD6x-vl3PTUMfc5hLKKBSE5_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:bd:db:71:b0:27:0a:31:c0:cf:dc:f4:99:0e:54:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daca83eb1faf9773d350c7dce612ca281484e7fc Validity Not Before: Jan 25 06:01:04 2026 GMT Not After : Jan 26 06:01:04 2026 GMT Subject: CN=6723b16c20e8028e181553fabbac6c928e866ac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d5:23:b2:05:57:fe:45:b9:99:05:b9:cb:5d: 25:23:a5:38:8c:68:2d:26:42:ec:23:f5:df:f0:5f: 9c:a0:3c:c7:cc:d5:77:33:12:d3:25:60:e2:a9:bb: cc:81:1b:f1:9a:9a:a3:01:44:0d:21:fc:5b:c3:7f: 90:2c:c3:14:59:fb:15:74:f3:8b:0b:34:64:b8:3f: 44:7a:2b:c9:a5:2d:d2:6a:81:b1:17:15:28:f4:96: 81:90:0b:dc:aa:3c:4e:ab:c4:4b:3c:f8:b5:86:e0: f4:6b:5f:d0:fb:9e:ff:c1:0b:a6:03:da:39:63:bc: d0:2b:2e:5d:59:7e:34:e2:d2:f7:d6:20:48:b6:70: 30:21:1a:b4:35:12:1f:a7:92:8e:50:f8:5b:39:c3: 90:6f:1e:5a:cd:18:6e:cd:45:d9:5a:0d:28:d6:cf: b3:ae:4b:6e:c0:5f:15:ae:44:b2:01:88:74:7c:f8: 4e:18:53:29:fb:75:f7:b5:9a:53:cb:08:a2:d4:3a: 56:be:33:e0:04:e9:00:e8:d2:35:cd:69:a3:8f:2a: e2:5d:e9:7d:22:bc:3e:92:ff:d9:ec:4c:cb:f2:ff: 32:2b:92:66:09:06:d3:4a:86:b5:7a:61:66:ee:70: 8e:b0:a9:98:fb:a5:e4:64:a2:98:0f:de:89:a9:ed: e2:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:23:B1:6C:20:E8:02:8E:18:15:53:FA:BB:AC:6C:92:8E:86:6A:C5 X509v3 Authority Key Identifier: keyid:DA:CA:83:EB:1F:AF:97:73:D3:50:C7:DC:E6:12:CA:28:14:84:E7:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sqD6x-vl3PTUMfc5hLKKBSE5_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:1d:8b:d6:e2:0e:e6:a6:12:af:04:bf:1e:df:c3:37:22:c9: 6a:f5:8c:da:a8:a6:e2:8c:91:dd:b6:f1:37:db:18:a0:dc:ec: 51:4b:28:c7:42:26:3c:6d:2c:11:5d:b7:e4:9c:31:3c:36:57: 87:0c:f9:3b:71:79:ee:c8:0e:6a:50:c1:46:dd:2a:08:4c:51: 20:cd:24:ca:17:e0:15:91:4b:42:0d:f1:d4:5a:5a:1d:d0:ee: 46:cb:3b:89:fd:49:3d:43:f8:b5:59:fa:26:5a:ac:84:04:5b: 99:3f:1f:f2:85:f3:54:93:cd:0d:5c:06:27:b0:d0:50:3d:e5: 0a:d3:3d:d2:2f:6b:72:8a:28:3e:4a:5d:8b:21:31:1f:53:8c: 83:e3:cf:5e:a1:f6:68:d2:9e:dd:cf:06:4a:55:f5:61:3f:cd: af:08:f0:4a:8f:92:76:ae:e5:d7:31:32:33:32:0e:93:12:d2: be:7f:4d:4e:5a:2c:7a:0e:ed:bb:e1:48:67:f9:37:2c:bf:f3: a4:d5:f3:96:93:2b:d9:67:b6:80:f0:ee:7d:27:aa:c5:9e:b0: 08:76:5f:64:c9:ad:24:aa:5a:dd:83:bb:6e:32:f1:38:18:4d: 05:db:ea:bc:1e:2d:94:1a:00:af:45:53:9e:10:21:b4:f7:45: e0:a9:c6:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzvdtxsCcKMcDP3PSZDlS9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhY2E4M2ViMWZhZjk3NzNkMzUwYzdkY2U2MTJjYTI4MTQ4 NGU3ZmMwHhcNMjYwMTI1MDYwMTA0WhcNMjYwMTI2MDYwMTA0WjAzMTEwLwYDVQQD Eyg2NzIzYjE2YzIwZTgwMjhlMTgxNTUzZmFiYmFjNmM5MjhlODY2YWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdUjsgVX/kW5mQW5y10lI6U4jGgt JkLsI/Xf8F+coDzHzNV3MxLTJWDiqbvMgRvxmpqjAUQNIfxbw3+QLMMUWfsVdPOL CzRkuD9EeivJpS3SaoGxFxUo9JaBkAvcqjxOq8RLPPi1huD0a1/Q+57/wQumA9o5 Y7zQKy5dWX404tL31iBItnAwIRq0NRIfp5KOUPhbOcOQbx5azRhuzUXZWg0o1s+z rktuwF8VrkSyAYh0fPhOGFMp+3X3tZpTywii1DpWvjPgBOkA6NI1zWmjjyriXel9 Irw+kv/Z7EzL8v8yK5JmCQbTSoa1emFm7nCOsKmY+6XkZKKYD96Jqe3i7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGcjsWwg6AKOGBVT+rusbJKOhmrFMB8GA1UdIwQY MBaAFNrKg+sfr5dz01DH3OYSyigUhOf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnNxRDZ4LXZsM1BUVU1mYzVoTEtLQlNFNV93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9hZjJlMjItNmU4ZS00OTA1LTllNjUt YjVlYjRjNmI3ZWE4LzEvMnNxRDZ4LXZsM1BUVU1mYzVoTEtLQlNFNV93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9hZjJlMjItNmU4ZS00OTA1LTllNjUtYjVlYjRjNmI3ZWE4 LzEvMnNxRDZ4LXZsM1BUVU1mYzVoTEtLQlNFNV93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArx2L1uIO 5qYSrwS/Ht/DNyLJavWM2qim4oyR3bbxN9sYoNzsUUsox0ImPG0sEV235JwxPDZX hwz5O3F57sgOalDBRt0qCExRIM0kyhfgFZFLQg3x1FpaHdDuRss7if1JPUP4tVn6 JlqshARbmT8f8oXzVJPNDVwGJ7DQUD3lCtM90i9rcoooPkpdiyExH1OMg+PPXqH2 aNKe3c8GSlX1YT/NrwjwSo+Sdq7l1zEyMzIOkxLSvn9NTloseg7tu+FIZ/k3LL/z pNXzlpMr2We2gPDufSeqxZ6wCHZfZMmtJKpa3YO7bjLxOBhNBdvqvB4tlBoAr0VT nhAhtPdF4KnGyw== -----END CERTIFICATE-----Generated at Sun Jan 25 17:51:15 2026 by rpki-client