This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft File: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft (raw, json) Hash identifier: 3YgVF6AEamq1rbwztylB+XI4IJOA36NY2yB1Mb/30Es= Subject key identifier: EE:BA:55:A2:03:D0:24:E9:DD:C5:20:D1:2C:A8:E3:5E:18:70:0F:59 Authority key identifier: B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F Certificate issuer: /CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f Certificate serial: 019BF91AFC9B5D23B73EAFF2057E734D3D39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft Manifest number: 17E8 Signing time: Mon 26 Jan 2026 07:00:53 +0000 Manifest this update: Mon 26 Jan 2026 07:00:53 +0000 Manifest next update: Tue 27 Jan 2026 07:00:53 +0000 Files and hashes: 1: RxwpeJEtkWGwK-FiT9nGtEZel1w.roa (hash: nRWo2u6OOJDMeQ+Qn8P1QxPMq9RxzCeIuOjLATj51Ms=) 2: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl (hash: hRSDbszhsxFBw/vAu+seFPm0gyKciIulQXhBHLXmxz0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1a:fc:9b:5d:23:b7:3e:af:f2:05:7e:73:4d:3d:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f Validity Not Before: Jan 26 07:00:53 2026 GMT Not After : Jan 27 07:00:53 2026 GMT Subject: CN=eeba55a203d024e9ddc520d12ca8e35e18700f59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:03:42:23:75:1c:56:5f:50:11:9f:6f:a1:a5: 02:7c:0f:35:f8:09:aa:5b:68:45:41:22:e2:b6:c1: 13:1d:65:e5:34:68:74:f9:72:ea:3e:f0:96:a0:41: 15:58:81:e6:3e:54:fb:dd:b8:7f:87:3d:fb:39:05: 72:8c:e6:42:29:b4:81:b2:01:f5:6c:91:a0:d7:b3: 25:c7:25:64:8f:8b:a8:c2:38:78:8a:57:81:5b:c7: 85:94:a0:9c:f9:5d:17:19:e3:2e:93:bd:d6:fe:7d: a3:0b:1d:18:c6:67:47:28:5e:21:b1:1b:a4:a5:2a: 84:e4:79:6b:90:c8:df:e1:b6:dd:cf:f7:40:8c:7b: 93:90:9a:0a:ae:dc:85:ec:82:7e:94:e3:56:78:c4: 33:ce:04:5f:17:e8:88:07:ab:43:91:9b:8d:44:0d: d1:97:23:44:b5:68:8f:a6:10:ce:a2:37:b4:ce:d6: 34:87:7f:5b:8c:c3:52:7d:db:ef:da:06:f6:5d:b4: c0:3a:54:e1:de:76:ea:0c:2c:65:9d:b5:2b:a9:a2: 0a:d8:ff:7a:41:5b:ca:41:5f:57:07:cd:98:af:b6: 5d:27:79:d2:a5:c7:2b:63:b8:40:66:4a:a9:04:45: ff:dc:59:2c:11:20:f2:15:2b:e4:bd:7a:b3:1e:2d: 86:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:BA:55:A2:03:D0:24:E9:DD:C5:20:D1:2C:A8:E3:5E:18:70:0F:59 X509v3 Authority Key Identifier: keyid:B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:d2:e3:b0:8b:0c:5c:2c:63:4b:e8:b7:83:eb:16:53:c3:b8: ff:7b:e0:e1:7e:34:6e:1a:5f:3d:18:6e:7b:89:16:cc:14:61: 7e:da:ab:f6:40:85:a4:e9:3f:ba:e8:84:94:43:0f:6d:45:63: bc:0d:28:3f:63:70:f8:37:8f:46:67:af:4d:ae:ed:fa:86:c1: 3b:fc:1c:a4:91:de:66:44:26:13:65:18:8f:67:73:47:a2:34: 07:67:21:f5:6d:2b:42:d4:49:73:b5:85:1a:3e:99:0f:d3:10: d1:2b:8e:75:95:59:90:08:49:3e:9a:e6:21:df:92:68:b7:dc: dd:43:4b:47:d5:ec:75:c7:20:f9:76:dd:c2:3f:db:b8:0c:78: bf:89:4a:5f:e1:ef:be:f9:7c:0a:4b:92:26:dc:95:e8:7b:1f: 4d:50:78:74:16:40:af:30:88:52:89:d5:a0:9a:db:87:96:cd: 8b:1e:16:7e:cc:fd:d5:4b:95:ad:c9:0a:2f:9d:65:52:59:32: 8d:f3:42:be:6d:91:fc:9a:e6:e6:71:9a:f7:e6:50:3b:51:63: 1f:8c:19:7a:84:64:93:ec:c1:08:9e:de:d9:c5:87:f1:c8:2c: 66:8b:4d:e8:8b:2d:1d:45:16:14:83:40:50:ae:ef:8d:0d:3b: 4d:1c:76:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5GvybXSO3Pq/yBX5zTT05MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYWZkMGNiOTc3NWZmNDc4ZjE4NWY4Zjk4MGQ1YjFkOTJk NGJlNGYwHhcNMjYwMTI2MDcwMDUzWhcNMjYwMTI3MDcwMDUzWjAzMTEwLwYDVQQD EyhlZWJhNTVhMjAzZDAyNGU5ZGRjNTIwZDEyY2E4ZTM1ZTE4NzAwZjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqANCI3UcVl9QEZ9voaUCfA81+Amq W2hFQSLitsETHWXlNGh0+XLqPvCWoEEVWIHmPlT73bh/hz37OQVyjOZCKbSBsgH1 bJGg17MlxyVkj4uowjh4ileBW8eFlKCc+V0XGeMuk73W/n2jCx0YxmdHKF4hsRuk pSqE5HlrkMjf4bbdz/dAjHuTkJoKrtyF7IJ+lONWeMQzzgRfF+iIB6tDkZuNRA3R lyNEtWiPphDOoje0ztY0h39bjMNSfdvv2gb2XbTAOlTh3nbqDCxlnbUrqaIK2P96 QVvKQV9XB82Yr7ZdJ3nSpccrY7hAZkqpBEX/3FksESDyFSvkvXqzHi2GkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO66VaID0CTp3cUg0Syo414YcA9ZMB8GA1UdIwQY MBaAFLCv0MuXdf9Hjxhfj5gNWx2S1L5PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0tfUXk1ZDFfMGVQR0YtUG1BMWJIWkxVdms4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84MDBmZmQtYzUzYi00NjQ2LWIyNmUt NmVmNWM0NzM1ZThhLzEvc0tfUXk1ZDFfMGVQR0YtUG1BMWJIWkxVdms4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy84MDBmZmQtYzUzYi00NjQ2LWIyNmUtNmVmNWM0NzM1ZThh LzEvc0tfUXk1ZDFfMGVQR0YtUG1BMWJIWkxVdms4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANdLjsIsM XCxjS+i3g+sWU8O4/3vg4X40bhpfPRhue4kWzBRhftqr9kCFpOk/uuiElEMPbUVj vA0oP2Nw+DePRmevTa7t+obBO/wcpJHeZkQmE2UYj2dzR6I0B2ch9W0rQtRJc7WF Gj6ZD9MQ0SuOdZVZkAhJPprmId+SaLfc3UNLR9Xsdccg+Xbdwj/buAx4v4lKX+Hv vvl8CkuSJtyV6HsfTVB4dBZArzCIUonVoJrbh5bNix4Wfsz91UuVrckKL51lUlky jfNCvm2R/Jrm5nGa9+ZQO1FjH4wZeoRkk+zBCJ7e2cWH8cgsZotN6IstHUUWFINA UK7vjQ07TRx2qA== -----END CERTIFICATE-----Generated at Mon Jan 26 13:05:32 2026 by rpki-client