This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft File: su0dYGb05GVO9fPMcKXZBamvgpA.mft (raw, json) Hash identifier: wxhGItAQLVASINDIw/xL5HNVWh+329XycmPhTU4LslE= Subject key identifier: 7F:A2:40:43:67:C1:6D:CC:87:99:01:57:7C:6D:B2:79:25:27:A9:08 Authority key identifier: B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90 Certificate issuer: /CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290 Certificate serial: 019BF318D4F5E5188A83B14FD8CDE8327A5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 03:00:49 +0000 Manifest this update: Sun 25 Jan 2026 03:00:49 +0000 Manifest next update: Mon 26 Jan 2026 03:00:49 +0000 Files and hashes: 1: 600lLjQN8NaUtu9vwfIFMpqTNQc.roa (hash: MUp+FLIccBAFPNwMS4Gw63hQ+b8ZEvvsOZeWkDj1pdQ=) 2: UFBqlqbDbCJdY4yyGZXAZPEHhZ0.roa (hash: NYR75LT8EcYVp5wWj3tYR34PO47ZPDQS52OiuEfA/iM=) 3: mh-GYVdTRd_42s-4vmsQOV1tY40.roa (hash: pgFeIkHEDR3yEGlYLLu69s0r5w/mu9jqvo+vTtixs6s=) 4: ndFKEl0wI8WgAsJHTynnR8s626U.roa (hash: iToJm74Xq6g6h01i3TJnsDzizJuEXJ+pOugGZB7SEMU=) 5: su0dYGb05GVO9fPMcKXZBamvgpA.crl (hash: WwDkWVN4tnVIa0DwSIYHsvykiiSxujRMSVH2SJHjMLU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.crl rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:18:d4:f5:e5:18:8a:83:b1:4f:d8:cd:e8:32:7a:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290 Validity Not Before: Jan 25 03:00:49 2026 GMT Not After : Jan 26 03:00:49 2026 GMT Subject: CN=7fa2404367c16dcc879901577c6db2792527a908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:13:31:28:08:e8:75:b7:40:dc:cd:cc:68:61: fb:60:ec:16:6f:a9:19:85:50:4e:fb:55:ee:c2:21: 50:e3:91:2b:4b:58:68:e2:f2:a1:2b:63:ef:41:d9: ab:95:bf:82:14:8a:83:9b:31:4c:bf:0f:48:6d:c3: 72:b6:5a:c6:1e:23:3d:8b:c4:e0:2c:e1:00:77:cc: ac:7c:4b:d5:fd:41:a5:12:91:89:f1:3b:8d:df:6e: 34:64:b5:00:5d:d9:77:71:21:e1:7d:2a:72:b6:06: 03:a4:86:39:4a:44:2d:db:c9:2c:48:c3:e1:ac:3e: a0:2b:ba:a5:50:fa:1b:99:ed:27:5a:3e:38:d6:26: 27:57:f0:22:fd:d5:74:6b:2d:d8:7e:3d:c5:3c:7d: c6:99:6f:97:8f:3a:d2:36:30:fb:60:ff:1e:60:32: dc:48:12:06:43:1a:be:9f:14:28:0f:f9:cb:a2:d1: 65:d8:46:51:b4:73:13:55:39:2f:ec:3d:f1:f6:5c: 56:42:12:72:af:92:41:bd:b4:0f:08:c9:d1:5d:21: 5f:9e:97:50:86:76:47:5c:89:3d:82:59:90:cd:8f: 49:f5:90:df:8a:5f:0e:10:01:48:d2:f6:e0:3e:7e: ad:2f:b1:f4:bf:2f:f6:59:12:ac:cf:a1:af:2c:f6: b0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:A2:40:43:67:C1:6D:CC:87:99:01:57:7C:6D:B2:79:25:27:A9:08 X509v3 Authority Key Identifier: keyid:B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:ce:db:02:09:4f:a4:a2:fc:ad:3e:95:f4:c3:ed:7f:f7:1d: 6e:92:53:34:ae:39:61:4f:1d:07:1b:7b:02:8d:24:6c:9a:9b: a0:55:99:6b:1d:57:dc:e4:bf:66:55:eb:0b:46:ba:46:ab:ad: a8:b4:1c:d0:6a:d9:33:0d:8b:58:2a:8a:15:2b:40:03:e7:88: 0a:82:7a:d8:90:e8:1a:39:c3:9b:ad:f3:f1:6e:64:92:a8:ff: ba:e8:12:7e:9c:73:e6:0f:69:0b:7a:db:c9:b6:65:e8:5a:38: 19:8c:cf:bf:d7:d5:3b:05:a4:83:e0:65:ea:8e:c4:d6:e6:bd: 90:b8:b8:0e:e9:86:f8:b9:b9:1b:c6:c0:38:f1:71:29:f7:4e: 46:be:9a:a7:5b:4e:b0:38:f9:f7:bd:2a:a3:29:26:65:d1:a5: a6:7c:9e:96:26:d6:16:3c:94:fc:0e:e9:e3:05:ed:e4:89:17: 15:a7:1d:83:5d:f6:bd:48:8b:83:06:bc:0b:81:ec:dc:8b:21: cd:27:38:30:8f:58:e5:76:19:88:f4:2c:98:11:1d:fb:48:2b: f7:f3:d6:a8:4e:f5:da:1e:4e:c7:81:e5:86:62:f5:6b:dc:f8: 31:58:6c:ef:5c:61:b1:dc:53:1a:f3:7f:f2:d0:68:69:c4:bf: 3d:4d:c8:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzGNT15RiKg7FP2M3oMnpeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyZWQxZDYwNjZmNGU0NjU0ZWY1ZjNjYzcwYTVkOTA1YTlh ZjgyOTAwHhcNMjYwMTI1MDMwMDQ5WhcNMjYwMTI2MDMwMDQ5WjAzMTEwLwYDVQQD Eyg3ZmEyNDA0MzY3YzE2ZGNjODc5OTAxNTc3YzZkYjI3OTI1MjdhOTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hMxKAjodbdA3M3MaGH7YOwWb6kZ hVBO+1XuwiFQ45ErS1ho4vKhK2PvQdmrlb+CFIqDmzFMvw9IbcNytlrGHiM9i8Tg LOEAd8ysfEvV/UGlEpGJ8TuN3240ZLUAXdl3cSHhfSpytgYDpIY5SkQt28ksSMPh rD6gK7qlUPobme0nWj441iYnV/Ai/dV0ay3Yfj3FPH3GmW+XjzrSNjD7YP8eYDLc SBIGQxq+nxQoD/nLotFl2EZRtHMTVTkv7D3x9lxWQhJyr5JBvbQPCMnRXSFfnpdQ hnZHXIk9glmQzY9J9ZDfil8OEAFI0vbgPn6tL7H0vy/2WRKsz6GvLPawxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH+iQENnwW3Mh5kBV3xtsnklJ6kIMB8GA1UdIwQY MBaAFLLtHWBm9ORlTvXzzHCl2QWpr4KQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3UwZFlHYjA1R1ZPOWZQTWNLWFpCYW12Z3BBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8xMTgyY2ItNWY5NS00Y2Q0LWI3MmYt NDZiNDZmYzBlNDk2LzEvc3UwZFlHYjA1R1ZPOWZQTWNLWFpCYW12Z3BBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8xMTgyY2ItNWY5NS00Y2Q0LWI3MmYtNDZiNDZmYzBlNDk2 LzEvc3UwZFlHYjA1R1ZPOWZQTWNLWFpCYW12Z3BBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVM7bAglP pKL8rT6V9MPtf/cdbpJTNK45YU8dBxt7Ao0kbJqboFWZax1X3OS/ZlXrC0a6Rqut qLQc0GrZMw2LWCqKFStAA+eICoJ62JDoGjnDm63z8W5kkqj/uugSfpxz5g9pC3rb ybZl6Fo4GYzPv9fVOwWkg+Bl6o7E1ua9kLi4DumG+Lm5G8bAOPFxKfdORr6ap1tO sDj5970qoykmZdGlpnyelibWFjyU/A7p4wXt5IkXFacdg132vUiLgwa8C4Hs3Ish zSc4MI9Y5XYZiPQsmBEd+0gr9/PWqE712h5Ox4HlhmL1a9z4MVhs71xhsdxTGvN/ 8tBoacS/PU3IcQ== -----END CERTIFICATE-----Generated at Sun Jan 25 13:53:22 2026 by rpki-client