This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft File: ssX3TfRSDTQdo0inAKA7l8rwdzU.mft (raw, json) Hash identifier: KT03qQNZU7dhRDWvq3bQMMsOqigYbL6pn4du3ujK/CQ= Subject key identifier: 46:FD:82:9F:E9:01:26:DC:B9:25:5E:FB:07:C6:C0:1F:90:8A:D0:3B Authority key identifier: B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35 Certificate issuer: /CN=b2c5f74df4520d341da348a700a03b97caf07735 Certificate serial: 019BF952307DB1033762588D8D297457321E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft Manifest number: 0ECC Signing time: Mon 26 Jan 2026 08:01:11 +0000 Manifest this update: Mon 26 Jan 2026 08:01:11 +0000 Manifest next update: Tue 27 Jan 2026 08:01:11 +0000 Files and hashes: 1: 6JsGG8yxKzcDoQMwZR2x3KoCb00.roa (hash: 6wxEu7HqJEfHfAXKDDmYgs76ZayF6+azKu/sKGA3exs=) 2: FENuxoqFjunqAylfU_74pUn9r9w.roa (hash: MH7ftTgYFM0jAg20wF24Y7UB/Kl4HvysaZ+BlD0+dTM=) 3: ssX3TfRSDTQdo0inAKA7l8rwdzU.crl (hash: sDS2aKIs7NU0oUnmXAA/f3I2W870T0sXrcXA0+WgMIU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:52:30:7d:b1:03:37:62:58:8d:8d:29:74:57:32:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2c5f74df4520d341da348a700a03b97caf07735 Validity Not Before: Jan 26 08:01:11 2026 GMT Not After : Jan 27 08:01:11 2026 GMT Subject: CN=46fd829fe90126dcb9255efb07c6c01f908ad03b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0b:1f:c0:41:80:9a:6a:36:c2:99:0b:91:65: 02:2d:e8:4f:e1:6c:2c:6a:b0:88:1b:d5:90:86:b1: 1f:44:53:19:70:cb:07:d8:c0:df:bb:a9:e9:bf:6a: 79:b6:44:cf:f5:50:d7:13:57:51:6b:a0:c7:3c:f3: f6:bf:0a:70:66:3f:8d:60:a9:e4:7b:da:2c:ea:c5: a4:3d:d9:19:3d:ea:43:fb:6b:a9:7f:ac:e9:4f:96: 3e:69:eb:c1:c8:43:e7:22:85:a1:84:e8:ab:00:e1: f6:da:a4:b0:f6:d5:e8:6c:39:74:0e:e6:2d:70:79: 30:e7:b6:48:2d:a2:36:b8:35:45:a0:2b:3d:ba:0a: 1f:0f:66:b2:00:72:4d:85:46:3d:2d:c0:3e:12:0c: 42:bd:88:15:e0:ed:65:da:e4:a3:02:4a:a1:fb:40: e8:bb:77:7a:3e:24:6c:48:78:c3:57:18:21:b6:e0: 5f:7f:60:7f:4f:52:b7:a6:69:e6:75:1a:4c:77:e1: 0c:1d:4d:3c:9e:8e:f3:3e:00:6e:db:48:6e:0f:57: e2:98:ca:21:0f:ca:f5:f2:1e:dd:2f:53:6b:46:bb: 29:9d:84:c5:21:0b:42:57:fc:32:62:9c:b8:63:13: a0:75:bf:08:6c:a9:d3:80:63:2e:be:1d:7b:c7:86: 60:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:FD:82:9F:E9:01:26:DC:B9:25:5E:FB:07:C6:C0:1F:90:8A:D0:3B X509v3 Authority Key Identifier: keyid:B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:45:b4:73:f2:47:81:a3:90:57:af:c6:42:a2:de:c5:10:4a: 90:dc:90:23:dc:71:7f:a0:00:f3:f5:9a:4e:4b:41:f6:37:68: 16:a8:9b:d2:d9:7f:05:55:d2:58:8f:6c:f1:87:3d:5c:1b:98: de:f6:11:4b:45:92:a8:7b:d3:a4:7c:94:26:9d:ce:84:2d:75: de:6f:19:86:10:03:ee:8a:8d:ff:8b:cf:60:e3:50:29:76:28: ea:34:6c:64:18:87:43:69:77:9c:ed:2a:06:5a:69:7e:62:62: 21:60:57:60:82:8d:df:e2:d8:a4:29:f5:da:fe:3b:9f:62:9a: 07:ef:dd:29:0e:a8:58:4d:2a:12:56:98:ee:f0:2c:d5:a7:e5: 5e:0f:03:22:36:52:e3:d9:17:7d:8a:ae:c8:ac:1e:52:e8:c7: f0:93:38:02:c8:6e:31:99:63:2b:d3:28:f8:d1:35:f8:48:66: 45:6d:e6:53:ac:31:8e:8d:20:13:74:f1:d5:39:29:e5:e1:96: 6b:a2:16:85:ee:7e:bf:3b:6d:00:4d:cc:f8:aa:c5:cc:9e:2d: 56:8b:87:e9:44:ad:cb:2f:f5:cf:5e:ea:a0:c1:83:1b:1b:96: b1:a7:ad:94:24:d2:64:d0:92:db:8a:0b:94:05:2a:26:43:97: 46:39:f2:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5UjB9sQM3YliNjSl0VzIeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyYzVmNzRkZjQ1MjBkMzQxZGEzNDhhNzAwYTAzYjk3Y2Fm MDc3MzUwHhcNMjYwMTI2MDgwMTExWhcNMjYwMTI3MDgwMTExWjAzMTEwLwYDVQQD Eyg0NmZkODI5ZmU5MDEyNmRjYjkyNTVlZmIwN2M2YzAxZjkwOGFkMDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAsfwEGAmmo2wpkLkWUCLehP4Wws arCIG9WQhrEfRFMZcMsH2MDfu6npv2p5tkTP9VDXE1dRa6DHPPP2vwpwZj+NYKnk e9os6sWkPdkZPepD+2upf6zpT5Y+aevByEPnIoWhhOirAOH22qSw9tXobDl0DuYt cHkw57ZILaI2uDVFoCs9ugofD2ayAHJNhUY9LcA+EgxCvYgV4O1l2uSjAkqh+0Do u3d6PiRsSHjDVxghtuBff2B/T1K3pmnmdRpMd+EMHU08no7zPgBu20huD1fimMoh D8r18h7dL1NrRrspnYTFIQtCV/wyYpy4YxOgdb8IbKnTgGMuvh17x4ZgeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEb9gp/pASbcuSVe+wfGwB+QitA7MB8GA1UdIwQY MBaAFLLF9030Ug00HaNIpwCgO5fK8Hc1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3NYM1RmUlNEVFFkbzBpbkFLQTdsOHJ3ZHpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9kZmZmYzUtY2I2ZC00NGNlLTg0NzIt Nzc3ZWU5NTU2MjEwLzEvc3NYM1RmUlNEVFFkbzBpbkFLQTdsOHJ3ZHpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9kZmZmYzUtY2I2ZC00NGNlLTg0NzItNzc3ZWU5NTU2MjEw LzEvc3NYM1RmUlNEVFFkbzBpbkFLQTdsOHJ3ZHpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT0W0c/JH gaOQV6/GQqLexRBKkNyQI9xxf6AA8/WaTktB9jdoFqib0tl/BVXSWI9s8Yc9XBuY 3vYRS0WSqHvTpHyUJp3OhC113m8ZhhAD7oqN/4vPYONQKXYo6jRsZBiHQ2l3nO0q BlppfmJiIWBXYIKN3+LYpCn12v47n2KaB+/dKQ6oWE0qElaY7vAs1aflXg8DIjZS 49kXfYquyKweUujH8JM4AshuMZljK9Mo+NE1+EhmRW3mU6wxjo0gE3Tx1Tkp5eGW a6IWhe5+vzttAE3M+KrFzJ4tVouH6UStyy/1z17qoMGDGxuWsaetlCTSZNCS24oL lAUqJkOXRjnyrg== -----END CERTIFICATE-----Generated at Mon Jan 26 11:48:33 2026 by rpki-client