This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft File: sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft (raw, json) Hash identifier: w5aV/+AFXuyT2DXCegsjtpxBGJ13OlXm7ennyOCewYE= Subject key identifier: 91:1A:E5:2E:F5:FE:6A:86:97:4B:B5:00:76:07:62:4E:D0:12:B4:56 Authority key identifier: B0:94:78:0F:FB:B0:6B:7B:57:F0:21:4E:84:55:2B:96:4C:50:41:D6 Certificate issuer: /CN=b094780ffbb06b7b57f0214e84552b964c5041d6 Certificate serial: 019BF72D8775DA57D48C1BE2B54531184107 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 22:01:54 +0000 Manifest this update: Sun 25 Jan 2026 22:01:54 +0000 Manifest next update: Mon 26 Jan 2026 22:01:54 +0000 Files and hashes: 1: J8WfogeIpk1UKcHSO8WrjdEFqSM.roa (hash: PzzkgqrS9E4dkHoOcT2At52JZ2wJfpowp9BIjzEgVJE=) 2: sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl (hash: 69qPptrbg9Z9AkJ6AJ4zt2B2frN+Rffxw9zATWD/jVg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:87:75:da:57:d4:8c:1b:e2:b5:45:31:18:41:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b094780ffbb06b7b57f0214e84552b964c5041d6 Validity Not Before: Jan 25 22:01:54 2026 GMT Not After : Jan 26 22:01:54 2026 GMT Subject: CN=911ae52ef5fe6a86974bb5007607624ed012b456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:0b:99:d7:4c:06:94:72:58:48:a1:20:75:af: d2:c6:68:74:5c:16:fb:44:b0:3e:31:4d:63:de:c1: 01:2d:9d:53:d9:ec:f6:8e:a9:13:49:58:f2:55:20: a8:b1:e3:01:48:1b:de:f4:04:a7:51:cd:d8:4c:ea: d7:5d:23:5a:c5:e6:43:17:72:76:19:d7:de:b1:77: cb:a4:0c:56:22:12:dd:73:0c:ad:21:ca:bc:36:5a: 06:89:64:a6:41:ce:f6:ad:4b:77:66:49:d0:6f:6c: c1:4d:d5:56:59:95:09:45:46:3a:fa:68:28:eb:61: 2e:4d:19:f0:a9:0f:bd:06:e6:0c:b6:57:de:e8:a1: e6:bd:01:63:e8:e9:b5:ab:e8:7a:97:fd:b0:1b:5c: 59:b0:ff:a5:3c:ce:34:09:12:6c:be:f4:8c:c1:65: 9c:47:69:10:d2:74:0d:d4:dd:90:19:87:5f:64:02: 96:0c:7e:c2:28:e8:04:0e:21:cc:53:6f:88:d5:52: 26:ce:0b:a8:77:de:e7:33:5e:51:50:53:36:bc:24: 50:a1:bb:ad:b4:1d:0c:fd:c3:35:2b:ad:a0:dd:64: a3:e4:71:37:9c:8d:d1:88:cc:42:04:d8:87:45:0b: e0:b8:0e:3a:ec:10:65:3a:b3:46:6c:99:f9:55:7b: 2f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:1A:E5:2E:F5:FE:6A:86:97:4B:B5:00:76:07:62:4E:D0:12:B4:56 X509v3 Authority Key Identifier: keyid:B0:94:78:0F:FB:B0:6B:7B:57:F0:21:4E:84:55:2B:96:4C:50:41:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:9d:b9:2f:0f:0e:ed:09:e1:68:47:0e:47:98:51:8d:61:fb: f4:34:68:8b:f4:6b:86:93:61:25:fa:e1:f4:cd:fe:a9:80:bd: da:df:a0:1f:b9:48:55:bd:77:8c:4b:2f:c7:92:f4:13:c7:e4: fd:ee:82:0b:99:2b:ea:5d:1c:7e:74:ea:64:21:88:43:2c:21: b8:5b:d6:70:41:c3:1a:e8:16:5b:67:9d:4a:0e:e9:89:77:c5: 71:1b:79:a4:02:f5:6e:ab:f8:d0:a5:a4:f6:ee:8b:ec:1d:4b: 9a:87:76:49:af:70:e7:1c:c2:4f:f3:4a:d6:6f:ba:d3:6e:dd: 80:d4:db:8c:2e:bb:7a:5f:50:dd:6d:28:42:9f:e5:8d:65:ee: 70:9a:e1:48:63:8e:a3:dc:08:f2:d4:36:a5:cc:7d:ff:13:a2: 25:6f:b0:39:c4:38:54:dd:ac:e4:9e:e1:de:ff:a9:94:60:7b: 48:f8:fa:6f:d1:8a:27:b8:11:ec:e1:95:dc:fe:30:d3:d9:8b: d6:42:4a:42:53:b7:b3:c2:eb:f9:26:da:84:51:65:ac:9e:4d: bc:bc:b1:29:78:14:ce:a4:60:d1:98:e7:63:0b:df:b5:99:fc: 5f:68:64:fc:60:ee:91:ee:43:3a:9c:97:8a:a2:5c:5f:8b:cf: ae:c3:aa:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LYd12lfUjBvitUUxGEEHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwOTQ3ODBmZmJiMDZiN2I1N2YwMjE0ZTg0NTUyYjk2NGM1 MDQxZDYwHhcNMjYwMTI1MjIwMTU0WhcNMjYwMTI2MjIwMTU0WjAzMTEwLwYDVQQD Eyg5MTFhZTUyZWY1ZmU2YTg2OTc0YmI1MDA3NjA3NjI0ZWQwMTJiNDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwuZ10wGlHJYSKEgda/Sxmh0XBb7 RLA+MU1j3sEBLZ1T2ez2jqkTSVjyVSCoseMBSBve9ASnUc3YTOrXXSNaxeZDF3J2 GdfesXfLpAxWIhLdcwytIcq8NloGiWSmQc72rUt3ZknQb2zBTdVWWZUJRUY6+mgo 62EuTRnwqQ+9BuYMtlfe6KHmvQFj6Om1q+h6l/2wG1xZsP+lPM40CRJsvvSMwWWc R2kQ0nQN1N2QGYdfZAKWDH7CKOgEDiHMU2+I1VImzguod97nM15RUFM2vCRQobut tB0M/cM1K62g3WSj5HE3nI3RiMxCBNiHRQvguA467BBlOrNGbJn5VXsvRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJEa5S71/mqGl0u1AHYHYk7QErRWMB8GA1UdIwQY MBaAFLCUeA/7sGt7V/AhToRVK5ZMUEHWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0pSNERfdXdhM3RYOENGT2hGVXJsa3hRUWRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS82NjgzY2EtYTY4OC00MTQxLWFkNDEt OGFkZjBkYTIyNTQ1LzEvc0pSNERfdXdhM3RYOENGT2hGVXJsa3hRUWRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS82NjgzY2EtYTY4OC00MTQxLWFkNDEtOGFkZjBkYTIyNTQ1 LzEvc0pSNERfdXdhM3RYOENGT2hGVXJsa3hRUWRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfZ25Lw8O 7QnhaEcOR5hRjWH79DRoi/RrhpNhJfrh9M3+qYC92t+gH7lIVb13jEsvx5L0E8fk /e6CC5kr6l0cfnTqZCGIQywhuFvWcEHDGugWW2edSg7piXfFcRt5pAL1bqv40KWk 9u6L7B1Lmod2Sa9w5xzCT/NK1m+6027dgNTbjC67el9Q3W0oQp/ljWXucJrhSGOO o9wI8tQ2pcx9/xOiJW+wOcQ4VN2s5J7h3v+plGB7SPj6b9GKJ7gR7OGV3P4w09mL 1kJKQlO3s8Lr+SbahFFlrJ5NvLyxKXgUzqRg0ZjnYwvftZn8X2hk/GDuke5DOpyX iqJcX4vPrsOqDg== -----END CERTIFICATE-----Generated at Mon Jan 26 05:39:00 2026 by rpki-client