This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft File: s901zP9sK4ah-tjxA7wgBw0J5Q0.mft (raw, json) Hash identifier: aR9e9C8l1A146jMfEDQJnUCUCFI+c4ccHu3YEfeplM8= Subject key identifier: F4:1F:6D:A8:23:2B:E0:1B:55:5D:40:7A:70:52:25:38:18:83:82:68 Authority key identifier: B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D Certificate issuer: /CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d Certificate serial: 019BF6F5C79A98AF4A614E998015F5451976 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft Manifest number: 17FA Signing time: Sun 25 Jan 2026 21:01:01 +0000 Manifest this update: Sun 25 Jan 2026 21:01:01 +0000 Manifest next update: Mon 26 Jan 2026 21:01:01 +0000 Files and hashes: 1: 3d74s89tkzzncXSffISWbS6hXVw.roa (hash: +U2y6IfTYHbMQN2g75zDUMWWHtH4QEWgJBNirsLxjxY=) 2: Gm7B2FAaKewBeF9V__wWov1Lp1Y.roa (hash: LT1djHWsJJKg2p/VdcPsG23ZiYOU6Oqmc3hcCAXKCo8=) 3: qAZnmniLW_dV4hlpW7R2ti-Qf5Y.roa (hash: kn3rkTVNHJAXIfTVxFKEVNSH2gRezL0pTR8nuUYg8FQ=) 4: s901zP9sK4ah-tjxA7wgBw0J5Q0.crl (hash: OYIUYt687GK2UVlcH+AIl4s6t2exsqTGDjzp1SZFiz0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:c7:9a:98:af:4a:61:4e:99:80:15:f5:45:19:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d Validity Not Before: Jan 25 21:01:01 2026 GMT Not After : Jan 26 21:01:01 2026 GMT Subject: CN=f41f6da8232be01b555d407a7052253818838268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:93:44:10:cf:d7:d6:b4:7b:7f:b5:33:1d:5e: 9f:bd:42:c2:2f:e9:16:08:30:e1:8f:54:09:09:e3: d9:f9:9e:79:e0:cd:29:cf:8a:e9:30:0f:91:04:33: 13:d9:78:63:27:3d:90:5d:46:1a:d0:72:9a:83:d9: 7b:ac:1d:e9:2a:e0:da:dc:5b:dc:4d:00:96:c1:35: 89:92:5e:bb:4b:b8:ca:66:d0:a1:3c:ff:79:12:c0: 2e:e8:a4:6e:78:3f:c9:e8:63:6e:c2:2e:b8:d2:eb: f7:32:8c:ba:14:6a:6a:75:55:d6:4a:a0:0e:5c:4b: 60:ec:90:c6:58:32:dc:a7:4e:6c:2c:6f:7f:0d:e5: 76:d8:8a:04:f0:3c:c7:de:65:2e:13:c2:ba:b0:6a: 9f:fe:0f:93:44:61:be:86:a3:6d:92:34:a6:41:20: 30:52:fe:05:e9:7a:92:f2:6a:27:fa:de:73:55:5b: 9f:bc:ac:3c:4a:7e:e8:09:fb:8f:68:33:aa:9d:26: d6:90:6d:86:50:e6:7d:d2:a6:9b:be:1c:54:18:dc: 57:5c:95:48:bb:dd:ae:d2:c1:49:ac:2d:9c:3b:e0: a8:cb:9c:e8:27:27:b7:18:52:87:7e:84:b9:fb:51: d9:31:31:96:11:6b:a9:7f:b8:c3:6f:76:30:76:3d: d4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:1F:6D:A8:23:2B:E0:1B:55:5D:40:7A:70:52:25:38:18:83:82:68 X509v3 Authority Key Identifier: keyid:B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:7b:05:a6:f3:c2:9f:33:95:da:8c:9a:6a:09:f8:a6:ef:2b: 95:c4:18:a3:ad:b0:42:a6:4f:88:4b:7e:de:51:49:1a:f2:49: 4a:5a:82:e7:2b:2b:f6:62:41:e1:18:95:f5:45:63:d2:0c:16: dd:e6:36:bc:8f:f3:b9:65:b2:45:71:1d:3d:5e:22:ef:d8:42: be:c5:d7:8b:de:f6:43:43:7d:78:e0:11:ef:04:22:41:e6:e6: e1:ca:b6:14:45:3e:18:df:4c:4a:a3:04:60:e6:42:c4:a0:b8: a1:ff:52:90:d5:9f:39:0e:7e:51:4b:f5:47:75:05:aa:b0:b7: 6c:6d:94:99:56:54:01:f4:0d:ae:4f:7a:79:d8:ca:5e:44:f1: 42:b4:92:cb:93:cf:ea:dc:23:f1:0f:3a:0e:90:29:95:71:4e: ba:03:5c:d7:41:10:f1:81:ca:bf:aa:da:74:8d:29:92:38:48: 2d:6c:d7:e0:b9:50:b1:17:0c:a4:4d:ae:d5:c2:1d:92:46:ba: 47:d2:a8:7f:f3:73:47:5e:96:4d:f3:2a:5d:c2:8f:a2:59:a1: 73:7b:54:6f:dc:d9:31:0b:a1:f2:a4:0a:89:31:1f:ba:d1:12: 6a:48:a7:83:8a:42:10:9a:70:88:35:53:0e:07:43:08:08:85: 47:6f:eb:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29ceamK9KYU6ZgBX1RRl2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzZGQzNWNjZmY2YzJiODZhMWZhZDhmMTAzYmMyMDA3MGQw OWU1MGQwHhcNMjYwMTI1MjEwMTAxWhcNMjYwMTI2MjEwMTAxWjAzMTEwLwYDVQQD EyhmNDFmNmRhODIzMmJlMDFiNTU1ZDQwN2E3MDUyMjUzODE4ODM4MjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZNEEM/X1rR7f7UzHV6fvULCL+kW CDDhj1QJCePZ+Z554M0pz4rpMA+RBDMT2XhjJz2QXUYa0HKag9l7rB3pKuDa3Fvc TQCWwTWJkl67S7jKZtChPP95EsAu6KRueD/J6GNuwi640uv3Moy6FGpqdVXWSqAO XEtg7JDGWDLcp05sLG9/DeV22IoE8DzH3mUuE8K6sGqf/g+TRGG+hqNtkjSmQSAw Uv4F6XqS8mon+t5zVVufvKw8Sn7oCfuPaDOqnSbWkG2GUOZ90qabvhxUGNxXXJVI u92u0sFJrC2cO+Coy5zoJye3GFKHfoS5+1HZMTGWEWupf7jDb3Ywdj3UKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPQfbagjK+AbVV1AenBSJTgYg4JoMB8GA1UdIwQY MBaAFLPdNcz/bCuGofrY8QO8IAcNCeUNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczkwMXpQOXNLNGFoLXRqeEE3d2dCdzBKNVEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny80NGQ0YTMtN2E4NC00NDk5LThiNzEt MmIxMDUwNTFiYTU5LzEvczkwMXpQOXNLNGFoLXRqeEE3d2dCdzBKNVEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny80NGQ0YTMtN2E4NC00NDk5LThiNzEtMmIxMDUwNTFiYTU5 LzEvczkwMXpQOXNLNGFoLXRqeEE3d2dCdzBKNVEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbnsFpvPC nzOV2oyaagn4pu8rlcQYo62wQqZPiEt+3lFJGvJJSlqC5ysr9mJB4RiV9UVj0gwW 3eY2vI/zuWWyRXEdPV4i79hCvsXXi972Q0N9eOAR7wQiQebm4cq2FEU+GN9MSqME YOZCxKC4of9SkNWfOQ5+UUv1R3UFqrC3bG2UmVZUAfQNrk96edjKXkTxQrSSy5PP 6twj8Q86DpAplXFOugNc10EQ8YHKv6radI0pkjhILWzX4LlQsRcMpE2u1cIdkka6 R9Kof/NzR16WTfMqXcKPolmhc3tUb9zZMQuh8qQKiTEfutESaking4pCEJpwiDVT DgdDCAiFR2/rxA== -----END CERTIFICATE-----Generated at Mon Jan 26 00:21:19 2026 by rpki-client