This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft File: 2sedKFW4l0GCCNR7puUUYAFbXXs.mft (raw, json) Hash identifier: CHvfsTzxOkxyGumwV+8d6rcxxZJM33UpU0sKcKHzJgM= Subject key identifier: BD:DA:9A:17:60:C6:B6:1F:64:D7:19:85:23:E8:E0:80:F3:87:A2:CC Authority key identifier: DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B Certificate issuer: /CN=dac79d2855b897418208d47ba6e51460015b5d7b Certificate serial: 019BF507112F2ADAB1EEE296B608D5A2B618 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 12:00:39 +0000 Manifest this update: Sun 25 Jan 2026 12:00:39 +0000 Manifest next update: Mon 26 Jan 2026 12:00:39 +0000 Files and hashes: 1: 2sedKFW4l0GCCNR7puUUYAFbXXs.crl (hash: Wy/npkVlK3Th8Rh+y7vGMdoVJrzaQX9vdPTCOdGQpdw=) 2: W0kRvlqE-31Sr-Gr1-WP6xucUMc.roa (hash: gwMXWawf0NyUE9CiPlgwtD8ZYkvJzBBryShpQ/lSl0c=) 3: vU_maC-JH0IvkViWYKyQOXCGBcE.roa (hash: NRSTpXd/DsQ6yidtnBy9uKfhJ+R2u9Rlp24X6kqd1ao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.crl rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:11:2f:2a:da:b1:ee:e2:96:b6:08:d5:a2:b6:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dac79d2855b897418208d47ba6e51460015b5d7b Validity Not Before: Jan 25 12:00:39 2026 GMT Not After : Jan 26 12:00:39 2026 GMT Subject: CN=bdda9a1760c6b61f64d7198523e8e080f387a2cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d7:0c:18:56:b2:6a:cb:9d:59:84:32:20:b0: bb:36:3b:1b:ea:0e:60:82:6d:ee:3a:b2:9e:50:e9: b3:68:30:52:c5:9a:2b:0a:34:19:e8:98:89:89:4c: 15:20:e7:87:27:5f:08:32:09:87:65:45:16:09:61: bd:d8:d7:71:f0:22:27:5a:4f:62:64:f7:fb:2e:33: e9:6b:2a:fd:69:24:0b:49:4e:7f:4d:ca:cd:30:be: 02:e7:18:b2:79:51:9d:52:4c:e9:ab:e2:0a:16:88: dd:ac:98:12:31:3a:46:f3:9a:c6:43:44:10:6f:68: 71:1a:93:5e:cb:d4:07:c0:2c:69:0b:12:00:31:a3: 67:b9:e3:66:52:47:7b:5d:84:72:47:6a:30:71:aa: cc:31:0a:a6:29:b3:09:c8:c9:08:b2:8c:fa:32:5f: a7:f6:76:6b:72:ff:ef:cd:52:9e:c7:18:95:ef:53: 66:53:04:6b:ae:57:f0:95:e8:b9:4f:94:09:6c:2a: 78:8e:b6:dd:69:03:db:eb:cf:cb:46:d4:ff:84:11: 46:8c:3d:7f:4d:2f:84:1a:a6:17:c2:fb:a4:4b:1c: d4:97:77:71:1e:b3:37:d1:64:ae:30:83:53:16:59: 55:5f:18:cd:4f:75:3c:c2:fe:0d:f1:ce:eb:bb:c7: 0e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:DA:9A:17:60:C6:B6:1F:64:D7:19:85:23:E8:E0:80:F3:87:A2:CC X509v3 Authority Key Identifier: keyid:DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:ce:5b:37:42:78:16:99:cc:90:e2:e4:28:a7:06:7d:35:94: d8:f8:79:88:d9:76:32:1e:9f:20:40:28:10:ab:f3:03:01:d1: 3e:40:f9:19:71:ea:cc:1d:e3:6a:68:39:e1:14:22:8b:4a:05: e2:c8:65:e2:11:e5:50:c4:99:b9:eb:73:22:a3:a9:8e:91:f9: af:25:fd:c2:a9:83:69:26:38:01:2c:44:db:2e:d3:ee:e0:1c: 6a:b5:fd:8b:ed:05:64:66:c7:79:69:11:27:c1:83:33:ac:b0: 0a:f7:58:b3:80:3b:48:b4:a4:0b:b1:53:6d:3d:28:4f:71:f1: df:9a:82:b3:1f:32:4d:38:47:ae:ce:46:e6:41:6e:46:98:d6: 0b:d5:5b:1b:10:ae:2a:b7:89:e2:79:1b:4a:d7:93:01:65:18: 69:c1:95:52:29:b3:22:05:e2:0d:9a:42:95:fb:dc:89:ac:58: 2b:36:ff:1d:77:35:11:3e:69:e1:1d:ea:38:9e:eb:4d:e6:00: 38:39:75:f2:12:d8:91:22:37:ca:62:cd:03:73:bf:6b:34:07: 06:c3:df:6f:b7:b3:ea:06:d7:4a:b6:df:ed:94:86:af:d8:00: b9:11:92:01:7b:4b:98:9b:5b:40:d2:ce:3e:f8:a2:98:89:24: 64:77:ba:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1BxEvKtqx7uKWtgjVorYYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYzc5ZDI4NTViODk3NDE4MjA4ZDQ3YmE2ZTUxNDYwMDE1 YjVkN2IwHhcNMjYwMTI1MTIwMDM5WhcNMjYwMTI2MTIwMDM5WjAzMTEwLwYDVQQD EyhiZGRhOWExNzYwYzZiNjFmNjRkNzE5ODUyM2U4ZTA4MGYzODdhMmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9cMGFayasudWYQyILC7Njsb6g5g gm3uOrKeUOmzaDBSxZorCjQZ6JiJiUwVIOeHJ18IMgmHZUUWCWG92Ndx8CInWk9i ZPf7LjPpayr9aSQLSU5/TcrNML4C5xiyeVGdUkzpq+IKFojdrJgSMTpG85rGQ0QQ b2hxGpNey9QHwCxpCxIAMaNnueNmUkd7XYRyR2owcarMMQqmKbMJyMkIsoz6Ml+n 9nZrcv/vzVKexxiV71NmUwRrrlfwlei5T5QJbCp4jrbdaQPb68/LRtT/hBFGjD1/ TS+EGqYXwvukSxzUl3dxHrM30WSuMINTFllVXxjNT3U8wv4N8c7ru8cONwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL3amhdgxrYfZNcZhSPo4IDzh6LMMB8GA1UdIwQY MBaAFNrHnShVuJdBggjUe6blFGABW117MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnNlZEtGVzRsMEdDQ05SN3B1VVVZQUZiWFhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny81YjExNDktNjQ3ZC00MDY3LTk4MDct NDQ1ZDQ1ODhjMzEyLzEvMnNlZEtGVzRsMEdDQ05SN3B1VVVZQUZiWFhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny81YjExNDktNjQ3ZC00MDY3LTk4MDctNDQ1ZDQ1ODhjMzEy LzEvMnNlZEtGVzRsMEdDQ05SN3B1VVVZQUZiWFhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj85bN0J4 FpnMkOLkKKcGfTWU2Ph5iNl2Mh6fIEAoEKvzAwHRPkD5GXHqzB3jamg54RQii0oF 4shl4hHlUMSZuetzIqOpjpH5ryX9wqmDaSY4ASxE2y7T7uAcarX9i+0FZGbHeWkR J8GDM6ywCvdYs4A7SLSkC7FTbT0oT3Hx35qCsx8yTThHrs5G5kFuRpjWC9VbGxCu KreJ4nkbSteTAWUYacGVUimzIgXiDZpClfvciaxYKzb/HXc1ET5p4R3qOJ7rTeYA ODl18hLYkSI3ymLNA3O/azQHBsPfb7ez6gbXSrbf7ZSGr9gAuRGSAXtLmJtbQNLO PviimIkkZHe6Hg== -----END CERTIFICATE-----Generated at Sun Jan 25 19:46:40 2026 by rpki-client