This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.mft File: sV9qUOakiH4XxTsPwQ5LfhST7rU.mft (raw, json) Hash identifier: XrsJE53liWUqcmnD6nAlb4rR2PLVBpvNgakLz9Lobnk= Subject key identifier: 16:45:62:06:DE:BE:6E:61:B2:73:67:13:E0:89:53:33:46:D3:3F:90 Authority key identifier: B1:5F:6A:50:E6:A4:88:7E:17:C5:3B:0F:C1:0E:4B:7E:14:93:EE:B5 Certificate issuer: /CN=b15f6a50e6a4887e17c53b0fc10e4b7e1493eeb5 Certificate serial: 019BF9F69098AABF0EF71B8513EF6BD87763 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sV9qUOakiH4XxTsPwQ5LfhST7rU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.mft Manifest number: 13D2 Signing time: Mon 26 Jan 2026 11:00:44 +0000 Manifest this update: Mon 26 Jan 2026 11:00:44 +0000 Manifest next update: Tue 27 Jan 2026 11:00:44 +0000 Files and hashes: 1: 0JwjDB6pwBrnM_VNKbEaVOuyt7M.roa (hash: UYK9qyiM+jwVVrmAK1B64PoIFsnPeLAVZ6nQFz3lWgo=) 2: sV9qUOakiH4XxTsPwQ5LfhST7rU.crl (hash: ERMfprvUFmeKoiG13qGKE8A7OgdinVJKdiAI7UKivas=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.mft rsync://rpki.ripe.net/repository/DEFAULT/sV9qUOakiH4XxTsPwQ5LfhST7rU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:f6:90:98:aa:bf:0e:f7:1b:85:13:ef:6b:d8:77:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b15f6a50e6a4887e17c53b0fc10e4b7e1493eeb5 Validity Not Before: Jan 26 11:00:44 2026 GMT Not After : Jan 27 11:00:44 2026 GMT Subject: CN=16456206debe6e61b2736713e089533346d33f90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0e:e8:b4:ee:c1:17:d3:01:86:7f:3e:f1:72: c5:c6:52:d2:fd:9d:fc:f2:d1:11:19:1e:c7:87:2a: 47:e5:f9:92:cf:f7:3f:60:d3:f0:43:b1:5c:d5:cd: 6d:43:de:6c:60:7b:8b:a4:3e:70:07:ec:79:8f:57: fb:79:c0:3d:b0:dc:91:96:ff:17:9e:22:4a:fc:86: 26:20:9f:21:61:a2:4f:15:85:3b:90:40:3c:41:49: e9:67:0c:6d:49:f4:bd:e5:36:95:84:15:47:e3:b0: 96:a1:0c:9d:df:6f:4e:f6:b0:e6:76:61:cc:2d:35: 41:4c:c9:e9:6f:05:10:fd:a1:13:95:0b:58:ca:52: 0d:1d:00:72:f2:72:53:01:ad:b0:f4:24:e5:b3:e4: 8a:df:38:59:5f:c2:47:16:54:52:b8:3e:64:a2:ad: 3a:91:10:ac:a2:5d:36:18:18:52:05:b2:fc:95:b1: d4:6f:da:fd:3c:e4:31:90:04:6d:0b:66:9b:cd:6a: d0:c0:be:c4:20:b2:3f:21:7d:67:92:42:f6:e4:55: ef:ba:bb:ae:1a:ab:57:31:79:74:63:c8:d8:a3:c9: c0:02:15:12:a1:a8:b9:9b:ce:6f:b2:38:24:82:0f: 58:bd:f0:5d:06:c9:85:61:36:3e:25:f1:f9:12:7b: 75:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:45:62:06:DE:BE:6E:61:B2:73:67:13:E0:89:53:33:46:D3:3F:90 X509v3 Authority Key Identifier: keyid:B1:5F:6A:50:E6:A4:88:7E:17:C5:3B:0F:C1:0E:4B:7E:14:93:EE:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sV9qUOakiH4XxTsPwQ5LfhST7rU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:ed:9c:78:9d:52:e1:91:ca:1c:e2:0a:b8:e8:27:0b:b6:65: d9:34:42:3f:e3:da:c5:d5:62:4c:a0:99:0c:3e:2c:dd:f2:da: 58:bf:42:eb:cd:c8:05:22:ef:0b:df:28:ae:ca:98:b7:53:ab: 67:c1:92:46:b8:ee:4f:69:7e:6b:0a:8f:05:ed:f4:7b:17:56: b3:8f:ce:0b:26:b3:28:bd:f1:18:b6:46:fb:ec:e1:cf:a7:8f: 60:b3:24:4d:1e:7c:cf:e5:eb:3b:ca:1f:53:93:46:55:2e:8d: 53:60:ce:64:43:5f:9f:91:78:59:aa:5f:4c:48:b4:22:a1:f4: 52:05:19:68:c9:75:24:19:02:80:ef:c9:1f:2d:5b:d3:3b:4d: c9:3c:30:36:ad:9c:ab:16:bb:06:10:58:e8:39:71:46:29:d8: 32:f7:c1:c9:7f:1f:80:74:30:cb:ef:66:a2:95:bd:45:a3:a0: 2b:40:be:e2:b6:29:d0:59:a1:81:a3:a9:09:0e:45:61:59:f1: 3c:67:35:2d:1d:43:ba:95:08:0c:b3:af:d9:ab:09:88:92:73: f8:77:d2:51:a5:cb:2d:dc:86:b1:95:d0:fa:df:04:be:8b:83: ac:d9:1b:a0:ab:ee:0e:28:2c:01:dc:27:b5:91:90:77:d4:f6: 11:c6:da:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv59pCYqr8O9xuFE+9r2HdjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNWY2YTUwZTZhNDg4N2UxN2M1M2IwZmMxMGU0YjdlMTQ5 M2VlYjUwHhcNMjYwMTI2MTEwMDQ0WhcNMjYwMTI3MTEwMDQ0WjAzMTEwLwYDVQQD EygxNjQ1NjIwNmRlYmU2ZTYxYjI3MzY3MTNlMDg5NTMzMzQ2ZDMzZjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Q7otO7BF9MBhn8+8XLFxlLS/Z38 8tERGR7HhypH5fmSz/c/YNPwQ7Fc1c1tQ95sYHuLpD5wB+x5j1f7ecA9sNyRlv8X niJK/IYmIJ8hYaJPFYU7kEA8QUnpZwxtSfS95TaVhBVH47CWoQyd329O9rDmdmHM LTVBTMnpbwUQ/aETlQtYylINHQBy8nJTAa2w9CTls+SK3zhZX8JHFlRSuD5koq06 kRCsol02GBhSBbL8lbHUb9r9POQxkARtC2abzWrQwL7EILI/IX1nkkL25FXvuruu GqtXMXl0Y8jYo8nAAhUSoai5m85vsjgkgg9YvfBdBsmFYTY+JfH5Ent1PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBZFYgbevm5hsnNnE+CJUzNG0z+QMB8GA1UdIwQY MBaAFLFfalDmpIh+F8U7D8EOS34Uk+61MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1Y5cVVPYWtpSDRYeFRzUHdRNUxmaFNUN3JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9jOTM1MjQtMzc2NS00OWUyLWFhM2Ut Mjk4NDJiYzI3MTQ1LzEvc1Y5cVVPYWtpSDRYeFRzUHdRNUxmaFNUN3JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9jOTM1MjQtMzc2NS00OWUyLWFhM2UtMjk4NDJiYzI3MTQ1 LzEvc1Y5cVVPYWtpSDRYeFRzUHdRNUxmaFNUN3JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI+2ceJ1S 4ZHKHOIKuOgnC7Zl2TRCP+PaxdViTKCZDD4s3fLaWL9C683IBSLvC98orsqYt1Or Z8GSRrjuT2l+awqPBe30exdWs4/OCyazKL3xGLZG++zhz6ePYLMkTR58z+XrO8of U5NGVS6NU2DOZENfn5F4WapfTEi0IqH0UgUZaMl1JBkCgO/JHy1b0ztNyTwwNq2c qxa7BhBY6DlxRinYMvfByX8fgHQwy+9mopW9RaOgK0C+4rYp0FmhgaOpCQ5FYVnx PGc1LR1DupUIDLOv2asJiJJz+HfSUaXLLdyGsZXQ+t8EvouDrNkboKvuDigsAdwn tZGQd9T2Ecbatw== -----END CERTIFICATE-----Generated at Mon Jan 26 12:59:46 2026 by rpki-client