This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft File: sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft (raw, json) Hash identifier: ysyjH7RpiQ3TpAGaUOml37z8WaTfGm5dIvohd2PDZHY= Subject key identifier: DF:69:C9:4F:15:43:B4:19:59:02:E3:4B:D9:A5:24:F6:EA:D2:3E:13 Authority key identifier: B3:1F:06:71:F3:99:E4:DA:20:A4:8B:D3:27:C4:7A:FA:4A:41:FF:C3 Certificate issuer: /CN=b31f0671f399e4da20a48bd327c47afa4a41ffc3 Certificate serial: 019BF83FD1429564FFB751686F7DB5AA61EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft Manifest number: 177D Signing time: Mon 26 Jan 2026 03:01:30 +0000 Manifest this update: Mon 26 Jan 2026 03:01:30 +0000 Manifest next update: Tue 27 Jan 2026 03:01:30 +0000 Files and hashes: 1: YxQQWDg_coyEB6pTn4AJqkDaXAs.roa (hash: FxWNGXvs3glxGeqRKNIBrVgkNIhHyCpETztEe1qzaRU=) 2: sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl (hash: gZdNbV31roKLzQy9TcaEyiyZk71SGMe9t86sEiB5TBA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:d1:42:95:64:ff:b7:51:68:6f:7d:b5:aa:61:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b31f0671f399e4da20a48bd327c47afa4a41ffc3 Validity Not Before: Jan 26 03:01:30 2026 GMT Not After : Jan 27 03:01:30 2026 GMT Subject: CN=df69c94f1543b4195902e34bd9a524f6ead23e13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:40:90:e2:18:a5:04:64:2c:60:6d:d7:23:16: f3:b4:39:b7:1f:59:d2:04:9d:8f:33:7b:71:1c:20: 36:44:01:ab:75:9b:ae:c8:2d:38:5a:c3:29:0c:e5: 2f:22:1d:c9:39:18:b9:8f:02:c3:04:a6:fb:fd:e9: 3f:85:37:bd:e2:03:c4:c2:aa:c5:9a:b5:f6:ad:c6: 46:80:09:dc:41:e0:b6:49:8d:96:9f:42:b8:dc:50: 47:c2:f1:e5:a9:02:b8:d5:1e:e3:9a:d5:b0:22:28: 94:c1:fd:4f:f5:38:96:11:9c:24:1e:0a:99:fc:1e: fe:41:bc:e9:ae:f6:98:aa:33:02:7d:46:bc:6c:08: fe:cb:a8:7b:5f:ae:8d:1a:82:39:9c:a5:c2:f6:a2: 6b:e7:0b:80:85:16:69:89:73:76:ef:40:01:e0:95: 29:ea:f4:0c:24:a8:c8:eb:b7:d3:91:d5:58:af:92: a3:cf:d3:49:37:c6:d0:50:d0:c9:b8:d5:e8:15:31: 03:a0:bd:ab:31:eb:7b:09:2f:2d:80:57:cb:2a:be: 50:f3:3f:3f:22:1a:02:5c:c6:5d:fe:e2:93:98:29: 9c:d3:bb:32:ca:5f:b3:20:93:79:a4:c4:36:02:82: 8a:32:1f:40:68:f5:74:2a:3f:ce:d0:64:d8:38:c0: 60:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:69:C9:4F:15:43:B4:19:59:02:E3:4B:D9:A5:24:F6:EA:D2:3E:13 X509v3 Authority Key Identifier: keyid:B3:1F:06:71:F3:99:E4:DA:20:A4:8B:D3:27:C4:7A:FA:4A:41:FF:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:ba:3a:10:ba:f3:f5:0c:a8:27:ea:ab:d6:ee:2f:6a:6f:67: 51:c3:af:86:9a:0f:3e:43:7f:6f:a7:10:59:4a:f3:ff:52:0a: 69:60:7f:40:74:17:f4:25:a6:74:ab:4c:fe:35:e1:dd:67:6d: 10:00:c8:5e:fa:f6:25:df:50:8e:0a:90:e6:48:57:29:e0:83: 4c:28:2c:1f:80:8d:32:ca:20:ec:c2:11:9f:00:ae:6e:9e:19: 52:f6:ff:7a:cb:69:e8:b5:a1:23:ee:4d:52:6c:e3:2c:b8:2d: 23:51:99:dc:fc:95:96:6d:80:ce:9f:a9:05:8a:7c:48:59:7a: 5a:e9:54:ef:e0:14:66:be:fb:8e:49:5f:f1:88:f8:04:51:ab: 92:02:bd:55:cc:32:f8:ad:f5:d7:d0:cd:5a:0a:bf:73:50:1b: 39:51:d6:9b:ad:72:88:ae:06:b4:ba:5d:b5:bc:a0:a6:65:db: f1:66:57:c5:ca:71:13:40:39:91:54:e0:43:75:46:ce:80:f8: 7d:6a:8e:47:eb:99:6d:23:35:c5:52:fe:06:6b:b0:26:23:11: 82:de:90:ac:d8:94:07:09:77:63:a1:75:0d:dd:6e:ba:47:de: e2:a0:98:a0:ea:1f:a5:70:a9:6d:56:2f:c3:07:eb:eb:39:07: 84:e5:91:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P9FClWT/t1Fob321qmHsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMWYwNjcxZjM5OWU0ZGEyMGE0OGJkMzI3YzQ3YWZhNGE0 MWZmYzMwHhcNMjYwMTI2MDMwMTMwWhcNMjYwMTI3MDMwMTMwWjAzMTEwLwYDVQQD EyhkZjY5Yzk0ZjE1NDNiNDE5NTkwMmUzNGJkOWE1MjRmNmVhZDIzZTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApECQ4hilBGQsYG3XIxbztDm3H1nS BJ2PM3txHCA2RAGrdZuuyC04WsMpDOUvIh3JORi5jwLDBKb7/ek/hTe94gPEwqrF mrX2rcZGgAncQeC2SY2Wn0K43FBHwvHlqQK41R7jmtWwIiiUwf1P9TiWEZwkHgqZ /B7+QbzprvaYqjMCfUa8bAj+y6h7X66NGoI5nKXC9qJr5wuAhRZpiXN270AB4JUp 6vQMJKjI67fTkdVYr5Kjz9NJN8bQUNDJuNXoFTEDoL2rMet7CS8tgFfLKr5Q8z8/ IhoCXMZd/uKTmCmc07syyl+zIJN5pMQ2AoKKMh9AaPV0Kj/O0GTYOMBgOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN9pyU8VQ7QZWQLjS9mlJPbq0j4TMB8GA1UdIwQY MBaAFLMfBnHzmeTaIKSL0yfEevpKQf/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3g4R2NmT1o1Tm9ncEl2VEo4UjYta3BCXzhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC84NzhhMWMtYTdhMC00ZmQxLTk4YTAt MzNlNDQ2MjFkYjA3LzEvc3g4R2NmT1o1Tm9ncEl2VEo4UjYta3BCXzhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC84NzhhMWMtYTdhMC00ZmQxLTk4YTAtMzNlNDQ2MjFkYjA3 LzEvc3g4R2NmT1o1Tm9ncEl2VEo4UjYta3BCXzhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeLo6ELrz 9QyoJ+qr1u4vam9nUcOvhpoPPkN/b6cQWUrz/1IKaWB/QHQX9CWmdKtM/jXh3Wdt EADIXvr2Jd9QjgqQ5khXKeCDTCgsH4CNMsog7MIRnwCubp4ZUvb/estp6LWhI+5N UmzjLLgtI1GZ3PyVlm2Azp+pBYp8SFl6WulU7+AUZr77jklf8Yj4BFGrkgK9Vcwy +K3119DNWgq/c1AbOVHWm61yiK4GtLpdtbygpmXb8WZXxcpxE0A5kVTgQ3VGzoD4 fWqOR+uZbSM1xVL+BmuwJiMRgt6QrNiUBwl3Y6F1Dd1uukfe4qCYoOofpXCpbVYv wwfr6zkHhOWRtQ== -----END CERTIFICATE-----Generated at Mon Jan 26 12:25:33 2026 by rpki-client